last executing test programs: 15.942609401s ago: executing program 0 (id=305): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000003c0)={0x43, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x3, 0xf, 0xa, 0xfffffffc}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="79c62a9b5b0a02d4ffffffff86dd60b8192300080000fe8000000000000000000000000000aafe8000000000000040000000000000aa0400000000000000"], 0x0) ioctl$XFS_IOC_GETVERSION(r1, 0x80047601, &(0x7f0000000180)) r2 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xfff1}, {0x0, 0x8}}}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x208402, 0x0, 0x0, 0x0, 0x0) write$sysctl(r4, &(0x7f0000000580)='1\x00', 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x104) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="080000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000b64fcad7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000020000000a00000000000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fc0100"/396], 0x190) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYRES32=r0], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x1) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2) setpriority(0x1, 0x0, 0x8) 13.176818052s ago: executing program 3 (id=319): openat$audio1(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="64a465e8c8b19b44ba4dea57970686c91b493ce03f82124b84ddbf2653a98ea3217f2b957cf30e84d68a03b3c29dc13fba42c25d98a3974d4bd7d1302be820437b", 0x41) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x19a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x8, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x27, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b103b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883adf28c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) recvmmsg(r3, &(0x7f00000057c0), 0x0, 0x40000020, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r4 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) r5 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b294a0fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) 12.575061495s ago: executing program 0 (id=320): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201001df2303920"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r6, @ANYRESDEC=r0, @ANYBLOB="770a398d79663371faf668b241e0c30fa6adb1001704", @ANYRES8=r3, @ANYRES32=r2, @ANYRESHEX=r1, @ANYRESHEX, @ANYRES8=r5, @ANYRES32=r4], 0x0) syz_usb_connect(0x4, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x5, 0x0) openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) eventfd2(0x8, 0x1) socket$inet(0x2, 0xa, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_PROPERTY(r7, 0x40106f52, &(0x7f00000001c0)={0x1e, 0x0}) 12.366283119s ago: executing program 2 (id=322): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x13, 0x7, 0x106c, 0x8, 0x8000000000000, 0x8000000400007f, 0x0, 0x6, 0xfffffffffffffffd, 0x204, 0x0, 0x8001], 0xeeee0000, 0x240490}) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x3}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r5) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r5) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) r9 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x1000, 0x0) ioctl$BTRFS_IOC_FS_INFO(r9, 0x8400941f, &(0x7f0000000140)) r10 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000540), 0x111000, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r13, 0x4040aea0, 0x0) read$FUSE(r10, &(0x7f0000000940)={0x2020}, 0x2020) ioctl$FBIOPAN_DISPLAY(r9, 0x4606, &(0x7f0000000080)={0x300, 0x384, 0xa00, 0xa0, 0xa, 0x8, 0x20, 0x2, {0x2, 0x5, 0x1}, {0x4, 0x6b76, 0x1}, {0xf, 0x9, 0x1}, {0x7fff, 0x2f, 0x1}, 0x1, 0x40, 0x7, 0xffffff01, 0x0, 0x0, 0x8, 0x5, 0xe, 0xc3, 0xffff, 0x19c, 0x2e, 0x2, 0x1, 0x4}) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) 12.120085419s ago: executing program 3 (id=323): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x4b7, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, &(0x7f0000000140)=0x0, &(0x7f0000000980)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff7, 0x0, 0x4) r5 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x17, r6, 0x1, 0x2, 0x6, @remote}, 0x14) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 11.370288855s ago: executing program 4 (id=325): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xee) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000002, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x21800, 0x0) unshare(0x8040480) cachestat(0xffffffffffffffff, &(0x7f0000000280)={0x52a, 0x6}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000003c0)=[{0xb, 0x56, 0x7, 0xfffffd52}]}) r4 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x39d3, 0x0, 0x3, 0x8085}, &(0x7f0000000400)=0x0, &(0x7f0000000280)) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000001c0)=[r6], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000020301020000000000000000000000000900020000000047020000000800034000000000080001"], 0x30}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000000203010800000000000000000a00000009200200000000090000"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x9bd2e45169aa59f0) (async) r9 = fsopen(&(0x7f00000000c0)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000280)='port', &(0x7f0000000140)='f\x97-i\xcf_Z=\x03b\xa6\x850', 0x0) (async) openat$cgroup_root(0xffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000000c4402, 0x0) mmap(&(0x7f000048e000/0x1000)=nil, 0x1000, 0x200000e, 0x13, r10, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000002ec0)='./binderfs/binder-control\x00', 0x2, 0x0) 11.249731163s ago: executing program 2 (id=326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000240)='.\x00'}, 0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2a, 0x8001, 0x2, 0x6, 0x6, 0x5, 0x3, 0x200, 0xfffffffb}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xb9c66f26ebab53af}, @TCA_TBF_RATE64={0xc, 0x4, 0x929f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x3, 0x6, 0x8000}, {0x94, 0xfba76ce08360e191, 0xfff8, 0x3, 0x9, 0x400}, 0x8008, 0xfffffff9, 0x422}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x7, 0x9, 0x10, 0x1, 0x1, {0xffff1c72, 0x23, 0x100007, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 11.143621424s ago: executing program 0 (id=327): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x1008, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x1ff}, 0x3, 0xed}}) 11.141540316s ago: executing program 3 (id=328): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@broadcast, 0x0, 0xfffd, 0x0, 0x20, 0x0, 0x0, 0x0, 0x84}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x100004d5, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, {0x8000, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0xffffffff}, 0x70bd2b, 0x0, 0x2, 0x0, 0x0, 0x2a}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e1c, 0x1, @mcast1, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000009c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xd7d5}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000012c0)="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", 0x519}], 0x1}}], 0x1, 0xc4) 10.920113796s ago: executing program 3 (id=329): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, 0x0, &(0x7f0000000300)=0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) sendmsg$BATADV_CMD_SET_MESH(r1, 0x0, 0x4000044) syz_io_uring_submit(0x0, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x800) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r7, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="2b0326bd7000fbdbdf251200000040b73630c3fdcc7e733e2329cdfc0a73d198c847ff1540ac3971f393ec30c5e8845646b2d832"], 0x14}, 0x1, 0x300, 0x0, 0x24000000}, 0x20044010) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x32314258}}) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001018, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000000000)={r0, 0x9, 0x6, 0x9}) sendto$inet6(r8, &(0x7f00000001c0)="67b5ab9fbdb5136d14437480f9a79ce1500c4d3afd89809e83eaf8bcd16252535afe17d2d2c9e8a72e0891de58f8491930b5eba93d20f233f3eed49cde8249cbf48141750d46d73886127b9fdd4fa4848ee7c3161e9525cbd72440ea0b0c156c41cc3d3a4e34b1a30aaa2952ed09d309b8cd0f0f8466c4c021116882142682a4648a2237b3e01727da404892caac6c55bc8060505deb54ce05b01d19c8c0cfe07f0f8073ca72736e4fe9ab53af183ca689c21b5f003129daa725f90976146478d88fb6cd238b8a031778e3a94635e2c7bfe78d7c2622acc4", 0xd8, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x18d, @loopback, 0x2}, 0x1c) 10.918723939s ago: executing program 0 (id=330): r0 = socket$alg(0x26, 0x5, 0x0) r1 = add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r1, 0x30}) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) accept4(r2, &(0x7f0000000080)=@rc={0x1f, @fixed}, &(0x7f0000000100)=0x80, 0x800) keyctl$join(0x1, &(0x7f00000003c0)={'syz', 0x1}) add_key$user(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000300)="512b6e13af1007bdad3762cf654d41c61a2998089d00a6a3fcf6ba076f74896731a80bcc55384b6e8cfaa545b6e952767fd9086e5ac5b60e544298d8275317fec5331ce23a88ac22d85ca495a5eec9c6323bc271de05fa94676d18716febbeca32150fd7dc7f889c3eb59b3ab7f3453b43ec1d5667cbcc44fd9f245dc814774d20022bda9c75b06c78388a9c28e999fb883d495deaac8d5cbca41b2a5fef9d", 0x9f, 0xfffffffffffffffe) recvmsg$qrtr(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x1}, 0x1c, 0x40) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000045}, 0x400c046) 10.830631491s ago: executing program 3 (id=331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@multicast, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) (fail_nth: 6) 10.81465217s ago: executing program 2 (id=332): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) file_getattr(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x18, 0x1000) 10.285751895s ago: executing program 0 (id=333): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="02000000040000000800000001000005800000000db04ad91b29043753543df0e8eb2778882c3c14121445bd1d947b5380301d18bbfc20ac46c5fcb1effacd990341e27713a3f51de7077022ecb3c440b34c43eb72c0a9fdee5496a6df829de8d4cffafb03b6313f96c7674f37f17ff4f4070c29fa61ef6505333fb75d0e", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000012c0)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="2d000000380000000000bc3b30dfb4c7f91c7ace41f7584bea23732d53a28547850836d9bfc86d0f4caa35adb34e1b4dbdd415150bb3", @ANYRES32, @ANYRES64=0x0], 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000001180)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$can_bcm(0x1d, 0x2, 0x2) listen(r6, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0xfffffffc, 0xffffffff) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3c0, 0x2e0, 0x2e0, 0x3c0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d, 0x0, 0x0, 0x55}, {}, {}, {0x0, 0x0, 0x40, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xfc}, {0x0, 0x0, 0x0, 0x4b6}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0xd73a}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x6, 0x1}, {0x1}}}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4e4) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000001400)={0x1000000, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x5}}, {{0xa, 0x0, 0x99e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x104) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044041}, 0x4000040) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0xfffffff8}}}, 0x104) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 9.433143463s ago: executing program 2 (id=334): openat$audio1(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="64a465e8c8b19b44ba4dea57970686c91b493ce03f82124b84ddbf2653a98ea3217f2b957cf30e84d68a03b3c29dc13fba42c25d98a3974d4bd7d1302be820437b", 0x41) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x19a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x8, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x27, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b103b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883adf28c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) recvmmsg(r3, &(0x7f00000057c0), 0x0, 0x40000020, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r4 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) r5 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b294a0fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) 9.426085976s ago: executing program 3 (id=335): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8001}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x1000000, &(0x7f0000001140)) r4 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r4, r4}, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 9.141711938s ago: executing program 1 (id=336): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@multicast, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x14, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 8.841393274s ago: executing program 4 (id=337): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201001df2303920"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r6, @ANYRESDEC=r0, @ANYBLOB="770a398d79663371faf668b241e0c30fa6adb1001704", @ANYRES8=r3, @ANYRES32=r2, @ANYRESHEX=r1, @ANYRESHEX, @ANYRES8=r5, @ANYRES32=r4], 0x0) syz_usb_connect(0x4, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x5, 0x0) openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) eventfd2(0x8, 0x1) socket$inet(0x2, 0xa, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_PROPERTY(r7, 0x40106f52, &(0x7f00000001c0)={0x1e, 0x0}) 8.779435058s ago: executing program 1 (id=338): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x2, {0x3, 0x3, 0x0, 0x400000000000000, 0xfffffffd, 0x0, {0x1, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x7, 0xc000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5ad6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90c00000000cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde0caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1c83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db1085df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bee1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ecf8e26206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362371a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4671f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76b060000000000000095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc06127a450ed0dfa1410cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f01d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865638b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72093b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e500", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x3, 0x3, 0x3, 0x0, 0x100, 0xfffffffe, {0x1, 0xfffffffffffffff1, 0x9, 0x8, 0x100000000, 0xffffffff80000001, 0x0, 0x0, 0x4, 0xa000, 0x0, 0x0, 0x0, 0x40}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@multicast, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 7.328533781s ago: executing program 1 (id=339): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x4b7, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, &(0x7f0000000140)=0x0, &(0x7f0000000980)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff7, 0x0, 0x4) r5 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x17, r6, 0x1, 0x2, 0x6, @remote}, 0x14) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.839188464s ago: executing program 0 (id=340): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f0000000080)=[{0x6, 0xc0, 0x0, 0x6}]}) openat$sw_sync_info(0xffffff9c, &(0x7f0000000200), 0x200800, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x22, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc00}, 0x28) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000000)) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000000206010200000000000000000000000a0c000780080008000000004010000300686173683a69702c6d616300050005000a00000005000400000000000900020073797a31000000000500010007"], 0x54}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x4, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0xe, 0x8}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000001000010025bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0021040000000000140003006261746164763000000000000000000008000400d7"], 0x58}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 4.301674923s ago: executing program 1 (id=341): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000012c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2d000000380000000000bc3b30dfb4c7f91c7ace41f7584bea23732d53a28547850836d9bfc86d0f4caa35adb34e1b4dbdd415150bb3", @ANYRES32, @ANYRES64=0x0], 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000001180)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$can_bcm(0x1d, 0x2, 0x2) listen(r6, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0xfffffffc, 0xffffffff) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3c0, 0x2e0, 0x2e0, 0x3c0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d, 0x0, 0x0, 0x55}, {}, {}, {0x0, 0x0, 0x40, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xfc}, {0x0, 0x0, 0x0, 0x4b6}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0xd73a}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x6, 0x1}, {0x1}}}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4e4) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000001400)={0x1000000, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x5}}, {{0xa, 0x0, 0x99e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x104) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044041}, 0x4000040) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0xfffffff8}}}, 0x104) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 4.25370579s ago: executing program 2 (id=342): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, 0x0, &(0x7f0000000300)=0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) sendmsg$BATADV_CMD_SET_MESH(r1, 0x0, 0x4000044) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x800) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r6, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYBLOB="2b0326bd7000fbdbdf251200000040b73630c3fdcc7e733e2329cdfc0a73d198c847ff1540ac3971f393ec30c5e8845646b2d832"], 0x14}, 0x1, 0x300, 0x0, 0x24000000}, 0x20044010) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x32314258}}) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001018, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000000000)={r0, 0x9, 0x6, 0x9}) sendto$inet6(r7, &(0x7f00000001c0)="67b5ab9fbdb5136d14437480f9a79ce1500c4d3afd89809e83eaf8bcd16252535afe17d2d2c9e8a72e0891de58f8491930b5eba93d20f233f3eed49cde8249cbf48141750d46d73886127b9fdd4fa4848ee7c3161e9525cbd72440ea0b0c156c41cc3d3a4e34b1a30aaa2952ed09d309b8cd0f0f8466c4c021116882142682a4648a2237b3e01727da404892caac6c55bc8060505deb54ce05b01d19c8c0cfe07f0f8073ca72736e4fe9ab53af183ca689c21b5f003129daa725f90976146478d88fb6cd238b8a031778e3a94635e2c7bfe78d7c2622acc4", 0xd8, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x18d, @loopback, 0x2}, 0x1c) 3.805210518s ago: executing program 4 (id=343): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9d4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x3, 0x7, 0x47524247, 0x0, 0x7, [{0x1, 0x2}, {0x2, 0x8}, {0x9b, 0x4}, {0x8, 0x80000000}, {0x94f2, 0x7}, {0x8, 0x4}, {0x5, 0x5}, {0x2, 0x8}], 0x0, 0x9, 0x1, 0x3, 0x7}}) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000000)) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_open_procfs(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090001007866726d0000000024000280080001000000000008000200030000e4080001000100000008000100010000", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) r3 = socket(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) process_mrelease(0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$key(r1, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[], 0x98}, 0x1, 0x7}, 0x24040010) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e0d05"], 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000500)={0x11, 0x4, {0x400, @struct={0x9}, 0x0, 0x199, 0x0, 0x401, 0x25b, 0x8000000000000000, 0x5, @struct={0x5, 0x5}, 0x80000000, 0x1, [0x8000, 0x700000000000000, 0x2e56, 0x1, 0x7f, 0x3]}, {0x8, @struct={0x9, 0x8}, 0x0, 0x10, 0x2, 0x7a, 0xa52, 0xffffffffffffffff, 0x449, @struct={0x401, 0x6}, 0xcfdb, 0x5, [0x6d46, 0x1, 0x2, 0x0, 0x0, 0x8]}, {0x100, @struct={0x4, 0x7}, 0x0, 0x1, 0x9, 0x10001, 0x5, 0x5, 0x40, @usage=0x800, 0x400, 0x80000000, [0xc, 0x1, 0x7fffffff, 0xfffffffffffffffb, 0x0, 0x5]}, {0x8, 0x8, 0xa2}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000900)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000d00)={0x0, 0x0, 0x6, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000001100)={0x10, 0x5, {0x34, @usage=0x5, r5, 0xe, 0x65af15f7, 0x9, 0xf1e, 0x2, 0x1, @usage=0x16b, 0x80, 0xd31, [0x9, 0x6, 0x7, 0x4, 0x5, 0x4]}, {0xcf9, @usage=0x3, r6, 0x0, 0x1ff, 0x100, 0x0, 0x3, 0x8, @struct={0xfffffffb, 0x5}, 0x8, 0x100, [0x7fff, 0x7, 0x6859, 0xa805, 0x2, 0x8]}, {0xfffffffffffffff9, @usage=0x3, r7, 0x9, 0x0, 0x100, 0x7, 0xf39, 0x80, @usage=0xffffffffffffffff, 0x2, 0x0, [0x200, 0x2, 0x8001, 0x2, 0x0, 0x7]}, {0x67, 0x1, 0x1}}) 3.280850916s ago: executing program 2 (id=344): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff}) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}, {&(0x7f0000000780)="5b06c70461fab92b3d952a0a0b5eca7d6b21f62c4f56ea9109a00b742eab4a7fdac90ab7c51a813cc4d693127d10c4e7234944e9410ad19c43ca9751c1b97aca344e5bf77fde23184af0b7e160e7a9a681f6391270dedc2978f7d1b9a913801beaa52e1eedf0ae71021e0d40864fc63603f1d6d94f55d23fb15eebc780292ee4be48a9036dcb83345a4285e043439e95b3f23b6edf199cea092725d6f7fab0f975cc42bd279f5de21d08a38091edbb34b32c6cd53373651fd3343aa6b228a996d957c556694dc3a26b68b38093a92eb192aa973bda1b51c61b6cc2b49a54550085e8d8270d889cefe65f62c975815b1b1208ed"}], 0x3f}], 0x1, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000089f774a10300"/20], 0x14}, 0x1, 