last executing test programs: 12.325745755s ago: executing program 3 (id=6943): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006900), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000006940)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x111082) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000006980)={0x0, 0x0, &(0x7f00000069c0)={&(0x7f0000006a00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2200b300d0000000ffffffffffff080211000000fffffffffffff00f040400000500000003e0cd00"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 12.132880694s ago: executing program 3 (id=6945): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x224}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) (fail_nth: 1) 10.886081297s ago: executing program 3 (id=6949): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0xa000, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/220, 0xdc}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 10.7550304s ago: executing program 2 (id=6950): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='ns\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x2a102211, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r4, 0x802c550a, &(0x7f0000000200)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x1, 0x2, 0x6dd4, 0x1, 0x3, 0x0}) setpgid(r3, r3) setpgid(0x0, r3) wait4(r3, 0x0, 0x2, 0x0) capget(&(0x7f0000000080)={0x19980330, r3}, &(0x7f0000000180)={0x6, 0x8, 0x200, 0x1, 0xcf9, 0x7fe00000}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x128}, 0x0) getdents64(r0, 0x0, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, &(0x7f0000010980), &(0x7f00000109c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000010bc0)={0x0, 0x0, &(0x7f0000010c00)={&(0x7f0000010c40)=ANY=[@ANYBLOB="14000000100001000000000000000400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40540700002c0000000b0a01030100000000000000020900010073797a310091dbb5961b1da5ca61a27f0000000c0010400000000000000002140000001100010000"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000010d00)={'dummy0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000010d40)={0x0, 0x0, &(0x7f0000010d80)={&(0x7f0000010dc0)=ANY=[@ANYBLOB="2c0000001400b59527bd7000ffdbdf250a4000c8", @ANYRES32=r8, @ANYBLOB="140002"], 0x2c}}, 0x400c0c0) sendmmsg$unix(r1, &(0x7f00000110c0)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)="a82acd3471c560f6a44a5d702682195e56c5fb4a9c55af6d61216a18de5927f99ca264b6c55fdd73523f336343d1ba9d7ac023026ff672d3ed51af1f3d87625a", 0x40}, {&(0x7f0000000300)="ad4f40b6369d0a49ef1e7c2b001e03f8f6d5c30a7188911990096500913663c08ab68833b45065de422efb3f757cbe4646a4013e21804775de1233e12689de5f57200f5383beed2328e51aec2cef6523ebd016937f770d1da82bc920bf9feb77999b9e3bb28ec60ba0f93da9015fd3c53bc4267a1fee828f9522c12e495cc6673039834ecfb98b9b990318cd1fc8993cf5a0293215980ef32556b2f29be0b8ebca7b86d2c34b557f3c6b4f2871c836f5058c2ca98e0c929c56fb", 0xba}], 0x2}}, {{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000480)="c667dfd0a217bcbab3b6e0284a12aa81012a517260e830e6bba2bd6b6310778645b03bd1809a137854a0175376d21f464c65ce6f34027295fb03f494fb48487846b939f77d4fad4bd5c0760c701fe2b6f26f98a75d08215a34340a8e51dea174133dfadced10da419e9135354f923ee1fb0966ca84731acfab56b6e663ea2e9729d94e93556ad1ffd97cb34a97349580f6858b3925ba7fa5", 0x98}, {&(0x7f0000000600)="e45aa5189007ebcb18bfaf64323a2e73f13bf073467a2afe5773f4f8a945e7f925ce76a8b23d0ced56ca6942c44d1263b54a7a43d9c90259ba61621a7401d407f0ec0cff05fd795d3d58616c7eca933e48bed82352d6288f498c07db48c99b2f7598529978ed5b4e44974211bf92e903b2397fc7f6fb7977a7dfdf6869aa6af09fc5e45cc684a2ef6661e581c4b1f7ed47b963717f44f6eccb303b1f39b9657c7c12492d4346b20d1f0f7cd8a225bb6cdd34218e7fc11fce6c1bb36e8b84df547adf9dfbe79c730f0c8b39941e839b61129f2041af3bca3d7285f717db22ae1cdf5a34ee0c714abb31b96cf090d7736a1188c7", 0xf3}], 0x2, &(0x7f00000093c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r4, 0xffffffffffffffff, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r4, r0, r0, r2, r2]}}], 0xc8, 0xc8d0}}, {{&(0x7f00000094c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000009b40)=[{&(0x7f0000009540)}, {0x0}, {&(0x7f00000096c0)="440b8dded3ddb88872add9b99a343b472aec2d", 0x13}, {&(0x7f0000009700)="08d000ad89019e377fe7f0f182cbc4d726434b46f931f4633373c697e0f4f9a1d3a5d71a74f1378f514dffb21570dc4da6fa1a84fa96d4cac59a6305d28f8f939e2cecc0b5d244200cf6b7f1587179559e14ce941e6e3995cbd99035ae196c8c897d7fc77b899cef5c8a87eb0715459708594d86190afe8c75543c1f2021f051098f0fca3e8604f3c7d8942369906e973cfa04f0d675fb", 0x97}, {&(0x7f00000097c0)="925dfd5509a2d5deefe10613f65c8b6f0766c377769e16a9dd97e346da4bed0fbfc82131514ad1647e5bb718ec4eac1427779308e39bb9b3863271b11ec5fa9d743d1a7c2b945685c25345aafb19947c52dc7803c7163e1c1a21", 0x5a}, {&(0x7f0000009840)="d39e67dd45e2dd08aab9412bff284cde3d174e4d41b3c59cdc20e446ea891b9597f66ca96326aafc5b72ce7cdb42639ecfa1ea72396632c7caa4e44c961a1353296aa7afb0edca26871fe65b78980dd8e092e65e904a890b5ab1c31f2110", 0x5e}, {&(0x7f00000098c0)="9b617591498b3fe9c4c766662d8bd91d95f68cd3f36c18fa38068b35ef18a4a4370a1cc615d73be0ddaa9001734b9e316b85c8f7dddd3a26cbf7e10f88ad2aa8b5332e56eb95cb8bba5d4d7e18225ff33f51ecbd26621ae6385388718de14eb011b6f91df5caf42643d01c7977e88b88bb583fdd3c8892296356b75ca84fb34ba4a7efd03650bcbb2877a96aad9a69fc55887288", 0x94}, {&(0x7f0000009a40)}], 0x8, 0x0, 0x0, 0x80}}, {{&(0x7f0000009c00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000009d80)=[{&(0x7f0000009c80)="6ad534aaeb51c336f090f70394f49e8fb7b2d0eba63b127a51129da1e6aafd5e7844c73670c6997129a84b2a5ed52491c7229c72d8c78d4b60699815fe6f12074faf3206ef1ff7c66f4d2158a37907ef8d27a9efed0a1c9fce", 0x59}, {&(0x7f0000009d00)="5fb7d86f1a3fa71093cb8022a7df86a5ef553e3953a5939982a8a30e56f9ae528fb6ee2c30a25603ab7fa23f9c7c4c42a50cd2f80557af9eb684d815a82451550cde138be85d0d95418c9cb203783e50ab5891e47e0ce2", 0x57}], 0x2, &(0x7f0000010500)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r2, r4]}}], 0x80, 0x240008c4}}, {{&(0x7f0000010580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000010880)=[{&(0x7f0000010600)="de9665b62b839dbf6ba9cb30845e5e4cffe7d3bfecdbf23f3da2aa4f4b06d177cd73a95c8612ab00bb72edee6440a265339a34dfce6a843f461588e346a4f770e93d3b4df92b4b358498236e018dc7ed46ab893d6f29f8ed52c937c911", 0x5d}, {&(0x7f0000010680)="72fc2c20b81e651d0b1241dfd53fa6501b793c5faa3739", 0x17}, {&(0x7f00000106c0)="d8856813d68a89bbd58dd9c9cf60e449be7b72f977d86e63348a1e8c186a0d1d03d6d4eb818c14596397145cfb9190fe2317a1f8746ed0027120575a0c54d4bb0c3554672f3677e280ef13904f99d73b651682a9688218cb8c23cce0891f81397b1fd5c5c6071465ce297c6fd86411e548b3d0548cd0bbb7045407d31fd2fa9a69458be35366d3a36d3cb935e13cf8aeb8ecd26b43f0bd7617cc545d75ea24bba14f04b1f3e1e2b8429e1f8cc5fa63182ee15857d5358515c809", 0xba}, {&(0x7f0000010780)="a23d75ab265aa1c0e1914ea604a3d2afb720aa81c069a60f191f2a6dd88d5cde2dbf5f6fd64e504c57b04c9439fd3e6cace8759931c221a650a3b3ea49bc731faab853981963a68150b3f4d450e25dea261a6389cc10446f355bae22905a6e300806e0d11bf22b893cc25deb6827f9f24df517d407a443c5f4388eb4dbb791fe7f9be0bd0f907743f54921724e8b58a1200b8cd834c0429f717397fcdffc5313b1d7b4b492e9439daa", 0xa9}, {&(0x7f0000010840)="c40a462d00b23478884fc9f426f180ad405322eeccf422f324543626a2", 0x1d}], 0x5, &(0x7f0000011000)=[@rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r5]}}, @rights={{0x28, 0x1, 0x1, [r2, r4, r0, r6, r2, r0]}}, @rights={{0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4, r7, r1, r4]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0xb8, 0x4000080}}], 0x5, 0x44810) 10.123342776s ago: executing program 3 (id=6953): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000002580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4c, 0xf0ffffff, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}]}) 10.095816688s ago: executing program 2 (id=6954): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80a00, 0x0) r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x3, 0x1, 0x8}]}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff0200"/51], 0x0) 9.875893769s ago: executing program 3 (id=6955): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') r3 = openat(r2, &(0x7f0000000040)='rpc/nfsd.fh/channel\x00', 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000140)="b282", 0x2}], 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = dup(r5) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='ipvlan0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x202, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xb}, 0x9c) sendmsg$inet6(r6, &(0x7f0000000280)={&(0x7f00000002c0)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="f0", 0x1}], 0x1}, 0x48054) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0xabb6, 0x67, 0xa4f, 0xc4, 0x4e, 0xffffff85, 0xa9}, 0x9c) ioctl$USBDEVFS_RESET(r4, 0x5514) write(r3, &(0x7f0000000080)=' \\1\x00\\x00000001 21mp\n', 0x14) bind$inet6(r1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000580)={{0x6, @loopback, 0x15, 0x0, 'dh\x00', 0xa, 0x0, 0x76}, {@loopback, 0x4e24, 0x2, 0x1, 0x8, 0x40}}, 0x44) setsockopt(r0, 0x0, 0x489, &(0x7f0000000600)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000601001500"/68, 0x6d) 9.844177494s ago: executing program 2 (id=6956): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_open_dev$I2C(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x5b) read$watch_queue(r5, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x1fca, &(0x7f0000000140)={0x0, 0x4e1b, 0x4000, 0x0, 0x3b1, 0x0, r6}, 0x0, 0x0, 0x0) r8 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000100)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x1, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x2, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x80000001, 0x7, 0x200, 0x1, 0x7, 0x200, 0x42, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x83, 0x1, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000009, 0x5, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0xc, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x20007fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0xf469, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0xff], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x8, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x9, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0xd43, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x40dd], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x5, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x3, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0xcab, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x2844, 0x4, 0x3c, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x3f00000000000000) 9.652084678s ago: executing program 3 (id=6958): syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r0 = landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x6) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x28) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x22) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000003c0)={0x6010, 0x1, 0x3}, 0x30, 0x0) landlock_restrict_self(r2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x2) 6.117311564s ago: executing program 1 (id=6965): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r1, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001340)}], 0x5, 0x4, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000001080)={0x0, 0x0, 0x1, 0x0, 0x158}, &(0x7f0000001100)=0x0, &(0x7f0000001140)=0x0, &(0x7f0000001180)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f00000011c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001240)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000001280)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x257}, &(0x7f0000001340)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0xfffffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe64a, 0x2, 0x20000000, 0x327, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x20, 0x3, 0xffffffff}}], 0x1, &(0x7f00000015c0)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r6, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x50, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000001040)="99d3c9f30f09b993080000b800000000ba000000800f30660f38dfb1e4000000f4cfc4e1fe12230f01c3b9800000c00f3235010000000f30", 0x38}], 0x1, 0x0, 0x0, 0x0) gettid() ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x5, 0xc, 0x0, 0x2, 0x0, 0x14, 0x0, 0x66, 0x40, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0xfc, 0xff, 0xff, 0x6, '\x00', 0x0, 0x1}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000001700), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000001740)={'syzkaller1\x00', 0xc201}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000001780)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=@newtfilter={0x5d, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0xb, 0xfff7}, {0x10, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 5.714752353s ago: executing program 4 (id=6968): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x1, 0x0, 0x12) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_setup(0xf02, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, r5, 0x0) r6 = syz_io_uring_setup(0xefd, &(0x7f0000000240)={0x0, 0x0, 0x400, 0x3, 0x1ce}, &(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r7, r8, &(0x7f0000000400)=@IORING_OP_FSETXATTR={0x29, 0x12, 0x0, r2, 0x0, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00400010000304000000000000000000007400feeb0b8774eedfdc1ea3b4bca88b055d12769f1469b141acd1ea33fd15767842945b4dcf8a10d7", @ANYRES32=r10, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500070000000000"], 0x3c}}, 0x0) 5.270695951s ago: executing program 4 (id=6970): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) setreuid(0xffffffffffffffff, 0xee01) landlock_create_ruleset(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x1, 0x20000) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000200)=0x4) syz_clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1f) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2802) io_uring_enter(r3, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x18) socket$inet_udp(0x2, 0x2, 0x0) 4.963893245s ago: executing program 2 (id=6971): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000000)={0x0, 0xcfca, 0x8000, 0x4, 0x354}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000180), 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0xfb0b, 0x0, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000000280)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x238d, 0x4000, 0x1, 0x89, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8ad, 0x40, 0x1, 0x1c9, 0x0, r0}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb573, 0x80, 0x1, 0x400003e0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd5bf, 0x20000, 0x0, 0x340, 0x0, r0}}], 0x4, &(0x7f0000001500)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7}, 0x0, 0x0, '\x00', {0x3, 0x5a4, 0x0, &(0x7f0000000500)=@buf_max_buf="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"}}, &(0x7f0000001580)) io_uring_register$IORING_REGISTER_MEM_REGION(r1, 0x22, &(0x7f00000001c0)={0x0}, 0x1) ioctl$FIOCLEX(r0, 0x5451) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYRES8=0x0], 0x0) 4.809731627s ago: executing program 0 (id=6972): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "4d243528faa0ca42dd002363072520baba50a75031b1595bf3a536ca054812cf3a3816109339a4231d7c0738fc0b5ad3d9c988f101b7a5a94637d0afa4026034", 0x32}, 0x48, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000680)={[0x8, 0x7, 0x4, 0x1000, 0x0, 0x6, 0x8000000000000001, 0x5, 0x5, 0x3, 0xffffffffffffffff, 0x2, 0x8, 0x4, 0x200], 0x7000, 0xc214}) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x0) r7 = eventfd2(0x8, 0x1) ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, &(0x7f0000000300)={0x1, r7}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000340)={0x1, r6}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)="d8000000180081054e81f782db44b904021d005c06007c09e8fe81a10a0015400100142603600e1208000b0000000401a800080008000c400600000004000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x80) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) close_range(r4, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r3, 0x30}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@remote, @in=@private=0xa010100, 0x4e23, 0x0, 0x4e20, 0x800, 0x2}, {0x0, 0x0, 0x4, 0x100, 0x1, 0x0, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x4, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@local, 0x4d3, 0x3c}, 0xa, @in=@loopback, 0x3505, 0x4, 0x0, 0x0, 0x83, 0x4000800, 0x6}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 4.780183318s ago: executing program 1 (id=6973): r0 = memfd_create(&(0x7f00000013c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+\xa0\x1c\x14\x01\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10\x95y\x8e\xa6\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x2a102211, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r4, 0x802c550a, &(0x7f0000000200)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x1, 0x2, 0x6dd4, 0x1, 0x3, 0x0}) setpgid(r3, r3) setpgid(0x0, r3) wait4(r3, 0x0, 0x2, 0x0) capget(&(0x7f0000000080)={0x19980330, r3}, &(0x7f0000000180)={0x6, 0x8, 0x200, 0x1, 0xcf9, 0x7fe00000}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x128}, 0x0) getdents64(r0, 0x0, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, &(0x7f0000010980), &(0x7f00000109c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000010bc0)={0x0, 0x0, &(0x7f0000010c00)={&(0x7f0000010c40)=ANY=[@ANYBLOB="14000000100001000000000000000400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40540700002c0000000b0a01030100000000000000020900010073797a310091dbb5961b1da5ca61a27f0000000c0010400000000000000002140000001100010000"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000010d00)={'dummy0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000010d40)={0x0, 0x0, &(0x7f0000010d80)={&(0x7f0000010dc0)=ANY=[@ANYBLOB="2c0000001400b59527bd7000ffdbdf250a4000c8", @ANYRES32=r8, @ANYBLOB="140002"], 0x2c}}, 0x400c0c0) sendmmsg$unix(r1, &(0x7f00000110c0)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)="a82acd3471c560f6a44a5d702682195e56c5fb4a9c55af6d61216a18de5927f99ca264b6c55fdd73523f336343d1ba9d7ac023026ff672d3ed51af1f3d87625a", 0x40}, {&(0x7f0000000300)="ad4f40b6369d0a49ef1e7c2b001e03f8f6d5c30a7188911990096500913663c08ab68833b45065de422efb3f757cbe4646a4013e21804775de1233e12689de5f57200f5383beed2328e51aec2cef6523ebd016937f770d1da82bc920bf9feb77999b9e3bb28ec60ba0f93da9015fd3c53bc4267a1fee828f9522c12e495cc6673039834ecfb98b9b990318cd1fc8993cf5a0293215980ef32556b2f29be0b8ebca7b86d2c34b557f3c6b4f2871c836f5058c2ca98e0c929c56fb", 0xba}], 0x2}}, {{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000480)="c667dfd0a217bcbab3b6e0284a12aa81012a517260e830e6bba2bd6b6310778645b03bd1809a137854a0175376d21f464c65ce6f34027295fb03f494fb48487846b939f77d4fad4bd5c0760c701fe2b6f26f98a75d08215a34340a8e51dea174133dfadced10da419e9135354f923ee1fb0966ca84731acfab56b6e663ea2e9729d94e93556ad1ffd97cb34a97349580f6858b3925ba7fa5", 0x98}, {&(0x7f0000000600)="e45aa5189007ebcb18bfaf64323a2e73f13bf073467a2afe5773f4f8a945e7f925ce76a8b23d0ced56ca6942c44d1263b54a7a43d9c90259ba61621a7401d407f0ec0cff05fd795d3d58616c7eca933e48bed82352d6288f498c07db48c99b2f7598529978ed5b4e44974211bf92e903b2397fc7f6fb7977a7dfdf6869aa6af09fc5e45cc684a2ef6661e581c4b1f7ed47b963717f44f6eccb303b1f39b9657c7c12492d4346b20d1f0f7cd8a225bb6cdd34218e7fc11fce6c1bb36e8b84df547adf9dfbe79c730f0c8b39941e839b61129f2041af3bca3d7285f717db22ae1cdf5a34ee0c714abb31b96cf090d7736a1188c7", 0xf3}], 0x2, &(0x7f00000093c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r4, 0xffffffffffffffff, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r4, r0, r0, r2, r2]}}], 0xc8, 0xc8d0}}, {{&(0x7f00000094c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000009b40)=[{&(0x7f0000009540)}, {0x0}, {&(0x7f00000096c0)="440b8dded3ddb88872add9b99a343b472aec2d", 0x13}, {&(0x7f0000009700)="08d000ad89019e377fe7f0f182cbc4d726434b46f931f4633373c697e0f4f9a1d3a5d71a74f1378f514dffb21570dc4da6fa1a84fa96d4cac59a6305d28f8f939e2cecc0b5d244200cf6b7f1587179559e14ce941e6e3995cbd99035ae196c8c897d7fc77b899cef5c8a87eb0715459708594d86190afe8c75543c1f2021f051098f0fca3e8604f3c7d8942369906e973cfa04f0d675fb", 0x97}, {&(0x7f00000097c0)="925dfd5509a2d5deefe10613f65c8b6f0766c377769e16a9dd97e346da4bed0fbfc82131514ad1647e5bb718ec4eac1427779308e39bb9b3863271b11ec5fa9d743d1a7c2b945685c25345aafb19947c52dc7803c7163e1c1a21", 