0x0, 0x0, 0x24044000}, 0x41) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r2) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYRES64=r6, @ANYRESHEX=r7], 0x204}, 0x1, 0x0, 0x0, 0x8001}, 0x2400c815) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'sit0\x00', r9, 0x80, 0x40, 0x4, 0x2, {{0x16, 0x4, 0x3, 0x6, 0x58, 0x66, 0x0, 0x9, 0x29, 0x0, @private=0xa010101, @loopback, {[@timestamp={0x44, 0x10, 0x4a, 0x0, 0xe, [0x7, 0x7, 0x3]}, @generic={0x7, 0x9, "f80417a58feb6a"}, @timestamp_addr={0x44, 0xc, 0xea, 0x1, 0x5, [{@rand_addr=0x64010101, 0x401}]}, @ssrr={0x89, 0x1b, 0x3c, [@broadcast, @dev={0xac, 0x14, 0x14, 0x28}, @remote, @multicast2, @local, @broadcast]}, @end]}}}}}) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f00000070c0)=""/148, 0x94}], 0x1}, 0x3}], 0x1, 0x101, 0x0) 2.540588704s ago: executing program 4 (id=345): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) file_getattr(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x18, 0x1000) 2.326554942s ago: executing program 1 (id=346): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x5, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x60, 0x0, 0x3, {{0x6, 0x9, 0xffffffffffffffff, 0x714, 0x7b, 0x81, 0xacb8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statfs(&(0x7f0000000680)='./file0\x00', 0x0) 1.666586002s ago: executing program 4 (id=347): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) readv(r4, &(0x7f0000000340)=[{0x0}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000000c0)=0x7896, 0x4) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4c}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000100), 0x2) socket$inet_tcp(0x2, 0x1, 0x0) 1.084770665s ago: executing program 1 (id=348): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @private=0xa010102}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000040)="134e", 0x2, 0x20004050, 0x0, 0x0) pipe2(&(0x7f0000000240), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf25000000000000000008000500", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r6 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000f80)={'team0\x00', &(0x7f0000000f40)=@ethtool_wolinfo={0x3, 0xfffffffc, 0x0, "000000002191"}}) sendmsg$nl_route(r6, 0x0, 0x4400000c) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/kexec_crash_size', 0x800, 0x0) lseek(r8, 0xb, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) 0s ago: executing program 4 (id=349): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) unshare(0x2a020400) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) pidfd_send_signal(r6, 0x2, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x115000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000400)={0x10000, 0x7000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0xdddd7000, 0x6000}) recvmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000600), 0x80, &(0x7f0000000a80)=[{&(0x7f0000000440)=""/214, 0xd6}, {&(0x7f0000000780)=""/154, 0x9a}, {&(0x7f0000000840)=""/203, 0xcb}, {&(0x7f0000000240)=""/42, 0x2a}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000a00)=""/65, 0x41}], 0x6, &(0x7f0000000ac0)=""/240, 0xf0}, 0x5}], 0x1, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet6(0xa, 0x3, 0x8000000003c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) r9 = socket(0x10, 0x803, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd25, 0x0, {0xa, 0x40, 0x0, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r12 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @mcast2}]}, 0x40}}, 0x0) sendfile(r8, r8, &(0x7f0000000040)=0x8, 0xc) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 43.075904][ T5490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.091048][ T5490] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.188' (ED25519) to the list of known hosts. syzkaller login: [ 63.810631][ T5812] cgroup: Unknown subsys name 'net' [ 63.917272][ T5812] cgroup: Unknown subsys name 'cpuset' [ 63.925633][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.243654][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.260541][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.269619][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.284320][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.285215][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.295589][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.302556][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.306582][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.314893][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.320942][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.327997][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.335698][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.341560][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.349572][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.362828][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.363717][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.377726][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.386137][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.393781][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.394201][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.408893][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.416361][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.416906][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.431088][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.444872][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.452494][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.998666][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 68.031995][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 68.116118][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 68.203528][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 68.238137][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 68.388557][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.396198][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.403501][ T5843] bridge_slave_0: entered allmulticast mode [ 68.410658][ T5843] bridge_slave_0: entered promiscuous mode [ 68.432674][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.439841][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.447034][ T5842] bridge_slave_0: entered allmulticast mode [ 68.453956][ T5842] bridge_slave_0: entered promiscuous mode [ 68.461712][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.468943][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.476155][ T5843] bridge_slave_1: entered allmulticast mode [ 68.483006][ T5843] bridge_slave_1: entered promiscuous mode [ 68.508092][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.515256][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.522624][ T5842] bridge_slave_1: entered allmulticast mode [ 68.529699][ T5842] bridge_slave_1: entered promiscuous mode [ 68.597569][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.604927][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.612012][ T5846] bridge_slave_0: entered allmulticast mode [ 68.619135][ T5846] bridge_slave_0: entered promiscuous mode [ 68.647761][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.659778][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.669169][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.676872][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.684136][ T5846] bridge_slave_1: entered allmulticast mode [ 68.691173][ T5846] bridge_slave_1: entered promiscuous mode [ 68.707759][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.714957][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.722096][ T5845] bridge_slave_0: entered allmulticast mode [ 68.729227][ T5845] bridge_slave_0: entered promiscuous mode [ 68.739044][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.750015][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.777775][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.785117][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.792208][ T5847] bridge_slave_0: entered allmulticast mode [ 68.799511][ T5847] bridge_slave_0: entered promiscuous mode [ 68.806890][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.814153][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.821258][ T5845] bridge_slave_1: entered allmulticast mode [ 68.828288][ T5845] bridge_slave_1: entered promiscuous mode [ 68.873602][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.880893][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.888523][ T5847] bridge_slave_1: entered allmulticast mode [ 68.896919][ T5847] bridge_slave_1: entered promiscuous mode [ 68.927190][ T5842] team0: Port device team_slave_0 added [ 68.935489][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.946663][ T5843] team0: Port device team_slave_0 added [ 68.954621][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.965920][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.987552][ T5842] team0: Port device team_slave_1 added [ 69.004205][ T5843] team0: Port device team_slave_1 added [ 69.020268][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.049366][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.077662][ T5845] team0: Port device team_slave_0 added [ 69.093153][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.120093][ T5845] team0: Port device team_slave_1 added [ 69.136297][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.143226][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.169161][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.190393][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.197434][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.226935][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.239900][ T5846] team0: Port device team_slave_0 added [ 69.256126][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.263056][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.289705][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.310186][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.317221][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.343475][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.356459][ T5846] team0: Port device team_slave_1 added [ 69.370554][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.377871][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.404146][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.416082][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.423024][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.449927][ T5835] Bluetooth: hci2: command tx timeout [ 69.449934][ T51] Bluetooth: hci4: command tx timeout [ 69.454117][ T51] Bluetooth: hci1: command tx timeout [ 69.455739][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.492761][ T5847] team0: Port device team_slave_0 added [ 69.500848][ T5847] team0: Port device team_slave_1 added [ 69.523946][ T51] Bluetooth: hci0: command tx timeout [ 69.524122][ T5835] Bluetooth: hci3: command tx timeout [ 69.538223][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.545236][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.571452][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.607923][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.615249][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.641448][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.674094][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.681050][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.707145][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.764651][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.771618][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.797761][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.816907][ T5845] hsr_slave_0: entered promiscuous mode [ 69.823215][ T5845] hsr_slave_1: entered promiscuous mode [ 69.835225][ T5843] hsr_slave_0: entered promiscuous mode [ 69.841338][ T5843] hsr_slave_1: entered promiscuous mode [ 69.847599][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 69.853394][ T5843] Cannot create hsr debugfs directory [ 69.876398][ T5842] hsr_slave_0: entered promiscuous mode [ 69.882540][ T5842] hsr_slave_1: entered promiscuous mode [ 69.888722][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 69.894654][ T5842] Cannot create hsr debugfs directory [ 69.973510][ T5846] hsr_slave_0: entered promiscuous mode [ 69.980252][ T5846] hsr_slave_1: entered promiscuous mode [ 69.986528][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 69.992251][ T5846] Cannot create hsr debugfs directory [ 70.058323][ T5847] hsr_slave_0: entered promiscuous mode [ 70.064836][ T5847] hsr_slave_1: entered promiscuous mode [ 70.071020][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 70.076841][ T5847] Cannot create hsr debugfs directory [ 70.508345][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.523033][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.533689][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.551360][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.616001][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.639276][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.649172][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.660585][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.741760][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.752158][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.770138][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.780671][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.872779][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.899621][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.926161][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.937552][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.948879][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.026043][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.056594][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.067033][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.086586][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.098099][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.105291][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.116354][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.128008][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.141592][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.169209][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.176474][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.205225][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.209793][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.219811][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.236502][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.243633][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.256784][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.271526][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.278682][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.292963][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.300123][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.340275][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.347394][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.480518][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.498264][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.525129][ T5835] Bluetooth: hci1: command tx timeout [ 71.525285][ T51] Bluetooth: hci4: command tx timeout [ 71.530537][ T5835] Bluetooth: hci2: command tx timeout [ 71.570338][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.598305][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.604584][ T5835] Bluetooth: hci3: command tx timeout [ 71.610306][ T5835] Bluetooth: hci0: command tx timeout [ 71.620781][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.627897][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.646358][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.658421][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.674287][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.681389][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.693110][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.700318][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.722628][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.735956][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.743056][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.755756][ T5843] veth0_vlan: entered promiscuous mode [ 71.802670][ T5843] veth1_vlan: entered promiscuous mode [ 71.839112][ T5846] veth0_vlan: entered promiscuous mode [ 71.862715][ T5846] veth1_vlan: entered promiscuous mode [ 71.961258][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.977828][ T5842] veth0_vlan: entered promiscuous mode [ 71.986574][ T5846] veth0_macvtap: entered promiscuous mode [ 71.996887][ T5843] veth0_macvtap: entered promiscuous mode [ 72.018455][ T5846] veth1_macvtap: entered promiscuous mode [ 72.029641][ T5842] veth1_vlan: entered promiscuous mode [ 72.041258][ T5843] veth1_macvtap: entered promiscuous mode [ 72.052533][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.102089][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.116099][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.143206][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.157985][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.176387][ T5845] veth0_vlan: entered promiscuous mode [ 72.195971][ T86] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.207445][ T86] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.223074][ T5842] veth0_macvtap: entered promiscuous mode [ 72.233536][ T5842] veth1_macvtap: entered promiscuous mode [ 72.241741][ T86] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.252337][ T86] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.266922][ T5845] veth1_vlan: entered promiscuous mode [ 72.285240][ T86] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.315905][ T5847] veth0_vlan: entered promiscuous mode [ 72.322955][ T86] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.333635][ T86] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.363193][ T86] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.391638][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.429436][ T5847] veth1_vlan: entered promiscuous mode [ 72.451520][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.475942][ T5845] veth0_macvtap: entered promiscuous mode [ 72.493215][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.506233][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.523046][ T86] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.532021][ T86] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.541992][ T86] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.559775][ T86] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.572134][ T5845] veth1_macvtap: entered promiscuous mode [ 72.608187][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.620688][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.637934][ T5847] veth0_macvtap: entered promiscuous mode [ 72.651772][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.681648][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.689973][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.709975][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.718930][ T5847] veth1_macvtap: entered promiscuous mode [ 72.733589][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.765527][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.777904][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.791627][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.812689][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.844061][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.895611][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.950483][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.982147][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.016164][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.042164][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.070605][ T5917] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 73.092902][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.147976][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.175945][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.246015][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.266233][ T3581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.289079][ T1321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.302190][ T3581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.312931][ T1321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.422830][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.444390][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.604665][ T5832] Bluetooth: hci2: command tx timeout [ 73.610146][ T5835] Bluetooth: hci1: command tx timeout [ 73.667667][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.684584][ T5835] Bluetooth: hci0: command tx timeout [ 73.690039][ T5832] Bluetooth: hci3: command tx timeout [ 73.697691][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.705687][ T5832] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 73.716154][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 73.716178][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 73.716190][ T5832] Workqueue: hci1 hci_rx_work [ 73.716224][ T5832] Call Trace: [ 73.716232][ T5832] [ 73.716239][ T5832] dump_stack_lvl+0xe8/0x150 [ 73.716268][ T5832] sysfs_create_dir_ns+0x271/0x2a0 [ 73.716297][ T5832] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 73.716324][ T5832] ? do_raw_spin_unlock+0xf5/0x210 [ 73.716348][ T5832] kobject_add_internal+0x62b/0xd00 [ 73.716379][ T5832] kobject_add+0x163/0x240 [ 73.716407][ T5832] ? __pfx_kobject_add+0x10/0x10 [ 73.716431][ T5832] ? _raw_spin_unlock+0x28/0x50 [ 73.716453][ T5832] ? get_device_parent+0x366/0x3a0 [ 73.716478][ T5832] device_add+0x408/0xb70 [ 73.716504][ T5832] hci_conn_add_sysfs+0xd5/0x210 [ 73.716529][ T5832] le_conn_complete_evt+0xf1d/0x1430 [ 73.716560][ T5832] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 73.716593][ T5832] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 73.716619][ T5832] ? __pfx___mutex_lock+0x10/0x10 [ 73.716640][ T5832] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 73.716660][ T5832] ? skb_pull_data+0xfb/0x200 [ 73.716686][ T5832] hci_le_enh_conn_complete_evt+0x189/0x490 [ 73.716713][ T5832] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 73.716744][ T5832] hci_event_packet+0x7af/0x12c0 [ 73.716769][ T5832] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 73.716792][ T5832] ? __pfx_hci_event_packet+0x10/0x10 [ 73.716816][ T5832] ? kcov_remote_start+0x49a/0x7a0 [ 73.716846][ T5832] ? hci_send_to_monitor+0xe2/0x590 [ 73.716875][ T5832] hci_rx_work+0x3ee/0x1030 [ 73.716902][ T5832] ? process_scheduled_works+0xa8d/0x18c0 [ 73.716929][ T5832] process_scheduled_works+0xb6e/0x18c0 [ 73.716981][ T5832] ? __pfx_process_scheduled_works+0x10/0x10 [ 73.717011][ T5832] ? assign_work+0x3d5/0x5e0 [ 73.717040][ T5832] worker_thread+0xa53/0xfc0 [ 73.717090][ T5832] kthread+0x388/0x470 [ 73.717109][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 73.717132][ T5832] ? __pfx_kthread+0x10/0x10 [ 73.717152][ T5832] ret_from_fork+0x51e/0xb90 [ 73.717179][ T5832] ? __pfx_ret_from_fork+0x10/0x10 [ 73.717203][ T5832] ? __switch_to+0xc7d/0x1450 [ 73.717229][ T5832] ? __pfx_kthread+0x10/0x10 [ 73.717247][ T5832] ret_from_fork_asm+0x1a/0x30 [ 73.717291][ T5832] [ 73.717318][ T5832] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 73.800930][ T5832] Bluetooth: hci1: failed to register connection device [ 74.124652][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.146602][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.442965][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.459425][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8'. [ 74.554127][ T5951] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.748892][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 74.767517][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 74.788705][ T10] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 75.057494][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 75.108486][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 75.119772][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.134372][ T51] Bluetooth: hci4: command tx timeout [ 75.144328][ T10] usb 4-1: Product: syz [ 75.148520][ T10] usb 4-1: Manufacturer: syz [ 75.153227][ T10] usb 4-1: SerialNumber: syz [ 75.409696][ T10] smsusb:smsusb_probe: board id=8, interface number 0 [ 75.473506][ T10] smsusb:smsusb_probe: Device initialized with return code -19 [ 75.663776][ T10] usb 4-1: USB disconnect, device number 2 [ 75.684085][ T51] Bluetooth: hci1: command tx timeout [ 75.689990][ T51] Bluetooth: hci2: command tx timeout [ 75.761098][ C1] sd 0:0:1:0: [sda] tag#4328 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 75.764034][ T5832] Bluetooth: hci0: command tx timeout [ 75.771607][ C1] sd 0:0:1:0: [sda] tag#4328 CDB: Read(6) 08 00 00 00 00 00 [ 75.777001][ T51] Bluetooth: hci3: command tx timeout [ 75.785100][ C1] sd 0:0:1:0: [sda] tag#4329 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 75.799963][ C1] sd 0:0:1:0: [sda] tag#4329 CDB: Read(6) 08 00 00 00 00 00 [ 75.807389][ C1] sd 0:0:1:0: [sda] tag#4330 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 75.817786][ C1] sd 0:0:1:0: [sda] tag#4330 CDB: Read(6) 08 00 00 00 00 00 [ 75.825187][ C1] sd 0:0:1:0: [sda] tag#4331 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 75.835581][ C1] sd 0:0:1:0: [sda] tag#4331 CDB: Read(6) 08 00 00 00 00 00 [ 75.842958][ C1] sd 0:0:1:0: [sda] tag#4332 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 75.853371][ C1] sd 0:0:1:0: [sda] tag#4332 CDB: Read(6) 08 00 00 00 00 00 [ 75.860774][ C1] sd 0:0:1:0: [sda] tag#4333 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 75.871165][ C1] sd 0:0:1:0: [sda] tag#4333 CDB: Read(6) 08 00 00 00 00 00 [ 75.878564][ C1] sd 0:0:1:0: [sda] tag#4334 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 75.888958][ C1] sd 0:0:1:0: [sda] tag#4334 CDB: Read(6) 08 00 00 00 00 00 [ 75.896436][ C1] sd 0:0:1:0: [sda] tag#4335 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 75.906825][ C1] sd 0:0:1:0: [sda] tag#4335 CDB: Read(6) 08 00 00 00 00 00 [ 75.914213][ C1] sd 0:0:1:0: [sda] tag#4336 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 75.924597][ C1] sd 0:0:1:0: [sda] tag#4336 CDB: Read(6) 08 00 00 00 00 00 [ 75.931975][ C1] sd 0:0:1:0: [sda] tag#4337 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 75.942382][ C1] sd 0:0:1:0: [sda] tag#4337 CDB: Read(6) 08 00 00 00 00 00 [ 76.102487][ T5965] input: syz1 as /devices/virtual/input/input5 [ 76.755170][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.844598][ T5972] warning: `syz.2.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.947995][ T10] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 76.971968][ T10] usb 5-1: config 0 has no interface number 0 [ 76.999577][ T5897] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.024766][ T10] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.048684][ T10] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.064834][ T10] usb 5-1: config 0 interface 8 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.078156][ T10] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 77.088095][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.140213][ T10] usb 5-1: config 0 descriptor?? [ 77.200438][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 77.216657][ T5897] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 77.331860][ T5897] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 77.341674][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.353373][ T5897] usb 4-1: Product: syz [ 77.383914][ T797] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.395707][ T5897] usb 4-1: Manufacturer: syz [ 77.408685][ T5897] usb 4-1: SerialNumber: syz [ 77.441262][ T5897] r8152-cfgselector 4-1: Unknown version 0x0000 [ 77.450301][ T5897] r8152-cfgselector 4-1: config 0 descriptor?? [ 77.614577][ T10] uclogic 0003:28BD:0042.0001: interface is invalid, ignoring [ 77.845261][ T797] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 77.847595][ T5825] usb 5-1: USB disconnect, device number 2 [ 77.856765][ T797] usb 2-1: config 0 has no interface number 0 [ 77.869321][ T797] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.952733][ T797] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.972769][ T797] usb 2-1: config 0 interface 8 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.996772][ T797] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 78.007475][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.026592][ T5970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.359506][ T797] usb 2-1: config 0 descriptor?? [ 78.360758][ T5970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.556803][ T5897] r8152-cfgselector 4-1: Needed 1 retries to read version [ 78.884200][ T797] uclogic 0003:28BD:0042.0002: interface is invalid, ignoring [ 78.919430][ T5994] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.100216][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'. [ 79.141853][ T797] usb 2-1: USB disconnect, device number 2 [ 79.405041][ T1210] r8152-cfgselector 4-1: USB disconnect, device number 3 [ 80.194267][ T1210] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 80.314276][ T5834] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.353949][ T1210] usb 2-1: Using ep0 maxpacket: 8 [ 80.360678][ T1210] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 80.369247][ T1210] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 80.379370][ T1210] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 80.393965][ T1210] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 80.489886][ T1210] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.543965][ T5834] usb 5-1: Using ep0 maxpacket: 8 [ 80.552580][ T1210] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 80.555097][ T5834] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 80.571699][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.586039][ T5834] usb 5-1: Product: syz [ 80.593723][ T5834] usb 5-1: Manufacturer: syz [ 80.595074][ T1210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.607107][ T5834] usb 5-1: SerialNumber: syz [ 80.616301][ T5834] usb 5-1: config 0 descriptor?? [ 80.635941][ T5834] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 81.200826][ T29] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.358516][ T29] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 81.390221][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.434786][ T29] usb 3-1: Product: syz [ 81.450483][ T24] cfg80211: failed to load regulatory.db [ 81.460184][ T29] usb 3-1: Manufacturer: syz [ 81.505680][ T29] usb 3-1: SerialNumber: syz [ 81.516170][ T29] usb 3-1: config 0 descriptor?? [ 81.526257][ T29] ch341 3-1:0.0: ch341-uart converter detected [ 81.816177][ T6035] Cannot find add_set index 3 as target [ 81.836894][ T1210] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 82.223733][ T1210] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 82.239997][ T1210] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 82.295169][ T29] usb 3-1: failed to send control message: -71 [ 82.311821][ T29] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 82.347824][ T29] usb 3-1: USB disconnect, device number 2 [ 82.372446][ T29] ch341 3-1:0.0: device disconnected [ 82.413090][ T1210] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.427601][ T1210] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 82.439179][ T1210] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 82.865177][ T1210] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 82.873551][ T1210] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 82.885231][ T1210] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.899551][ T1210] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 82.911194][ T1210] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 82.923976][ T1210] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 82.931684][ T1210] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 82.944909][ T1210] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.958800][ T1210] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 82.973068][ T1210] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 82.988335][ T1210] usb 4-1: string descriptor 0 read error: -22 [ 82.995081][ T1210] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 83.006510][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.052726][ T1210] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 83.454170][ T5834] gspca_sonixj: reg_w1 err -71 [ 83.479393][ T6048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.511017][ T6049] Zero length message leads to an empty skb [ 83.777473][ T6048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.945097][ T5834] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 83.955980][ T5834] usb 5-1: USB disconnect, device number 3 [ 84.100865][ T1210] usb 4-1: USB disconnect, device number 4 [ 85.324793][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.493933][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 85.515531][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 85.533490][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.570184][ T10] usb 1-1: Product: syz [ 85.604295][ T10] usb 1-1: Manufacturer: syz [ 85.624478][ T10] usb 1-1: SerialNumber: syz [ 85.661270][ T10] usb 1-1: config 0 descriptor?? [ 85.678598][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 86.103938][ T29] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 86.252804][ T6078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.38'. [ 86.309258][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.325689][ T29] usb 5-1: config 0 has no interfaces? [ 86.338836][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.387114][ T29] usb 5-1: config 0 has no interfaces? [ 86.403614][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.431163][ T29] usb 5-1: config 0 has no interfaces? [ 86.451244][ T29] usb 5-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 86.474789][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.497058][ T29] usb 5-1: Product: syz [ 86.507273][ T29] usb 5-1: Manufacturer: syz [ 86.520643][ T29] usb 5-1: SerialNumber: syz [ 86.542252][ T29] usb 5-1: config 0 descriptor?? [ 86.718946][ T6005] usbtmc 2-1:16.0: simple usb_control_msg failed -110 [ 86.847967][ T29] usb 2-1: USB disconnect, device number 3 [ 87.229970][ T5897] usb 5-1: USB disconnect, device number 4 [ 87.421354][ T6086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 87.733985][ T29] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 88.085079][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 88.128170][ T29] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 88.203954][ T29] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 88.219459][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.231440][ T29] usb 5-1: Product: syz [ 88.241174][ T29] usb 5-1: Manufacturer: syz [ 88.253228][ T29] usb 5-1: SerialNumber: syz [ 88.401938][ T29] r8152-cfgselector 5-1: Unknown version 0x0000 [ 88.413888][ T29] r8152-cfgselector 5-1: config 0 descriptor?? [ 88.557961][ T10] gspca_sonixj: reg_w1 err -71 [ 88.613952][ T10] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 88.629649][ T6090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.661288][ T6090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.669416][ T10] usb 1-1: USB disconnect, device number 2 [ 88.721402][ T29] r8152-cfgselector 5-1: Needed 1 retries to read version [ 88.947645][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 89.183126][ T6110] syzkaller0: entered promiscuous mode [ 89.190174][ T6110] syzkaller0: entered allmulticast mode [ 89.276028][ T6110] tipc: Started in network mode [ 89.280979][ T6110] tipc: Node identity 46956249a093, cluster identity 4711 [ 89.307742][ T6110] tipc: Enabled bearer , priority 0 [ 89.325462][ T6109] tipc: Resetting bearer [ 89.358135][ T6109] tipc: Disabling bearer [ 89.473426][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'. [ 89.617518][ T5834] r8152-cfgselector 5-1: USB disconnect, device number 5 [ 89.756722][ T6127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'. [ 90.116231][ T6136] syzkaller0: entered promiscuous mode [ 90.123625][ T6136] syzkaller0: entered allmulticast mode [ 90.231431][ T6136] tipc: Started in network mode [ 90.237150][ T6136] tipc: Node identity 269b699d3825, cluster identity 4711 [ 90.262910][ T6136] tipc: Enabled bearer , priority 0 [ 90.302647][ T6135] tipc: Resetting bearer [ 90.358973][ T6135] tipc: Disabling bearer [ 90.452217][ T5897] IPVS: starting estimator thread 0... [ 90.463176][ T6139] IPVS: lc: FWM 3 0x00000003 - no destination available [ 90.578403][ T6140] IPVS: using max 34 ests per chain, 81600 per kthread [ 90.592233][ T6145] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 90.741621][ T6151] netlink: 44 bytes leftover after parsing attributes in process `syz.0.60'. [ 90.767517][ T6151] netlink: 31 bytes leftover after parsing attributes in process `syz.0.60'. [ 90.806964][ T6151] netlink: 'syz.0.60': attribute type 4 has an invalid length. [ 90.964813][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.61'. [ 91.026188][ T6162] netlink: 168 bytes leftover after parsing attributes in process `syz.0.62'. [ 91.043090][ T6162] FAULT_INJECTION: forcing a failure. [ 91.043090][ T6162] name failslab, interval 1, probability 0, space 0, times 0 [ 91.055929][ T6162] CPU: 0 UID: 0 PID: 6162 Comm: syz.0.62 Not tainted syzkaller #0 PREEMPT(full) [ 91.055944][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 91.055950][ T6162] Call Trace: [ 91.055955][ T6162] [ 91.055959][ T6162] dump_stack_lvl+0xe8/0x150 [ 91.055979][ T6162] should_fail_ex+0x412/0x560 [ 91.055997][ T6162] should_failslab+0xa8/0x100 [ 91.056011][ T6162] ? xfrm_state_alloc+0x24/0x2f0 [ 91.056022][ T6162] kmem_cache_alloc_noprof+0x87/0x650 [ 91.056036][ T6162] xfrm_state_alloc+0x24/0x2f0 [ 91.056047][ T6162] __find_acq_core+0x859/0x1a70 [ 91.056067][ T6162] xfrm_find_acq+0x78/0xa0 [ 91.056083][ T6162] xfrm_alloc_userspi+0x6b4/0xcd0 [ 91.056106][ T6162] ? __pfx_xfrm_alloc_userspi+0x10/0x10 [ 91.056122][ T6162] ? __nla_parse+0x40/0x60 [ 91.056133][ T6162] xfrm_user_rcv_msg+0x746/0xb20 [ 91.056150][ T6162] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 91.056178][ T6162] ? __pfx___mutex_trylock_common+0x10/0x10 [ 91.056196][ T6162] ? rcu_is_watching+0x15/0xb0 [ 91.056211][ T6162] ? trace_contention_end+0x3d/0x150 [ 91.056227][ T6162] ? __mutex_lock+0x319/0x1300 [ 91.056242][ T6162] netlink_rcv_skb+0x232/0x4b0 [ 91.056258][ T6162] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 91.056272][ T6162] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 91.056299][ T6162] ? netlink_deliver_tap+0x2e/0x1b0 [ 91.056314][ T6162] ? netlink_deliver_tap+0x2e/0x1b0 [ 91.056330][ T6162] xfrm_netlink_rcv+0x79/0x90 [ 91.056344][ T6162] netlink_unicast+0x80f/0x9b0 [ 91.056361][ T6162] ? __pfx_netlink_unicast+0x10/0x10 [ 91.056375][ T6162] ? netlink_sendmsg+0x650/0xb40 [ 91.056390][ T6162] ? skb_put+0x11b/0x210 [ 91.056402][ T6162] netlink_sendmsg+0x813/0xb40 [ 91.056421][ T6162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.056438][ T6162] ? aa_sock_msg_perm+0xf1/0x1b0 [ 91.056454][ T6162] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 91.056468][ T6162] ____sys_sendmsg+0x972/0x9f0 [ 91.056484][ T6162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.056497][ T6162] ? kstrtoull+0x12f/0x1d0 [ 91.056515][ T6162] ___sys_sendmsg+0x2a5/0x360 [ 91.056529][ T6162] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.056541][ T6162] ? get_pid_task+0x20/0x1f0 [ 91.056551][ T6162] ? get_pid_task+0x20/0x1f0 [ 91.056558][ T6162] ? get_pid_task+0x20/0x1f0 [ 91.056579][ T6162] ? __fget_files+0x2a/0x420 [ 91.056594][ T6162] ? __fget_files+0x3a0/0x420 [ 91.056613][ T6162] __sys_sendmsg+0x183/0x260 [ 91.056625][ T6162] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.056647][ T6162] __do_fast_syscall_32+0x20d/0x640 [ 91.056660][ T6162] ? do_fast_syscall_32+0x33/0x70 [ 91.056671][ T6162] ? asm_int80_emulation+0x1a/0x20 [ 91.056681][ T6162] ? do_int80_emulation+0x274/0x4d0 [ 91.056692][ T6162] ? trace_irq_disable+0x3b/0x150 [ 91.056709][ T6162] do_fast_syscall_32+0x33/0x70 [ 91.056721][ T6162] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.056734][ T6162] RIP: 0023:0xf7f54f6c [ 91.056753][ T6162] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 91.056761][ T6162] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 91.056773][ T6162] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 91.056780][ T6162] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.056785][ T6162] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.056791][ T6162] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 91.056796][ T6162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.056810][ T6162] [ 91.504597][ T6166] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.604254][ T6166] FAULT_INJECTION: forcing a failure. [ 91.604254][ T6166] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 91.685556][ T6166] CPU: 1 UID: 0 PID: 6166 Comm: syz.4.64 Not tainted syzkaller #0 PREEMPT(full) [ 91.685580][ T6166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 91.685591][ T6166] Call Trace: [ 91.685598][ T6166] [ 91.685606][ T6166] dump_stack_lvl+0xe8/0x150 [ 91.685636][ T6166] should_fail_ex+0x412/0x560 [ 91.685674][ T6166] _copy_to_user+0x31/0xb0 [ 91.685696][ T6166] simple_read_from_buffer+0xe1/0x170 [ 91.685726][ T6166] proc_fail_nth_read+0x1bb/0x230 [ 91.685752][ T6166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.685778][ T6166] ? rw_verify_area+0x2a6/0x4d0 [ 91.685794][ T6166] ? tun_chr_write_iter+0x18a/0x200 [ 91.685810][ T6166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.685836][ T6166] vfs_read+0x20c/0xa70 [ 91.685852][ T6166] ? fdget_pos+0x246/0x320 [ 91.685882][ T6166] ? __pfx___mutex_lock+0x10/0x10 [ 91.685904][ T6166] ? __pfx_vfs_read+0x10/0x10 [ 91.685925][ T6166] ? __fget_files+0x2a/0x420 [ 91.685954][ T6166] ? __fget_files+0x3a0/0x420 [ 91.685979][ T6166] ? __fget_files+0x2a/0x420 [ 91.686012][ T6166] ksys_read+0x150/0x270 [ 91.686033][ T6166] ? __pfx_ksys_read+0x10/0x10 [ 91.686055][ T6166] ? asm_int80_emulation+0x1a/0x20 [ 91.686078][ T6166] do_int80_emulation+0x173/0x4d0 [ 91.686099][ T6166] ? trace_irq_disable+0x3b/0x150 [ 91.686124][ T6166] ? asm_int80_emulation+0x1a/0x20 [ 91.686138][ T6166] ? clear_bhb_loop+0x40/0x90 [ 91.686154][ T6166] ? clear_bhb_loop+0x40/0x90 [ 91.686175][ T6166] asm_int80_emulation+0x1a/0x20 [ 91.686192][ T6166] RIP: 0023:0xf7155cab [ 91.686208][ T6166] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 91.686223][ T6166] RSP: 002b:00000000f54164bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 91.686242][ T6166] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54165d0 [ 91.686254][ T6166] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 91.686264][ T6166] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.686274][ T6166] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 91.686284][ T6166] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.686308][ T6166] [ 92.302614][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.67'. [ 92.443920][ T5897] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 92.844838][ T5897] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 