0x5a}, {&(0x7f0000009840)="d39e67dd45e2dd08aab9412bff284cde3d174e4d41b3c59cdc20e446ea891b9597f66ca96326aafc5b72ce7cdb42639ecfa1ea72396632c7caa4e44c961a1353296aa7afb0edca26871fe65b78980dd8e092e65e904a890b5ab1c31f2110", 0x5e}, {&(0x7f00000098c0)="9b617591498b3fe9c4c766662d8bd91d95f68cd3f36c18fa38068b35ef18a4a4370a1cc615d73be0ddaa9001734b9e316b85c8f7dddd3a26cbf7e10f88ad2aa8b5332e56eb95cb8bba5d4d7e18225ff33f51ecbd26621ae6385388718de14eb011b6f91df5caf42643d01c7977e88b88bb583fdd3c8892296356b75ca84fb34ba4a7efd03650bcbb2877a96aad9a69fc55887288", 0x94}, {&(0x7f0000009a40)}], 0x8, 0x0, 0x0, 0x80}}, {{&(0x7f0000009c00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000009d80)=[{&(0x7f0000009c80)="6ad534aaeb51c336f090f70394f49e8fb7b2d0eba63b127a51129da1e6aafd5e7844c73670c6997129a84b2a5ed52491c7229c72d8c78d4b60699815fe6f12074faf3206ef1ff7c66f4d2158a37907ef8d27a9efed0a1c9fce", 0x59}, {&(0x7f0000009d00)="5fb7d86f1a3fa71093cb8022a7df86a5ef553e3953a5939982a8a30e56f9ae528fb6ee2c30a25603ab7fa23f9c7c4c42a50cd2f80557af9eb684d815a82451550cde138be85d0d95418c9cb203783e50ab5891e47e0ce2", 0x57}], 0x2, &(0x7f0000010500)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r2, r4]}}], 0x80, 0x240008c4}}, {{&(0x7f0000010580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000010880)=[{&(0x7f0000010600)="de9665b62b839dbf6ba9cb30845e5e4cffe7d3bfecdbf23f3da2aa4f4b06d177cd73a95c8612ab00bb72edee6440a265339a34dfce6a843f461588e346a4f770e93d3b4df92b4b358498236e018dc7ed46ab893d6f29f8ed52c937c911", 0x5d}, {&(0x7f0000010680)="72fc2c20b81e651d0b1241dfd53fa6501b793c5faa3739", 0x17}, {&(0x7f00000106c0)="d8856813d68a89bbd58dd9c9cf60e449be7b72f977d86e63348a1e8c186a0d1d03d6d4eb818c14596397145cfb9190fe2317a1f8746ed0027120575a0c54d4bb0c3554672f3677e280ef13904f99d73b651682a9688218cb8c23cce0891f81397b1fd5c5c6071465ce297c6fd86411e548b3d0548cd0bbb7045407d31fd2fa9a69458be35366d3a36d3cb935e13cf8aeb8ecd26b43f0bd7617cc545d75ea24bba14f04b1f3e1e2b8429e1f8cc5fa63182ee15857d5358515c809", 0xba}, {&(0x7f0000010780)="a23d75ab265aa1c0e1914ea604a3d2afb720aa81c069a60f191f2a6dd88d5cde2dbf5f6fd64e504c57b04c9439fd3e6cace8759931c221a650a3b3ea49bc731faab853981963a68150b3f4d450e25dea261a6389cc10446f355bae22905a6e300806e0d11bf22b893cc25deb6827f9f24df517d407a443c5f4388eb4dbb791fe7f9be0bd0f907743f54921724e8b58a1200b8cd834c0429f717397fcdffc5313b1d7b4b492e9439daa", 0xa9}, {&(0x7f0000010840)="c40a462d00b23478884fc9f426f180ad405322eeccf422f324543626a2", 0x1d}], 0x5, &(0x7f0000011000)=[@rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r5]}}, @rights={{0x28, 0x1, 0x1, [r2, r4, r0, r6, r2, r0]}}, @rights={{0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4, r7, r1, r4]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0xb8, 0x4000080}}], 0x5, 0x44810) 3.209086664s ago: executing program 0 (id=6976): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = memfd_secret(0x80000) fdatasync(r3) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x30, r2, 0x801, 0x70bd28, 0xfffffffe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "dca595c6be"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4) 3.044559212s ago: executing program 0 (id=6977): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80a00, 0x0) r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x3, 0x1, 0x8}]}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff0200"/53], 0x0) 2.853097052s ago: executing program 0 (id=6978): unshare(0x2c020400) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x42, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c08000340000000b108000440000000220500020007000000340001800c0001006269747769736500240002"], 0x108}}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) io_setup(0x20, &(0x7f00000000c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)="0d32818e2cede722e231", 0xa, 0x1}]) 2.743419363s ago: executing program 4 (id=6979): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x5, 0x9, 0x1, 0x9, 0xfffffffb, 0x7}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x7403db560191ee16}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4d}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x1, 0x9}}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0, 0xfffffffffffffe3c}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x4}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x3e, 0x301, 0x270bd26, 0x25dfdbfa, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10) 2.510780006s ago: executing program 1 (id=6980): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=@newtfilter={0x38, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff3, 0xa}}]}}]}, 0x38}}, 0x0) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x800, 0x800, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f00000000c0)=@sg0, r1, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x8000, 0x402600) ioctl$FE_DISEQC_SEND_MASTER_CMD(r2, 0x40076f3f, &(0x7f0000000080)={"0acf83c7e336", 0x6}) sendmsg$nl_route_sched(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000e00)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 2.47998226s ago: executing program 0 (id=6981): add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7977ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453a5e3f66a", 0xc4, 0xffffffffffffffff) add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="01f400000000000051fa6dd4f9", 0xd, 0xfffffffffffffffe) getpgid(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='ns\x00') readlinkat(r2, &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000600)=""/10, 0xa) 2.17585744s ago: executing program 4 (id=6982): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macvlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000100)={0x2, 0x3, 0x3, 0x0, 0x0, 0x3}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f0000000340)={0x1}, 0x0) socket$inet6(0xa, 0x3, 0x3) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000025c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002600)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000002680), 0x318, 0x0) recvmmsg(r2, &(0x7f00000026c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000002700)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002740)=@o_path={&(0x7f0000002780)='./file1\x00'}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000002800)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7d, &(0x7f0000002840)={0x0, 0x4}, 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000002880)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000) sendmsg$unix(0xffffffffffffffff, 0x0, 0x11) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002980)=ANY=[@ANYBLOB="6000000002060300000000000000000007000000140007800500150002000000080012400000000414000300686173683a69702c706f72742c697000050005000200000005000400050000000900020073797a31000000000500010007"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000002b00)={0x0, 0x0}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 2.120805979s ago: executing program 1 (id=6983): openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000000c0), 0x318, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0x6, 0x10402) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000100)={0x1, &(0x7f0000000740)=[{0x3, '\x00', @buffer={"010d1de90c6171360aaf4716308a633fda925d1085c6b9f70f72ad6cc5f48537", 0x20}, 0x7a7ce1c2}]}) recvmmsg(r0, &(0x7f0000000100), 0x10106, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x300) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) r3 = fsopen(&(0x7f0000000200)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x1001}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000840)={0x48, 0xc, 0x0, 0x0, 0x1fffd, 0x40000000d}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0xfff3, 0x3}, {0xa, 0xd}, {0x5, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa}]}, 0x2c}}, 0x4002080) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=@newtfilter={0x4d4, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x10}, {0xfff1, 0xffff}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4a4, 0x2, [@TCA_BASIC_EMATCHES={0x4a0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x9, 0x7, 0x6}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x4, 0x3, 0x1}, {0x1, 0x5, 0xffff, 0x8}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x401, 0x1, 0x80}, {0x6, 0x5, 0x100, 0x0, 0xa, 0x2, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x248, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xe082, 0x3, 0xfffb}, {0x5, 0x3, 0x6, 0x67a}}}, @TCF_EM_CONTAINER={0xb8, 0x3, 0x0, 0x0, {{0x7, 0x0, 0x3}, "faa85535c63ff651e560690d4a7a0212afb161502adf912d157ee8f9d4776f8d9a11c718225d6bf52d8477209296af6703a468d3b556fa9b57d706326e4341275fd452017ad94941f701b2c20e5f37c3bedbcf1b737ce44db85ba5b2c870a70a13c5ec476358cf1bcc0576a71e3672a72e9c75b3d462b792c93ef25912cde86b95c8a2f7e8ce66efbba2e4624b92b1d2c94de946beaae6b3f0dc5e24cfad1e42821c82340d39f833d4df"}}, @TCF_EM_CONTAINER={0xc4, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x4}, "6a7ed6d58cc9cfc5c6696afa500dd2ab344833d24a9b9d6eb96ba05754e03a5c7b452bfc177cc7023f172b7399f42bceb49f49af3a4338ecb4baa4d43b1b1702f523953f69448aa721276226aa1519fd03091a65f7373df9ebdb52bbabb933eecb3f1207d81cf03aeefb943682f35a4a81c9f205da2422fc3be95898509d57f75f0690ecf38378647309d5856fa50808a56d89b2aebed2011d55c336196bd21ff674efc2316bdef47f0c28960b3d8d101e6bf39ac0cfb7"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x4, 0x3, 0xa8}, {0xbd, 0x81, 0x1, 0x6}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5, 0x7, 0x55}, {{0x2, 0x0, 0x0, 0x1}, {0x3, 0x1}}}}, @TCF_EM_META={0x4c, 0x2, 0x0, 0x0, {{0x1000, 0x4, 0x8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x4, 0x1}, {0x8, 0x2, 0x1}}}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="0847af9b925897d4d4d9"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xef3, 0x7, 0x2}, {0xe191, 0x4, 0x2}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="6187620eb11b7e82d1"]}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x5, 0x3, 0xffef}, {0x8, 0x69, 0x7, 0x5e3}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xbf, 0x7, 0x6}, {{0x1, 0x1, 0x1, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc53}}, @TCA_EMATCH_TREE_LIST={0x1f8, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0x2}, {0x1, 0x6, 0x6}}}, @TCF_EM_META={0x5c, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x1b, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="ae1a57", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="23185693c29dbc89"]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="c2e3609d36", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0xf2}, {0x5, 0x66, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x3}, {0x5, 0x7, 0x1}}}]}}, @TCF_EM_IPT={0x70, 0x2, 0x0, 0x0, {{0xe, 0x9, 0x8f58}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x44, 0x5, "3d2b48ccfdc6b35e44d15880915031f2382d96cfc068287416226c097c64eb6e4a69ff096918dff3609a42c8668e7f0f4245c5e3a6ddc5db55a91fad2ef8c1ff"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x4}, [@TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_VAR="2a8817e7"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x4, 0x2, 0x5}, {0x6, 0x3, 0x2, "70150e"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x0, 0x7, 0xbfb4}, {{0x4}, {0x1, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xc25, 0x7, 0x1}, {{0x4, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}}}, @TCF_EM_META={0xb4, 0x1, 0x0, 0x0, {{0x111c, 0x4, 0xddf8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x4, 0x1}, {0xc, 0x1, 0x1}}}, @TCA_EM_META_RVALUE={0x25, 0x3, [@TCF_META_TYPE_VAR="c1343861b7ab6a682919", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="b75eb8f8a4", @TCF_META_TYPE_VAR="94efbe91ffec682e9443"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xc0}, {0xc000, 0x7, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x7f, 0x1}, {0x4159, 0x3}}}, @TCA_EM_META_RVALUE={0x2c, 0x3, [@TCF_META_TYPE_VAR="d8", @TCF_META_TYPE_VAR="08a5", @TCF_META_TYPE_VAR="3dfd924c64a8f4", @TCF_META_TYPE_VAR="2d561ccc8716c8", @TCF_META_TYPE_VAR="574ee97e04", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="b66f884e0ba1c0219252", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x1b, 0x2, [@TCF_META_TYPE_VAR="a808abd4284bd899ee", @TCF_META_TYPE_VAR="7aab9fb44ee6", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x7, 0x2, [@TCF_META_TYPE_VAR="2579b3"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x7f}, {0x7, 0xf, 0x1}}}]}}]}]}]}}]}, 0x4d4}}, 0x0) write$tun(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="4500001c12344000403a"], 0x1c) fsmount(r3, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000000000000000000010000922895f4b820dbbeb4fa00010000000000000000000000000000000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200000000000000000fffffffffffffffffeffffff0000"], 0xb8}}, 0x4004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000900)=ANY=[@ANYBLOB="b8000000140001000000000004000000e0000002000000000000000000000000000000e2ffffffffffbecca8c5db5332f9957fa3f82c999200ffffac1e01010002000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000007f000000000000000000000000000000a700000000000000000000000000000000000000000000000000000000000000010000000000000006000000000000000000000000000000feffffffffffffff00000000b36b6e000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) r10 = open(&(0x7f0000000800)='./bus\x00', 0x143142, 0xa2) ftruncate(r10, 0x2007ffb) 1.953160965s ago: executing program 0 (id=6984): r0 = open(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x11) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='\x00', 0x89901) mount_setattr(r5, &(0x7f00000004c0)='.\x00', 0x800, &(0x7f0000000500)={0x8f, 0x0, 0x100000}, 0x20) fcntl$lock(r0, 0x410, &(0x7f0000000280)={0x1, 0x3, 0x878, 0xfffa}) r6 = socket(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000001c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001cc0), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000001d00)=r7, 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000001d40)=r7, 0x4) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000700)={{0x0, 0x4}, 0x100, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r5, 0xec8d0000) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d04, &(0x7f00000002c0)) r8 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x2, 0x2) r9 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0xf, 0xf, 0x7fff8001}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SIGNAL_MSI(r10, 0x4020aea5, &(0x7f0000000540)={0x0, 0xeeee8000, 0xf, 0x0, 0x965}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000003c0)={[0x12e8, 0x6, 0x8f3b8, 0x2b5, 0x2, 0x8000003fe, 0x4002004c4, 0x1000, 0x10a, 0x97, 0x9, 0x1, 0x9, 0x1, 0x1], 0xeeee7ffb, 0x2c1715}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000ac0)={0x1, @pix={0x0, 0xfffffffd, 0x50323234, 0x0, 0x0, 0x0, 0x4, 0x2, 0x779acd4f0ad4811f, 0x0, 0x2, 0x2}}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000000b0601020000000000000000007a310000000005000100060080a66eb21091dd84094000000002"], 0x34}}, 0x0) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000100)=@multiplanar_mmap={0x69, 0x2, 0x4, 0x70000, 0x5, {0x77359400}, {0x3, 0x2, 0x6, 0xd, 0xc, 0x0, "4cd4b07c"}, 0x6, 0x1, {&(0x7f0000000000)=[{0x2, 0xe, {0x8}, 0xb7e6}, {0x8, 0x1, {0x6}, 0x1d}]}, 0x142}) 1.64795065s ago: executing program 2 (id=6985): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x180, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000380], 0x700, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/384]}, 0x1f8) (fail_nth: 25) 1.647537284s ago: executing program 1 (id=6986): r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000007dc0)=[{{&(0x7f0000000200)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000440)="040c899402cd4e03f115f216aa47271942c3e1b348ac7cc35f", 0x19}], 0x1}}, {{&(0x7f0000000980)=@phonet={0x23, 0xe1, 0x40, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000006380)=[{0x10, 0x108, 0x8001}, {0x10, 0x1, 0x2800}], 0x20}}], 0x2, 0x40884) (fail_nth: 1) 1.072720945s ago: executing program 1 (id=6987): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80a00, 0x0) r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x3, 0x1, 0x8}]}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff0200"/53], 0x0) 0s ago: executing program 2 (id=6988): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='ns\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x2a102211, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r4, 0x802c550a, &(0x7f0000000200)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x1, 0x2, 0x6dd4, 0x1, 0x3, 0x0}) setpgid(r3, r3) setpgid(0x0, r3) wait4(r3, 0x0, 0x2, 0x0) capget(&(0x7f0000000080)={0x19980330, r3}, &(0x7f0000000180)={0x6, 0x8, 0x200, 0x1, 0xcf9, 0x7fe00000}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x128}, 0x0) getdents64(r0, 0x0, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, &(0x7f0000010980), &(0x7f00000109c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000010bc0)={0x0, 0x0, &(0x7f0000010c00)={&(0x7f0000010c40)=ANY=[@ANYBLOB="14000000100001000000000000000400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40540700002c0000000b0a01030100000000000000020900010073797a310091dbb5961b1da5ca61a27f0000000c0010400000000000000002140000001100010000"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000010d00)={'dummy0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000010d40)={0x0, 0x0, &(0x7f0000010d80)={&(0x7f0000010dc0)=ANY=[@ANYBLOB="2c0000001400b59527bd7000ffdbdf250a4000c8", @ANYRES32=r8, @ANYBLOB="140002"], 0x2c}}, 0x400c0c0) sendmmsg$unix(r1, &(0x7f00000110c0)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)="a82acd3471c560f6a44a5d702682195e56c5fb4a9c55af6d61216a18de5927f99ca264b6c55fdd73523f336343d1ba9d7ac023026ff672d3ed51af1f3d87625a", 0x40}, {&(0x7f0000000300)="ad4f40b6369d0a49ef1e7c2b001e03f8f6d5c30a7188911990096500913663c08ab68833b45065de422efb3f757cbe4646a4013e21804775de1233e12689de5f57200f5383beed2328e51aec2cef6523ebd016937f770d1da82bc920bf9feb77999b9e3bb28ec60ba0f93da9015fd3c53bc4267a1fee828f9522c12e495cc6673039834ecfb98b9b990318cd1fc8993cf5a0293215980ef32556b2f29be0b8ebca7b86d2c34b557f3c6b4f2871c836f5058c2ca98e0c929c56fb", 0xba}], 0x2}}, {{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000480)="c667dfd0a217bcbab3b6e0284a12aa81012a517260e830e6bba2bd6b6310778645b03bd1809a137854a0175376d21f464c65ce6f34027295fb03f494fb48487846b939f77d4fad4bd5c0760c701fe2b6f26f98a75d08215a34340a8e51dea174133dfadced10da419e9135354f923ee1fb0966ca84731acfab56b6e663ea2e9729d94e93556ad1ffd97cb34a97349580f6858b3925ba7fa5", 0x98}, {&(0x7f0000000600)="e45aa5189007ebcb18bfaf64323a2e73f13bf073467a2afe5773f4f8a945e7f925ce76a8b23d0ced56ca6942c44d1263b54a7a43d9c90259ba61621a7401d407f0ec0cff05fd795d3d58616c7eca933e48bed82352d6288f498c07db48c99b2f7598529978ed5b4e44974211bf92e903b2397fc7f6fb7977a7dfdf6869aa6af09fc5e45cc684a2ef6661e581c4b1f7ed47b963717f44f6eccb303b1f39b9657c7c12492d4346b20d1f0f7cd8a225bb6cdd34218e7fc11fce6c1bb36e8b84df547adf9dfbe79c730f0c8b39941e839b61129f2041af3bca3d7285f717db22ae1cdf5a34ee0c714abb31b96cf090d7736a1188c7", 0xf3}], 0x2, &(0x7f00000093c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r4, r0, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r4, r0, r0, r2, r2]}}], 0xc8, 0xc8d0}}, {{&(0x7f00000094c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000009b40)=[{&(0x7f0000009540)}, {0x0}, {&(0x7f00000096c0)="440b8dded3ddb88872add9b99a343b472aec2d", 0x13}, {&(0x7f0000009700)="08d000ad89019e377fe7f0f182cbc4d726434b46f931f4633373c697e0f4f9a1d3a5d71a74f1378f514dffb21570dc4da6fa1a84fa96d4cac59a6305d28f8f939e2cecc0b5d244200cf6b7f1587179559e14ce941e6e3995cbd99035ae196c8c897d7fc77b899cef5c8a87eb0715459708594d86190afe8c75543c1f2021f051098f0fca3e8604f3c7d8942369906e973cfa04f0d675fb", 0x97}, {&(0x7f00000097c0)="925dfd5509a2d5deefe10613f65c8b6f0766c377769e16a9dd97e346da4bed0fbfc82131514ad1647e5bb718ec4eac1427779308e39bb9b3863271b11ec5fa9d743d1a7c2b945685c25345aafb19947c52dc7803c7163e1c1a21", 0x5a}, {&(0x7f0000009840)="d39e67dd45e2dd08aab9412bff284cde3d174e4d41b3c59cdc20e446ea891b9597f66ca96326aafc5b72ce7cdb42639ecfa1ea72396632c7caa4e44c961a1353296aa7afb0edca26871fe65b78980dd8e092e65e904a890b5ab1c31f2110", 0x5e}, {&(0x7f00000098c0)="9b617591498b3fe9c4c766662d8bd91d95f68cd3f36c18fa38068b35ef18a4a4370a1cc615d73be0ddaa9001734b9e316b85c8f7dddd3a26cbf7e10f88ad2aa8b5332e56eb95cb8bba5d4d7e18225ff33f51ecbd26621ae6385388718de14eb011b6f91df5caf42643d01c7977e88b88bb583fdd3c8892296356b75ca84fb34ba4a7efd03650bcbb2877a96aad9a69fc55887288", 0x94}, {&(0x7f0000009a40)}], 0x8, 0x0, 0x0, 0x80}}, {{&(0x7f0000009c00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000009d80)=[{&(0x7f0000009c80)="6ad534aaeb51c336f090f70394f49e8fb7b2d0eba63b127a51129da1e6aafd5e7844c73670c6997129a84b2a5ed52491c7229c72d8c78d4b60699815fe6f12074faf3206ef1ff7c66f4d2158a37907ef8d27a9efed0a1c9fce", 0x59}, {&(0x7f0000009d00)="5fb7d86f1a3fa71093cb8022a7df86a5ef553e3953a5939982a8a30e56f9ae528fb6ee2c30a25603ab7fa23f9c7c4c42a50cd2f80557af9eb684d815a82451550cde138be85d0d95418c9cb203783e50ab5891e47e0ce2", 0x57}], 0x2, &(0x7f0000010500)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r2, r4]}}], 0x80, 0x240008c4}}, {{&(0x7f0000010580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000010880)=[{&(0x7f0000010600)="de9665b62b839dbf6ba9cb30845e5e4cffe7d3bfecdbf23f3da2aa4f4b06d177cd73a95c8612ab00bb72edee6440a265339a34dfce6a843f461588e346a4f770e93d3b4df92b4b358498236e018dc7ed46ab893d6f29f8ed52c937c911", 0x5d}, {&(0x7f0000010680)="72fc2c20b81e651d0b1241dfd53fa6501b793c5faa3739", 0x17}, {&(0x7f00000106c0)="d8856813d68a89bbd58dd9c9cf60e449be7b72f977d86e63348a1e8c186a0d1d03d6d4eb818c14596397145cfb9190fe2317a1f8746ed0027120575a0c54d4bb0c3554672f3677e280ef13904f99d73b651682a9688218cb8c23cce0891f81397b1fd5c5c6071465ce297c6fd86411e548b3d0548cd0bbb7045407d31fd2fa9a69458be35366d3a36d3cb935e13cf8aeb8ecd26b43f0bd7617cc545d75ea24bba14f04b1f3e1e2b8429e1f8cc5fa63182ee15857d5358515c809", 0xba}, {&(0x7f0000010780)="a23d75ab265aa1c0e1914ea604a3d2afb720aa81c069a60f191f2a6dd88d5cde2dbf5f6fd64e504c57b04c9439fd3e6cace8759931c221a650a3b3ea49bc731faab853981963a68150b3f4d450e25dea261a6389cc10446f355bae22905a6e300806e0d11bf22b893cc25deb6827f9f24df517d407a443c5f4388eb4dbb791fe7f9be0bd0f907743f54921724e8b58a1200b8cd834c0429f717397fcdffc5313b1d7b4b492e9439daa", 0xa9}, {&(0x7f0000010840)="c40a462d00b23478884fc9f426f180ad405322eeccf422f324543626a2", 0x1d}], 0x5, &(0x7f0000011000)=[@rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r5]}}, @rights={{0x28, 0x1, 0x1, [r2, r4, r0, r6, r2, r0]}}, @rights={{0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4, r7, r1, r4]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0xb8, 0x4000080}}], 0x5, 0x44810) kernel console output (not intermixed with test programs): 1227] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1737.641438][ T1227] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1737.644029][ T1227] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 1737.644057][ T1227] usb 3-1: config 1 has no interface number 0 [ 1737.644137][ T1227] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 1737.688670][ T1227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1737.688737][ T1227] usb 3-1: Product: syz [ 1737.688756][ T1227] usb 3-1: Manufacturer: syz [ 1737.688774][ T1227] usb 3-1: SerialNumber: syz [ 1737.721781][T29359] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1737.745020][ T1227] usb 3-1: Error in usbnet_get_endpoints (-22) [ 1737.992552][T15946] usb 3-1: USB disconnect, device number 36 [ 1738.202662][ T1227] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 1738.363184][ T1227] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice=34.15 [ 1738.365842][ T1227] usb 1-1: config 9 interface 0 has no altsetting 0 [ 1738.392699][ T1227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.392766][ T1227] usb 1-1: Product: syz [ 1738.392785][ T1227] usb 1-1: Manufacturer: syz [ 1738.392803][ T1227] usb 1-1: SerialNumber: syz [ 1738.716419][ T1227] snd-usb-caiaq 1-1:9.0: can't set alt interface. [ 1738.716439][ T1227] usb 1-1: unable to init card! (ret=-5) [ 1738.716819][ T1227] snd-usb-caiaq 1-1:9.0: probe with driver snd-usb-caiaq failed with error -5 [ 1738.755629][ T1227] usb 1-1: USB disconnect, device number 36 [ 1739.204442][T27447] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1739.204484][T27447] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 1739.205428][T27447] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1739.205473][T27447] usb 2-1: can't read configurations, error -71 [ 1739.747360][ T5708] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1739.747418][ T5708] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 1739.748323][ T5708] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1739.748362][ T5708] usb 4-1: can't read configurations, error -71 [ 1739.905666][T29387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6641'. [ 1740.103235][T29399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6644'. [ 1740.310982][ T1227] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 1740.461175][ T1227] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1740.462374][ T1227] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1740.462410][ T1227] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1740.462436][ T1227] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1740.462466][ T1227] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1740.462511][ T1227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.469519][ T1227] usb 5-1: config 0 descriptor?? [ 1740.501389][T20234] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1740.503149][T27447] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1740.650496][T27447] usb 3-1: Using ep0 maxpacket: 32 [ 1740.651322][T20234] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1740.652629][T20234] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 1740.652656][T20234] usb 1-1: config 1 has no interface number 0 [ 1740.652703][T20234] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 1740.655364][T20234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.655392][T20234] usb 1-1: Product: syz [ 1740.655410][T20234] usb 1-1: Manufacturer: syz [ 1740.655427][T20234] usb 1-1: SerialNumber: syz [ 1740.657945][T27447] usb 3-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 1740.659633][T27447] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1740.659679][T27447] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1740.659720][T27447] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1740.687164][T29401] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1740.732237][T20234] usb 1-1: Error in usbnet_get_endpoints (-22) [ 1740.752541][T27447] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.752571][T27447] usb 3-1: Product: syz [ 1740.752589][T27447] usb 3-1: Manufacturer: syz [ 1740.752606][T27447] usb 3-1: SerialNumber: syz [ 1740.815670][T29405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1740.820610][T29405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1740.857858][T29405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1740.858387][T29405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1740.883680][ T1227] input: HID 17ef:6047 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:17EF:6047.0076/input/input231 [ 1740.935783][T20234] usb 1-1: USB disconnect, device number 37 [ 1740.999895][ T1227] lenovo 0003:17EF:6047.0076: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 1741.048083][T29403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1741.068147][T29403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1741.078735][T27990] usb 5-1: USB disconnect, device number 22 [ 1741.118270][T27447] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1741.118371][T27447] usb 3-1: MIDIStreaming interface descriptor not found [ 1741.288547][T29408] fido_id[29408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1741.306319][T29410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6647'. [ 1741.352823][T27447] usb 3-1: USB disconnect, device number 37 [ 1741.516813][T24738] udevd[24738]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1741.695407][T29416] netlink: 'syz.0.6649': attribute type 1 has an invalid length. [ 1741.883691][T29431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6655'. [ 1742.353321][T27990] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1742.451338][T27989] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1742.500690][T27990] usb 1-1: Using ep0 maxpacket: 16 [ 1742.501633][T27990] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 1742.504938][T27990] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1742.504960][T27990] usb 1-1: config 1 has no interface number 0 [ 1742.504988][T27990] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1742.554544][T27990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.554568][T27990] usb 1-1: Product: syz [ 1742.554579][T27990] usb 1-1: Manufacturer: syz [ 1742.554591][T27990] usb 1-1: SerialNumber: syz [ 1742.651326][T27989] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1742.652221][T27989] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 1742.652255][T27989] usb 3-1: config 1 has no interface number 0 [ 1742.652287][T27989] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 1742.655249][T27989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.655268][T27989] usb 3-1: Product: syz [ 1742.655280][T27989] usb 3-1: Manufacturer: syz [ 1742.655291][T27989] usb 3-1: SerialNumber: syz [ 1742.755218][T29543] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1742.758770][T27989] usb 3-1: Error in usbnet_get_endpoints (-22) [ 1743.002555][T20234] usb 3-1: USB disconnect, device number 38 [ 1743.219490][ T6446] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.667395][ T6446] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.756893][T27576] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1743.764133][T27576] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1743.779527][T27576] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1743.788140][T27576] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1743.789107][T27576] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1743.963941][T27990] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1744.064916][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 1744.064938][ T31] audit: type=1326 audit(1792223832.592:13745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29557 comm="syz.2.6664" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04e7b9e559 code=0x0 [ 1744.123758][T29552] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1744.192365][T29562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6664'. [ 1744.289383][T29565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6665'. [ 1744.341875][T27990] usb 1-1: USB disconnect, device number 38 [ 1744.605160][T24751] udevd[24751]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1744.747501][ T6446] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.047865][T29571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6667'. [ 1745.080921][ C1] ip6_tunnel: M xmit: Local address not yet configured! [ 1745.176728][T29553] syz.1.6662 (29553): drop_caches: 1 [ 1745.363355][ T6446] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.450665][T27447] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 1745.610577][T29583] FAULT_INJECTION: forcing a failure. [ 1745.610577][T29583] name failslab, interval 100, probability 0, space 0, times 0 [ 1745.610628][T29583] CPU: 1 UID: 0 PID: 29583 Comm: syz.2.6673 Tainted: G L syzkaller #0 PREEMPT(full) [ 1745.610659][T29583] Tainted: [L]=SOFTLOCKUP [ 1745.610668][T29583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1745.610682][T29583] Call Trace: [ 1745.610691][T29583] [ 1745.610702][T29583] dump_stack_lvl+0xe8/0x150 [ 1745.610739][T29583] should_fail_ex+0x410/0x560 [ 1745.610774][T29583] ? __alloc_skb+0x1db/0x7a0 [ 1745.610796][T29583] should_failslab+0xa8/0x100 [ 1745.610830][T29583] ? __alloc_skb+0x1db/0x7a0 [ 1745.610850][T29583] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1745.610876][T29583] ? __alloc_skb+0x18d/0x7a0 [ 1745.610907][T29583] ? __alloc_skb+0x1db/0x7a0 [ 1745.610936][T29583] __alloc_skb+0x1db/0x7a0 [ 1745.610963][T29583] netlink_sendmsg+0x5d4/0xb40 [ 1745.611004][T29583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1745.611043][T29583] ? apparmor_socket_sendmsg+0x98/0x360 [ 1745.611079][T29583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1745.611109][T29583] sock_sendmsg_nosec+0x13a/0x180 [ 1745.611145][T29583] ____sys_sendmsg+0x54e/0x850 [ 1745.611177][T29583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1745.611213][T29583] ? import_iovec+0x73/0xa0 [ 1745.611239][T29583] ___sys_sendmsg+0x2a5/0x360 [ 1745.611264][T29583] ? __lock_acquire+0x747/0x2de0 [ 1745.611295][T29583] ? __pfx____sys_sendmsg+0x10/0x10 [ 1745.611358][T29583] ? __fget_files+0x2a/0x420 [ 1745.611380][T29583] ? __fget_files+0x3a2/0x420 [ 1745.611413][T29583] __x64_sys_sendmsg+0x1b1/0x290 [ 1745.611443][T29583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1745.611495][T29583] do_syscall_64+0x166/0x520 [ 1745.611520][T29583] ? trace_irq_disable+0x3b/0x140 [ 1745.611544][T29583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1745.611567][T29583] ? clear_bhb_loop+0x70/0xc0 [ 1745.611602][T29583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1745.611625][T29583] RIP: 0033:0x7f04e7b9e559 [ 1745.611647][T29583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1745.611666][T29583] RSP: 002b:00007f04e8a47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1745.611692][T29583] RAX: ffffffffffffffda RBX: 00007f04e7e25fa0 RCX: 00007f04e7b9e559 [ 1745.611707][T29583] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1745.611723][T29583] RBP: 00007f04e8a47090 R08: 0000000000000000 R09: 0000000000000000 [ 1745.611737][T29583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1745.611752][T29583] R13: 00007f04e7e26038 R14: 00007f04e7e25fa0 R15: 00007f04e7f4fa48 [ 1745.611788][T29583] [ 1745.655438][T27447] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1745.781540][T27447] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.781571][T27447] usb 4-1: Product: syz [ 1745.781589][T27447] usb 4-1: Manufacturer: syz [ 1745.781606][T27447] usb 4-1: SerialNumber: syz [ 1745.893601][T27447] usb 4-1: config 0 descriptor?? [ 1745.965628][T16117] Bluetooth: hci0: command tx timeout [ 1746.126681][T27447] usb 4-1: ignoring: probably an ADSL modem [ 1746.154991][T29593] FAULT_INJECTION: forcing a failure. [ 1746.154991][T29593] name failslab, interval 100, probability 0, space 0, times 0 [ 1746.155029][T29593] CPU: 0 UID: 0 PID: 29593 Comm: syz.1.6675 Tainted: G L syzkaller #0 PREEMPT(full) [ 1746.155057][T29593] Tainted: [L]=SOFTLOCKUP [ 1746.155065][T29593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1746.155079][T29593] Call Trace: [ 1746.155087][T29593] [ 1746.155097][T29593] dump_stack_lvl+0xe8/0x150 [ 1746.155132][T29593] should_fail_ex+0x410/0x560 [ 1746.155167][T29593] should_failslab+0xa8/0x100 [ 1746.155198][T29593] __kmalloc_cache_noprof+0xa3/0x600 [ 1746.155225][T29593] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1746.155247][T29593] ? sctp_add_bind_addr+0x8c/0x370 [ 1746.155273][T29593] ? sctp_add_bind_addr+0x8c/0x370 [ 1746.155306][T29593] sctp_add_bind_addr+0x8c/0x370 [ 1746.155343][T29593] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1746.155390][T29593] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1746.155431][T29593] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1746.155465][T29593] ? sctp_v4_is_any+0x35/0x60 [ 1746.155496][T29593] ? sctp_copy_one_addr+0x93/0x360 [ 1746.155530][T29593] sctp_bind_addr_copy+0xb3/0x3c0 [ 1746.155561][T29593] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1746.155593][T29593] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1746.155621][T29593] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1746.155648][T29593] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1746.155671][T29593] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1746.155693][T29593] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1746.155717][T29593] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1746.155737][T29593] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1746.155769][T29593] sctp_sendmsg+0x159b/0x2d00 [ 1746.155803][T29593] ? kstrtouint+0x6e/0xe0 [ 1746.155834][T29593] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1746.155853][T29593] ? lock_acquire+0x115/0x350 [ 1746.155874][T29593] ? get_pid_task+0x20/0x1f0 [ 1746.155940][T29593] ? aa_sock_msg_perm+0xfc/0x210 [ 1746.155971][T29593] ? sock_rps_record_flow+0x19/0x350 [ 1746.156004][T29593] ? inet_sendmsg+0x298/0x320 [ 1746.156033][T29593] ? apparmor_socket_sendmsg+0x274/0x360 [ 1746.156066][T29593] ? __pfx_inet_sendmsg+0x10/0x10 [ 1746.156097][T29593] sock_sendmsg_nosec+0x10e/0x180 [ 1746.156133][T29593] __sys_sendto+0x408/0x5a0 [ 1746.156155][T29593] ? ksys_write+0x1e6/0x270 [ 1746.156183][T29593] ? __pfx___sys_sendto+0x10/0x10 [ 1746.156203][T29593] ? __mutex_unlock_slowpath+0x731/0x900 [ 1746.156265][T29593] ? __pfx_ksys_write+0x10/0x10 [ 1746.156295][T29593] __x64_sys_sendto+0xde/0x100 [ 1746.156322][T29593] do_syscall_64+0x166/0x520 [ 1746.156348][T29593] ? trace_irq_disable+0x3b/0x140 [ 1746.156374][T29593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1746.156408][T29593] ? clear_bhb_loop+0x70/0xc0 [ 1746.156435][T29593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1746.156458][T29593] RIP: 0033:0x7f34bc39e559 [ 1746.156481][T29593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1746.156501][T29593] RSP: 002b:00007f34bd1f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1746.156527][T29593] RAX: ffffffffffffffda RBX: 00007f34bc626090 RCX: 00007f34bc39e559 [ 1746.156543][T29593] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000003 [ 1746.156558][T29593] RBP: 00007f34bd1f4090 R08: 0000200000000380 R09: 0000000000000010 [ 1746.156573][T29593] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 1746.156587][T29593] R13: 00007f34bc626128 R14: 00007f34bc626090 R15: 00007f34bc74fa48 [ 1746.156623][T29593] [ 1746.430934][T20234] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1746.535904][T27447] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1746.556737][T27447] usb 4-1: USB disconnect, device number 37 [ 1746.592341][T20234] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1746.598728][T20234] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 1746.598758][T20234] usb 3-1: config 1 has no interface number 0 [ 1746.598803][T20234] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 1746.620265][T20234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.620602][T20234] usb 3-1: Product: syz [ 1746.620622][T20234] usb 3-1: Manufacturer: syz [ 1746.620639][T20234] usb 3-1: SerialNumber: syz [ 1746.667208][T29592] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1746.694578][T20234] usb 3-1: Error in usbnet_get_endpoints (-22) [ 1746.891091][T20234] usb 3-1: USB disconnect, device number 39 [ 1747.263386][T29608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6680'. [ 1747.370594][T27447] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1747.520753][T27447] usb 2-1: device descriptor read/64, error -71 [ 1747.553507][ T6446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1747.558272][ T6446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1747.586415][ T6446] bond0 (unregistering): Released all slaves [ 1747.599540][ T31] audit: type=1800 audit(1792223836.132:13746): pid=29612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6682" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1747.790546][T27447] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1747.907458][T29621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6684'. [ 1747.944520][T27447] usb 2-1: device descriptor read/64, error -71 [ 1748.040799][T16117] Bluetooth: hci0: command tx timeout [ 1748.055236][T27447] usb usb2-port1: attempt power cycle [ 1748.134685][T29622] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6683'. [ 1748.191916][ T5708] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 1748.266856][T29559] bridge0: port 1(bridge_slave_0) entered blocking state [ 1748.266989][T29559] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.267166][T29559] bridge_slave_0: entered allmulticast mode [ 1748.269146][T29559] bridge_slave_0: entered promiscuous mode [ 1748.357659][T29559] bridge0: port 2(bridge_slave_1) entered blocking state [ 1748.357854][T29559] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.358027][T29559] bridge_slave_1: entered allmulticast mode [ 1748.364426][ T5708] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1748.397572][T29559] bridge_slave_1: entered promiscuous mode [ 