92.854309][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.862334][ T5897] usb 5-1: Product: syz [ 92.924165][ T5897] usb 5-1: Manufacturer: syz [ 92.928806][ T5897] usb 5-1: SerialNumber: syz [ 92.955512][ T5897] usb 5-1: config 0 descriptor?? [ 93.188989][ T5897] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 93.734662][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.72'. [ 93.875930][ T6200] syzkaller0: entered promiscuous mode [ 93.881507][ T6200] syzkaller0: entered allmulticast mode [ 93.895688][ T1210] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 94.069899][ T1210] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 94.079318][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.083887][ T5834] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.087960][ T1210] usb 2-1: Product: syz [ 94.099922][ T1210] usb 2-1: Manufacturer: syz [ 94.104814][ T1210] usb 2-1: SerialNumber: syz [ 94.125966][ T1210] usb 2-1: config 0 descriptor?? [ 94.256098][ T5834] usb 3-1: Using ep0 maxpacket: 32 [ 94.275510][ T5834] usb 3-1: unable to get BOS descriptor or descriptor too short [ 94.289642][ T5834] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.299959][ T5834] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.333527][ T5834] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 94.347210][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.355699][ T5834] usb 3-1: Product: syz [ 94.365481][ T5834] usb 3-1: Manufacturer: syz [ 94.379470][ T5834] usb 3-1: SerialNumber: syz [ 94.607256][ T6204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.630654][ T6204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.667541][ T5834] usb 3-1: unit 77 not found! [ 94.695404][ T5834] usb 3-1: unit 242 not found! [ 94.798855][ T1210] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 94.807672][ T1210] usb 2-1: Firmware version (0.0) predates our first public release. [ 94.816097][ T1210] usb 2-1: Please update to version 0.2 or newer [ 94.902979][ T5834] usb 3-1: USB disconnect, device number 3 [ 94.949230][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.002498][ T1210] usb 2-1: Firmware: build [ 95.027471][ T5897] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 95.046261][ T5897] usb 5-1: USB disconnect, device number 6 [ 95.279640][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 95.693411][ T1210] usb 2-1: USB disconnect, device number 4 [ 95.866949][ T6231] Cannot find add_set index 3 as target [ 96.003473][ T5897] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 96.166033][ T5897] usb 5-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config [ 96.187709][ T5897] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.220231][ T5897] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 96.234826][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 96.259801][ T5897] usb 5-1: SerialNumber: syz [ 96.821959][ T6238] syzkaller0: entered promiscuous mode [ 96.828470][ T6238] syzkaller0: entered allmulticast mode [ 96.906002][ T6238] tipc: Enabled bearer , priority 0 [ 96.917911][ T6237] tipc: Resetting bearer [ 97.013465][ T5897] usb 5-1: 0:2 : does not exist [ 97.051428][ T6237] tipc: Disabling bearer [ 97.176572][ T5897] usb 5-1: USB disconnect, device number 7 [ 97.262457][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 97.454305][ T6253] process 'syz.2.87' launched './file0' with NULL argv: empty string added [ 97.713911][ T5897] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 97.782429][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 97.937322][ T5897] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 97.947270][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.960752][ T5897] usb 4-1: Product: syz [ 97.965492][ T5897] usb 4-1: Manufacturer: syz [ 97.971758][ T5897] usb 4-1: SerialNumber: syz [ 97.987369][ T5897] usb 4-1: config 0 descriptor?? [ 98.196975][ T5897] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 98.454985][ T29] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 98.689852][ T29] usb 5-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config [ 98.715800][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.751512][ T29] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 98.772027][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 98.803396][ T29] usb 5-1: SerialNumber: syz [ 98.999570][ T6286] Cannot find add_set index 3 as target [ 99.436221][ T6294] syzkaller0: entered promiscuous mode [ 99.441743][ T6294] syzkaller0: entered allmulticast mode [ 99.468790][ T6294] tipc: Started in network mode [ 99.477222][ T6294] tipc: Node identity 7aa215954f2c, cluster identity 4711 [ 99.493007][ T6294] tipc: Enabled bearer , priority 0 [ 99.891829][ T29] usb 5-1: 0:2 : does not exist [ 99.964630][ T6290] tipc: Resetting bearer [ 100.089635][ T6290] tipc: Disabling bearer [ 100.096215][ T5897] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 100.097144][ T29] usb 5-1: USB disconnect, device number 8 [ 100.124573][ T5897] usb 4-1: USB disconnect, device number 5 [ 100.189022][ T6031] udevd[6031]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.747034][ T6323] kernel profiling enabled (shift: 18) [ 101.018001][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.106'. [ 101.096868][ T797] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 101.109522][ T6328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.108'. [ 101.142386][ T6328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.108'. [ 101.253873][ T797] usb 5-1: Using ep0 maxpacket: 8 [ 101.262836][ T797] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 101.272145][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.310033][ T797] usb 5-1: Product: syz [ 101.317673][ T797] usb 5-1: Manufacturer: syz [ 101.322803][ T797] usb 5-1: SerialNumber: syz [ 101.352362][ T797] usb 5-1: config 0 descriptor?? [ 101.362832][ T797] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 102.050426][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.111'. [ 102.123830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.163832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 102.180625][ T29] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 102.377375][ T29] usb 2-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config [ 102.409738][ T29] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.455347][ T29] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 102.475108][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 102.510468][ T29] usb 2-1: SerialNumber: syz [ 102.754604][ T5834] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.835888][ T6354] FAULT_INJECTION: forcing a failure. [ 102.835888][ T6354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.849106][ T6354] CPU: 0 UID: 0 PID: 6354 Comm: syz.3.116 Not tainted syzkaller #0 PREEMPT(full) [ 102.849130][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.849141][ T6354] Call Trace: [ 102.849151][ T6354] [ 102.849159][ T6354] dump_stack_lvl+0xe8/0x150 [ 102.849189][ T6354] should_fail_ex+0x412/0x560 [ 102.849211][ T6354] _copy_from_user+0x2d/0xb0 [ 102.849224][ T6354] get_compat_msghdr+0xb3/0x4c0 [ 102.849235][ T6354] ? __lock_acquire+0x6b5/0x2cf0 [ 102.849251][ T6354] ? __pfx_get_compat_msghdr+0x10/0x10 [ 102.849276][ T6354] ___sys_sendmsg+0x201/0x360 [ 102.849304][ T6354] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.849328][ T6354] ? kstrtoull+0x12f/0x1d0 [ 102.849362][ T6354] ? __fget_files+0x2a/0x420 [ 102.849377][ T6354] ? __fget_files+0x3a0/0x420 [ 102.849397][ T6354] __sys_sendmmsg+0x2e7/0x4e0 [ 102.849414][ T6354] ? __pfx___sys_sendmmsg+0x10/0x10 [ 102.849456][ T6354] ? fput+0xa0/0xd0 [ 102.849480][ T6354] ? ksys_write+0x242/0x270 [ 102.849506][ T6354] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 102.849526][ T6354] __do_fast_syscall_32+0x20d/0x640 [ 102.849549][ T6354] ? do_fast_syscall_32+0x33/0x70 [ 102.849569][ T6354] ? asm_int80_emulation+0x1a/0x20 [ 102.849585][ T6354] ? do_int80_emulation+0x274/0x4d0 [ 102.849605][ T6354] ? trace_irq_disable+0x3b/0x150 [ 102.849635][ T6354] do_fast_syscall_32+0x33/0x70 [ 102.849653][ T6354] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.849666][ T6354] RIP: 0023:0xf7fd3f6c [ 102.849676][ T6354] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 102.849684][ T6354] RSP: 002b:00000000f547550c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 102.849696][ T6354] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000ec0 [ 102.849703][ T6354] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.849710][ T6354] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.849719][ T6354] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 102.849730][ T6354] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.849755][ T6354] [ 102.915690][ T5834] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 103.079605][ T5834] usb 3-1: config 0 has no interface number 0 [ 103.086282][ T5834] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.097416][ T5834] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.107356][ T5834] usb 3-1: config 0 interface 8 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.121452][ T5834] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 103.138144][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.152766][ T5834] usb 3-1: config 0 descriptor?? [ 103.359402][ T29] usb 2-1: 0:2 : does not exist [ 103.374148][ T5897] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 103.441519][ T29] usb 2-1: USB disconnect, device number 5 [ 103.514945][ T6031] udevd[6031]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.558026][ T5897] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 103.573892][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.607489][ T5897] usb 4-1: Product: syz [ 103.638512][ T6371] Cannot find add_set index 3 as target [ 103.655881][ T5834] usbhid 3-1:0.8: can't add hid device: -71 [ 103.662099][ T5834] usbhid 3-1:0.8: probe with driver usbhid failed with error -71 [ 103.673360][ T5834] usb 3-1: USB disconnect, device number 4 [ 103.700401][ T5897] usb 4-1: Manufacturer: syz [ 103.711043][ T5897] usb 4-1: SerialNumber: syz [ 103.809633][ T5897] usb 4-1: config 0 descriptor?? [ 104.042021][ T5897] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 104.072237][ T797] gspca_sonixj: reg_w1 err -71 [ 104.160975][ T797] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 104.324319][ T797] usb 5-1: USB disconnect, device number 9 [ 104.814434][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 104.974793][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 104.982333][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 104.995281][ T10] usb 3-1: config 7 has an invalid interface number: 192 but max is 0 [ 105.003717][ T10] usb 3-1: config 7 has no interface number 0 [ 105.069954][ T10] usb 3-1: config 7 interface 192 has no altsetting 0 [ 105.086967][ T10] usb 3-1: New USB device found, idVendor=0421, idProduct=0128, bcdDevice=a6.39 [ 105.098601][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.115109][ T10] usb 3-1: Product: syz [ 105.120853][ T10] usb 3-1: Manufacturer: syz [ 105.126920][ T1210] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 105.136278][ T10] usb 3-1: SerialNumber: syz [ 105.313919][ T1210] usb 2-1: Using ep0 maxpacket: 8 [ 105.320709][ T1210] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 105.333931][ T1210] usb 2-1: config 0 has no interface number 0 [ 105.340038][ T1210] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 105.356377][ T10] usb 3-1: bad CDC descriptors [ 105.370471][ T1210] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 105.399259][ T10] usb 3-1: USB disconnect, device number 5 [ 105.408336][ T1210] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 105.423891][ T1210] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 105.438957][ T1210] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 105.450156][ T1210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.470273][ T1210] usb 2-1: config 0 descriptor?? [ 105.580941][ T1210] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 105.707232][ T6390] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 105.773953][ T29] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.884894][ T6401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.127'. [ 105.927702][ T5897] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 105.936137][ T29] usb 1-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 105.953403][ T29] usb 1-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 105.974994][ T5897] usb 4-1: USB disconnect, device number 6 [ 105.993345][ T29] usb 1-1: Product: syz [ 106.006067][ T29] usb 1-1: Manufacturer: syz [ 106.017410][ T29] usb 1-1: SerialNumber: syz [ 106.039232][ T29] usb 1-1: config 0 descriptor?? [ 106.269297][ T797] usb 1-1: USB disconnect, device number 3 [ 106.846559][ T797] usb 2-1: USB disconnect, device number 6 [ 106.855738][ T797] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 106.864035][ T1210] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 107.173888][ T1210] usb 4-1: Using ep0 maxpacket: 32 [ 107.181799][ T6408] syz.3.129 uses obsolete (PF_INET,SOCK_PACKET) [ 107.189595][ T6408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.199709][ T6408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.216245][ T6408] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 107.231279][ T1210] usb 4-1: unable to get BOS descriptor or descriptor too short [ 107.271005][ T1210] usb 4-1: no configurations [ 107.276718][ T1210] usb 4-1: can't read configurations, error -22 [ 107.594005][ T5897] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 107.765612][ T5897] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 107.784933][ T5897] usb 5-1: config 0 has no interface number 0 [ 107.800159][ T5897] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.815145][ T5897] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.827305][ T5897] usb 5-1: config 0 interface 8 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.844287][ T5897] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 107.853600][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.898737][ T5897] usb 5-1: config 0 descriptor?? [ 108.102623][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'. [ 108.389510][ T5897] usbhid 5-1:0.8: can't add hid device: -71 [ 108.502028][ T5897] usbhid 5-1:0.8: probe with driver usbhid failed with error -71 [ 108.519103][ T5897] usb 5-1: USB disconnect, device number 10 [ 108.998785][ T30] audit: type=1326 audit(1774065902.451:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.2.136" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x0 [ 109.784707][ T29] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 109.924776][ T5834] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 110.081610][ T29] usb 2-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config [ 110.092012][ T29] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.105002][ T29] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 110.263914][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 110.303481][ T5834] usb 4-1: Using ep0 maxpacket: 16 [ 110.383168][ T5834] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 110.391653][ T29] usb 2-1: SerialNumber: syz [ 110.405918][ T5834] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 110.431797][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.484086][ T5834] usb 4-1: Product: syz [ 110.527588][ T5834] usb 4-1: Manufacturer: syz [ 110.532349][ T5834] usb 4-1: SerialNumber: syz [ 110.543422][ T5834] r8152-cfgselector 4-1: Unknown version 0x0000 [ 110.550543][ T5834] r8152-cfgselector 4-1: config 0 descriptor?? [ 110.771035][ T6452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.804042][ T6452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.837918][ T5834] r8152-cfgselector 4-1: Needed 1 retries to read version [ 111.170978][ T29] usb 2-1: 0:2 : does not exist [ 111.308197][ T29] usb 2-1: USB disconnect, device number 7 [ 111.342080][ T6031] udevd[6031]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.355067][ T5834] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 111.376665][ T797] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.533899][ T797] usb 1-1: Using ep0 maxpacket: 8 [ 111.541505][ T5834] usb 5-1: unable to get BOS descriptor or descriptor too short [ 111.550551][ T5834] usb 5-1: not running at top speed; connect to a high speed hub [ 111.561276][ T797] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 111.571562][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.579768][ T5834] usb 5-1: config 255 has an invalid interface number: 180 but max is 0 [ 111.588547][ T797] usb 1-1: Product: syz [ 111.590198][ T1210] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 111.592710][ T797] usb 1-1: Manufacturer: syz [ 111.605398][ T5834] usb 5-1: config 255 has no interface number 0 [ 111.611679][ T5834] usb 5-1: config 255 interface 180 altsetting 9 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 111.622977][ T797] usb 1-1: SerialNumber: syz [ 111.628828][ T5834] usb 5-1: config 255 interface 180 has no altsetting 0 [ 111.636979][ T797] usb 1-1: config 0 descriptor?? [ 111.651094][ T797] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 111.658317][ T5834] usb 5-1: New USB device found, idVendor=0742, idProduct=2008, bcdDevice=76.8d [ 111.667495][ T29] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 111.676622][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.688846][ T5834] usb 5-1: Product: syz [ 111.693012][ T5834] usb 5-1: Manufacturer: syz [ 111.698126][ T5834] usb 5-1: SerialNumber: syz [ 111.726749][ T5897] r8152-cfgselector 4-1: USB disconnect, device number 9 [ 111.788089][ T1210] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 111.797394][ T1210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.806008][ T1210] usb 3-1: Product: syz [ 111.810594][ T1210] usb 3-1: Manufacturer: syz [ 111.815715][ T1210] usb 3-1: SerialNumber: syz [ 111.823177][ T1210] usb 3-1: config 0 descriptor?? [ 111.833930][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 111.840756][ T29] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 111.905519][ T29] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 111.923049][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.931649][ T29] usb 2-1: Product: syz [ 111.937661][ T29] usb 2-1: Manufacturer: syz [ 111.943333][ T29] usb 2-1: SerialNumber: syz [ 112.025453][ T29] r8152-cfgselector 2-1: Unknown version 0x0000 [ 112.031776][ T29] r8152-cfgselector 2-1: config 0 descriptor?? [ 112.126537][ T5834] HFC-S_USB 5-1:255.180: probe with driver HFC-S_USB failed with error -5 [ 112.231370][ T5834] usb 5-1: USB disconnect, device number 11 [ 112.306034][ T6465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.322749][ T6465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.398552][ T29] r8152-cfgselector 2-1: Needed 1 retries to read version [ 112.440613][ T1210] usb 3-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 112.454488][ T1210] usb 3-1: Firmware version (0.0) predates our first public release. [ 112.468858][ T1210] usb 3-1: Please update to version 0.2 or newer [ 112.745114][ T1210] usb 3-1: USB disconnect, device number 6 [ 113.045724][ T5897] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 113.212888][ T5897] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 113.244084][ T5897] usb 4-1: config 0 has no interface number 0 [ 113.265952][ T5897] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.306350][ T5897] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.319244][ T5897] usb 4-1: config 0 interface 8 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.361115][ T5897] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 113.371132][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.386432][ T5897] usb 4-1: config 0 descriptor?? [ 113.424344][ T29] r8152-cfgselector 2-1: USB disconnect, device number 8 [ 113.672085][ T6499] Cannot find add_set index 3 as target [ 113.723836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 113.856799][ T5897] usbhid 4-1:0.8: can't add hid device: -71 [ 113.863954][ T5897] usbhid 4-1:0.8: probe with driver usbhid failed with error -71 [ 113.971648][ T5897] usb 4-1: USB disconnect, device number 10 [ 114.329905][ T797] gspca_sonixj: reg_w1 err -71 [ 114.413689][ T797] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 114.425962][ T797] usb 1-1: USB disconnect, device number 4 [ 114.824063][ T5939] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 114.995496][ T5939] usb 4-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config [ 115.013390][ T5939] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.024245][ T5939] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 115.090008][ T5897] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 115.092800][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 115.262133][ T5939] usb 4-1: SerialNumber: syz [ 115.438436][ T5897] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.455476][ T5897] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.479187][ T5897] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 115.510561][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 115.533920][ T5897] usb 2-1: SerialNumber: syz [ 115.764948][ T6507] usb usb7: usbfs: interface 0 claimed by hub while 'syz.1.155' resets device [ 115.808401][ T5897] usb 2-1: 0:2 : does not exist [ 115.815520][ T5897] usb 2-1: unit 5 not found! [ 115.937441][ T5897] usb 2-1: USB disconnect, device number 9 [ 116.003177][ T5939] usb 4-1: 0:2 : does not exist [ 116.017279][ T6100] udevd[6100]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.162494][ T5939] usb 4-1: USB disconnect, device number 11 [ 116.664757][ T6100] udevd[6100]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.995031][ T6547] Cannot find add_set index 3 as target [ 