1748.399531][ T5708] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1748.399614][ T5708] usb 3-1: config 0 has no interface number 0 [ 1748.399749][ T5708] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1748.399825][ T5708] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1748.399951][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1748.410982][T27447] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1748.463141][ T5708] usb 3-1: config 0 descriptor?? [ 1748.465430][T29623] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1748.468415][T27447] usb 2-1: device descriptor read/8, error -71 [ 1748.491131][ T5708] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1748.670070][ T6446] hsr_slave_0: left promiscuous mode [ 1748.684054][ T6446] hsr_slave_1: left promiscuous mode [ 1748.684862][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1748.684880][ T6446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1748.687728][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1748.687758][ T6446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1748.710859][T27447] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1748.734043][T27447] usb 2-1: device descriptor read/8, error -71 [ 1748.794140][ T5708] usb 3-1: USB disconnect, device number 40 [ 1748.832824][T27447] usb usb2-port1: unable to enumerate USB device [ 1748.849543][ T6446] veth1_macvtap: left promiscuous mode [ 1748.849587][ T6446] veth0_macvtap: left promiscuous mode [ 1748.849723][ T6446] veth1_vlan: left promiscuous mode [ 1748.849955][ T6446] veth0_vlan: left promiscuous mode [ 1749.406649][ T6446] team0 (unregistering): Port device team_slave_1 removed [ 1749.433054][ T6446] team0 (unregistering): Port device team_slave_0 removed [ 1749.580521][T29559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1749.603639][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1749.618157][T29559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1749.732190][T29559] team0: Port device team_slave_0 added [ 1749.753897][T29559] team0: Port device team_slave_1 added [ 1749.855516][T29559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1749.855541][T29559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1749.855580][T29559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1749.857769][T29559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1749.857785][T29559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1749.857816][T29559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1750.127031][T16117] Bluetooth: hci0: command tx timeout [ 1750.163871][T29661] gretap0: entered promiscuous mode [ 1750.248567][T29662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6691'. [ 1750.248599][T29662] gretap0: left promiscuous mode [ 1750.277863][T29559] hsr_slave_0: entered promiscuous mode [ 1750.279122][T29559] hsr_slave_1: entered promiscuous mode [ 1750.379983][ T6446] IPVS: stop unused estimator thread 0... [ 1750.568459][T29670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6694'. [ 1750.770030][T29678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6695'. [ 1750.871243][T29683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6697'. [ 1750.955609][T29683] FAULT_INJECTION: forcing a failure. [ 1750.955609][T29683] name failslab, interval 100, probability 0, space 0, times 0 [ 1750.955650][T29683] CPU: 1 UID: 0 PID: 29683 Comm: syz.1.6697 Tainted: G L syzkaller #0 PREEMPT(full) [ 1750.955682][T29683] Tainted: [L]=SOFTLOCKUP [ 1750.955691][T29683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1750.955706][T29683] Call Trace: [ 1750.955715][T29683] [ 1750.955725][T29683] dump_stack_lvl+0xe8/0x150 [ 1750.955765][T29683] should_fail_ex+0x410/0x560 [ 1750.955826][T29683] should_failslab+0xa8/0x100 [ 1750.955861][T29683] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 1750.955892][T29683] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 1750.955919][T29683] ? team_options_register+0x140/0xb40 [ 1750.956022][T29683] ? team_options_register+0x140/0xb40 [ 1750.956059][T29683] kmemdup_noprof+0x2b/0x70 [ 1750.956090][T29683] team_options_register+0x140/0xb40 [ 1750.956121][T29683] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1750.956152][T29683] ? timer_init_key+0x161/0x2c0 [ 1750.956189][T29683] team_init+0xa74/0xf60 [ 1750.956230][T29683] register_netdevice+0x6a1/0x1eb0 [ 1750.956261][T29683] ? __asan_memset+0x22/0x50 [ 1750.956286][T29683] ? _get_random_bytes+0x1e7/0x260 [ 1750.956312][T29683] ? alloc_netdev_mqs+0xd44/0x12a0 [ 1750.956349][T29683] ? __pfx_register_netdevice+0x10/0x10 [ 1750.956378][T29683] ? __hw_addr_insert+0x1f8/0x220 [ 1750.956403][T29683] ? dev_addr_mod+0x174/0x350 [ 1750.956436][T29683] ? dev_addr_mod+0x1ba/0x350 [ 1750.956471][T29683] team_newlink+0x120/0x170 [ 1750.956496][T29683] ? __pfx_team_newlink+0x10/0x10 [ 1750.956528][T29683] ? __pfx_team_newlink+0x10/0x10 [ 1750.956554][T29683] rtnl_newlink_create+0x305/0x7b0 [ 1750.956595][T29683] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1750.956625][T29683] ? __pfx___mutex_lock+0x10/0x10 [ 1750.956664][T29683] ? ns_capable+0x89/0xe0 [ 1750.956699][T29683] rtnl_newlink+0x166d/0x1c30 [ 1750.956740][T29683] ? __pfx_rtnl_newlink+0x10/0x10 [ 1750.956762][T29683] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 1750.956788][T29683] ? do_syscall_64+0x166/0x520 [ 1750.956813][T29683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.956877][T29683] ? kasan_quarantine_put+0xbb/0x1f0 [ 1750.956904][T29683] ? lockdep_hardirqs_on+0x7b/0x110 [ 1750.956936][T29683] ? nlmon_xmit+0xb0/0x100 [ 1750.956969][T29683] ? kmem_cache_free+0x182/0x650 [ 1750.957010][T29683] ? __lock_acquire+0x747/0x2de0 [ 1750.957045][T29683] ? __local_bh_enable_ip+0xd6/0x140 [ 1750.957075][T29683] ? lockdep_hardirqs_on+0x7b/0x110 [ 1750.957100][T29683] ? __dev_queue_xmit+0x29b/0x3920 [ 1750.957127][T29683] ? __local_bh_enable_ip+0xd6/0x140 [ 1750.957166][T29683] ? lock_acquire+0x115/0x350 [ 1750.957209][T29683] ? __pfx_rtnl_newlink+0x10/0x10 [ 1750.957231][T29683] rtnetlink_rcv_msg+0x802/0xc00 [ 1750.957257][T29683] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1750.957278][T29683] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1750.957299][T29683] ? ref_tracker_free+0x689/0x830 [ 1750.957337][T29683] ? __pfx_ref_tracker_free+0x10/0x10 [ 1750.957370][T29683] ? __asan_memcpy+0x40/0x70 [ 1750.957395][T29683] ? __skb_clone+0x5c/0x6c0 [ 1750.957427][T29683] netlink_rcv_skb+0x226/0x4a0 [ 1750.957458][T29683] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1750.957484][T29683] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1750.957528][T29683] ? netlink_deliver_tap+0x2e/0x1b0 [ 1750.957583][T29683] ? netlink_deliver_tap+0x2e/0x1b0 [ 1750.957620][T29683] netlink_unicast+0x8ef/0xa80 [ 1750.957666][T29683] netlink_sendmsg+0x813/0xb40 [ 1750.957707][T29683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1750.957746][T29683] ? apparmor_socket_sendmsg+0x98/0x360 [ 1750.957783][T29683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1750.957807][T29683] sock_sendmsg_nosec+0x13a/0x180 [ 1750.957841][T29683] ____sys_sendmsg+0x54e/0x850 [ 1750.957874][T29683] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1750.957911][T29683] ? import_iovec+0x73/0xa0 [ 1750.957939][T29683] ___sys_sendmsg+0x2a5/0x360 [ 1750.957964][T29683] ? __lock_acquire+0x747/0x2de0 [ 1750.957995][T29683] ? __pfx____sys_sendmsg+0x10/0x10 [ 1750.958028][T29683] ? kstrtouint+0x6e/0xe0 [ 1750.958087][T29683] ? __fget_files+0x2a/0x420 [ 1750.958108][T29683] ? __fget_files+0x3a2/0x420 [ 1750.958140][T29683] __sys_sendmmsg+0x273/0x4d0 [ 1750.958172][T29683] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1750.958210][T29683] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1750.958255][T29683] ? ksys_write+0x242/0x270 [ 1750.958283][T29683] ? __pfx_ksys_write+0x10/0x10 [ 1750.958314][T29683] __x64_sys_sendmmsg+0xa0/0xc0 [ 1750.958343][T29683] do_syscall_64+0x166/0x520 [ 1750.958370][T29683] ? trace_irq_disable+0x3b/0x140 [ 1750.958394][T29683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.958419][T29683] ? clear_bhb_loop+0x70/0xc0 [ 1750.958448][T29683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.958471][T29683] RIP: 0033:0x7f34bc39e559 [ 1750.958493][T29683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1750.958514][T29683] RSP: 002b:00007f34bd215028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1750.958539][T29683] RAX: ffffffffffffffda RBX: 00007f34bc625fa0 RCX: 00007f34bc39e559 [ 1750.958565][T29683] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1750.958582][T29683] RBP: 00007f34bd215090 R08: 0000000000000000 R09: 0000000000000000 [ 1750.958597][T29683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1750.958612][T29683] R13: 00007f34bc626038 R14: 00007f34bc625fa0 R15: 00007f34bc74fa48 [ 1750.958649][T29683] [ 1751.529557][T29687] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1751.763533][T29696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6700'. [ 1751.853683][T11844] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1751.949722][T29699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6702'. [ 1752.003222][T11844] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 1752.004563][T11844] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1752.004594][T11844] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1752.004637][T11844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.200775][T16117] Bluetooth: hci0: command tx timeout [ 1752.211416][T27447] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1752.362378][T27447] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1752.363865][T27447] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1752.363918][T27447] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1752.363944][T27447] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1752.363972][T27447] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1752.364019][T27447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.552301][ T5708] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1752.721246][ T5708] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1752.722611][ T5708] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1752.722639][ T5708] usb 4-1: config 0 has no interface number 0 [ 1752.725444][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.725474][ T5708] usb 4-1: Product: syz [ 1752.725518][ T5708] usb 4-1: Manufacturer: syz [ 1752.725536][ T5708] usb 4-1: SerialNumber: syz [ 1752.794341][ T5708] usb 4-1: config 0 descriptor?? [ 1752.908646][T27447] gud 3-1:1.0: probe with driver gud failed with error -71 [ 1752.950433][T27447] usb 3-1: USB disconnect, device number 41 [ 1752.977641][T27989] usb 1-1: USB disconnect, device number 39 [ 1753.039547][ T5708] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1753.056945][ T5708] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1753.057333][ T5708] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1753.057393][ T5708] usb 4-1: media controller created [ 1753.135765][ T5708] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1753.189767][T29559] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1753.208850][T29559] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1753.210116][T29559] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1753.239860][T29559] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1753.271932][T29559] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1753.297588][T29559] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1753.322029][T29559] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1753.343523][T29559] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1753.345818][T29724] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1753.526659][ T5708] usb 4-1: USB disconnect, device number 38 [ 1753.656257][T29740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6707'. [ 1753.791651][T29559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1754.178707][T29746] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1754.178771][T29746] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1754.178794][T29746] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1754.199839][T29745] geneve2: entered promiscuous mode [ 1754.242625][T29559] 8021q: adding VLAN 0 to HW filter on device team0 [ 1754.271815][T29750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6708'. [ 1754.308761][T11782] bridge0: port 1(bridge_slave_0) entered blocking state [ 1754.308881][T11782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1754.385257][T19498] bridge0: port 2(bridge_slave_1) entered blocking state [ 1754.385357][T19498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1754.629393][T29761] FAULT_INJECTION: forcing a failure. [ 1754.629393][T29761] name failslab, interval 100, probability 0, space 0, times 0 [ 1754.629424][T29761] CPU: 0 UID: 0 PID: 29761 Comm: syz.3.6711 Tainted: G L syzkaller #0 PREEMPT(full) [ 1754.629447][T29761] Tainted: [L]=SOFTLOCKUP [ 1754.629454][T29761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1754.629464][T29761] Call Trace: [ 1754.629471][T29761] [ 1754.629478][T29761] dump_stack_lvl+0xe8/0x150 [ 1754.629507][T29761] should_fail_ex+0x410/0x560 [ 1754.629536][T29761] should_failslab+0xa8/0x100 [ 1754.629566][T29761] __kvmalloc_node_noprof+0x176/0x820 [ 1754.629587][T29761] ? array_map_direct_value_addr+0x7c/0x100 [ 1754.629613][T29761] ? bpf_compute_postorder+0x83/0x970 [ 1754.629631][T29761] ? bpf_compute_postorder+0x83/0x970 [ 1754.629655][T29761] bpf_compute_postorder+0x83/0x970 [ 1754.629674][T29761] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1754.629698][T29761] ? add_kfuncs+0x251/0x2e0 [ 1754.629721][T29761] bpf_check+0x261d/0x2ef0 [ 1754.629756][T29761] ? __pfx_bpf_check+0x10/0x10 [ 1754.629778][T29761] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1754.629807][T29761] bpf_prog_load+0x14d6/0x1c20 [ 1754.629837][T29761] ? __pfx_bpf_prog_load+0x10/0x10 [ 1754.629877][T29761] __sys_bpf+0xd0d/0xd90 [ 1754.629903][T29761] ? __pfx___sys_bpf+0x10/0x10 [ 1754.629932][T29761] ? __fget_files+0x2a/0x420 [ 1754.629961][T29761] ? ksys_write+0x242/0x270 [ 1754.629980][T29761] ? __pfx_ksys_write+0x10/0x10 [ 1754.630001][T29761] __x64_sys_bpf+0xba/0xd0 [ 1754.630022][T29761] do_syscall_64+0x166/0x520 [ 1754.630041][T29761] ? trace_irq_disable+0x3b/0x140 [ 1754.630060][T29761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1754.630077][T29761] ? clear_bhb_loop+0x70/0xc0 [ 1754.630098][T29761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1754.630114][T29761] RIP: 0033:0x7f270139e559 [ 1754.630130][T29761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1754.630144][T29761] RSP: 002b:00007f270228f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1754.630162][T29761] RAX: ffffffffffffffda RBX: 00007f2701625fa0 RCX: 00007f270139e559 [ 1754.630175][T29761] RDX: 0000000000000094 RSI: 0000200000000780 RDI: 0000000000000005 [ 1754.630185][T29761] RBP: 00007f270228f090 R08: 0000000000000000 R09: 0000000000000000 [ 1754.630196][T29761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1754.630206][T29761] R13: 00007f2701626038 R14: 00007f2701625fa0 R15: 00007f270174fa48 [ 1754.630237][T29761] [ 1754.883146][T29760] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6710'. [ 1755.007951][T29763] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1755.034875][T29559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1755.570682][T11844] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1755.629230][T29559] veth0_vlan: entered promiscuous mode [ 1755.721905][T11844] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1755.726567][T11844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.726596][T11844] usb 1-1: Product: syz [ 1755.726613][T11844] usb 1-1: Manufacturer: syz [ 1755.726631][T11844] usb 1-1: SerialNumber: syz [ 1755.768655][T11844] usb 1-1: config 0 descriptor?? [ 1755.803108][T11844] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1755.824185][T11844] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1755.825023][T11844] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1755.825082][T11844] usb 1-1: media controller created [ 1755.879373][T11844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1755.921873][T29559] veth1_vlan: entered promiscuous mode [ 1755.983819][T11844] DVB: Unable to find symbol mt352_attach() [ 1755.986376][T29776] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 1756.188729][T11844] DVB: Unable to find symbol nxt6000_attach() [ 1756.188748][T11844] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1756.217450][T11844] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input232 [ 1756.235246][T29559] veth0_macvtap: entered promiscuous mode [ 1756.254030][T11844] dvb-usb: schedule remote query interval to 1000 msecs. [ 1756.254063][T11844] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1756.254082][T11844] dvb-usb: bulk message failed: -22 (7/0) [ 1756.254100][T11844] dvb-usb: bulk message failed: -22 (7/0) [ 1756.259272][T29559] veth1_macvtap: entered promiscuous mode [ 1756.303131][T11844] usb 1-1: USB disconnect, device number 40 [ 1756.398137][T29559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1756.437865][T11844] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1756.458311][T29559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1756.542830][T28451] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.543000][T28451] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.543040][T28451] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.543077][T28451] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.738407][T15946] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1756.913323][T15946] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 1756.915381][T15946] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1756.915413][T15946] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1756.915457][T15946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1756.998597][T29807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6719'. [ 1757.059084][T19498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1757.059141][T19498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1757.127658][T28451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1757.127682][T28451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1757.652123][T27447] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1757.811925][T27447] usb 1-1: Using ep0 maxpacket: 16 [ 1757.817403][T27447] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1757.819606][T27447] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1757.819626][T27447] usb 1-1: config 0 has no interface number 0 [ 1757.858256][T27447] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.858286][T27447] usb 1-1: Product: syz [ 1757.858303][T27447] usb 1-1: Manufacturer: syz [ 1757.858319][T27447] usb 1-1: SerialNumber: syz [ 1757.899663][T27447] usb 1-1: config 0 descriptor?? [ 1757.933204][T27447] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1758.451447][ T31] audit: type=1326 audit(1792223846.982:13747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29834 comm="syz.4.6724" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26259e559 code=0x7ffc0000 [ 1758.451542][ T31] audit: type=1326 audit(1792223846.992:13748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29834 comm="syz.4.6724" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26259e559 code=0x7ffc0000 [ 1758.453247][ T31] audit: type=1326 audit(1792223846.992:13749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29834 comm="syz.4.6724" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb26259e559 code=0x7ffc0000 [ 1758.453305][ T31] audit: type=1326 audit(1792223846.992:13750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29834 comm="syz.4.6724" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26259e559 code=0x7ffc0000 [ 1758.453339][ T31] audit: type=1326 audit(1792223846.992:13751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29834 comm="syz.4.6724" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26259e559 code=0x7ffc0000 [ 1758.455381][ T31] audit: type=1326 audit(1792223846.992:13752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29834 comm="syz.4.6724" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fb26259e559 code=0x7ffc0000 [ 1758.456689][ T31] audit: type=1326 audit(1792223846.992:13753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29834 comm="syz.4.6724" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26259e559 code=0x7ffc0000 [ 1758.456757][ T31] audit: type=1326 audit(1792223846.992:13754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29834 comm="syz.4.6724" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26259e559 code=0x7ffc0000 [ 1758.462966][ T31] audit: type=1326 audit(1792223846.992:13755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29834 comm="syz.4.6724" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fb26259e559 code=0x7ffc0000 [ 1758.463087][ T31] audit: type=1326 audit(1792223846.992:13756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29834 comm="syz.4.6724" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26259e559 code=0x7ffc0000 [ 1758.619681][T29835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6724'. [ 1758.851737][T27447] gspca_spca1528: reg_w err -110 [ 1758.851823][T27447] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 1759.133545][T27447] usb 2-1: USB disconnect, device number 35 [ 1759.334548][T29846] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 1759.353005][T15946] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1759.368235][T27989] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1759.444099][T29846] nvme nvme0: failed to connect socket: -22 [ 1759.501934][T27989] usb 5-1: device descriptor read/64, error -71 [ 1759.520868][T15946] usb 3-1: Using ep0 maxpacket: 16 [ 1759.523188][T15946] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1759.525025][T15946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1759.528846][T15946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.528873][T15946] usb 3-1: Product: syz [ 1759.528891][T15946] usb 3-1: Manufacturer: syz [ 1759.528909][T15946] usb 3-1: SerialNumber: syz [ 1759.548820][T15946] usb 3-1: config 0 descriptor?? [ 1759.556071][T15946] hub 3-1:0.0: bad descriptor, ignoring hub [ 1759.556144][T15946] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1759.603082][T15946] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1759.742284][T27989] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1759.772179][T15946] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1759.874495][T27989] usb 5-1: device descriptor read/64, error -71 [ 1759.981776][T27989] usb usb5-port1: attempt power cycle [ 1759.982850][T24751] udevd[24751]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1760.323329][T27989] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1760.347554][T27989] usb 5-1: device descriptor read/8, error -71 [ 1760.580752][T27989] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1760.601208][T27989] usb 5-1: device descriptor read/8, error -71 [ 1760.659073][T26761] usb 1-1: USB disconnect, device number 41 [ 1760.712186][T27989] usb usb5-port1: unable to enumerate USB device [ 1760.744151][T29865] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1760.928347][T29870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6736'. [ 1760.989724][T29871] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1761.150841][T27447] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1761.284354][T29879] tipc: Enabling of bearer rejected, failed to enable media [ 1761.302305][T27447] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 1761.307099][T27447] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1761.307129][T27447] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1761.307171][T27447] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.810505][ T1227] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1761.961942][ T1227] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 1761.967421][ T1227] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1761.967445][ T1227] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1761.967476][ T1227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.340746][T29891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1762.349183][T29891] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6743'. [ 1762.350249][T29891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6743'. [ 1762.350271][T29891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6743'. [ 1762.420775][T27989] usb 3-1: USB disconnect, device number 42 [ 1762.507587][T27447] usb 1-1: USB disconnect, device number 42 [ 1762.645327][T29898] FAULT_INJECTION: forcing a failure. [ 1762.645327][T29898] name failslab, interval 100, probability 0, space 0, times 0 [ 1762.645369][T29898] CPU: 0 UID: 0 PID: 29898 Comm: syz.4.6746 Tainted: G L syzkaller #0 PREEMPT(full) [ 1762.645402][T29898] Tainted: [L]=SOFTLOCKUP [ 1762.645411][T29898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1762.645425][T29898] Call Trace: [ 1762.645435][T29898] [ 1762.645445][T29898] dump_stack_lvl+0xe8/0x150 [ 1762.645486][T29898] should_fail_ex+0x410/0x560 [ 1762.645524][T29898] ? __alloc_skb+0x1db/0x7a0 [ 1762.645547][T29898] should_failslab+0xa8/0x100 [ 1762.645580][T29898] ? __alloc_skb+0x1db/0x7a0 [ 1762.645601][T29898] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1762.645627][T29898] ? __alloc_skb+0x18d/0x7a0 [ 1762.645650][T29898] ? __alloc_skb+0x1db/0x7a0 [ 1762.645680][T29898] __alloc_skb+0x1db/0x7a0 [ 1762.645707][T29898] netlink_sendmsg+0x5d4/0xb40 [ 1762.645748][T29898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1762.645790][T29898] ? apparmor_socket_sendmsg+0x98/0x360 [ 1762.645828][T29898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1762.645854][T29898] sock_sendmsg_nosec+0x13a/0x180 [ 1762.645888][T29898] ____sys_sendmsg+0x54e/0x850 [ 1762.645919][T29898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1762.645963][T29898] ? import_iovec+0x73/0xa0 [ 1762.645989][T29898] ___sys_sendmsg+0x2a5/0x360 [ 1762.646014][T29898] ? __lock_acquire+0x747/0x2de0 [ 1762.646044][T29898] ? __pfx____sys_sendmsg+0x10/0x10 [ 1762.646107][T29898] ? __fget_files+0x2a/0x420 [ 1762.646129][T29898] ? __fget_files+0x3a2/0x420 [ 1762.646162][T29898] __x64_sys_sendmsg+0x1b1/0x290 [ 1762.646195][T29898] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1762.646244][T29898] do_syscall_64+0x166/0x520 [ 1762.646271][T29898] ? trace_irq_disable+0x3b/0x140 [ 1762.646296][T29898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.646320][T29898] ? clear_bhb_loop+0x70/0xc0 [ 1762.646349][T29898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.646372][T29898] RIP: 0033:0x7fb26259e559 [ 1762.646394][T29898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1762.646415][T29898] RSP: 002b:00007fb26338e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1762.646460][T29898] RAX: ffffffffffffffda RBX: 00007fb262825fa0 RCX: 00007fb26259e559 [ 1762.646478][T29898] RDX: 000000000000c004 RSI: 00002000000007c0 RDI: 0000000000000008 [ 1762.646494][T29898] RBP: 00007fb26338e090 R08: 0000000000000000 R09: 0000000000000000 [ 1762.646510][T29898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1762.646524][T29898] R13: 00007fb262826038 R14: 00007fb262825fa0 R15: 00007fb26294fa48 [ 1762.646561][T29898] [ 1762.647504][T29899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6747'. [ 1763.260474][T27989] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1763.288833][T29915] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1763.315231][T26761] usb 4-1: USB disconnect, device number 39 [ 1763.411811][T27989] usb 3-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 1.00 [ 1763.412872][T27989] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1763.412906][T27989] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1763.412933][T27989] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1763.412979][T27989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.418293][T29906] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1763.631466][T29922] binder: BINDER_SET_CONTEXT_MGR already set [ 1763.631484][T29922] binder: 29920:29922 ioctl 4018620d 200000006d00 returned -16 [ 1763.637779][T29906] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6750'. [ 1764.080534][T27447] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1764.112139][T27989] pcwd_usb: Card did not acknowledge disable attempt [ 1764.230591][T27447] usb 5-1: Using ep0 maxpacket: 8 [ 1764.233832][T27447] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1764.237427][T27447] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1764.237460][T27447] usb 5-1: config 179 has no interface number 0 [ 1764.237510][T27447] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1764.237546][T27447] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1764.237581][T27447] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1764.237614][T27447] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1764.237647][T27447] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1764.237682][T27447] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1764.237723][T27447] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.441647][T27447] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input233 [ 1764.480901][ T4968] input input233: unable to receive magic message: -110 [ 1764.576319][ T4968] input input233: unable to receive magic message: -32 [ 1764.650952][ T4968] input input233: unable to receive magic message: -110 [ 1764.706637][ T4968] input input233: unable to receive magic message: -32 [ 1764.988519][T29942] input: syz1 as /devices/virtual/input/input234 [ 1765.052518][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1765.052574][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1765.052606][T27447] usb 5-1: USB disconnect, device number 27 [ 1765.056327][T24599] input input233: unable to receive magic message: -71 [ 1765.128001][T27989] pcwd_usb: Found card (Firmware: ) with temp option [ 1765.643455][T27989] pcwd_usb: Option switches (0x00): Temperature Reset Enable=OFF, Power On Delay=OFF [ 1766.080933][T27447] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1766.135728][T27989] pcwd_usb: initialized. heartbeat=5 sec (nowayout=0) [ 1766.158372][T27989] usb 3-1: USB disconnect, device number 43 [ 1766.158483][ C0] pcwd_usb: can't resubmit intr, usb_submit_urb failed with result -19 [ 1766.231381][T27447] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 1766.232555][T27447] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1766.232580][T27447] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1766.232617][T27447] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.422234][ T31] kauditd_printk_skb: 57 callbacks suppressed [ 1766.422257][ T31] audit: type=1326 audit(1792223854.962:13814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29979 comm="syz.0.6778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814ad9e559 code=0x7ffc0000 [ 1766.422740][ T31] audit: type=1326 audit(1792223854.962:13815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29979 comm="syz.0.6778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814ad9e559 code=0x7ffc0000 [ 1766.423910][ T31] audit: type=1326 audit(1792223854.962:13816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29979 comm="syz.0.6778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814ad9e559 code=0x7ffc0000 [ 1766.424710][ T31] audit: type=1326 audit(1792223854.962:13818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29979 comm="syz.0.6778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f814ad9e559 code=0x7ffc0000 [ 1766.428242][ T31] audit: type=1326 audit(1792223854.962:13817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29979 comm="syz.0.6778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814ad9e559 code=0x7ffc0000 [ 1766.428301][ T31] audit: type=1326 audit(1792223854.962:13819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29979 comm="syz.0.6778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814ad9e559 code=0x7ffc0000 [ 1766.428345][ T31] audit: type=1326 audit(1792223854.962:13821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29979 comm="syz.0.6778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f814ad9e559 code=0x7ffc0000 [ 1766.428411][ T31] audit: type=1326 audit(1792223854.962:13820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29979 comm="syz.0.6778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814ad9e559 code=0x7ffc0000 [ 1766.428462][ T31] audit: type=1326 audit(1792223854.962:13822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29979 comm="syz.0.6778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814ad9e559 code=0x7ffc0000 [ 1766.443022][ T31] audit: type=1326 audit(1792223854.972:13823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29979 comm="syz.0.6778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814ad9e559 code=0x7ffc0000 [ 1766.961493][T27989] pcwd_usb: Card did not acknowledge disable attempt [ 1767.029227][T29984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6779'. [ 1767.094470][T29987] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6780'. [ 1767.094528][T29987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6780'. [ 1767.094545][T29987] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6780'. [ 1767.449764][T27989] pcwd_usb: USB PC Watchdog disconnected [ 1767.734587][T30003] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1767.761246][T30005] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1768.408663][T27447] usb 4-1: USB disconnect, device number 40 [ 1768.857603][T30024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6793'. [ 1769.915244][T30045] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6798'. [ 1770.094142][T30049] netlink: 'syz.4.6801': attribute type 1 has an invalid length. [ 1770.567556][T30055] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6803'. [ 1771.071742][T27989] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1771.130603][T26761] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1771.180486][T27447] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1771.245122][T27989] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 1771.246032][T27989] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1771.246052][T27989] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1771.246081][T27989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.300819][T26761] usb 1-1: Using ep0 maxpacket: 16 [ 1771.303380][T26761] usb 1-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 1771.304579][T26761] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1771.304606][T26761] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1771.304629][T26761] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1771.304678][T26761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.327838][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1771.349940][T26761] usb 1-1: config 0 descriptor?? [ 1771.390699][T27447] usb 4-1: Using ep0 maxpacket: 8 [ 1771.391746][T27447] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1771.399083][T27447] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1771.399114][T27447] usb 4-1: config 0 has no interface number 0 [ 1771.399162][T27447] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1771.399191][T27447] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1771.399221][T27447] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1771.399252][T27447] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1771.399301][T27447] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.498599][T27447] usb 4-1: config 0 descriptor?? [ 1771.531511][T27447] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1771.809150][T20234] usb 4-1: USB disconnect, device number 41 [ 1771.809247][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 1771.871328][T20234] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1771.983695][T30078] ldusb: No device or device unplugged -19 [ 1772.068571][T30085] sctp: [Deprecated]: syz.4.6814 (pid 30085) Use of int in maxseg socket option. [ 1772.068571][T30085] Use struct sctp_assoc_value instead [ 1772.091991][T30085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1772.240567][T27447] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1772.370905][T27447] usb 3-1: device descriptor read/64, error -71 [ 1772.610555][T27447] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1772.740463][T27447] usb 3-1: device descriptor read/64, error -71 [ 1772.851476][T27447] usb usb3-port1: attempt power cycle [ 1773.190534][T27447] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 1773.219818][T27447] usb 3-1: device descriptor read/8, error -71 [ 1773.283831][T27989] usb 2-1: USB disconnect, device number 36 [ 1773.451145][T27447] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1773.472572][T27447] usb 3-1: device descriptor read/8, error -71 [ 1773.582638][T27447] usb usb3-port1: unable to enumerate USB device [ 1774.407316][ T31] kauditd_printk_skb: 213 callbacks suppressed [ 1774.407339][ T31] audit: type=1326 audit(1792223862.932:14037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30115 comm="syz.3.6820" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270139e559 code=0x7ffc0000 [ 1774.407411][ T31] audit: type=1326 audit(1792223862.942:14038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30115 comm="syz.3.6820" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270139e559 code=0x7ffc0000 [ 1774.407457][ T31] audit: type=1326 audit(1792223862.942:14039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30115 comm="syz.3.6820" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f270139e559 code=0x7ffc0000 [ 1774.407502][ T31] audit: type=1326 audit(1792223862.942:14040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30115 comm="syz.3.6820" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270139e559 code=0x7ffc0000 [ 1774.407552][ T31] audit: type=1326 audit(1792223862.942:14041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30115 comm="syz.3.6820" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270139e559 code=0x7ffc0000 [ 1774.418699][ T31] audit: type=1326 audit(1792223862.952:14042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30115 comm="syz.3.6820" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f270139e559 code=0x7ffc0000 [ 1774.574851][ T31] audit: type=1326 audit(1792223862.992:14043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30115 comm="syz.3.6820" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270139e559 code=0x7ffc0000 [ 1774.618684][ T31] audit: type=1326 audit(1792223863.142:14044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30115 comm="syz.3.6820" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f270139e559 code=0x7ffc0000 [ 1774.618928][ T31] audit: type=1326 audit(1792223863.152:14045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30115 comm="syz.3.6820" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270139e559 code=0x7ffc0000 [ 1774.619280][ T31] audit: type=1326 audit(1792223863.152:14046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30115 comm="syz.3.6820" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270139e559 code=0x7ffc0000 [ 1774.724414][T30116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6820'. [ 1774.891173][T30119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6821'. [ 1775.193481][T26761] usbhid 1-1:0.0: can't add hid device: -71 [ 1775.193569][T26761] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1775.218107][T20234] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1775.260817][T26761] usb 1-1: USB disconnect, device number 43 [ 1775.351297][ T1227] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 1775.363425][T20234] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1775.371630][T20234] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1775.410006][T20234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.410035][T20234] usb 2-1: Product: syz [ 1775.410046][T20234] usb 2-1: Manufacturer: syz [ 1775.410058][T20234] usb 2-1: SerialNumber: syz [ 1775.514153][ T1227] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1775.518380][ T1227] usb 4-1: not running at top speed; connect to a high speed hub [ 1775.518416][ T1227] usb 4-1: New USB device found, idVendor=0c45, idProduct=6007, bcdDevice=b9.31 [ 1775.519753][ T1227] usb 4-1: config 1 has an invalid interface number: 75 but max is 0 [ 1775.519783][ T1227] usb 4-1: config 1 has no interface number 0 [ 1775.519827][ T1227] usb 4-1: config 1 interface 75 