117.963910][ T1210] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 118.118012][ T1210] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 118.153996][ T1210] usb 2-1: config 0 has no interface number 0 [ 118.187650][ T1210] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.234599][ T1210] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.255853][ T1210] usb 2-1: config 0 interface 8 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.275278][ T1210] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 118.285058][ T1210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.303068][ T1210] usb 2-1: config 0 descriptor?? [ 118.424087][ T5939] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 118.573952][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 118.675649][ T5939] usb 3-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config [ 118.686152][ T5939] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.713886][ T24] usb 4-1: device descriptor read/64, error -71 [ 118.907557][ T5939] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 118.915497][ T1210] usbhid 2-1:0.8: can't add hid device: -71 [ 118.916960][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 118.934209][ T5939] usb 3-1: SerialNumber: syz [ 118.941683][ T1210] usbhid 2-1:0.8: probe with driver usbhid failed with error -71 [ 118.980376][ T1210] usb 2-1: USB disconnect, device number 10 [ 119.103919][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 119.263941][ T24] usb 4-1: device descriptor read/64, error -71 [ 119.374288][ T24] usb usb4-port1: attempt power cycle [ 119.533944][ T1210] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 119.703892][ T1210] usb 5-1: Using ep0 maxpacket: 16 [ 119.724083][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 119.732679][ T1210] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 119.746508][ T5939] usb 3-1: 0:2 : does not exist [ 119.784531][ T24] usb 4-1: device descriptor read/8, error -71 [ 119.794284][ T1210] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 119.833334][ T5939] usb 3-1: USB disconnect, device number 7 [ 119.841559][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.857544][ T1210] usb 5-1: Product: syz [ 119.871952][ T1210] usb 5-1: Manufacturer: syz [ 119.879421][ T6031] udevd[6031]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.996259][ T1210] usb 5-1: SerialNumber: syz [ 120.012806][ T1210] r8152-cfgselector 5-1: Unknown version 0x0000 [ 120.020922][ T1210] r8152-cfgselector 5-1: config 0 descriptor?? [ 120.236813][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 120.242468][ T6571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.273051][ T6571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.315524][ T24] usb 4-1: device descriptor read/8, error -71 [ 120.349227][ T1210] r8152-cfgselector 5-1: Needed 1 retries to read version [ 120.434113][ T24] usb usb4-port1: unable to enumerate USB device [ 120.590015][ T6592] Cannot find add_set index 3 as target [ 121.221045][ T10] r8152-cfgselector 5-1: USB disconnect, device number 12 [ 121.964460][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 122.706608][ T24] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 122.714867][ T24] usb 1-1: config 0 has no interface number 0 [ 122.752179][ T24] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.813699][ T24] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.942834][ T24] usb 1-1: config 0 interface 8 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.982009][ T24] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 123.022123][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.052486][ T24] usb 1-1: config 0 descriptor?? [ 123.317753][ T1210] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 123.349600][ T6633] capability: warning: `syz.2.191' uses deprecated v2 capabilities in a way that may be insecure [ 123.487074][ T1210] usb 2-1: Using ep0 maxpacket: 16 [ 123.497973][ T24] usbhid 1-1:0.8: can't add hid device: -71 [ 123.504757][ T1210] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 123.523926][ T24] usbhid 1-1:0.8: probe with driver usbhid failed with error -71 [ 123.537324][ T1210] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 123.544266][ T24] usb 1-1: USB disconnect, device number 5 [ 123.553761][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.577650][ T1210] usb 2-1: Product: syz [ 123.581843][ T1210] usb 2-1: Manufacturer: syz [ 123.595987][ T1210] usb 2-1: SerialNumber: syz [ 123.638252][ T1210] r8152-cfgselector 2-1: Unknown version 0x0000 [ 123.645548][ T1210] r8152-cfgselector 2-1: config 0 descriptor?? [ 123.869171][ T6628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.909497][ T6628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.266019][ T1210] r8152-cfgselector 2-1: Needed 1 retries to read version [ 124.730970][ T6659] Cannot find add_set index 3 as target [ 125.159756][ T1210] r8152-cfgselector 2-1: USB disconnect, device number 11 [ 126.383998][ T1210] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 126.675840][ T1210] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 126.684046][ T1210] usb 3-1: config 0 has no interface number 0 [ 126.690751][ T1210] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.743987][ T1210] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.016897][ T1210] usb 3-1: config 0 interface 8 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.103706][ T1210] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 127.127048][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.139038][ T1210] usb 3-1: config 0 descriptor?? [ 127.524695][ T5939] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 127.569225][ T1210] usbhid 3-1:0.8: can't add hid device: -71 [ 127.585506][ T1210] usbhid 3-1:0.8: probe with driver usbhid failed with error -71 [ 127.629436][ T1210] usb 3-1: USB disconnect, device number 8 [ 127.687180][ T5939] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 127.696470][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.714034][ T5939] usb 5-1: Product: syz [ 127.724146][ T5939] usb 5-1: Manufacturer: syz [ 127.728799][ T5939] usb 5-1: SerialNumber: syz [ 127.915947][ T5939] usb 5-1: config 0 descriptor?? [ 128.567294][ T5939] usb 5-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 128.576741][ T5939] usb 5-1: Firmware version (0.0) predates our first public release. [ 128.604037][ T5939] usb 5-1: Please update to version 0.2 or newer [ 128.836437][ T5939] usb 5-1: USB disconnect, device number 13 [ 130.032932][ T6736] Cannot find add_set index 3 as target [ 130.258506][ T6739] FAULT_INJECTION: forcing a failure. [ 130.258506][ T6739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.321722][ T6739] CPU: 1 UID: 0 PID: 6739 Comm: syz.3.218 Not tainted syzkaller #0 PREEMPT(full) [ 130.321738][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 130.321749][ T6739] Call Trace: [ 130.321754][ T6739] [ 130.321759][ T6739] dump_stack_lvl+0xe8/0x150 [ 130.321785][ T6739] should_fail_ex+0x412/0x560 [ 130.321803][ T6739] _copy_from_user+0x2d/0xb0 [ 130.321817][ T6739] kstrtouint_from_user+0xd6/0x180 [ 130.321834][ T6739] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 130.321857][ T6739] proc_fail_nth_write+0x8e/0x210 [ 130.321873][ T6739] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 130.321890][ T6739] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 130.321905][ T6739] vfs_write+0x29a/0xb90 [ 130.321921][ T6739] ? __pfx_vfs_write+0x10/0x10 [ 130.321935][ T6739] ? __fget_files+0x2a/0x420 [ 130.321952][ T6739] ? __fget_files+0x3a0/0x420 [ 130.321966][ T6739] ? __fget_files+0x2a/0x420 [ 130.321994][ T6739] ksys_write+0x150/0x270 [ 130.322015][ T6739] ? __pfx_ksys_write+0x10/0x10 [ 130.322036][ T6739] ? asm_int80_emulation+0x1a/0x20 [ 130.322058][ T6739] do_int80_emulation+0x173/0x4d0 [ 130.322079][ T6739] ? trace_irq_disable+0x3b/0x150 [ 130.322094][ T6739] ? asm_int80_emulation+0x1a/0x20 [ 130.322103][ T6739] ? clear_bhb_loop+0x40/0x90 [ 130.322113][ T6739] ? clear_bhb_loop+0x40/0x90 [ 130.322126][ T6739] asm_int80_emulation+0x1a/0x20 [ 130.322135][ T6739] RIP: 0023:0xf71d5cab [ 130.322151][ T6739] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 130.322159][ T6739] RSP: 002b:00000000f54754bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 130.322175][ T6739] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54755d0 [ 130.322182][ T6739] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.322188][ T6739] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.322193][ T6739] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 130.322199][ T6739] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.322213][ T6739] [ 130.859023][ T6748] hub 9-0:1.0: USB hub found [ 130.864605][ T6748] hub 9-0:1.0: 1 port detected [ 130.884003][ T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 131.137263][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 131.146468][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.161698][ T10] usb 1-1: Product: syz [ 131.173839][ T10] usb 1-1: Manufacturer: syz [ 131.187419][ T10] usb 1-1: SerialNumber: syz [ 131.202813][ T10] usb 1-1: config 0 descriptor?? [ 131.694086][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 131.985736][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.225'. [ 132.801993][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.808349][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.062168][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'. [ 133.182297][ T6777] syzkaller0: entered promiscuous mode [ 133.187853][ T6777] syzkaller0: entered allmulticast mode [ 133.218642][ T6777] tipc: Started in network mode [ 133.223641][ T6777] tipc: Node identity 96638c4ead1b, cluster identity 4711 [ 133.231094][ T6777] tipc: Enabled bearer , priority 0 [ 133.242525][ T6776] tipc: Resetting bearer [ 133.260464][ T6776] tipc: Disabling bearer [ 133.438467][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 133.450646][ T10] usb 1-1: USB disconnect, device number 6 [ 134.552916][ T30] audit: type=1326 audit(1774065928.021:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="syz.0.237" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x0 [ 135.016179][ T5834] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 135.074028][ T1210] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 135.186028][ T5834] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 135.194403][ T5834] usb 2-1: config 0 has no interface number 0 [ 135.200535][ T5834] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.214822][ T5834] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.225875][ T5834] usb 2-1: config 0 interface 8 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.231305][ T1210] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 135.238839][ T5834] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 135.257252][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.259480][ T1210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.270037][ T5834] usb 2-1: config 0 descriptor?? [ 135.274717][ T1210] usb 3-1: Product: syz [ 135.282780][ T1210] usb 3-1: Manufacturer: syz [ 135.288867][ T1210] usb 3-1: SerialNumber: syz [ 135.520846][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 135.702717][ T1210] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 135.738140][ T5834] usbhid 2-1:0.8: can't add hid device: -71 [ 135.743769][ T1210] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 135.745998][ T5834] usbhid 2-1:0.8: probe with driver usbhid failed with error -71 [ 135.768524][ T5834] usb 2-1: USB disconnect, device number 12 [ 136.519891][ T6845] FAULT_INJECTION: forcing a failure. [ 136.519891][ T6845] name failslab, interval 1, probability 0, space 0, times 0 [ 136.559055][ T6845] CPU: 1 UID: 0 PID: 6845 Comm: syz.1.249 Not tainted syzkaller #0 PREEMPT(full) [ 136.559081][ T6845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 136.559091][ T6845] Call Trace: [ 136.559099][ T6845] [ 136.559106][ T6845] dump_stack_lvl+0xe8/0x150 [ 136.559136][ T6845] should_fail_ex+0x412/0x560 [ 136.559164][ T6845] should_failslab+0xa8/0x100 [ 136.559187][ T6845] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 136.559208][ T6845] ? __alloc_skb+0x1d0/0x7d0 [ 136.559224][ T6845] ? __local_bh_enable_ip+0xd0/0x130 [ 136.559248][ T6845] __alloc_skb+0x1d0/0x7d0 [ 136.559268][ T6845] sctp_packet_transmit+0x290/0x2ac0 [ 136.559299][ T6845] ? sctp_outq_flush+0xc0c/0x31b0 [ 136.559325][ T6845] ? sctp_outq_flush+0xc0c/0x31b0 [ 136.559345][ T6845] ? sctp_outq_flush+0xc0c/0x31b0 [ 136.559367][ T6845] sctp_outq_flush+0xee8/0x31b0 [ 136.559388][ T6845] ? sctp_outq_flush+0xc0c/0x31b0 [ 136.559408][ T6845] ? sctp_make_heartbeat+0x3c9/0x4c0 [ 136.559436][ T6845] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 136.559464][ T6845] ? __pfx_sctp_outq_flush+0x10/0x10 [ 136.559492][ T6845] ? sctp_outq_tail+0x612/0x920 [ 136.559511][ T6845] ? sctp_do_8_2_transport_strike+0x43c/0x8d0 [ 136.559534][ T6845] ? sctp_outq_uncork+0x4d/0xa0 [ 136.559557][ T6845] sctp_do_sm+0x54c7/0x5cf0 [ 136.559580][ T6845] ? arch_stack_walk+0xfb/0x150 [ 136.559615][ T6845] ? __pfx_sctp_do_sm+0x10/0x10 [ 136.559635][ T6845] ? stack_trace_save+0xa9/0x100 [ 136.559653][ T6845] ? __pfx_stack_trace_save+0x10/0x10 [ 136.559711][ T6845] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 136.559735][ T6845] sctp_apply_peer_addr_params+0xdf/0x1880 [ 136.559770][ T6845] sctp_setsockopt_peer_addr_params+0x678/0x940 [ 136.559801][ T6845] sctp_setsockopt+0x752/0x12c0 [ 136.559818][ T6845] ? sock_common_setsockopt+0x36/0xc0 [ 136.559851][ T6845] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 136.559879][ T6845] do_sock_setsockopt+0x17c/0x1b0 [ 136.559903][ T6845] __ia32_sys_setsockopt+0x13d/0x1b0 [ 136.559927][ T6845] __do_fast_syscall_32+0x20d/0x640 [ 136.559950][ T6845] ? do_fast_syscall_32+0x33/0x70 [ 136.559971][ T6845] ? asm_int80_emulation+0x1a/0x20 [ 136.559988][ T6845] ? do_int80_emulation+0x274/0x4d0 [ 136.560006][ T6845] ? trace_irq_disable+0x3b/0x150 [ 136.560034][ T6845] do_fast_syscall_32+0x33/0x70 [ 136.560056][ T6845] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.560077][ T6845] RIP: 0023:0xf700ef6c [ 136.560094][ T6845] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 136.560108][ T6845] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 136.560127][ T6845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 136.560139][ T6845] RDX: 0000000000000009 RSI: 0000000080000300 RDI: 000000000000009c [ 136.560150][ T6845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.560161][ T6845] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 136.560171][ T6845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.560198][ T6845] [ 137.083883][ T5904] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 137.289903][ T5904] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 137.306417][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.323884][ T5904] usb 1-1: Product: syz [ 137.335127][ T5904] usb 1-1: Manufacturer: syz [ 137.348018][ T5904] usb 1-1: SerialNumber: syz [ 137.367545][ T5904] usb 1-1: config 0 descriptor?? [ 137.379331][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.252'. [ 137.692768][ T5904] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 138.345822][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.255'. [ 138.396350][ T1210] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 138.436239][ T1210] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 138.464000][ T1210] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 138.601174][ T1210] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 138.693348][ T1210] usb 3-1: USB disconnect, device number 9 [ 139.310154][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.258'. [ 139.597388][ T6886] Cannot find add_set index 3 as target [ 139.720333][ T5904] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 139.735075][ T5904] usb 1-1: USB disconnect, device number 7 [ 140.518163][ T6897] Cannot find add_set index 3 as target [ 141.010494][ T6907] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[6907] [ 141.593942][ T1210] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 141.823878][ T797] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 141.850142][ T1210] usb 4-1: Using ep0 maxpacket: 16 [ 141.878315][ T1210] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 141.891916][ T1210] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 141.901439][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.909524][ T1210] usb 4-1: Product: syz [ 141.915896][ T1210] usb 4-1: Manufacturer: syz [ 141.920597][ T1210] usb 4-1: SerialNumber: syz [ 141.946306][ T1210] r8152-cfgselector 4-1: Unknown version 0x0000 [ 141.956313][ T1210] r8152-cfgselector 4-1: config 0 descriptor?? [ 141.986754][ T797] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 141.995460][ T797] usb 3-1: config 0 has no interface number 0 [ 142.012866][ T797] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.044039][ T797] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.069055][ T797] usb 3-1: config 0 interface 8 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.088482][ T797] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 142.151916][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.183127][ T6913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.217635][ T797] usb 3-1: config 0 descriptor?? [ 142.224300][ T6913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.237283][ T6922] FAULT_INJECTION: forcing a failure. [ 142.237283][ T6922] name failslab, interval 1, probability 0, space 0, times 0 [ 142.274537][ T6922] CPU: 1 UID: 0 PID: 6922 Comm: syz.0.269 Not tainted syzkaller #0 PREEMPT(full) [ 142.274562][ T6922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 142.274572][ T6922] Call Trace: [ 142.274580][ T6922] [ 142.274589][ T6922] dump_stack_lvl+0xe8/0x150 [ 142.274620][ T6922] should_fail_ex+0x412/0x560 [ 142.274650][ T6922] should_failslab+0xa8/0x100 [ 142.274675][ T6922] __kmalloc_noprof+0xe8/0x760 [ 142.274696][ T6922] ? video_usercopy+0x1b1/0x14b0 [ 142.274734][ T6922] video_usercopy+0x1b1/0x14b0 [ 142.274767][ T6922] ? __pfx___video_do_ioctl+0x10/0x10 [ 142.274794][ T6922] ? __pfx_video_usercopy+0x10/0x10 [ 142.274834][ T6922] ? __fget_files+0x2a/0x420 [ 142.274863][ T6922] v4l2_ioctl+0x18d/0x1e0 [ 142.274891][ T6922] v4l2_compat_ioctl32+0x1d7/0x280 [ 142.274916][ T6922] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 142.274942][ T6922] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 142.274983][ T6922] ? __fget_files+0x3a0/0x420 [ 142.275015][ T6922] ? fput+0xa0/0xd0 [ 142.275040][ T6922] ? ksys_write+0x242/0x270 [ 142.275071][ T6922] __do_fast_syscall_32+0x20d/0x640 [ 142.275094][ T6922] ? do_fast_syscall_32+0x33/0x70 [ 142.275114][ T6922] ? asm_int80_emulation+0x1a/0x20 [ 142.275131][ T6922] ? do_int80_emulation+0x274/0x4d0 [ 142.275151][ T6922] ? trace_irq_disable+0x3b/0x150 [ 142.275181][ T6922] do_fast_syscall_32+0x33/0x70 [ 142.275203][ T6922] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.275223][ T6922] RIP: 0023:0xf7f54f6c [ 142.275236][ T6922] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 142.275252][ T6922] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 142.275271][ T6922] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0d05605 [ 142.275284][ T6922] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.275294][ T6922] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.275304][ T6922] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 142.275315][ T6922] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.275340][ T6922] [ 142.533125][ T1210] r8152-cfgselector 4-1: Needed 1 retries to read version [ 142.798198][ T797] usbhid 3-1:0.8: can't add hid device: -71 [ 142.805574][ T797] usbhid 3-1:0.8: probe with driver usbhid failed with error -71 [ 142.818474][ T797] usb 3-1: USB disconnect, device number 10 [ 143.648830][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'. [ 143.706629][ T1210] r8152-cfgselector 4-1: USB disconnect, device number 16 [ 143.884723][ T6944] netlink: 20 bytes leftover after parsing attributes in process `syz.0.274'. [ 144.113900][ T1210] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 144.203898][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 144.267129][ T1210] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 144.276660][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.284767][ T1210] usb 4-1: Product: syz [ 144.288949][ T1210] usb 4-1: Manufacturer: syz [ 144.293537][ T1210] usb 4-1: SerialNumber: syz [ 144.301202][ T1210] usb 4-1: config 0 descriptor?? [ 144.359557][ T10] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 144.380112][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.399745][ T10] usb 1-1: Product: syz [ 144.404470][ T10] usb 1-1: Manufacturer: syz [ 144.409160][ T10] usb 1-1: SerialNumber: syz [ 144.430347][ T10] usb 1-1: config 0 descriptor?? [ 144.473035][ T10] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 144.514521][ T1210] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 144.549937][ T30] audit: type=1326 audit(1774065938.021:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 144.575175][ T30] audit: type=1326 audit(1774065938.051:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 144.598675][ T30] audit: type=1326 audit(1774065938.051:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 144.632972][ T30] audit: type=1326 audit(1774065938.051:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 144.656528][ T30] audit: type=1326 audit(1774065938.051:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 144.681296][ T30] audit: type=1326 audit(1774065938.051:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 144.703232][ T30] audit: type=1326 audit(1774065938.051:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 