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1775.519860][ T1227] usb 4-1: config 1 interface 75 has no altsetting 0 [ 1775.584057][ T1227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.584087][ T1227] usb 4-1: Product: 㰁 [ 1775.584104][ T1227] usb 4-1: Manufacturer: ᤎひ䱈ᆀퟜ舒꒍熵ꖐ踹ᇶ萟岱힯테큨꺡䄄⤫膅存郙벇샶篂厹万맮᱄킝퓳밒ી툘ᒫꑝ俺⺥ܣ돽澆패糛೗ﯰ奼玺煅뽑ₙ듃㻙念ቈ䓂밒䆑䶖硄㋾ᬐ㮻쳷䄂附藸┋扗票ꏰ歹諡鈽샘ꢩ뫉ﶢ๕䩏痟单㞞 [ 1775.584138][ T1227] usb 4-1: SerialNumber: 䐊 [ 1775.632082][T30124] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1775.763747][T20234] usb 2-1: Cannot retrieve CPort count: 0 [ 1775.763801][T20234] usb 2-1: Cannot retrieve CPort count: -5 [ 1775.763835][T20234] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -5 [ 1775.867563][ T1227] gspca_main: sonixb-2.14.0 probing 0c45:6007 [ 1775.870568][ T1227] sonixb 4-1:1.75: Error reading register 00: -71 [ 1775.899567][ T1227] usb 4-1: USB disconnect, device number 42 [ 1775.995553][T20234] usb 2-1: USB disconnect, device number 37 [ 1776.142455][T30138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6826'. [ 1776.595485][T30145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6828'. [ 1776.907014][T29982] syz.0.6778 (29982) used greatest stack depth: 18000 bytes left [ 1777.116025][T27447] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1777.168059][T30160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6833'. [ 1777.273854][T27447] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 1777.275147][T27447] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1777.275169][T27447] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1777.275198][T27447] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1777.407580][T30168] xt_hashlimit: size too large, truncated to 1048576 [ 1777.666681][T30172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6837'. [ 1777.720706][ C1] ip6_tunnel: M xmit: Local address not yet configured! [ 1778.363264][ T1227] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1778.476969][T30190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6842'. [ 1778.684536][T27447] usb 2-1: USB disconnect, device number 38 [ 1779.092906][T27446] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 1779.261412][T27446] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1779.302447][T27446] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1779.302494][T27446] usb 5-1: config 0 has no interface number 0 [ 1779.302539][T27446] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1779.302569][T27446] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1779.302613][T27446] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.363348][T27447] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1779.371375][T27446] usb 5-1: config 0 descriptor?? [ 1779.384255][T30196] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1779.418114][T27446] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1779.421345][ T1227] usb 4-1: device descriptor read/64, error -71 [ 1779.510742][T27447] usb 1-1: Using ep0 maxpacket: 16 [ 1779.513471][T27447] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1779.513528][T27447] usb 1-1: New USB device found, idVendor=5fc9, idProduct=0061, bcdDevice=76.09 [ 1779.514765][T27447] usb 1-1: config 7 interface 0 has no altsetting 0 [ 1779.516930][T27447] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.516957][T27447] usb 1-1: Product: syz [ 1779.516974][T27447] usb 1-1: Manufacturer: syz [ 1779.516999][T27447] usb 1-1: SerialNumber: syz [ 1779.660503][ T1227] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1779.777555][ T31] kauditd_printk_skb: 275 callbacks suppressed [ 1779.777577][ T31] audit: type=1326 audit(1792223868.312:14322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30205 comm="syz.1.6848" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34bc39e559 code=0x7ffc0000 [ 1779.780151][ T31] audit: type=1326 audit(1792223868.312:14323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30205 comm="syz.1.6848" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34bc39e559 code=0x7ffc0000 [ 1779.780204][ T31] audit: type=1326 audit(1792223868.312:14324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30205 comm="syz.1.6848" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f34bc39e559 code=0x7ffc0000 [ 1779.780249][ T31] audit: type=1326 audit(1792223868.312:14325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30205 comm="syz.1.6848" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34bc39e559 code=0x7ffc0000 [ 1779.780829][ T31] audit: type=1326 audit(1792223868.312:14326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30205 comm="syz.1.6848" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34bc39e559 code=0x7ffc0000 [ 1779.785425][ T31] audit: type=1326 audit(1792223868.322:14327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30205 comm="syz.1.6848" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f34bc39e559 code=0x7ffc0000 [ 1779.785622][ T31] audit: type=1326 audit(1792223868.322:14328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30205 comm="syz.1.6848" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34bc39e559 code=0x7ffc0000 [ 1779.794931][ T31] audit: type=1326 audit(1792223868.322:14329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30205 comm="syz.1.6848" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34bc39e559 code=0x7ffc0000 [ 1779.853438][ T1227] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 1779.866802][ T31] audit: type=1326 audit(1792223868.392:14330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30205 comm="syz.1.6848" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f34bc39e559 code=0x7ffc0000 [ 1779.867022][ T31] audit: type=1326 audit(1792223868.392:14331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30205 comm="syz.1.6848" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34bc39e559 code=0x7ffc0000 [ 1779.899897][ T1227] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1779.900206][ T1227] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1779.923390][T30200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6845'. [ 1779.938610][ T1227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1780.106733][T30207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6848'. [ 1780.186504][T27447] usb 1-1: USB disconnect, device number 44 [ 1780.969312][T30212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1780.969835][T30212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1781.031361][T30227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6853'. [ 1781.529579][T30234] usb usb7: usbfs: process 30234 (syz.1.6855) did not claim interface 0 before use [ 1781.610465][T27989] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1781.797745][T27989] usb 1-1: Using ep0 maxpacket: 8 [ 1781.800304][T27989] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1781.834802][T27989] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1781.834869][T27989] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1781.834898][T27989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1781.834926][T27989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1781.834951][T27989] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1781.908962][T27989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1781.908995][T27989] usb 1-1: Product: syz [ 1781.909011][T27989] usb 1-1: Manufacturer: syz [ 1781.909028][T27989] usb 1-1: SerialNumber: syz [ 1781.947219][T27989] usb 1-1: config 0 descriptor?? [ 1782.059287][T27446] usb 5-1: USB disconnect, device number 28 [ 1782.113876][ T1227] usb 4-1: USB disconnect, device number 44 [ 1782.205033][T27989] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1782.205064][T27989] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1782.405892][T27989] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 1782.406007][T27989] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1782.406032][T27989] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1782.504086][T30249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6859'. [ 1782.772757][T27446] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1782.849871][T30254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6854'. [ 1782.911037][T27989] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 1782.911098][T27989] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 1782.911589][T27989] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 1782.911917][T27989] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 1782.922773][T27446] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1782.929902][T27446] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1782.930035][T27446] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1782.930112][T27446] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1782.930277][T27446] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1783.014562][T27446] usb 5-1: config 0 descriptor?? [ 1783.307532][T30265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6865'. [ 1783.446148][T30271] netlink: 'syz.1.6866': attribute type 11 has an invalid length. [ 1783.464903][T27447] usb 5-1: USB disconnect, device number 29 [ 1783.478841][T30274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1783.479300][T30274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1783.536353][T30274] random: crng reseeded on system resumption [ 1783.710480][T27989] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1783.880598][T20234] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1783.883517][T27989] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1783.885044][T27989] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1783.885074][T27989] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1783.888515][T27989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.888544][T27989] usb 3-1: Product: syz [ 1783.888562][T27989] usb 3-1: Manufacturer: syz [ 1783.888580][T27989] usb 3-1: SerialNumber: syz [ 1784.030477][T20234] usb 4-1: Using ep0 maxpacket: 8 [ 1784.031399][T20234] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1784.032837][T20234] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1784.032890][T20234] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1784.032946][T20234] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1784.032976][T20234] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1784.033002][T20234] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1784.033057][T20234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.157473][T27989] usb 3-1: Cannot retrieve CPort count: -71 [ 1784.157554][T27989] usb 3-1: Cannot retrieve CPort count: -71 [ 1784.157584][T27989] es2_ap_driver 3-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 1784.193141][T27989] usb 3-1: USB disconnect, device number 48 [ 1784.354634][T30287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6872'. [ 1784.423255][T27447] usb 1-1: USB disconnect, device number 45 [ 1784.896009][T30299] usbtmc 4-1:16.0: simple usb_control_msg failed -32 [ 1784.900068][T27447] usb 4-1: USB disconnect, device number 45 [ 1784.951344][ T31] kauditd_printk_skb: 278 callbacks suppressed [ 1784.951367][ T31] audit: type=1326 audit(1792223873.492:14610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30303 comm="syz.2.6878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e7b9e559 code=0x7ffc0000 [ 1784.951499][ T31] audit: type=1326 audit(1792223873.492:14611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30303 comm="syz.2.6878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e7b9e559 code=0x7ffc0000 [ 1784.952043][ T31] audit: type=1326 audit(1792223873.492:14612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30303 comm="syz.2.6878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f04e7b9e559 code=0x7ffc0000 [ 1784.952201][ T31] audit: type=1326 audit(1792223873.492:14613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30303 comm="syz.2.6878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e7b9e559 code=0x7ffc0000 [ 1784.953265][ T31] audit: type=1326 audit(1792223873.492:14614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30303 comm="syz.2.6878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f04e7b9e559 code=0x7ffc0000 [ 1784.954342][ T31] audit: type=1326 audit(1792223873.492:14615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30303 comm="syz.2.6878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e7b9e559 code=0x7ffc0000 [ 1784.956468][ T31] audit: type=1326 audit(1792223873.492:14616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30303 comm="syz.2.6878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e7b9e559 code=0x7ffc0000 [ 1784.956628][ T31] audit: type=1326 audit(1792223873.492:14617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30303 comm="syz.2.6878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f04e7b9e559 code=0x7ffc0000 [ 1784.956768][ T31] audit: type=1326 audit(1792223873.492:14618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30303 comm="syz.2.6878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e7b9e559 code=0x7ffc0000 [ 1784.970749][ T31] audit: type=1326 audit(1792223873.502:14619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30303 comm="syz.2.6878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f04e7b9e559 code=0x7ffc0000 [ 1785.056371][ T5708] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1785.109137][T30304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6878'. [ 1785.231787][ T5708] usb 1-1: Using ep0 maxpacket: 16 [ 1785.235647][ T5708] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1785.263054][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.263076][ T5708] usb 1-1: Product: syz [ 1785.263088][ T5708] usb 1-1: Manufacturer: syz [ 1785.263099][ T5708] usb 1-1: SerialNumber: syz [ 1785.268353][ T5708] usb 1-1: config 0 descriptor?? [ 1785.306570][ T5708] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1785.684868][T30313] bond1: invalid ARP target 0.0.0.0 specified for addition [ 1785.684899][T30313] bond1: option arp_ip_target: invalid value (0) [ 1785.717456][T30313] bond1 (unregistering): Released all slaves [ 1785.743900][T30317] ip_tables: iptables: counters copy to user failed while replacing table [ 1786.033999][T30321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6883'. [ 1786.300214][T30330] Cannot find add_set index 2 as target [ 1786.470495][T27989] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 1786.501916][ T5708] usb 1-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 1786.631538][T27989] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1786.632327][T27989] usb 5-1: not running at top speed; connect to a high speed hub [ 1786.632363][T27989] usb 5-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 1786.634350][T27989] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 4 [ 1786.634421][T27989] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 34, changing to 4 [ 1786.638129][T27989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.638156][T27989] usb 5-1: Product: syz [ 1786.638172][T27989] usb 5-1: Manufacturer: syz [ 1786.638189][T27989] usb 5-1: SerialNumber: syz [ 1786.692599][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1786.759239][T11844] usb 1-1: USB disconnect, device number 46 [ 1786.773541][T11844] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 1786.775051][T11844] ssu100 1-1:0.0: device disconnected [ 1786.967403][T27989] usb 5-1: unit 0 not found! [ 1787.040534][T27989] usb 5-1: USB disconnect, device number 30 [ 1787.105271][T24599] udevd[24599]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1787.225855][T30343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6892'. [ 1787.225880][T30343] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6892'. [ 1787.228106][T30343] binder: BINDER_SET_CONTEXT_MGR already set [ 1787.228118][T30343] binder: 30342:30343 ioctl 4018620d 200000000740 returned -16 [ 1787.500513][T27989] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1787.651154][T27989] usb 2-1: Using ep0 maxpacket: 32 [ 1787.652253][T27989] usb 2-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1787.654702][T27989] usb 2-1: config 0 interface 0 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1787.654728][T27989] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1787.654752][T27989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.658816][T27989] usb 2-1: config 0 descriptor?? [ 1787.780528][T20234] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1787.828276][T30354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6897'. [ 1787.854395][T30357] Cannot find add_set index 2 as target [ 1787.941526][T20234] usb 3-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=5f.b0 [ 1787.944311][T20234] usb 3-1: config 3 interface 0 has no altsetting 0 [ 1787.948164][T20234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1787.948195][T20234] usb 3-1: Product: syz [ 1787.948212][T20234] usb 3-1: Manufacturer: syz [ 1787.948230][T20234] usb 3-1: SerialNumber: syz [ 1788.074046][T27989] usbhid 2-1:0.0: can't add hid device: -71 [ 1788.074216][T27989] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1788.101524][T27989] usb 2-1: USB disconnect, device number 39 [ 1788.130470][T11844] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1788.231916][T20234] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 1788.234474][T20234] pwc: send_video_command error -71 [ 1788.234494][T20234] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1788.234613][T20234] Philips webcam 3-1:3.0: probe with driver Philips webcam failed with error -71 [ 1788.237751][T20234] usb 3-1: USB disconnect, device number 49 [ 1788.291229][T11844] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1788.294339][T11844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1788.294377][T11844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1788.294406][T11844] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1788.294457][T11844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.368931][T11844] usb 4-1: config 0 descriptor?? [ 1788.595161][T30363] netlink: 'syz.4.6901': attribute type 1 has an invalid length. [ 1788.735343][T30363] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1788.832800][T30365] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 1788.881843][T11844] plantronics 0003:047F:FFFF.0077: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1789.340415][T11844] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1789.491338][T11844] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 1789.493210][T11844] usb 1-1: config index 0 descriptor too short (expected 65349, got 72) [ 1789.497494][T11844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.497522][T11844] usb 1-1: Product: syz [ 1789.497539][T11844] usb 1-1: Manufacturer: syz [ 1789.497555][T11844] usb 1-1: SerialNumber: syz [ 1789.662760][T30385] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1789.750598][T20234] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1789.783642][T11844] usb 1-1: reset high-speed USB device number 47 using dummy_hcd [ 1789.900659][T20234] usb 3-1: Using ep0 maxpacket: 8 [ 1789.901434][T20234] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1789.903958][T20234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1789.903994][T20234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1789.904207][T20234] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1789.904257][T20234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.916104][T20234] usb 3-1: config 0 descriptor?? [ 1790.088437][T27989] usb 1-1: driver API: 1.9.9 2016-02-15 [1-1] [ 1790.088526][T27989] usb 1-1: firmware API: 1.9.6 2012-07-07 [ 1790.091935][ C1] plantronics 0003:047F:FFFF.0077: usb_submit_urb(ctrl) failed: -1 [ 1790.130670][T26761] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1790.223447][T27446] usb 4-1: reset high-speed USB device number 46 using dummy_hcd [ 1790.301545][T26761] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 1790.303043][T26761] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1790.303073][T26761] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1790.303117][T26761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.372352][ C0] usb 1-1: received invalid command response:got -4, instead of 0 [ 1790.372422][ C0] usb 1-1: restart device (9) [ 1790.560292][ C0] usb 1-1: received invalid command response:got -4, instead of 0 [ 1790.702071][ T31] kauditd_printk_skb: 150 callbacks suppressed [ 1790.702087][ T31] audit: type=1326 audit(1792223879.242:14770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30397 comm="syz.1.6910" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34bc39e559 code=0x7ffc0000 [ 1790.702442][ T31] audit: type=1326 audit(1792223879.242:14771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30397 comm="syz.1.6910" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34bc39e559 code=0x7ffc0000 [ 1790.702904][ T31] audit: type=1326 audit(1792223879.242:14772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30397 comm="syz.1.6910" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f34bc39e559 code=0x7ffc0000 [ 1790.703140][ T31] audit: type=1326 audit(1792223879.242:14773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30397 comm="syz.1.6910" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34bc39e559 code=0x7ffc0000 [ 1790.703344][ T31] audit: type=1326 audit(1792223879.242:14774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30397 comm="syz.1.6910" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34bc39e559 code=0x7ffc0000 [ 1790.704376][ T31] audit: type=1326 audit(1792223879.242:14775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30397 comm="syz.1.6910" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f34bc39e559 code=0x7ffc0000 [ 1790.704709][ T31] audit: type=1326 audit(1792223879.242:14776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30397 comm="syz.1.6910" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34bc39e559 code=0x7ffc0000 [ 1790.704932][ T31] audit: type=1326 audit(1792223879.242:14777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30397 comm="syz.1.6910" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34bc39e559 code=0x7ffc0000 [ 1790.705329][ T31] audit: type=1326 audit(1792223879.242:14778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30397 comm="syz.1.6910" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f34bc39e559 code=0x7ffc0000 [ 1790.705646][ T31] audit: type=1326 audit(1792223879.242:14779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30397 comm="syz.1.6910" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34bc39e559 code=0x7ffc0000 [ 1790.856824][T30398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6910'. [ 1790.985787][T30371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1790.988076][T30371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1791.012124][ T5708] usb 4-1: USB disconnect, device number 46 [ 1791.027687][ T1227] usb 1-1: USB disconnect, device number 47 [ 1791.028530][ C0] device 1-1 is not registered [ 1791.161258][T27989] usb 1-1: firmware upload failed (-110). [ 1791.620478][T27446] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1791.725751][T30408] Cannot find add_set index 4 as target [ 1791.775880][T27446] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1791.781696][T27446] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1791.781789][T27446] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1791.781930][T27446] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.819369][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.819563][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.857947][T27446] usb 2-1: config 0 descriptor?? [ 1791.861112][T30405] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1791.908528][T30410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6914'. [ 1792.125598][T27446] usbhid 2-1:0.0: can't add hid device: -71 [ 1792.125730][T27446] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1792.195969][T27446] usb 2-1: USB disconnect, device number 40 [ 1792.392584][T26761] usb 5-1: USB disconnect, device number 31 [ 1792.434482][T20234] sony 0003:054C:042F.0078: can't set operational mode: step 1 [ 1792.434586][T20234] sony 0003:054C:042F.0078: Failed to set controller into operational mode [ 1792.443596][T30418] batman_adv: batadv0: Adding interface: syz_tun [ 1792.443663][T30418] batman_adv: batadv0: Interface activated: syz_tun [ 1792.481213][T20234] sony 0003:054C:042F.0078: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.2-1/input0 [ 1792.481251][T20234] sony 0003:054C:042F.0078: failed to claim input [ 1792.511734][T20234] usb 3-1: USB disconnect, device number 50 [ 1792.624626][T30419] fido_id[30419]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1793.083319][ T5708] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1793.232954][ T5708] usb 3-1: Using ep0 maxpacket: 8 [ 1793.233850][ T5708] usb 3-1: New USB device found, idVendor=0518, idProduct=0002, bcdDevice= 0.00 [ 1793.236896][ T5708] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1793.236922][ T5708] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1793.236942][ T5708] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1793.236967][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.268681][ T5708] usb 3-1: config 0 descriptor?? [ 1793.738259][ T5708] input: HID 0518:0002 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0518:0002.0079/input/input236 [ 1794.052951][ T5708] ezkey 0003:0518:0002.0079: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 0518:0002] on usb-dummy_hcd.2-1/input0 [ 1794.170912][T30446] PKCS7: Unsupported SignedData version [ 1794.178099][T30446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1794.228915][T30446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1794.384504][T30450] syzkaller0: entered promiscuous mode [ 1794.384529][T30450] syzkaller0: entered allmulticast mode [ 1794.693251][T30458] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6929'. [ 1794.744724][T30458] netlink: 'syz.4.6929': attribute type 10 has an invalid length. [ 1794.744743][T30458] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6929'. [ 1795.252477][T26761] usb 3-1: USB disconnect, device number 51 [ 1795.696432][T30476] usb usb7: usbfs: process 30476 (syz.1.6936) did not claim interface 0 before use [ 1795.872624][ T5708] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1795.950559][T30467] batman_adv: batadv0: Interface deactivated: syz_tun [ 1796.022005][ T5708] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 1796.024013][ T5708] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1796.024042][ T5708] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1796.024084][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.037480][T30467] tipc: Resetting bearer [ 1797.100601][T26760] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1797.198168][ T5708] usb 3-1: USB disconnect, device number 52 [ 1797.250651][T26760] usb 5-1: Using ep0 maxpacket: 32 [ 1797.251384][T26760] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1797.252387][T26760] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1797.252416][T26760] usb 5-1: config 0 has no interface number 0 [ 1797.252460][T26760] usb 5-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 1797.252488][T26760] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1797.255242][T26760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.255270][T26760] usb 5-1: Product: syz [ 1797.255287][T26760] usb 5-1: Manufacturer: syz [ 1797.255305][T26760] usb 5-1: SerialNumber: syz [ 1797.276706][T26760] usb 5-1: config 0 descriptor?? [ 1797.287704][T30492] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1797.427587][T30467] virt_wifi0: left allmulticast mode [ 1797.427628][T30467] macsec1: left allmulticast mode [ 1797.428600][T30467] batman_adv: batadv0: Interface deactivated: gretap1 [ 1797.495313][T30492] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1797.513470][T26760] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1797.513503][T26760] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1797.514342][T26760] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1797.514372][T26760] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1797.514394][T26760] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1797.514414][T26760] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1797.514670][T26760] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 1797.780500][T28456] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1797.780540][T28456] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 54678 - 0 [ 1797.780582][T28456] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1797.780611][T28456] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 54678 - 0 [ 1797.780648][T28456] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1797.780676][T28456] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 54678 - 0 [ 1797.780712][T28456] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1797.780739][T28456] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 54678 - 0 [ 1798.046000][T30512] netlink: 'syz.1.6942': attribute type 9 has an invalid length. [ 1798.235489][T30520] netlink: 'syz.3.6943': attribute type 179 has an invalid length. [ 1798.235517][T30520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6943'. [ 1798.288156][T30522] sctp: [Deprecated]: syz.4.6938 (pid 30522) Use of int in max_burst socket option. [ 1798.288156][T30522] Use struct sctp_assoc_value instead [ 1798.522605][T30528] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 1798.522637][T30528] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1798.522735][T30528] vhci_hcd vhci_hcd.0: Device attached [ 1798.556072][T30528] vhci_hcd vhci_hcd.0: port 0 already used [ 1798.594787][T30529] vhci_hcd: connection closed [ 1798.596869][T11774] vhci_hcd vhci_hcd.0: stop threads [ 1798.596900][T11774] vhci_hcd vhci_hcd.0: release socket [ 1798.596923][T11774] vhci_hcd vhci_hcd.0: disconnect device [ 1799.314656][T30536] FAULT_INJECTION: forcing a failure. [ 1799.314656][T30536] name failslab, interval 100, probability 0, space 0, times 0 [ 1799.314698][T30536] CPU: 1 UID: 0 PID: 30536 Comm: syz.3.6945 Tainted: G L syzkaller #0 PREEMPT(full) [ 1799.314735][T30536] Tainted: [L]=SOFTLOCKUP [ 1799.314744][T30536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1799.314758][T30536] Call Trace: [ 1799.314768][T30536] [ 1799.314778][T30536] dump_stack_lvl+0xe8/0x150 [ 1799.314815][T30536] should_fail_ex+0x410/0x560 [ 1799.314853][T30536] should_failslab+0xa8/0x100 [ 1799.314885][T30536] ? __anon_vma_prepare+0xc3/0x4d0 [ 1799.314909][T30536] kmem_cache_alloc_noprof+0xa1/0x600 [ 1799.315058][T30536] ? __anon_vma_prepare+0xc3/0x4d0 [ 1799.315090][T30536] __anon_vma_prepare+0xc3/0x4d0 [ 1799.315114][T30536] ? __filemap_get_folio_mpol+0xd03/0x1000 [ 1799.315150][T30536] __vmf_anon_prepare+0xe1/0x1b0 [ 1799.315185][T30536] hugetlb_no_page+0x384/0x16f0 [ 1799.315235][T30536] ? huge_pte_alloc+0x482/0x630 [ 1799.315277][T30536] hugetlb_fault+0x776/0x1440 [ 1799.315322][T30536] ? __pfx_hugetlb_fault+0x10/0x10 [ 1799.315382][T30536] handle_mm_fault+0x24fc/0x3750 [ 1799.315424][T30536] ? mt_find+0x186/0x630 [ 1799.315456][T30536] ? __pfx_mt_find+0x10/0x10 [ 1799.315483][T30536] ? handle_mm_fault+0xf1/0x3750 [ 1799.315530][T30536] ? __pfx_handle_mm_fault+0x10/0x10 [ 1799.315570][T30536] ? find_vma+0xed/0x160 [ 1799.315603][T30536] ? __pfx_find_vma+0x10/0x10 [ 1799.315657][T30536] ? lock_mm_and_find_vma+0xa7/0x340 [ 1799.315685][T30536] do_user_addr_fault+0x746/0x1340 [ 1799.315726][T30536] exc_page_fault+0x6a/0xc0 [ 1799.315754][T30536] asm_exc_page_fault+0x26/0x30 [ 1799.315777][T30536] RIP: 0033:0x7f2701252d23 [ 1799.315799][T30536] Code: 10 4c 89 44 24 08 4c 89 0c 24 4c 8b 54 24 28 45 31 c9 48 8b 7c 24 20 48 8b 74 24 18 48 8b 54 24 10 48 8b 4c 24 08 48 8b 2c 24 <48> 8b 59 38 48 81 4b 18 80 00 00 00 e8 1c ff ff ff 48 83 ec 08 b9 [ 1799.315818][T30536] RSP: 002b:00007f270224cfd0 EFLAGS: 00010246 [ 1799.315839][T30536] RAX: 00007f2701252ce0 RBX: 00007f2701626180 RCX: 0000200000000980 [ 1799.315856][T30536] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1799.315869][T30536] RBP: 0000000000000000 R08: 0000200000000980 R09: 0000000000000000 [ 1799.315883][T30536] R10: ffffffffffffffff R11: 0000000000000000 R12: 0000000000000001 [ 1799.315897][T30536] R13: 00007f2701626218 R14: 00007f2701626180 R15: 00007f270174fa48 [ 1799.315941][T30536] [ 1799.907722][T11844] usb 5-1: USB disconnect, device number 32 [ 1800.006339][T30548] usb usb7: usbfs: process 30548 (syz.2.6950) did not claim interface 0 before use [ 1800.431977][T11844] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1800.621647][T11844] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 1800.622659][T11844] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1800.622679][T11844] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1800.622708][T11844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1800.842117][T30566] usb usb8: usbfs: process 30566 (syz.1.6957) did not claim interface 0 before use [ 1801.381667][T26761] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1801.520649][T26761] usb 3-1: device descriptor read/64, error -71 [ 1801.645018][T27576] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1801.663740][T27576] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1801.667781][T27576] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1801.668854][T27576] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1801.685109][T27576] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1801.840918][T26761] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1801.970481][T26761] usb 3-1: device descriptor read/64, error -71 [ 1802.090644][T26761] usb usb3-port1: attempt power cycle [ 1802.451724][T26761] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1802.477797][T26761] usb 3-1: device descriptor read/8, error -71 [ 1802.619302][T11844] usb 5-1: USB disconnect, device number 33 [ 1802.721196][T26761] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1802.753490][T26761] usb 3-1: device descriptor read/8, error -71 [ 1802.880826][T26761] usb usb3-port1: unable to enumerate USB device [ 1803.033652][T28852] syz_tun (unregistering): left allmulticast mode [ 1803.036853][T28852] batman_adv: batadv0: Removing interface: syz_tun [ 1803.648735][T30604] usb usb7: usbfs: process 30604 (syz.4.6964) did not claim interface 0 before use [ 1803.812634][T16117] Bluetooth: hci4: command tx timeout [ 1803.868297][T30131] batman_adv: batadv0: Removing interface: gretap1 [ 1804.224217][T30131] bond0 (unregistering): Released all slaves [ 1804.241532][T30131] bond1 (unregistering): Released all slaves [ 1804.513419][T30131] tipc: Disabling bearer [ 1804.536640][T30131] tipc: Left network mode [ 1804.668375][T30618] netlink: 41 bytes leftover after parsing attributes in process `syz.1.6965'. [ 1804.678125][T30580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1804.678240][T30580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1804.678424][T30580] bridge_slave_0: entered allmulticast mode [ 1804.728914][T30580] bridge_slave_0: entered promiscuous mode [ 1804.804892][T30580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1804.805001][T30580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1804.806176][T30580] bridge_slave_1: entered allmulticast mode [ 1804.827346][T30580] bridge_slave_1: entered promiscuous mode [ 1805.019159][T30580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1805.157638][T30580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1805.333287][T30629] fuse: Unknown parameter 'Froup:@ld:[a^E6Ŕׇe ' [ 1805.559086][T30580] team0: Port device team_slave_0 added [ 1805.637813][T30580] team0: Port device team_slave_1 added [ 1805.865512][T11844] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1805.873941][T30642] netlink: 'syz.0.6972': attribute type 21 has an invalid length. [ 1805.931965][T16117] Bluetooth: hci4: command tx timeout [ 1806.007258][T11844] usb 3-1: device descriptor read/64, error -71 [ 1806.071018][T26761] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1806.231406][T26761] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 1806.232811][T26761] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1806.232840][T26761] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1806.232883][T26761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1806.261406][T11844] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1806.305915][T30131] hsr_slave_0: left promiscuous mode [ 1806.316970][T30131] hsr_slave_1: left promiscuous mode [ 1806.402844][T11844] usb 3-1: device descriptor read/64, error -71 [ 1806.542367][T11844] usb usb3-port1: attempt power cycle [ 1806.900488][T11844] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1806.921770][T11844] usb 3-1: device descriptor read/8, error -71 [ 1807.004104][T26761] usb 2-1: USB disconnect, device number 41 [ 1807.070609][T30580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1807.070630][T30580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1807.070660][T30580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1807.077343][T30580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1807.077361][T30580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1807.077391][T30580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1807.181825][T11844] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1807.205338][T11844] usb 3-1: device descriptor read/8, error -71 [ 1807.311871][T11844] usb usb3-port1: unable to enumerate USB device [ 1807.341671][T30580] hsr_slave_0: entered promiscuous mode [ 1807.345923][T30580] hsr_slave_1: entered promiscuous mode [ 1807.362465][T30580] debugfs: 'hsr0' already exists in 'hsr' [ 1807.362491][T30580] Cannot create hsr debugfs directory [ 1807.377739][T30650] usb usb7: usbfs: process 30650 (syz.4.6975) did not claim interface 0 before use [ 1807.775985][T30662] netlink: 'syz.0.6978': attribute type 12 has an invalid length. [ 1807.776015][T30662] netlink: 'syz.0.6978': attribute type 29 has an invalid length. [ 1807.776032][T30662] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6978'. [ 1807.776056][T30662] netlink: 59 bytes leftover after parsing attributes in process `syz.0.6978'. [ 1807.964340][T16117] Bluetooth: hci4: command tx timeout [ 1808.307269][T30131] IPVS: stop unused estimator thread 0... [ 1808.465067][T30685] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1808.909807][T30694] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6984'. [ 1808.937604][T30696] FAULT_INJECTION: forcing a failure. [ 1808.937604][T30696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1808.937635][T30696] CPU: 0 UID: 0 PID: 30696 Comm: syz.1.6986 Tainted: G L syzkaller #0 PREEMPT(full) [ 1808.937657][T30696] Tainted: [L]=SOFTLOCKUP [ 1808.937664][T30696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1808.937674][T30696] Call Trace: [ 1808.937681][T30696] [ 1808.937688][T30696] dump_stack_lvl+0xe8/0x150 [ 1808.937717][T30696] should_fail_ex+0x410/0x560 [ 1808.937745][T30696] _copy_from_user+0x2d/0xb0 [ 1808.937763][T30696] ___sys_sendmsg+0x1c6/0x360 [ 1808.937788][T30696] ? __lock_acquire+0x747/0x2de0 [ 1808.937809][T30696] ? __pfx____sys_sendmsg+0x10/0x10 [ 1808.937831][T30696] ? kstrtouint+0x6e/0xe0 [ 1808.937869][T30696] ? __fget_files+0x2a/0x420 [ 1808.937884][T30696] ? __fget_files+0x3a2/0x420 [ 1808.937906][T30696] __sys_sendmmsg+0x273/0x4d0 [ 1808.937928][T30696] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1808.937960][T30696] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1808.937991][T30696] ? ksys_write+0x242/0x270 [ 1808.938011][T30696] ? __pfx_ksys_write+0x10/0x10 [ 1808.938033][T30696] __x64_sys_sendmmsg+0xa0/0xc0 [ 1808.938075][T30696] do_syscall_64+0x166/0x520 [ 1808.938109][T30696] ? trace_irq_disable+0x3b/0x140 [ 1808.938135][T30696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.938159][T30696] ? clear_bhb_loop+0x70/0xc0 [ 1808.938188][T30696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.938211][T30696] RIP: 0033:0x7f34bc39e559 [ 1808.938232][T30696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1808.938252][T30696] RSP: 002b:00007f34bd215028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1808.938278][T30696] RAX: ffffffffffffffda RBX: 00007f34bc625fa0 RCX: 00007f34bc39e559 [ 1808.938296][T30696] RDX: 0000000000000002 RSI: 0000200000007dc0 RDI: 0000000000000003 [ 1808.938312][T30696] RBP: 00007f34bd215090 R08: 0000000000000000 R09: 0000000000000000 [ 1808.938327][T30696] R10: 0000000000040884 R11: 0000000000000246 R12: 0000000000000001 [ 1808.938342][T30696] R13: 