144.726559][ T30] audit: type=1326 audit(1774065938.051:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 144.751200][ T30] audit: type=1326 audit(1774065938.051:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 144.773263][ T30] audit: type=1326 audit(1774065938.051:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.2.279" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 144.874116][ T5897] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 145.038001][ T5897] usb 3-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 145.055461][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.076230][ T5897] usb 3-1: config 0 descriptor?? [ 145.086363][ T5897] usb 3-1: Invalid firmware size=18. [ 145.184098][ T10] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 145.191353][ T10] sq905c 1-1:0.0: Reading version command failed [ 145.197853][ T10] sq905c 1-1:0.0: probe with driver sq905c failed with error -110 [ 145.468784][ T797] usb 1-1: USB disconnect, device number 8 [ 145.553923][ T5897] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 145.703982][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 145.710923][ T5897] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 145.719895][ T5897] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.730032][ T5897] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.740037][ T5897] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.749977][ T5897] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.763395][ T5897] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.774532][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.864232][ T797] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 145.992569][ T5897] usb 2-1: usb_control_msg returned -32 [ 145.996814][ T6962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.998305][ T5897] usbtmc 2-1:16.0: can't read capabilities [ 146.009085][ T6962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.031991][ T797] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 146.051214][ T797] usb 1-1: config 0 has no interface number 0 [ 146.059490][ T797] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.070654][ T797] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.082725][ T797] usb 1-1: config 0 interface 8 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.096548][ T797] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 146.105677][ T797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.113878][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 146.125827][ T797] usb 1-1: config 0 descriptor?? [ 146.276152][ T24] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 146.286404][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.295475][ T6962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.304630][ T6962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.315725][ T24] usb 5-1: config 0 descriptor?? [ 146.327025][ T24] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 146.341615][ T5939] usb 2-1: USB disconnect, device number 13 [ 146.393763][ T1210] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 146.412428][ T1210] usb 4-1: USB disconnect, device number 17 [ 146.552903][ T797] usbhid 1-1:0.8: can't add hid device: -71 [ 146.563342][ T797] usbhid 1-1:0.8: probe with driver usbhid failed with error -71 [ 146.576779][ T797] usb 1-1: USB disconnect, device number 9 [ 146.727612][ T24] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 147.141755][ T24] gspca_cpia1: usb_control_msg 02, error -71 [ 147.160724][ T24] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 147.185751][ T24] usb 5-1: USB disconnect, device number 14 [ 147.520527][ T10] usb 3-1: USB disconnect, device number 11 [ 147.644328][ T1210] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 147.958477][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 148.257868][ T5897] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 148.400138][ T6999] tipc: Failed to remove unknown binding: 66,1,1/0:191528975/191528977 [ 148.434407][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 148.447212][ T6992] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 148.462562][ T5897] usb 4-1: unable to get BOS descriptor or descriptor too short [ 148.470678][ T5897] usb 4-1: no configurations [ 148.475545][ T5897] usb 4-1: can't read configurations, error -22 [ 149.053915][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 149.225400][ T10] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 149.248650][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.281930][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.296259][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 149.305946][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.315013][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.326085][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 149.334389][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.344117][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.357054][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 149.365929][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.377330][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.388866][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 149.399293][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.408529][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.426477][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 149.450255][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.470505][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.497238][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 149.518414][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.528343][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.540073][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 149.574470][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.583799][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.610231][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 149.675224][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 149.689301][ T10] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 149.715762][ T10] usb 3-1: Product: syz [ 149.727367][ T10] usb 3-1: Manufacturer: syz [ 149.737620][ T10] usb 3-1: SerialNumber: syz [ 149.771130][ T10] usb 3-1: config 0 descriptor?? [ 149.796989][ T10] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 150.043942][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 150.165834][ T1210] usb 1-1: unable to get BOS descriptor or descriptor too short [ 150.205888][ T1210] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 150.218148][ T10] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 150.258662][ T10] usb 5-1: config 0 has no interface number 0 [ 150.272683][ T1210] usb 1-1: can't read configurations, error -71 [ 150.304222][ T10] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.339083][ T10] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.410611][ T10] usb 5-1: config 0 interface 8 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.454816][ T5904] usb 3-1: USB disconnect, device number 12 [ 150.495151][ T10] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 150.505390][ T5904] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 150.542957][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.620325][ T10] usb 5-1: config 0 descriptor?? [ 151.061587][ T10] usbhid 5-1:0.8: can't add hid device: -71 [ 151.087063][ T10] usbhid 5-1:0.8: probe with driver usbhid failed with error -71 [ 151.182471][ T10] usb 5-1: USB disconnect, device number 15 [ 151.413913][ T797] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 151.573907][ T797] usb 4-1: Using ep0 maxpacket: 32 [ 151.676826][ T7037] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 151.817015][ T7044] netlink: 16 bytes leftover after parsing attributes in process `syz.0.305'. [ 151.830474][ T7044] netlink: 16 bytes leftover after parsing attributes in process `syz.0.305'. [ 151.877337][ T797] usb 4-1: unable to get BOS descriptor or descriptor too short [ 151.892110][ T797] usb 4-1: no configurations [ 151.917587][ T797] usb 4-1: can't read configurations, error -22 [ 152.133954][ T1210] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 152.183876][ T10] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 152.314031][ T1210] usb 5-1: Using ep0 maxpacket: 16 [ 152.323265][ T1210] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 152.347497][ T10] usb 1-1: config 0 has no interfaces? [ 152.355405][ T1210] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 152.370288][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 152.402156][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.445342][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.453461][ T1210] usb 5-1: Product: syz [ 152.463576][ T1210] usb 5-1: Manufacturer: syz [ 152.473682][ T1210] usb 5-1: SerialNumber: syz [ 152.504990][ T10] usb 1-1: config 0 descriptor?? [ 152.513416][ T1210] r8152-cfgselector 5-1: Unknown version 0x0000 [ 152.554432][ T1210] r8152-cfgselector 5-1: config 0 descriptor?? [ 152.766017][ T7049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.775349][ T7049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.826576][ T1210] r8152-cfgselector 5-1: Needed 1 retries to read version [ 152.988639][ T797] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 153.145304][ T797] usb 4-1: Using ep0 maxpacket: 32 [ 153.152889][ T797] usb 4-1: config 2 has an invalid interface number: 45 but max is 0 [ 153.168995][ T797] usb 4-1: config 2 has no interface number 0 [ 153.190179][ T797] usb 4-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 153.237612][ T797] usb 4-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 153.262646][ T797] usb 4-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 153.272197][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.280678][ T797] usb 4-1: Product: syz [ 153.333002][ T797] usb 4-1: Manufacturer: syz [ 153.339128][ T797] usb 4-1: SerialNumber: syz [ 153.369062][ T797] kobil_sct 4-1:2.45: KOBIL USB smart card terminal converter detected [ 153.387466][ T797] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 153.631679][ T1210] usb 4-1: USB disconnect, device number 21 [ 153.687394][ T1210] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 153.717703][ T1210] kobil_sct 4-1:2.45: device disconnected [ 153.776176][ T797] r8152-cfgselector 5-1: USB disconnect, device number 16 [ 153.847642][ T7079] syzkaller0: entered promiscuous mode [ 153.853305][ T7079] syzkaller0: entered allmulticast mode [ 153.873042][ T7079] tipc: Enabled bearer , priority 0 [ 153.881498][ T7078] tipc: Resetting bearer [ 153.895086][ T7078] tipc: Disabling bearer [ 154.004508][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 154.171313][ T24] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 154.188001][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.204162][ T24] usb 2-1: Product: syz [ 154.211542][ T24] usb 2-1: Manufacturer: syz [ 154.220095][ T24] usb 2-1: SerialNumber: syz [ 154.236452][ T24] usb 2-1: config 0 descriptor?? [ 154.253035][ T24] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 154.784643][ T24] gspca_sunplus: reg_r err -110 [ 154.850300][ T24] usb 1-1: USB disconnect, device number 12 [ 155.343879][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 155.375447][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'. [ 155.523875][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 155.672365][ T7093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.681434][ T7093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.740750][ T7093] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 155.789921][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 155.798278][ T24] usb 1-1: no configurations [ 155.811590][ T24] usb 1-1: can't read configurations, error -22 [ 156.338482][ T7119] syzkaller0: entered promiscuous mode [ 156.374087][ T7119] syzkaller0: entered allmulticast mode [ 156.430983][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.328'. [ 156.463143][ T7119] tipc: Enabled bearer , priority 0 [ 156.487642][ T7118] tipc: Resetting bearer [ 156.556739][ T7118] tipc: Disabling bearer [ 156.730212][ T7131] FAULT_INJECTION: forcing a failure. [ 156.730212][ T7131] name failslab, interval 1, probability 0, space 0, times 0 [ 156.743428][ T7131] CPU: 0 UID: 0 PID: 7131 Comm: syz.3.331 Not tainted syzkaller #0 PREEMPT(full) [ 156.743445][ T7131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 156.743451][ T7131] Call Trace: [ 156.743456][ T7131] [ 156.743461][ T7131] dump_stack_lvl+0xe8/0x150 [ 156.743480][ T7131] should_fail_ex+0x412/0x560 [ 156.743499][ T7131] should_failslab+0xa8/0x100 [ 156.743514][ T7131] __kmalloc_noprof+0xe8/0x760 [ 156.743526][ T7131] ? __pcs_replace_empty_main+0x3cd/0x730 [ 156.743541][ T7131] ? __pcs_replace_empty_main+0x263/0x730 [ 156.743558][ T7131] __pcs_replace_empty_main+0x3cd/0x730 [ 156.743576][ T7131] kmem_cache_alloc_noprof+0x37d/0x650 [ 156.743586][ T7131] ? __nf_conntrack_alloc+0x81/0x3e0 [ 156.743598][ T7131] ? nf_ct_pernet+0x45/0x270 [ 156.743609][ T7131] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 156.743621][ T7131] __nf_conntrack_alloc+0x81/0x3e0 [ 156.743636][ T7131] init_conntrack+0x16f/0xf70 [ 156.743653][ T7131] ? __pfx_init_conntrack+0x10/0x10 [ 156.743668][ T7131] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 156.743679][ T7131] ? lockdep_hardirqs_on+0x7a/0x110 [ 156.743690][ T7131] ? __siphash_unaligned+0x22e/0x3b0 [ 156.743711][ T7131] nf_conntrack_in+0xbd8/0x15e0 [ 156.743733][ T7131] ? __pfx_nf_conntrack_in+0x10/0x10 [ 156.743750][ T7131] ? ipt_do_table+0x2b2/0x1630 [ 156.743774][ T7131] ? lock_acquire+0xf0/0x2e0 [ 156.743794][ T7131] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 156.743811][ T7131] ? ip_sabotage_in+0x57/0x270 [ 156.743832][ T7131] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 156.743852][ T7131] nf_hook_slow+0xc5/0x220 [ 156.743872][ T7131] NF_HOOK+0x21f/0x3c0 [ 156.743895][ T7131] ? __pfx_ip_rcv_finish+0x10/0x10 [ 156.743917][ T7131] ? NF_HOOK+0x9e/0x3c0 [ 156.743934][ T7131] ? __pfx_NF_HOOK+0x10/0x10 [ 156.743948][ T7131] ? __pfx_ip_rcv_finish+0x10/0x10 [ 156.743964][ T7131] ? netif_receive_skb+0x102/0xc50 [ 156.743979][ T7131] ? __pfx_ip_rcv+0x10/0x10 [ 156.743991][ T7131] netif_receive_skb+0x45b/0xc50 [ 156.744008][ T7131] ? __pfx_netif_receive_skb+0x10/0x10 [ 156.744021][ T7131] ? __lock_acquire+0x6b5/0x2cf0 [ 156.744036][ T7131] ? tun_rx_batched+0x185/0x790 [ 156.744048][ T7131] tun_rx_batched+0x1de/0x790 [ 156.744058][ T7131] ? __build_skb+0x62/0x440 [ 156.744070][ T7131] ? __pfx_tun_rx_batched+0x10/0x10 [ 156.744085][ T7131] ? tun_get_user+0x2354/0x3dd0 [ 156.744094][ T7131] ? __local_bh_enable_ip+0xd0/0x130 [ 156.744109][ T7131] ? tun_get_user+0x2669/0x3dd0 [ 156.744118][ T7131] tun_get_user+0x2a78/0x3dd0 [ 156.744137][ T7131] ? aa_file_perm+0x50e/0x15e0 [ 156.744147][ T7131] ? __pfx_tun_get_user+0x10/0x10 [ 156.744156][ T7131] ? aa_file_perm+0x192/0x15e0 [ 156.744173][ T7131] ? ref_tracker_alloc+0x35c/0x4c0 [ 156.744190][ T7131] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 156.744208][ T7131] ? tun_get+0x1c/0x2f0 [ 156.744220][ T7131] ? tun_get+0x1c/0x2f0 [ 156.744229][ T7131] ? tun_get+0x1c/0x2f0 [ 156.744241][ T7131] tun_chr_write_iter+0x113/0x200 [ 156.744252][ T7131] vfs_write+0x61d/0xb90 [ 156.744267][ T7131] ? __pfx_vfs_write+0x10/0x10 [ 156.744282][ T7131] ? __fget_files+0x2a/0x420 [ 156.744302][ T7131] ksys_write+0x150/0x270 [ 156.744314][ T7131] ? __pfx_ksys_write+0x10/0x10 [ 156.744326][ T7131] ? asm_int80_emulation+0x1a/0x20 [ 156.744339][ T7131] do_int80_emulation+0x173/0x4d0 [ 156.744351][ T7131] ? trace_irq_disable+0x3b/0x150 [ 156.744366][ T7131] ? asm_int80_emulation+0x1a/0x20 [ 156.744375][ T7131] ? clear_bhb_loop+0x40/0x90 [ 156.744386][ T7131] ? clear_bhb_loop+0x40/0x90 [ 156.744397][ T7131] asm_int80_emulation+0x1a/0x20 [ 156.744407][ T7131] RIP: 0023:0xf71d5cab [ 156.744417][ T7131] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 156.744425][ T7131] RSP: 002b:00000000f549644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 156.744437][ T7131] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000100 [ 156.744444][ T7131] RDX: 0000000000000036 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.744450][ T7131] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 156.744455][ T7131] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 156.744461][ T7131] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.744475][ T7131] [ 158.369617][ T10] usb 2-1: USB disconnect, device number 14 [ 159.320227][ T7146] Cannot find add_set index 3 as target [ 159.600333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #30a!!! [ 159.853868][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 160.943916][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 161.122758][ T7145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.324515][ T7145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.583817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 161.783107][ T7145] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 162.802650][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 162.832440][ T24] usb 5-1: no configurations [ 162.857889][ T24] usb 5-1: can't read configurations, error -22 [ 162.872106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 162.953138][ T30] kauditd_printk_skb: 98 callbacks suppressed [ 162.953153][ T30] audit: type=1326 audit(1774065956.421:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7165 comm="syz.0.340" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x0 [ 163.328711][ T5834] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 163.733944][ T5834] usb 1-1: Using ep0 maxpacket: 8 [ 163.846976][ T5834] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.927477][ T5834] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 164.055290][ T7173] Cannot find add_set index 3 as target [ 164.103588][ T5834] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.132808][ T30] audit: type=1326 audit(1774065957.601:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 164.160639][ T5834] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.160693][ T5834] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 164.160715][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.913953][ T5834] usb 1-1: GET_CAPABILITIES returned 0 [ 164.943947][ T5834] usbtmc 1-1:16.0: can't read capabilities [ 164.960318][ T30] audit: type=1326 audit(1774065957.601:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 165.073891][ T30] audit: type=1326 audit(1774065957.601:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=448 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 165.117713][ T5834] usb 1-1: USB disconnect, device number 15 [ 165.244233][ T7167] netlink: 28 bytes leftover after parsing attributes in process `syz.0.340'. [ 165.316999][ T30] audit: type=1326 audit(1774065957.601:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 165.355094][ T7167] batadv0: entered promiscuous mode [ 165.441723][ T30] audit: type=1326 audit(1774065957.601:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 165.559779][ T30] audit: type=1326 audit(1774065957.611:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 165.979628][ T30] audit: type=1326 audit(1774065957.611:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 166.163972][ T5832] Bluetooth: hci1: command tx timeout [ 166.319494][ T30] audit: type=1326 audit(1774065957.611:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 167.241595][ T30] audit: type=1326 audit(1774065957.611:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f58f6c code=0x7ffc0000 [ 167.267061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 169.498133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 169.588084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 169.618167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 173.743803][ C1] sched: DL replenish lagged too much [ 297.763741][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 297.770731][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5183/1:b..l P2/1:b..l P5489/1:b..l P5490/1:b..l P6031/1:b..l P5156/1:b..l P7167/1:b..l P5843/1:b..l [ 297.786704][ C1] rcu: (detected by 1, t=10502 jiffies, g=21377, q=1210 ncpus=2) [ 297.794534][ C1] task:syz-executor state:R running task stack:21576 pid:5843 tgid:5843 ppid:5823 task_flags:0x400140 flags:0x08080000 [ 297.808762][ C1] Call Trace: [ 297.812049][ C1] [ 297.814985][ C1] __schedule+0x15dd/0x52d0 [ 297.819506][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 297.824434][ C1] ? __pfx___schedule+0x10/0x10 [ 297.829296][ C1] preempt_schedule_irq+0x4d/0xa0 [ 297.834328][ C1] irqentry_exit+0x599/0x620 [ 297.838924][ C1] ? trace_irq_disable+0x3b/0x150 [ 297.843969][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 297.849958][ C1] RIP: 0010:__kasan_check_byte+0x2c/0x40 [ 297.855611][ C1] Code: 40 d6 41 56 53 48 89 f3 49 89 fe e8 8e 15 00 00 84 c0 75 16 be 01 00 00 00 4c 89 f7 31 d2 48 89 d9 89 c3 e8 06 05 00 00 89 d8 <5b> 41 5e e9 fc 9f 81 09 cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 [ 297.875223][ C1] RSP: 0000:ffffc90003cf6f48 EFLAGS: 00000202 [ 297.881300][ C1] RAX: 0000000000000001 RBX: ffffffff81767eb2 RCX: 0000000080000001 [ 297.889276][ C1] RDX: 0000000000000000 RSI: ffffffff81767eb2 RDI: 1ffffffff1cebca4 [ 297.897252][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 297.905234][ C1] R10: ffffc90003cf70f8 R11: ffffffff81b0c260 R12: 0000000000000002 [ 297.913209][ C1] R13: ffffffff8e75e520 R14: ffffffff8e75e520 R15: 0000000000000000 [ 297.921181][ C1] ? unwind_next_frame+0xc2/0x23c0 [ 297.926286][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 297.932449][ C1] ? unwind_next_frame+0xc2/0x23c0 [ 297.937583][ C1] ? __kasan_check_byte+0x12/0x40 [ 297.942616][ C1] ? __ia32_compat_sys_socketcall+0x2f5/0xa10 [ 297.948690][ C1] lock_acquire+0x79/0x2e0 [ 297.953123][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 297.958258][ C1] ? __ia32_compat_sys_socketcall+0x2f5/0xa10 [ 297.964338][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 297.969468][ C1] unwind_next_frame+0xc2/0x23c0 [ 297.974398][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 297.979532][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 297.984658][ C1] ? __sys_setsockopt+0xc1/0x130 [ 297.989599][ C1] ? __ia32_compat_sys_socketcall+0x2f5/0xa10 [ 297.995673][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 298.001834][ C1] arch_stack_walk+0x11b/0x150 [ 298.006617][ C1] ? __ia32_compat_sys_socketcall+0x2f5/0xa10 [ 298.012694][ C1] stack_trace_save+0xa9/0x100 [ 298.017469][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 298.022874][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 298.028089][ C1] save_stack+0x122/0x230 [ 298.032437][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 298.037393][ C1] ? __pfx_save_stack+0x10/0x10 [ 298.042247][ C1] ? __free_frozen_pages+0xc2b/0xdb0 [ 298.047539][ C1] ? __slab_free+0x263/0x2b0 [ 298.052135][ C1] ? qlist_free_all+0x97/0x100 [ 298.056913][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 298.062553][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 298.067584][ C1] ? __kvmalloc_node_noprof+0x4d7/0x8a0 [ 298.073112][ C1] ? translate_table+0x191/0x20b0 [ 298.078121][ C1] ? translate_compat_table+0x1d7a/0x2620 [ 298.083841][ C1] ? do_ip6t_set_ctl+0xa6c/0xe10 [ 298.088782][ C1] ? nf_setsockopt+0x26f/0x290 [ 298.093549][ C1] ? do_sock_setsockopt+0x17c/0x1b0 [ 298.098750][ C1] ? __sys_setsockopt+0xc1/0x130 [ 298.103694][ C1] ? __ia32_compat_sys_socketcall+0x2f5/0xa10 [ 298.109775][ C1] __reset_page_owner+0x71/0x1f0 [ 298.114719][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 298.119841][ C1] __slab_free+0x263/0x2b0 [ 298.124275][ C1] qlist_free_all+0x97/0x100 [ 298.128874][ C1] kasan_quarantine_reduce+0x148/0x160 [ 298.134516][ C1] __kasan_slab_alloc+0x22/0x80 [ 298.139472][ C1] __kvmalloc_node_noprof+0x4d7/0x8a0 [ 298.144860][ C1] ? translate_table+0x191/0x20b0 [ 298.149905][ C1] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 298.155465][ C1] translate_table+0x191/0x20b0 [ 298.160343][ C1] ? __pfx_translate_table+0x10/0x10 [ 298.165633][ C1] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 298.171254][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 298.177218][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 298.182434][ C1] ? translate_compat_table+0x1bcd/0x2620 [ 298.188167][ C1] translate_compat_table+0x1d7a/0x2620 [ 298.193744][ C1] ? __pfx_translate_compat_table+0x10/0x10 [ 298.199661][ C1] ? _copy_from_user+0x94/0xb0 [ 298.204438][ C1] do_ip6t_set_ctl+0xa6c/0xe10 [ 298.209210][ C1] ? rcu_is_watching+0x15/0xb0 [ 298.213987][ C1] ? trace_contention_end+0x3d/0x150 [ 298.219297][ C1] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 298.224594][ C1] ? nf_setsockopt+0x221/0x290 [ 298.229372][ C1] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 298.235033][ C1] ? do_sock_getsockopt+0x2d3/0x3f0 [ 298.240239][ C1] ? __pfx_aa_sk_perm+0x10/0x10 [ 298.245106][ C1] nf_setsockopt+0x26f/0x290 [ 298.249721][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 298.255639][ C1] do_sock_setsockopt+0x17c/0x1b0 [ 298.260936][ C1] __sys_setsockopt+0xc1/0x130 [ 298.265704][ C1] __ia32_compat_sys_socketcall+0x2f5/0xa10 [ 298.271588][ C1] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 298.278015][ C1] __do_fast_syscall_32+0x20d/0x640 [ 298.283226][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 298.288430][ C1] ? do_fast_syscall_32+0x33/0x70 [ 298.293462][ C1] ? irqentry_exit+0x10e/0x620 [ 298.298232][ C1] ? trace_irq_disable+0x3b/0x150 [ 298.303275][ C1] do_fast_syscall_32+0x33/0x70 [ 298.308132][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.314474][ C1] RIP: 0023:0xf7f58f6c [ 298.318543][ C1] RSP: 002b:00000000f753f660 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 298.326964][ C1] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00000000f753f688 [ 298.334942][ C1] RDX: 00000000f753f820 RSI: 00000000f73e60b4 RDI: 00000000f73e2ff4 [ 298.342917][ C1] RBP: 00000000f73e605c R08: 0000000000000000 R09: 0000000000000000 [ 298.350893][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 298.358865][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.366852][ C1] [ 298.369860][ C1] task:syz.0.340 state:R running task stack:22656 pid:7167 tgid:7165 ppid:5847 task_flags:0x40054c flags:0x08080003 [ 298.383312][ C1] Call Trace: [ 298.386595][ C1] [ 298.389531][ C1] __schedule+0x15dd/0x52d0 [ 298.394060][ C1] ? do_exit+0x70f/0x23c0 [ 298.398398][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 298.404558][ C1] ? __pfx___schedule+0x10/0x10 [ 298.409423][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 298.414381][ C1] preempt_schedule_irq+0x4d/0xa0 [ 298.419409][ C1] irqentry_exit+0x599/0x620 [ 298.424016][ C1] ? trace_irq_disable+0x3b/0x150 [ 298.429057][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 298.435042][ C1] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 298.440337][ C1] Code: e9 30 ff ff ff e8 75 e6 0c 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 f1 a3 7a 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 56 cc 0f 0a cc 48 8d 3d 2e 6b 73 [ 298.459947][ C1] RSP: 0018:ffffc900104072c8 EFLAGS: 00000282 [ 298.466032][ C1] RAX: 30beea453c3d9a00 RBX: 0000000000000246 RCX: 0000000000000046 [ 298.474013][ C1] RDX: 00000000bb0513b5 RSI: ffffffff8e168271 RDI: ffffffff8c27c200 [ 298.481994][ C1] RBP: 0000000000000000 R08: ffffffff823c1152 R09: ffffffff8e75e520 [ 298.489970][ C1] R10: dffffc0000000000 R11: fffff94000349a67 R12: 0000000000000002 [ 298.497951][ C1] R13: ffffffff8e75e520 R14: 0000000000000000 R15: 0000000000000000 [ 298.505938][ C1] ? page_ext_get+0x22/0x2e0 [ 298.510551][ C1] ? page_ext_get+0x22/0x2e0 [ 298.515151][ C1] page_ext_get+0x3e/0x2e0 [ 298.519574][ C1] ? page_ext_get+0x22/0x2e0 [ 298.524172][ C1] __reset_page_owner+0x28/0x1f0 [ 298.529122][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 298.534258][ C1] __slab_free+0x263/0x2b0 [ 298.538690][ C1] ? qlist_free_all+0x8c/0x100 [ 298.543465][ C1] qlist_free_all+0x97/0x100 [ 298.548068][ C1] kasan_quarantine_reduce+0x148/0x160 [ 298.553535][ C1] __kasan_kmalloc+0x22/0xb0 [ 298.558131][ C1] __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 298.564572][ C1] ? rtmsg_ifinfo_build_skb+0x84/0x260 [ 298.570041][ C1] ? __kmalloc_node_track_caller_noprof+0x34a/0x7b0 [ 298.576644][ C1] __alloc_skb+0x2c1/0x7d0 [ 298.581075][ C1] rtmsg_ifinfo_build_skb+0x84/0x260 [ 298.586381][ C1] ? notifier_call_chain+0x3da/0x400 [ 298.591686][ C1] unregister_netdevice_many_notify+0x18f1/0x2370 [ 298.598128][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 298.604926][ C1] ? __queue_work+0x1a1/0x1020 [ 298.609715][ C1] unregister_netdevice_queue+0x31f/0x360 [ 298.615447][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 298.621692][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 298.626878][ C1] ? queue_delayed_work_on+0x171/0x1e0 [ 298.632355][ C1] __tun_detach+0x6d9/0x15d0 [ 298.636972][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 298.642088][ C1] tun_chr_close+0x10a/0x1c0 [ 298.646684][ C1] __fput+0x44f/0xa70 [ 298.650689][ C1] task_work_run+0x1d9/0x270 [ 298.655291][ C1] ? __pfx_task_work_run+0x10/0x10 [ 298.660404][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 298.665528][ C1] do_exit+0x70f/0x23c0 [ 298.669696][ C1] ? __pfx_do_exit+0x10/0x10 [ 298.674299][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 298.679351][ C1] do_group_exit+0x21b/0x2d0 [ 298.683953][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.689171][ C1] get_signal+0x1284/0x1330 [ 298.693709][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 298.699263][ C1] ? fput+0xa0/0xd0 [ 298.703083][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 298.709262][ C1] exit_to_user_mode_loop+0x86/0x480 [ 298.714553][ C1] ? rcu_is_watching+0x15/0xb0 [ 298.719333][ C1] __do_fast_syscall_32+0x415/0x640 [ 298.724542][ C1] ? do_fast_syscall_32+0x33/0x70 [ 298.729570][ C1] ? asm_int80_emulation+0x1a/0x20 [ 298.734686][ C1] ? do_int80_emulation+0x274/0x4d0 [ 298.739889][ C1] ? trace_irq_disable+0x3b/0x150 [ 298.744938][ C1] do_fast_syscall_32+0x33/0x70 [ 298.749811][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.756154][ C1] RIP: 0023:0xf7f54f6c [ 298.760224][ C1] RSP: 002b:00000000f53f55bc EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 298.768644][ C1] RAX: fffffffffffffe00 RBX: 00000000f7415020 RCX: 0000000000000080 [ 298.776620][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7415024 [ 298.784597][ C1] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 298.792573][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 298.800552][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.808541][ C1] [ 298.811565][ C1] task:jbd2/sda1-8 state:R running task stack:25328 pid:5156 tgid:5156 ppid:2 task_flags:0x240040 flags:0x00080000 [ 298.825061][ C1] Call Trace: [ 298.828344][ C1] [ 298.831279][ C1] __schedule+0x15dd/0x52d0 [ 298.835812][ C1] ? arch_stack_walk+0x11b/0x150 [ 298.840769][ C1] ? __pfx___schedule+0x10/0x10 [ 298.845646][ C1] preempt_schedule_irq+0x4d/0xa0 [ 298.850770][ C1] irqentry_exit+0x599/0x620 [ 298.855366][ C1] ? trace_irq_disable+0x3b/0x150 [ 298.860411][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 298.866488][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x30/0x70 [ 298.872658][ C1] Code: 04 24 65 48 8b 0d f8 8e 56 11 65 8b 15 19 8f 56 11 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 a4 16 00 00 00 74 2c <8b> 91 80 16 00 00 83 fa 02 75 21 48 8b 91 88 16 00 00 48 8b 32 48 [ 298.892344][ C1] RSP: 0000:ffffc900106bf508 EFLAGS: 00000246 [ 298.898428][ C1] RAX: ffffffff823c10ff RBX: 0000000000079612 RCX: ffff8880366bbd00 [ 298.906406][ C1] RDX: 0000000000000000 RSI: ffffffff8c27c1e0 RDI: 0000000000079612 [ 298.914383][ C1] RBP: dffffc0000000000 R08: ffffffff823c1a5a R09: ffffffff8e75e520 [ 298.922358][ C1] R10: dffffc0000000000 R11: ffffed100b2fd43c R12: 0000000000079612 [ 298.930322][ C1] R13: 0000000000079612 R14: 0000000000000000 R15: 0000000000000000 [ 298.938307][ C1] ? __page_table_check_zero+0x6a/0x3e0 [ 298.943871][ C1] ? page_ext_lookup+0x15f/0x180 [ 298.948825][ C1] page_ext_lookup+0x15f/0x180 [ 298.953607][ C1] ? __page_table_check_zero+0x6a/0x3e0 [ 298.959177][ C1] __page_table_check_zero+0x135/0x3e0 [ 298.964655][ C1] ? __reset_page_owner+0x148/0x1f0 [ 298.969870][ C1] __free_frozen_pages+0xc3b/0xdb0 [ 298.975007][ C1] __slab_free+0x263/0x2b0 [ 298.979442][ C1] ? qlist_free_all+0x8c/0x100 [ 298.984225][ C1] qlist_free_all+0x97/0x100 [ 298.988833][ C1] ? alloc_buffer_head+0x2a/0x270 [ 298.993864][ C1] kasan_quarantine_reduce+0x148/0x160 [ 298.999334][ C1] __kasan_slab_alloc+0x22/0x80 [ 299.004198][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 299.009662][ C1] ? alloc_buffer_head+0x2a/0x270 [ 299.014697][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 299.020342][ C1] alloc_buffer_head+0x2a/0x270 [ 299.025201][ C1] ? jbd2_journal_write_metadata_buffer+0xac/0x1060 [ 299.031818][ C1] jbd2_journal_write_metadata_buffer+0xc3/0x1060 [ 299.038251][ C1] ? __pfx_jbd2_journal_next_log_block+0x10/0x10 [ 299.044604][ C1] jbd2_journal_commit_transaction+0x1689/0x5bf0 [ 299.050985][ C1] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 299.057668][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 299.062627][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 299.067664][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 299.072695][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 299.078493][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 299.083701][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 299.089510][ C1] ? __timer_delete_sync+0x4a4/0x520 [ 299.094809][ C1] kjournald2+0x3e0/0x760 [ 299.099165][ C1] ? __pfx_kjournald2+0x10/0x10 [ 299.104020][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 299.110095][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 299.115044][ C1] kthread+0x388/0x470 [ 299.119095][ C1] ? __pfx_kjournald2+0x10/0x10 [ 299.123937][ C1] ? __pfx_kthread+0x10/0x10 [ 299.128531][ C1] ret_from_fork+0x51e/0xb90 [ 299.133134][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 299.138257][ C1] ? __switch_to+0xc7d/0x1450 [ 299.142944][ C1] ? __pfx_kthread+0x10/0x10 [ 299.147542][ C1] ret_from_fork_asm+0x1a/0x30 [ 299.152334][ C1] [ 299.155351][ C1] task:udevd state:R running task stack:23328 pid:6031 tgid:6031 ppid:5194 task_flags:0x400140 flags:0x00080800 [ 299.168849][ C1] Call Trace: [ 299.172126][ C1] [ 299.175051][ C1] __schedule+0x15dd/0x52d0 [ 299.179591][ C1] ? __pfx___schedule+0x10/0x10 [ 299.184450][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 299.189409][ C1] preempt_schedule_irq+0x4d/0xa0 [ 299.194453][ C1] irqentry_exit+0x599/0x620 [ 299.199055][ C1] ? trace_irq_disable+0x3b/0x150 [ 299.204103][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 299.210088][ C1] RIP: 0010:lock_acquire+0x57/0x2e0 [ 299.215294][ C1] Code: 89 44 24 30 0f 1f 44 00 00 65 8b 05 c7 a5 7a 11 83 f8 08 0f 83 77 01 00 00 89 c0 48 0f a3 05 30 19 70 0e 73 0d e8 d9 29 09 00 <84> c0 0f 84 bc 01 00 00 83 3d 2a 4c 70 0e 00 0f 84 c3 00 00 00 48 [ 299.234894][ C1] RSP: 0018:ffffc900047df2a0 EFLAGS: 00000202 [ 299.240977][ C1] RAX: 0000000000000001 RBX: ffffffff823a36d2 RCX: 0000000080000001 [ 299.248955][ C1] RDX: 0000000000000000 RSI: ffffffff8c27c1e0 RDI: ffffffff8c27c1a0 [ 299.257019][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 299.264999][ C1] R10: ffffc900047df438 R11: ffffffff81b0c260 R12: 0000000000000002 [ 299.272975][ C1] R13: ffffffff8e75e520 R14: 0000000000000000 R15: 0000000000000000 [ 299.280940][ C1] ? save_stack+0x122/0x230 [ 299.285458][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 299.291638][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 299.296766][ C1] ? save_stack+0x122/0x230 [ 299.301276][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 299.306400][ C1] unwind_next_frame+0xc2/0x23c0 [ 299.311349][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 299.316470][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 299.321570][ C1] ? stack_trace_save+0xa9/0x100 [ 299.326492][ C1] ? save_stack+0x122/0x230 [ 299.331003][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 299.337164][ C1] arch_stack_walk+0x11b/0x150 [ 299.341950][ C1] ? save_stack+0x122/0x230 [ 299.346461][ C1] stack_trace_save+0xa9/0x100 [ 299.351230][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 299.356606][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 299.361562][ C1] save_stack+0x122/0x230 [ 299.365904][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 299.370852][ C1] ? __pfx_save_stack+0x10/0x10 [ 299.375731][ C1] __reset_page_owner+0x71/0x1f0 [ 299.380678][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 299.385807][ C1] __slab_free+0x263/0x2b0 [ 299.390242][ C1] qlist_free_all+0x97/0x100 [ 299.394840][ C1] kasan_quarantine_reduce+0x148/0x160 [ 299.400309][ C1] __kasan_slab_alloc+0x22/0x80 [ 299.405167][ C1] __kmalloc_noprof+0x316/0x760 [ 299.410022][ C1] ? tomoyo_encode+0x28b/0x550 [ 299.414801][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 299.419828][ C1] tomoyo_encode+0x28b/0x550 [ 299.424418][ C1] tomoyo_realpath_from_path+0x58d/0x5d0 [ 299.430073][ C1] ? tomoyo_path2_perm+0x299/0x760 [ 299.435196][ C1] tomoyo_path2_perm+0x2e7/0x760 [ 299.440150][ C1] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 299.445652][ C1] ? __d_lookup+0x66/0x780 [ 299.450072][ C1] ? __d_lookup+0x6df/0x780 [ 299.454589][ C1] tomoyo_path_rename+0x14e/0x1b0 [ 299.459621][ C1] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 299.465169][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 299.470348][ C1] ? _raw_spin_unlock+0x28/0x50 [ 299.475185][ C1] security_path_rename+0x248/0x460 [ 299.480394][ C1] filename_renameat2+0x4c1/0x9c0 [ 299.485447][ C1] ? __pfx_filename_renameat2+0x10/0x10 [ 299.491021][ C1] ? do_getname+0x151/0x250 [ 299.495544][ C1] __se_sys_rename+0x55/0x2c0 [ 299.500239][ C1] do_syscall_64+0x14d/0xf80 [ 299.504835][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.510907][ C1] ? clear_bhb_loop+0x40/0x90 [ 299.515591][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.521488][ C1] RIP: 0033:0x7fd2eb87acc7 [ 299.525893][ C1] RSP: 002b:00007ffc96ad4dc8 EFLAGS: 00000206 ORIG_RAX: 0000000000000052 [ 299.534322][ C1] RAX: ffffffffffffffda RBX: 00005641a4a127a0 RCX: 00007fd2eb87acc7 [ 299.542296][ C1] RDX: 00005641a49f5010 RSI: 00007ffc96ad4de0 RDI: 00007ffc96ad51e0 [ 299.550268][ C1] RBP: 00005641a4a2c4a0 R08: 00000000000001e0 R09: 0000000000000000 [ 299.558242][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffc96ad4de0 [ 299.566213][ C1] R13: 00007ffc96ad51e0 R14: 0000000000000000 R15: 000056419b1a59dd [ 299.574203][ C1] [ 299.577222][ C1] task:dhcpcd state:R running task stack:21024 pid:5490 tgid:5490 ppid:5489 task_flags:0x400140 flags:0x00080800 [ 299.590719][ C1] Call Trace: [ 299.594001][ C1] [ 299.596938][ C1] __schedule+0x15dd/0x52d0 [ 299.601469][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 299.606429][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 299.611377][ C1] ? __pfx___schedule+0x10/0x10 [ 299.616229][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 299.621156][ C1] preempt_schedule_irq+0x4d/0xa0 [ 299.626175][ C1] irqentry_exit+0x599/0x620 [ 299.630773][ C1] ? trace_irq_disable+0x3b/0x150 [ 299.635814][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 299.641802][ C1] RIP: 0010:__read_once_word_nocheck+0x3/0x10 [ 299.647890][ C1] Code: 00 48 ba 00 00 00 00 00 fc ff df e9 88 fc ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 8b 07 98 aa 3a 0a cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 299.667503][ C1] RSP: 0018:ffffc900035e7770 EFLAGS: 00000202 [ 299.673577][ C1] RAX: ffffffff81000130 RBX: ffffc900035e7f40 RCX: 1ffff920006bcf01 [ 299.681539][ C1] RDX: ffffffff914deb1a RSI: 0000000000000002 RDI: ffffc900035e7f40 [ 299.689515][ C1] RBP: 1ffff920006bcf0a R08: 0000000000000001 R09: ffffffff8e75e520 [ 299.697493][ C1] R10: ffffc900035e7898 R11: ffffffff81b0c260 R12: ffffc900035e8000 [ 299.705471][ C1] R13: 1ffff920006bcf0b R14: ffffc900035e7848 R15: ffffc900035e0000 [ 299.713458][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 299.719625][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.725687][ C1] unwind_next_frame+0xe52/0x23c0 [ 299.730732][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 299.735861][ C1] ? do_syscall_64+0x14d/0xf80 [ 299.740637][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 299.746795][ C1] arch_stack_walk+0x11b/0x150 [ 299.751582][ C1] ? do_syscall_64+0x14d/0xf80 [ 299.756359][ C1] stack_trace_save+0xa9/0x100 [ 299.761129][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 299.766516][ C1] save_stack+0x122/0x230 [ 299.770854][ C1] ? __pfx_save_stack+0x10/0x10 [ 299.775691][ C1] ? __free_frozen_pages+0xc2b/0xdb0 [ 299.780978][ C1] ? __slab_free+0x263/0x2b0 [ 299.785573][ C1] ? qlist_free_all+0x97/0x100 [ 299.790340][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 299.795975][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 299.801004][ C1] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 299.806654][ C1] ? alloc_empty_file+0x55/0x1d0 [ 299.811603][ C1] ? alloc_file_pseudo+0x155/0x240 [ 299.816718][ C1] ? sock_alloc_file+0xb8/0x2e0 [ 299.821552][ C1] ? __sys_socketpair+0x2da/0x560 [ 299.826563][ C1] ? __x64_sys_socketpair+0x9b/0xb0 [ 299.831774][ C1] ? do_syscall_64+0x14d/0xf80 [ 299.836550][ C1] ? page_ext_put+0x97/0xc0 [ 299.841069][ C1] __reset_page_owner+0x71/0x1f0 [ 299.846026][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 299.851165][ C1] __slab_free+0x263/0x2b0 [ 299.855607][ C1] qlist_free_all+0x97/0x100 [ 299.860212][ C1] ? alloc_empty_file+0x55/0x1d0 [ 299.865169][ C1] kasan_quarantine_reduce+0x148/0x160 [ 299.870639][ C1] __kasan_slab_alloc+0x22/0x80 [ 299.875507][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 299.880977][ C1] ? alloc_empty_file+0x55/0x1d0 [ 299.885929][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 299.891581][ C1] alloc_empty_file+0x55/0x1d0 [ 299.896359][ C1] alloc_file_pseudo+0x155/0x240 [ 299.901312][ C1] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 299.906786][ C1] ? pidfs_register_pid+0x16/0x1b0 [ 299.911913][ C1] ? pidfs_register_pid+0x7c/0x1b0 [ 299.917037][ C1] sock_alloc_file+0xb8/0x2e0 [ 299.921699][ C1] ? __sys_socketpair+0x2c5/0x560 [ 299.926716][ C1] __sys_socketpair+0x2da/0x560 [ 299.931595][ C1] __x64_sys_socketpair+0x9b/0xb0 [ 299.936671][ C1] do_syscall_64+0x14d/0xf80 [ 299.941272][ C1] ? trace_irq_disable+0x3b/0x150 [ 299.946311][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.952383][ C1] ? clear_bhb_loop+0x40/0x90 [ 299.957072][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.962971][ C1] RIP: 0033:0x7fc6ae41a73a [ 299.967395][ C1] RSP: 002b:00007ffc0efe7618 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 299.975814][ C1] RAX: ffffffffffffffda RBX: 000055c1b6ee51d0 RCX: 00007fc6ae41a73a [ 299.983792][ C1] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000001 [ 299.991770][ C1] RBP: 00007ffc0f007a40 R08: 0000000000000000 R09: 0000000000000001 [ 299.999746][ C1] R10: 00007ffc0efe7630 R11: 0000000000000246 R12: 00007ffc0efe7630 [ 300.007732][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 000055c190449ac0 [ 300.015719][ C1] [ 300.018723][ C1] task:dhcpcd state:R running task stack:25256 pid:5489 tgid:5489 ppid:1 task_flags:0x400140 flags:0x00080000 [ 300.032183][ C1] Call Trace: [ 300.035465][ C1] [ 300.038399][ C1] __schedule+0x15dd/0x52d0 [ 300.042933][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 300.047887][ C1] ? __pfx___schedule+0x10/0x10 [ 300.052746][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 300.057712][ C1] preempt_schedule_irq+0x4d/0xa0 [ 300.062746][ C1] irqentry_exit+0x599/0x620 [ 300.067350][ C1] ? trace_irq_disable+0x3b/0x150 [ 300.072388][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 300.078355][ C1] RIP: 0010:unwind_next_frame+0xd20/0x23c0 [ 300.084179][ C1] Code: 7c 24 68 48 89 9c 24 80 00 00 00 4d 8b 7e 08 49 8d 5e 10 49 89 dd 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 <74> 08 48 89 df e8 16 58 b9 00 48 89 5c 24 60 4c 89 64 24 18 49 8d [ 300.103791][ C1] RSP: 0018:ffffc900035b6fd8 EFLAGS: 00000246 [ 300.109868][ C1] RAX: dffffc0000000000 RBX: ffffc900035b70b8 RCX: ffffffff90832968 [ 300.117843][ C1] RDX: ffffffff912bde88 RSI: 0000000000000002 RDI: ffffffff8c27c1a0 [ 300.125806][ C1] RBP: 1ffff920006b6e16 R08: 0000000000000003 R09: ffffffff8e75e520 [ 300.133780][ C1] R10: ffffc900035b70f8 R11: ffffffff81b0c260 R12: ffffc900035b7b20 [ 300.141766][ C1] R13: 1ffff920006b6e17 R14: ffffc900035b70a8 R15: ffffc900035b0000 [ 300.149751][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 300.155924][ C1] ? unwind_next_frame+0xd4/0x23c0 [ 300.161053][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 300.166179][ C1] ? sock_write_iter+0x49b/0x4f0 [ 300.171127][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 300.177269][ C1] arch_stack_walk+0x11b/0x150 [ 300.182051][ C1] ? sock_write_iter+0x49b/0x4f0 [ 300.187002][ C1] stack_trace_save+0xa9/0x100 [ 300.191770][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 300.197149][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 300.202104][ C1] save_stack+0x122/0x230 [ 300.206441][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 300.211388][ C1] ? __pfx_save_stack+0x10/0x10 [ 300.216238][ C1] ? __free_frozen_pages+0xc2b/0xdb0 [ 300.221505][ C1] ? __slab_free+0x263/0x2b0 [ 300.226082][ C1] ? qlist_free_all+0x97/0x100 [ 300.230850][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 300.236488][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 300.241516][ C1] ? __kmalloc_node_track_caller_noprof+0x493/0x7b0 [ 300.248112][ C1] ? __alloc_skb+0x2c1/0x7d0 [ 300.252705][ C1] ? alloc_skb_with_frags+0xca/0x890 [ 300.258011][ C1] ? sock_alloc_send_pskb+0x878/0x990 [ 300.263389][ C1] ? unix_dgram_sendmsg+0x460/0x18e0 [ 300.268684][ C1] ? sock_write_iter+0x49b/0x4f0 [ 300.273638][ C1] __reset_page_owner+0x71/0x1f0 [ 300.278579][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 300.283705][ C1] __slab_free+0x263/0x2b0 [ 300.288141][ C1] qlist_free_all+0x97/0x100 [ 300.292745][ C1] kasan_quarantine_reduce+0x148/0x160 [ 300.298212][ C1] __kasan_slab_alloc+0x22/0x80 [ 300.303071][ C1] __kmalloc_node_track_caller_noprof+0x493/0x7b0 [ 300.309492][ C1] ? alloc_skb_with_frags+0xca/0x890 [ 300.314780][ C1] ? __kmalloc_node_track_caller_noprof+0x34a/0x7b0 [ 300.321352][ C1] __alloc_skb+0x2c1/0x7d0 [ 300.325761][ C1] alloc_skb_with_frags+0xca/0x890 [ 300.330886][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 300.336019][ C1] sock_alloc_send_pskb+0x878/0x990 [ 300.341241][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 300.346970][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 300.352259][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 300.357467][ C1] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 300.363543][ C1] unix_dgram_sendmsg+0x460/0x18e0 [ 300.368678][ C1] ? stack_trace_save+0xa9/0x100 [ 300.373619][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 300.378976][ C1] ? kasan_save_free_info+0x46/0x50 [ 300.384197][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 300.389754][ C1] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 300.396195][ C1] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 300.401752][ C1] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 300.407656][ C1] sock_write_iter+0x49b/0x4f0 [ 300.412430][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 300.417732][ C1] do_iter_readv_writev+0x619/0x8c0 [ 300.422915][ C1] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 300.428625][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 300.434013][ C1] ? security_file_permission+0x75/0x260 [ 300.439656][ C1] ? rw_verify_area+0x255/0x4d0 [ 300.444519][ C1] vfs_writev+0x33c/0x990 [ 300.448869][ C1] ? __pfx_vfs_writev+0x10/0x10 [ 300.453763][ C1] do_writev+0x154/0x2e0 [ 300.458019][ C1] ? __pfx_do_writev+0x10/0x10 [ 300.462797][ C1] ? __secure_computing+0xe1/0x2a0 [ 300.467921][ C1] do_syscall_64+0x14d/0xf80 [ 300.472515][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.478564][ C1] ? clear_bhb_loop+0x40/0x90 [ 300.483253][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.489151][ C1] RIP: 0033:0x7fc6ae39f407 [ 300.493570][ C1] RSP: 002b:00007ffc0f0076c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000014 [ 300.501987][ C1] RAX: ffffffffffffffda RBX: 00007fc6ae315780 RCX: 00007fc6ae39f407 [ 300.509962][ C1] RDX: 0000000000000005 RSI: 00007ffc0f007720 RDI: 000000000000000a [ 300.517934][ C1] RBP: 000055c1b6ec14b0 R08: 0000000000000000 R09: 0000000000000000 [ 300.525923][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000055c1b6ec14b0 [ 300.533907][ C1] R13: 000000000000012c R14: 00000000ffffffff R15: 0000000000000000 [ 300.541897][ C1] [ 300.544917][ C1] task:kthreadd state:R running task stack:26560 pid:2 tgid:2 ppid:0 task_flags:0x208040 flags:0x00080000 [ 300.558410][ C1] Call Trace: [ 300.561692][ C1] [ 300.564628][ C1] __schedule+0x15dd/0x52d0 [ 300.569154][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 300.574110][ C1] ? __pfx___schedule+0x10/0x10 [ 300.579239][ C1] preempt_schedule_irq+0x4d/0xa0 [ 300.584268][ C1] irqentry_exit+0x599/0x620 [ 300.588864][ C1] ? trace_irq_disable+0x3b/0x150 [ 300.593907][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 300.599891][ C1] RIP: 0010:lock_release+0x2d7/0x3d0 [ 300.605185][ C1] Code: b8 7a 11 00 00 00 00 eb b5 e8 35 b5 0c 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 b5 72 7a 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 1a 9b 0f 0a cc 48 8d 3d 62 3d 73 [ 300.624800][ C1] RSP: 0018:ffffc900000772a0 EFLAGS: 00000286 [ 300.630880][ C1] RAX: 107fb308f174b600 RBX: 0000000000000202 RCX: 0000000000000046 [ 300.638862][ C1] RDX: 0000000000000001 RSI: ffffffff8e168271 RDI: ffffffff8c27c200 [ 300.646840][ C1] RBP: ffff88801d694880 R08: ffffc90000077610 R09: 0000000000000000 [ 300.654819][ C1] R10: ffffc900000773f8 R11: fffff5200000ee81 R12: 0000000000000001 [ 300.662793][ C1] R13: 0000000000000001 R14: ffffffff8e75e520 R15: ffff88801d693d00 [ 300.670787][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 300.675897][ C1] unwind_next_frame+0x1aaa/0x23c0 [ 300.681030][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 300.686157][ C1] ? save_stack+0x122/0x230 [ 300.690668][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 300.696832][ C1] arch_stack_walk+0x11b/0x150 [ 300.701623][ C1] ? __reset_page_owner+0x71/0x1f0 [ 300.706745][ C1] stack_trace_save+0xa9/0x100 [ 300.711522][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 300.716894][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 300.721819][ C1] save_stack+0x122/0x230 [ 300.726135][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 300.731084][ C1] ? __pfx_save_stack+0x10/0x10 [ 300.735962][ C1] __reset_page_owner+0x71/0x1f0 [ 300.740911][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 300.746039][ C1] __slab_free+0x263/0x2b0 [ 300.750469][ C1] ? qlist_free_all+0x8c/0x100 [ 300.755255][ C1] qlist_free_all+0x97/0x100 [ 300.759854][ C1] kasan_quarantine_reduce+0x148/0x160 [ 300.765320][ C1] __kasan_kmalloc+0x22/0xb0 [ 300.769920][ C1] __kmalloc_noprof+0x35c/0x760 [ 300.774780][ C1] ? security_prepare_creds+0x52/0x360 [ 300.780247][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 300.785281][ C1] security_prepare_creds+0x52/0x360 [ 300.790580][ C1] prepare_creds+0x57d/0x820 [ 300.795187][ C1] copy_creds+0x10e/0xa30 [ 300.799529][ C1] copy_process+0x904/0x3cd0 [ 300.804140][ C1] ? update_load_avg+0x1b0/0x1ec0 [ 300.809183][ C1] ? __pfx_copy_process+0x10/0x10 [ 300.814228][ C1] kernel_clone+0x248/0x8e0 [ 300.818746][ C1] ? rcu_is_watching+0x15/0xb0 [ 300.823519][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 300.828552][ C1] kernel_thread+0x13f/0x1b0 [ 300.833157][ C1] ? __pfx_kthread+0x10/0x10 [ 300.837751][ C1] ? __pfx_kernel_thread+0x10/0x10 [ 300.842878][ C1] ? __pfx_kthread+0x10/0x10 [ 300.847481][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 300.852600][ C1] kthreadd+0x4ec/0x6e0 [ 300.856769][ C1] ? kthreadd+0x286/0x6e0 [ 300.861108][ C1] ? __pfx_kthreadd+0x10/0x10 [ 300.865796][ C1] ret_from_fork+0x51e/0xb90 [ 300.870405][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 300.875514][ C1] ? __switch_to+0xc7d/0x1450 [ 300.880206][ C1] ? __pfx_kthreadd+0x10/0x10 [ 300.884903][ C1] ret_from_fork_asm+0x1a/0x30 [ 300.889710][ C1] [ 300.892732][ C1] task:klogd state:R running task stack:23904 pid:5183 tgid:5183 ppid:1 task_flags:0x400100 flags:0x00080000 [ 300.906230][ C1] Call Trace: [ 300.909514][ C1] [ 300.912450][ C1] __schedule+0x15dd/0x52d0 [ 300.916967][ C1] ? unwind_get_return_address+0x4d/0x90 [ 300.922621][ C1] ? __pfx___schedule+0x10/0x10 [ 300.927465][ C1] ? irqentry_exit+0x59e/0x620 [ 300.932237][ C1] ? trace_irq_disable+0x3b/0x150 [ 300.937372][ C1] preempt_schedule_notrace+0x57/0x90 [ 300.942754][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 300.948667][ C1] ? page_ext_get+0x22/0x2e0 [ 300.953293][ C1] rcu_is_watching+0x7f/0xb0 [ 300.957914][ C1] rcu_read_lock_held+0x15/0x50 [ 300.962785][ C1] ? page_ext_get+0x22/0x2e0 [ 300.967376][ C1] page_ext_get+0x1b0/0x2e0 [ 300.971862][ C1] __reset_page_owner+0x28/0x1f0 [ 300.976791][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 300.981929][ C1] __slab_free+0x263/0x2b0 [ 300.986364][ C1] qlist_free_all+0x97/0x100 [ 300.990967][ C1] kasan_quarantine_reduce+0x148/0x160 [ 300.996433][ C1] __kasan_kmalloc+0x22/0xb0 [ 301.001040][ C1] __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 301.007462][ C1] ? alloc_skb_with_frags+0xca/0x890 [ 301.012751][ C1] ? __kmalloc_node_track_caller_noprof+0x34a/0x7b0 [ 301.019351][ C1] __alloc_skb+0x2c1/0x7d0 [ 301.023779][ C1] alloc_skb_with_frags+0xca/0x890 [ 301.028896][ C1] ? kasan_save_track+0x4f/0x80 [ 301.033753][ C1] ? kasan_save_track+0x3e/0x80 [ 301.038614][ C1] ? kasan_save_free_info+0x46/0x50 [ 301.043828][ C1] ? __kasan_slab_free+0x5c/0x80 [ 301.048768][ C1] ? kfree+0x1c1/0x630 [ 301.052839][ C1] ? syslog_print+0x57c/0x610 [ 301.057524][ C1] ? do_syslog+0x583/0x7d0 [ 301.061950][ C1] ? __x64_sys_syslog+0x7c/0x90 [ 301.066812][ C1] ? do_syscall_64+0x14d/0xf80 [ 301.071578][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.077640][ C1] sock_alloc_send_pskb+0x878/0x990 [ 301.082873][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 301.088615][ C1] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 301.094701][ C1] unix_dgram_sendmsg+0x460/0x18e0 [ 301.099833][ C1] ? kfree+0x1c1/0x630 [ 301.103902][ C1] ? syslog_print+0x57c/0x610 [ 301.108595][ C1] ? syslog_print+0x57c/0x610 [ 301.113288][ C1] ? __pfx_syslog_print+0x10/0x10 [ 301.118329][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 301.123890][ C1] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 301.130329][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 301.135623][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 301.141202][ C1] __sys_sendto+0x672/0x710 [ 301.145716][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 301.150773][ C1] ? rcu_is_watching+0x15/0xb0 [ 301.155557][ C1] __x64_sys_sendto+0xde/0x100 [ 301.160330][ C1] do_syscall_64+0x14d/0xf80 [ 301.164928][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.170998][ C1] ? clear_bhb_loop+0x40/0x90 [ 301.175687][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.181586][ C1] RIP: 0033:0x7f15deea5407 [ 301.186001][ C1] RSP: 002b:00007fffbecfcc70 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 301.194417][ C1] RAX: ffffffffffffffda RBX: 00007f15ded55c80 RCX: 00007f15deea5407 [ 301.202390][ C1] RDX: 0000000000000075 RSI: 00007fffbecfcdb0 RDI: 0000000000000003 [ 301.210366][ C1] RBP: 00007fffbecfd1e0 R08: 0000000000000000 R09: 0000000000000000 [ 301.218340][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fffbecfd1f8 [ 301.226315][ C1] R13: 00007fffbecfcdb0 R14: 000000000000005a R15: 00007fffbecfcdb0 [ 301.234310][ C1] [ 301.237330][ C1] rcu: rcu_preempt kthread starved for 10844 jiffies! g21377 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 301.248527][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 301.258499][ C1] rcu: RCU grace-period kthread stack dump: [ 301.264381][ C1] task:rcu_preempt state:R running task stack:27200 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 301.277837][ C1] Call Trace: [ 301.281130][ C1] [ 301.284074][ C1] __schedule+0x15dd/0x52d0 [ 301.288591][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 301.293560][ C1] ? __pfx___schedule+0x10/0x10 [ 301.298422][ C1] ? schedule+0x90/0x360 [ 301.302675][ C1] schedule+0x164/0x360 [ 301.306840][ C1] schedule_timeout+0x158/0x2c0 [ 301.311704][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 301.317087][ C1] ? __pfx_process_timeout+0x10/0x10 [ 301.322385][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 301.328179][ C1] ? prepare_to_swait_event+0x340/0x370 [ 301.333733][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 301.338606][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 301.344517][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 301.349810][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 301.355020][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 301.360831][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 301.365426][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 301.370603][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 301.376393][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 301.381352][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 301.386404][ C1] kthread+0x388/0x470 [ 301.390485][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 301.395690][ C1] ? __pfx_kthread+0x10/0x10 [ 301.400288][ C1] ret_from_fork+0x51e/0xb90 [ 301.404898][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 301.410025][ C1] ? __switch_to+0xc7d/0x1450 [ 301.414714][ C1] ? __pfx_kthread+0x10/0x10 [ 301.419315][ C1] ret_from_fork_asm+0x1a/0x30 [ 301.424111][ C1] [ 301.427130][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 301.433474][ C1] Sending NMI from CPU 1 to CPUs 0: [ 301.438692][ C0] NMI backtrace for cpu 0 [ 301.438716][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 301.438734][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 301.438745][ C0] RIP: 0010:unwind_get_return_address+0x68/0x90 [ 301.438776][ C0] Code: 89 df e8 4b 66 b9 00 48 8b 3b e8 93 6d 19 00 85 c0 74 14 43 80 3c 37 00 74 08 48 89 df e8 30 66 b9 00 48 8b 03 eb 02 31 c0 5b <41> 5e 41 5f e9 8f db 3a 0a cc 89 d9 80 e1 07 80 c1 03 38 c1 7c a8 [ 301.438791][ C0] RSP: 0000:ffffc90000006e50 EFLAGS: 00000246 [ 301.438806][ C0] RAX: ffffffff819a900a RBX: ffffc90000006f20 RCX: 0000000080000100 [ 301.438818][ C0] RDX: 0000000000000001 RSI: ffffffff8e168271 RDI: ffffffff819a900a [ 301.438830][ C0] RBP: ffffc90000006ef0 R08: ffffc90000006ec7 R09: 0000000000000000 [ 301.438842][ C0] R10: ffffc90000006eb8 R11: fffff52000000dd9 R12: ffffffff8e494ec0 [ 301.438855][ C0] R13: 00000000000000f0 R14: dffffc0000000000 R15: 1ffff92000000dd6 [ 301.438866][ C0] FS: 0000000000000000(0000) GS:ffff88812545d000(0000) knlGS:0000000000000000 [ 301.438880][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.438891][ C0] CR2: 0000000080190018 CR3: 000000002aaaa000 CR4: 00000000003526f0 [ 301.438906][ C0] Call Trace: [ 301.438911][ C0] [ 301.438917][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 301.438936][ C0] arch_stack_walk+0xfb/0x150 [ 301.438963][ C0] ? do_idle+0x36a/0x5f0 [ 301.438986][ C0] stack_trace_save+0xa9/0x100 [ 301.439003][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 301.439022][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 301.439046][ C0] ? common_startup_64+0x13e/0x147 [ 301.439062][ C0] kasan_save_track+0x3e/0x80 [ 301.439080][ C0] ? kasan_save_track+0x3e/0x80 [ 301.439095][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 301.439113][ C0] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 301.439130][ C0] ? __alloc_skb+0x1d0/0x7d0 [ 301.439146][ C0] ? synproxy_send_client_synack+0x172/0xe30 [ 301.439162][ C0] ? nft_synproxy_eval_v4+0x34a/0x4e0 [ 301.439177][ C0] ? nft_synproxy_do_eval+0x305/0x580 [ 301.439196][ C0] ? nft_do_chain+0x45e/0x1990 [ 301.439213][ C0] ? nft_do_chain_inet+0x29d/0x380 [ 301.439230][ C0] ? nf_hook_slow+0xc5/0x220 [ 301.439245][ C0] ? NF_HOOK+0x21f/0x3c0 [ 301.439265][ C0] ? NF_HOOK+0x336/0x3c0 [ 301.439284][ C0] ? process_backlog+0xaa3/0x1950 [ 301.439309][ C0] ? __napi_poll+0xae/0x340 [ 301.439330][ C0] ? net_rx_action+0x627/0xf70 [ 301.439353][ C0] ? handle_softirqs+0x22a/0x870 [ 301.439374][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 301.439394][ C0] ? irq_exit_rcu+0x9/0x30 [ 301.439413][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 301.439430][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 301.439447][ C0] ? pv_native_safe_halt+0xf/0x20 [ 301.439463][ C0] ? default_idle+0x9/0x20 [ 301.439482][ C0] ? default_idle_call+0x72/0xb0 [ 301.439517][ C0] __kasan_slab_alloc+0x6c/0x80 [ 301.439536][ C0] kmem_cache_alloc_node_noprof+0x384/0x690 [ 301.439554][ C0] ? __alloc_skb+0x1d0/0x7d0 [ 301.439568][ C0] ? kmem_cache_alloc_node_noprof+0x23e/0x690 [ 301.439587][ C0] __alloc_skb+0x1d0/0x7d0 [ 301.439604][ C0] synproxy_send_client_synack+0x172/0xe30 [ 301.439627][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 301.439643][ C0] ? nft_jhash_init+0x480/0x670 [ 301.439665][ C0] ? synproxy_pernet+0x45/0x270 [ 301.439686][ C0] nft_synproxy_eval_v4+0x34a/0x4e0 [ 301.439708][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 301.439728][ C0] ? nf_ip_checksum+0x13c/0x510 [ 301.439749][ C0] nft_synproxy_do_eval+0x305/0x580 [ 301.439768][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 301.439790][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 301.439810][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 301.439835][ C0] nft_do_chain+0x45e/0x1990 [ 301.439860][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 301.439891][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 301.439913][ C0] nft_do_chain_inet+0x29d/0x380 [ 301.439931][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 301.439949][ C0] ? ipt_do_table+0x2b2/0x1630 [ 301.439973][ C0] ? nf_nat_ipv4_local_in+0x223/0x720 [ 301.439998][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 301.440017][ C0] nf_hook_slow+0xc5/0x220 [ 301.440034][ C0] NF_HOOK+0x21f/0x3c0 [ 301.440056][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 301.440079][ C0] ? NF_HOOK+0x9e/0x3c0 [ 301.440099][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 301.440119][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 301.440143][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 301.440167][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 301.440190][ C0] NF_HOOK+0x336/0x3c0 [ 301.440211][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 301.440233][ C0] ? NF_HOOK+0x9e/0x3c0 [ 301.440253][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 301.440274][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 301.440298][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 301.440319][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 301.440339][ C0] ? process_backlog+0x3eb/0x1950 [ 301.440363][ C0] process_backlog+0xaa3/0x1950 [ 301.440396][ C0] __napi_poll+0xae/0x340 [ 301.440417][ C0] ? skb_defer_free_flush+0x233/0x260 [ 301.440441][ C0] net_rx_action+0x627/0xf70 [ 301.440472][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 301.440508][ C0] handle_softirqs+0x22a/0x870 [ 301.440530][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 301.440554][ C0] __irq_exit_rcu+0x5f/0x150 [ 301.440574][ C0] irq_exit_rcu+0x9/0x30 [ 301.440593][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 301.440610][ C0] [ 301.440615][ C0] [ 301.440622][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 301.440639][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 301.440661][ C0] Code: 8e 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 f2 1a 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 301.440676][ C0] RSP: 0000:ffffffff8e407dc0 EFLAGS: 00000246 [ 301.440689][ C0] RAX: 0000000001e582c3 RBX: ffffffff819a900a RCX: 0000000080000001 [ 301.440701][ C0] RDX: 0000000000000001 RSI: ffffffff8def7890 RDI: ffffffff8c27c200 [ 301.440712][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 301.440725][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: 0000000000000000 [ 301.440736][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 1ffffffff1c929d8 [ 301.440750][ C0] ? do_idle+0x36a/0x5f0 [ 301.440775][ C0] default_idle+0x9/0x20 [ 301.440794][ C0] default_idle_call+0x72/0xb0 [ 301.440814][ C0] do_idle+0x36a/0x5f0 [ 301.440837][ C0] ? __pfx_do_idle+0x10/0x10 [ 301.440863][ C0] cpu_startup_entry+0x43/0x60 [ 301.440885][ C0] rest_init+0x2de/0x300 [ 301.440907][ C0] start_kernel+0x385/0x3d0 [ 301.440924][ C0] x86_64_start_reservations+0x24/0x30 [ 301.440946][ C0] x86_64_start_kernel+0x143/0x1c0 [ 301.440968][ C0] common_startup_64+0x13e/0x147 [ 301.440990][ C0] [ 302.466056][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 302.472102][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 302.486271][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 302.492338][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 302.521810][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 305.797411][ T1301] ieee802154 phy0 wpan0: encryption failed: -22