00007f34bc626038 R14: 00007f34bc625fa0 R15: 00007f34bc74fa48 [ 1808.938377][T30696] [ 1809.245648][T30698] FAULT_INJECTION: forcing a failure. [ 1809.245648][T30698] name failslab, interval 100, probability 0, space 0, times 0 [ 1809.245683][T30698] CPU: 0 UID: 0 PID: 30698 Comm: syz.2.6985 Tainted: G L syzkaller #0 PREEMPT(full) [ 1809.245709][T30698] Tainted: [L]=SOFTLOCKUP [ 1809.245716][T30698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1809.245727][T30698] Call Trace: [ 1809.245735][T30698] [ 1809.245743][T30698] dump_stack_lvl+0xe8/0x150 [ 1809.245775][T30698] should_fail_ex+0x410/0x560 [ 1809.245806][T30698] should_failslab+0xa8/0x100 [ 1809.245834][T30698] __kmalloc_node_noprof+0x100/0x720 [ 1809.245855][T30698] ? __get_vm_area_node+0x200/0x2f0 [ 1809.245872][T30698] ? __get_vm_area_node+0x283/0x2f0 [ 1809.245896][T30698] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1809.245915][T30698] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1809.245941][T30698] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1809.245984][T30698] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1809.246003][T30698] ? pfn_valid+0x446/0x4c0 [ 1809.246031][T30698] ? __vmap_pages_range_noflush+0xdfe/0xee0 [ 1809.246066][T30698] ? translate_table+0x9a4/0x3520 [ 1809.246106][T30698] __vmalloc_noprof+0xd2/0x120 [ 1809.246126][T30698] ? translate_table+0x9a4/0x3520 [ 1809.246157][T30698] translate_table+0x9a4/0x3520 [ 1809.246198][T30698] ? __vmalloc_node_range_noprof+0x14b9/0x1540 [ 1809.246226][T30698] ? __pfx_translate_table+0x10/0x10 [ 1809.246268][T30698] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1809.246295][T30698] ? do_replace_finish+0x76/0x18c0 [ 1809.246318][T30698] do_replace_finish+0xa72/0x18c0 [ 1809.246359][T30698] do_replace+0x344/0x470 [ 1809.246379][T30698] ? __pfx_do_replace+0x10/0x10 [ 1809.246409][T30698] ? bpf_lsm_capable+0x9/0x20 [ 1809.246429][T30698] ? security_capable+0x7e/0x2c0 [ 1809.246463][T30698] do_ebt_set_ctl+0x2fb/0x1020 [ 1809.246483][T30698] ? __lock_acquire+0x747/0x2de0 [ 1809.246505][T30698] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 1809.246528][T30698] ? ip4_datagram_release_cb+0xa2/0xbe0 [ 1809.246558][T30698] ? ip4_datagram_release_cb+0x976/0xbe0 [ 1809.246588][T30698] ? __mutex_trylock_common+0x15f/0x270 [ 1809.246653][T30698] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1809.246681][T30698] ? rcu_is_watching+0x16/0xb0 [ 1809.246706][T30698] ? trace_contention_end+0x3d/0x140 [ 1809.246740][T30698] ? nf_setsockopt+0x221/0x290 [ 1809.246762][T30698] ? __mutex_unlock_slowpath+0x731/0x900 [ 1809.246790][T30698] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1809.246825][T30698] nf_setsockopt+0x26f/0x290 [ 1809.246845][T30698] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1809.246875][T30698] do_sock_setsockopt+0x17c/0x1b0 [ 1809.246904][T30698] __x64_sys_setsockopt+0x13d/0x1b0 [ 1809.246928][T30698] do_syscall_64+0x166/0x520 [ 1809.246950][T30698] ? trace_irq_disable+0x3b/0x140 [ 1809.246970][T30698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1809.246990][T30698] ? clear_bhb_loop+0x70/0xc0 [ 1809.247012][T30698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1809.247031][T30698] RIP: 0033:0x7f04e7b9e559 [ 1809.247048][T30698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1809.247071][T30698] RSP: 002b:00007f04e8a47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1809.247091][T30698] RAX: ffffffffffffffda RBX: 00007f04e7e25fa0 RCX: 00007f04e7b9e559 [ 1809.247106][T30698] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 1809.247117][T30698] RBP: 00007f04e8a47090 R08: 00000000000001f8 R09: 0000000000000000 [ 1809.247137][T30698] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1809.247153][T30698] R13: 00007f04e7e26038 R14: 00007f04e7e25fa0 R15: 00007f04e7f4fa48 [ 1809.247181][T30698] [ 1809.305035][T30698] syz.2.6985: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1809.305291][T30698] CPU: 0 UID: 0 PID: 30698 Comm: syz.2.6985 Tainted: G L syzkaller #0 PREEMPT(full) [ 1809.305369][T30698] Tainted: [L]=SOFTLOCKUP [ 1809.305400][T30698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1809.305549][T30698] Call Trace: [ 1809.305564][T30698] [ 1809.305592][T30698] dump_stack_lvl+0xe8/0x150 [ 1809.305709][T30698] warn_alloc+0x24d/0x270 [ 1809.305813][T30698] ? __pfx_warn_alloc+0x10/0x10 [ 1809.305894][T30698] ? __kmalloc_node_noprof+0x4d7/0x720 [ 1809.305945][T30698] ? __get_vm_area_node+0x200/0x2f0 [ 1809.305963][T30698] ? __get_vm_area_node+0x283/0x2f0 [ 1809.305980][T30698] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1809.306000][T30698] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1809.306131][T30698] __vmalloc_node_range_noprof+0x969/0x1540 [ 1809.306297][T30698] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1809.306355][T30698] ? pfn_valid+0x446/0x4c0 [ 1809.306474][T30698] ? __vmap_pages_range_noflush+0xdfe/0xee0 [ 1809.306582][T30698] ? translate_table+0x9a4/0x3520 [ 1809.306667][T30698] __vmalloc_noprof+0xd2/0x120 [ 1809.306731][T30698] ? translate_table+0x9a4/0x3520 [ 1809.306821][T30698] translate_table+0x9a4/0x3520 [ 1809.306945][T30698] ? __vmalloc_node_range_noprof+0x14b9/0x1540 [ 1809.307035][T30698] ? __pfx_translate_table+0x10/0x10 [ 1809.307196][T30698] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1809.307282][T30698] ? do_replace_finish+0x76/0x18c0 [ 1809.307380][T30698] do_replace_finish+0xa72/0x18c0 [ 1809.307523][T30698] do_replace+0x344/0x470 [ 1809.307589][T30698] ? __pfx_do_replace+0x10/0x10 [ 1809.307684][T30698] ? bpf_lsm_capable+0x9/0x20 [ 1809.307748][T30698] ? security_capable+0x7e/0x2c0 [ 1809.307847][T30698] do_ebt_set_ctl+0x2fb/0x1020 [ 1809.307917][T30698] ? __lock_acquire+0x747/0x2de0 [ 1809.307941][T30698] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 1809.307967][T30698] ? ip4_datagram_release_cb+0xa2/0xbe0 [ 1809.308051][T30698] ? ip4_datagram_release_cb+0x976/0xbe0 [ 1809.308150][T30698] ? __mutex_trylock_common+0x15f/0x270 [ 1809.308240][T30698] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1809.308327][T30698] ? rcu_is_watching+0x16/0xb0 [ 1809.308403][T30698] ? trace_contention_end+0x3d/0x140 [ 1809.308516][T30698] ? nf_setsockopt+0x221/0x290 [ 1809.308607][T30698] ? __mutex_unlock_slowpath+0x731/0x900 [ 1809.308704][T30698] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1809.308821][T30698] nf_setsockopt+0x26f/0x290 [ 1809.308887][T30698] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1809.308971][T30698] do_sock_setsockopt+0x17c/0x1b0 [ 1809.309056][T30698] __x64_sys_setsockopt+0x13d/0x1b0 [ 1809.309133][T30698] do_syscall_64+0x166/0x520 [ 1809.309199][T30698] ? trace_irq_disable+0x3b/0x140 [ 1809.309273][T30698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1809.309332][T30698] ? clear_bhb_loop+0x70/0xc0 [ 1809.309407][T30698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1809.309483][T30698] RIP: 0033:0x7f04e7b9e559 [ 1809.309541][T30698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1809.309594][T30698] RSP: 002b:00007f04e8a47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1809.309651][T30698] RAX: ffffffffffffffda RBX: 00007f04e7e25fa0 RCX: 00007f04e7b9e559 [ 1809.309697][T30698] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 1809.309739][T30698] RBP: 00007f04e8a47090 R08: 00000000000001f8 R09: 0000000000000000 [ 1809.309774][T30698] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1809.309816][T30698] R13: 00007f04e7e26038 R14: 00007f04e7e25fa0 R15: 00007f04e7f4fa48 [ 1809.309912][T30698] [ 1809.434559][T30698] Mem-Info: [ 1809.434604][T30698] active_anon:27999 inactive_anon:3 isolated_anon:0 [ 1809.434604][T30698] active_file:353 inactive_file:21174 isolated_file:0 [ 1809.434604][T30698] unevictable:0 dirty:487 writeback:0 [ 1809.434604][T30698] slab_reclaimable:7553 slab_unreclaimable:119742 [ 1809.434604][T30698] mapped:33537 shmem:21417 pagetables:2353 [ 1809.434604][T30698] sec_pagetables:0 bounce:0 [ 1809.434604][T30698] kernel_misc_reclaimable:0 [ 1809.434604][T30698] free:1058783 free_pcp:18881 free_cma:0 [ 1809.434791][T30698] Node 0 active_anon:111996kB inactive_anon:12kB active_file:1412kB inactive_file:84468kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:84904kB dirty:1940kB writeback:0kB shmem:85668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:15236kB pagetables:9308kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1809.434952][T30698] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:228kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:49244kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1809.435087][T30698] Node 0 DMA free:11044kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:220kB local_pcp:116kB free_cma:0kB [ 1809.435258][T30698] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 1809.435385][T30698] Node 0 DMA32 free:425520kB boost:2048kB min:36032kB low:44528kB high:53024kB reserved_highatomic:0kB free_highatomic:0kB active_anon:111996kB inactive_anon:12kB active_file:1412kB inactive_file:84468kB unevictable:0kB writepending:1940kB zspages:0kB present:3129332kB managed:2527508kB mlocked:0kB bounce:0kB free_pcp:35524kB local_pcp:17144kB free_cma:0kB [ 1809.435584][T30698] lowmem_reserve[]: 0 0 0 0 0 [ 1809.435682][T30698] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1809.435835][T30698] lowmem_reserve[]: 0 0 0 0 0 [ 1809.435942][T30698] Node 1 Normal free:3798568kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:228kB unevictable:0kB writepending:8kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:39780kB local_pcp:7864kB free_cma:0kB [ 1809.482264][T30698] lowmem_reserve[]: 0 0 0 0 0 [ 1809.482397][T30698] Node 0 DMA: 19*4kB (U) 3*8kB (U) 2*16kB (U) 1*32kB (U) 0*64kB 3*128kB (U) 1*256kB (U) 2*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11044kB [ 1809.482877][T30698] Node 0 DMA32: 3144*4kB (UME) 1414*8kB (UME) 520*16kB (UME) 899*32kB (UME) 1380*64kB (UME) 668*128kB (UME) 231*256kB (UME) 77*512kB (UM) 40*1024kB (UM) 5*2048kB (UM) 10*4096kB (UM) = 425520kB [ 1809.483343][T30698] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1809.483665][T30698] Node 1 Normal: 18*4kB (UME) 18*8kB (UME) 13*16kB (UME) 14*32kB (UME) 5*64kB (UM) 5*128kB (UME) 5*256kB (UE) 5*512kB (UME) 4*1024kB (UME) 2*2048kB (UE) 924*4096kB (UM) = 3798568kB [ 1809.517226][T30698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1809.517281][T30698] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB [ 1809.517342][T30698] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1809.517394][T30698] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1809.517439][T30698] 43017 total pagecache pages [ 1809.517462][T30698] 6 pages in swap cache [ 1809.517494][T30698] Free swap = 124972kB [ 1809.517523][T30698] Total swap = 124996kB [ 1809.517548][T30698] 2097051 pages RAM [ 1809.517570][T30698] 0 pages HighMem/MovableOnly [ 1809.517600][T30698] 433558 pages reserved [ 1809.517622][T30698] 0 pages cma reserved [ 1810.086065][T16117] Bluetooth: hci4: command tx timeout [ 1810.562100][T30580] ========================================= ** replaying previous printk message ** [ 1810.562100][T30580] ================================================================== [ 1810.562115][T30580] BUG: KASAN: null-ptr-deref in netlink_has_listeners+0x3d/0x3f0 [ 1810.562141][T30580] Read of size 8 at addr 0000000000000578 by task syz-executor/30580 [ 1810.562155][T30580] [ 1810.562166][T30580] CPU: 0 UID: 0 PID: 30580 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1810.562188][T30580] Tainted: [L]=SOFTLOCKUP [ 1810.562195][T30580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1810.562225][T30580] Call Trace: [ 1810.562234][T30580] [ 1810.562245][T30580] dump_stack_lvl+0xe8/0x150 [ 1810.562279][T30580] ? netlink_has_listeners+0x3d/0x3f0 [ 1810.562297][T30580] kasan_report+0x117/0x150 [ 1810.562321][T30580] ? netlink_has_listeners+0x3d/0x3f0 [ 1810.562342][T30580] kasan_check_range+0x264/0x2c0 [ 1810.562366][T30580] netlink_has_listeners+0x3d/0x3f0 [ 1810.562387][T30580] devlink_port_notify+0x18c/0x520 [ 1810.562415][T30580] ? __pfx_devlink_port_notify+0x10/0x10 [ 1810.562441][T30580] ? __devlink_port_type_set+0x5e4/0x7a0 [ 1810.562467][T30580] ? __local_bh_enable_ip+0xd6/0x140 [ 1810.562491][T30580] __devlink_port_type_set+0x5f1/0x7a0 [ 1810.562519][T30580] ? __pfx___devlink_port_type_set+0x10/0x10 [ 1810.562545][T30580] ? ip_vs_dst_event+0x171/0xc00 [ 1810.562561][T30580] ? unregister_netdevice_many_notify+0x1a3d/0x2140 [ 1810.562590][T30580] devlink_port_netdevice_event+0x25d/0x3a0 [ 1810.562616][T30580] notifier_call_chain+0x1a5/0x3d0 [ 1810.562635][T30580] unregister_netdevice_many_notify+0x1a76/0x2140 [ 1810.562663][T30580] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1810.562685][T30580] ? __mutex_lock+0x30b/0x1550 [ 1810.562704][T30580] ? __kfree_rcu_sheaf+0x21/0x690 [ 1810.562725][T30580] ? __kfree_rcu_sheaf+0x21/0x690 [ 1810.562743][T30580] ? __kfree_rcu_sheaf+0x21/0x690 [ 1810.562762][T30580] unregister_netdevice_queue+0x2f5/0x340 [ 1810.562784][T30580] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1810.562807][T30580] nsim_destroy+0x275/0x800 [ 1810.562831][T30580] __nsim_dev_port_del+0x14e/0x200 [ 1810.562847][T30580] nsim_dev_reload_destroy+0x288/0x490 [ 1810.562865][T30580] nsim_drv_remove+0x58/0x170 [ 1810.562880][T30580] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1810.562906][T30580] device_release_driver_internal+0x48b/0x880 [ 1810.562935][T30580] bus_remove_device+0x444/0x560 [ 1810.562957][T30580] ? __pfx_bus_remove_device+0x10/0x10 [ 1810.562978][T30580] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1810.563002][T30580] device_del+0x524/0x8f0 [ 1810.563025][T30580] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1810.563045][T30580] ? __pfx_device_del+0x10/0x10 [ 1810.563068][T30580] ? lock_acquire+0x115/0x350 [ 1810.563087][T30580] device_unregister+0x21/0xf0 [ 1810.563109][T30580] del_device_store+0x2b5/0x370 [ 1810.563133][T30580] ? __pfx_del_device_store+0x10/0x10 [ 1810.563155][T30580] ? sysfs_file_kobj+0x1e4/0x230 [ 1810.563170][T30580] ? sysfs_kf_write+0x166/0x260 [ 1810.563187][T30580] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1810.563202][T30580] kernfs_fop_write_iter+0x3a4/0x540 [ 1810.563227][T30580] vfs_write+0x612/0xba0 [ 1810.563247][T30580] ? __pfx_vfs_write+0x10/0x10 [ 1810.563263][T30580] ? do_sys_openat2+0x14e/0x200 [ 1810.563285][T30580] ? kmem_cache_free+0x182/0x650 [ 1810.563310][T30580] ksys_write+0x150/0x270 [ 1810.563326][T30580] ? __pfx_ksys_write+0x10/0x10 [ 1810.563347][T30580] do_syscall_64+0x166/0x520 [ 1810.563366][T30580] ? trace_irq_disable+0x3b/0x140 [ 1810.563383][T30580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1810.563400][T30580] ? clear_bhb_loop+0x70/0xc0 [ 1810.563418][T30580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1810.563434][T30580] RIP: 0033:0x7f3b10b5ed8e [ 1810.563449][T30580] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1810.563462][T30580] RSP: 002b:00007f3b10f4f1f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1810.563479][T30580] RAX: ffffffffffffffda RBX: 000055558f6ef500 RCX: 00007f3b10b5ed8e [ 1810.563509][T30580] RDX: 0000000000000001 RSI: 00007f3b10f4f280 RDI: 0000000000000005 [ 1810.563524][T30580] RBP: 00007f3b10c3637c R08: 0000000000000000 R09: 0000000000000000 [ 1810.563543][T30580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1810.563553][T30580] R13: 00007f3b10f4f280 R14: 00007f3b10f4fac0 R15: 0000000000000003 [ 1810.563572][T30580] [ 1810.563578][T30580] ================================================================== [ 1810.578710][T30580] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1811.020048][T30580] CPU: 0 UID: 0 PID: 30580 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1811.031178][T30580] Tainted: [L]=SOFTLOCKUP [ 1811.035517][T30580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1811.045580][T30580] Call Trace: [ 1811.048873][T30580] [ 1811.051840][T30580] vpanic+0x56d/0xa60 [ 1811.055845][T30580] ? __pfx_vpanic+0x10/0x10 [ 1811.060384][T30580] panic+0xc5/0xd0 [ 1811.064299][T30580] ? __pfx_panic+0x10/0x10 [ 1811.068762][T30580] ? preempt_schedule_thunk+0x16/0x40 [ 1811.074168][T30580] ? netlink_has_listeners+0x3d/0x3f0 [ 1811.079560][T30580] ? preempt_schedule_thunk+0x16/0x40 [ 1811.084951][T30580] ? netlink_has_listeners+0x3d/0x3f0 [ 1811.090359][T30580] check_panic_on_warn+0x89/0xb0 [ 1811.095329][T30580] ? netlink_has_listeners+0x3d/0x3f0 [ 1811.100711][T30580] end_report+0x73/0x170 [ 1811.105015][T30580] ? netlink_has_listeners+0x3d/0x3f0 [ 1811.110398][T30580] kasan_report+0x128/0x150 [ 1811.114942][T30580] ? netlink_has_listeners+0x3d/0x3f0 [ 1811.120347][T30580] kasan_check_range+0x264/0x2c0 [ 1811.125321][T30580] netlink_has_listeners+0x3d/0x3f0 [ 1811.130543][T30580] devlink_port_notify+0x18c/0x520 [ 1811.135869][T30580] ? __pfx_devlink_port_notify+0x10/0x10 [ 1811.141529][T30580] ? __devlink_port_type_set+0x5e4/0x7a0 [ 1811.147193][T30580] ? __local_bh_enable_ip+0xd6/0x140 [ 1811.152672][T30580] __devlink_port_type_set+0x5f1/0x7a0 [ 1811.158149][T30580] ? __pfx___devlink_port_type_set+0x10/0x10 [ 1811.164147][T30580] ? ip_vs_dst_event+0x171/0xc00 [ 1811.169106][T30580] ? unregister_netdevice_many_notify+0x1a3d/0x2140 [ 1811.175716][T30580] devlink_port_netdevice_event+0x25d/0x3a0 [ 1811.181664][T30580] notifier_call_chain+0x1a5/0x3d0 [ 1811.186781][T30580] unregister_netdevice_many_notify+0x1a76/0x2140 [ 1811.193481][T30580] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1811.200522][T30580] ? __mutex_lock+0x30b/0x1550 [ 1811.205311][T30580] ? __kfree_rcu_sheaf+0x21/0x690 [ 1811.210442][T30580] ? __kfree_rcu_sheaf+0x21/0x690 [ 1811.215495][T30580] ? __kfree_rcu_sheaf+0x21/0x690 [ 1811.220562][T30580] unregister_netdevice_queue+0x2f5/0x340 [ 1811.226321][T30580] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1811.232620][T30580] nsim_destroy+0x275/0x800 [ 1811.237166][T30580] __nsim_dev_port_del+0x14e/0x200 [ 1811.242298][T30580] nsim_dev_reload_destroy+0x288/0x490 [ 1811.247800][T30580] nsim_drv_remove+0x58/0x170 [ 1811.252515][T30580] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1811.257834][T30580] device_release_driver_internal+0x48b/0x880 [ 1811.263947][T30580] bus_remove_device+0x444/0x560 [ 1811.268905][T30580] ? __pfx_bus_remove_device+0x10/0x10 [ 1811.274380][T30580] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1811.280119][T30580] device_del+0x524/0x8f0 [ 1811.284466][T30580] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1811.290290][T30580] ? __pfx_device_del+0x10/0x10 [ 1811.295205][T30580] ? lock_acquire+0x115/0x350 [ 1811.299894][T30580] device_unregister+0x21/0xf0 [ 1811.304677][T30580] del_device_store+0x2b5/0x370 [ 1811.309548][T30580] ? __pfx_del_device_store+0x10/0x10 [ 1811.314948][T30580] ? sysfs_file_kobj+0x1e4/0x230 [ 1811.319899][T30580] ? sysfs_kf_write+0x166/0x260 [ 1811.324764][T30580] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1811.330002][T30580] kernfs_fop_write_iter+0x3a4/0x540 [ 1811.335335][T30580] vfs_write+0x612/0xba0 [ 1811.339611][T30580] ? __pfx_vfs_write+0x10/0x10 [ 1811.344387][T30580] ? do_sys_openat2+0x14e/0x200 [ 1811.349342][T30580] ? kmem_cache_free+0x182/0x650 [ 1811.354298][T30580] ksys_write+0x150/0x270 [ 1811.358659][T30580] ? __pfx_ksys_write+0x10/0x10 [ 1811.363553][T30580] do_syscall_64+0x166/0x520 [ 1811.368156][T30580] ? trace_irq_disable+0x3b/0x140 [ 1811.373209][T30580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1811.379319][T30580] ? clear_bhb_loop+0x70/0xc0 [ 1811.384020][T30580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1811.389943][T30580] RIP: 0033:0x7f3b10b5ed8e [ 1811.394379][T30580] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1811.414016][T30580] RSP: 002b:00007f3b10f4f1f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1811.422489][T30580] RAX: ffffffffffffffda RBX: 000055558f6ef500 RCX: 00007f3b10b5ed8e [ 1811.430574][T30580] RDX: 0000000000000001 RSI: 00007f3b10f4f280 RDI: 0000000000000005 [ 1811.438565][T30580] RBP: 00007f3b10c3637c R08: 0000000000000000 R09: 0000000000000000 [ 1811.446557][T30580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1811.454543][T30580] R13: 00007f3b10f4f280 R14: 00007f3b10f4fac0 R15: 0000000000000003 [ 1811.462541][T30580] [ 1811.466275][T30580] Kernel Offset: disabled [ 1811.470722][T30580] Rebooting in 86400 seconds..