last executing test programs: 5m15.332411672s ago: executing program 2 (id=6299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006"], 0xac}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000039c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$system_posix_acl(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r2 = memfd_create(&(0x7f0000000200)='y\x185\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\x9d\xb4\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\xa7\xd7\xdbG\x98l\xad6', 0x2) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) ftruncate(r2, 0x2000000) fcntl$addseals(r2, 0x409, 0x7) fallocate(r2, 0x1, 0x2, 0x1) syz_fuse_handle_req(r1, &(0x7f0000006140)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a30bf328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88e86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061ccf3d19201d8d099dddf2b257cacbba656cb7626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34622f5a51e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273adb8bab0d4080adbb592b25fd74d426233f537562a4a98b07f4b2060b4f496c66a0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f768579f891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d12e7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff2052d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e0cd043c29c5682a47fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13776204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e4648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f722abbfebb2c99a905300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6db14390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9f9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219de563cbe6280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39adbd11b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edcd3f35cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c1197ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d89a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd5eb6841fedf096753b1a63a6b4dcce3837ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, &(0x7f0000000440)={&(0x7f0000003a00)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x1122071, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000007c0)="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", 0x2000, &(0x7f00000005c0)={&(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x28, 0x3e, 0xb235333, 0x1, 0x4, 0x4000001, 0x0, 0x0, 0x0, 0xe, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m14.166829474s ago: executing program 2 (id=6308): r0 = socket(0x10, 0x80002, 0x0) futex_waitv(&(0x7f00000001c0)=[{0x1, 0x0, 0x2}, {0x6, 0x0, 0x2}], 0x2, 0x0, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 5m13.580233481s ago: executing program 2 (id=6310): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x130, 0x30, 0xb, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x11c, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_simple={0xc8, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x99, 0x6, "386b1cb715d6a35f83d166c93f5c69e95cb04e770454ba1442a8459c9018f5feacaea3c54ea7d67aadda91f0933af2658be1c85f669211daf1c490ed9ee4944248ef36a477b164b6b2b450811d11f3415e918670abe0ffae2028779515ef78b694f8c4fb644f5ee76910a9e51c13f5ad5b480eee8d9ce50e92557bb4e63f14d7f38e1fccde8eabc8ece1adf001d4a559b137f81bbc"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x130}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 5m13.090319278s ago: executing program 1 (id=6313): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) sendfile(r0, r0, 0x0, 0x7f03) 5m12.64751988s ago: executing program 4 (id=6314): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x2c}}, 0x8040) 5m12.591951947s ago: executing program 1 (id=6315): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket(0x2d, 0x2, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') write$proc_mixer(0xffffffffffffffff, 0x0, 0x8c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 5m12.111823954s ago: executing program 4 (id=6319): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$phonet_pipe(0x23, 0x5, 0x2) setgroups(0x0, &(0x7f0000000180)) bind$alg(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/instances/inst1/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r1, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 5m12.048343128s ago: executing program 0 (id=6320): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x10000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) 5m12.047981907s ago: executing program 2 (id=6321): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1800000056000106000000000000000007"], 0x18}], 0x1}, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x1c, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0xe8f2, 0x16, 0x0, 0x0) 5m11.911618185s ago: executing program 1 (id=6322): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1f3) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0x6b, 0x8) 5m11.772383598s ago: executing program 2 (id=6323): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5m11.552099774s ago: executing program 0 (id=6324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60280, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'virt_wifi0\x00', 0xc1eb461a2917d086}) 5m11.551974511s ago: executing program 1 (id=6325): r0 = socket$tipc(0x1e, 0x5, 0x0) unshare(0x2c020400) bind$tipc(r0, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}, 0x1}}, 0x10) 5m11.427377002s ago: executing program 0 (id=6326): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) 5m11.308942901s ago: executing program 2 (id=6327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(0x4) 5m10.992424852s ago: executing program 0 (id=6328): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5m10.876475565s ago: executing program 1 (id=6329): r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "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"}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 5m10.20626826s ago: executing program 1 (id=6331): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000a40)=""/4093, 0xffd}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000300)=""/22, 0x16}], 0x5}, 0xd}], 0x1, 0x40000102, 0x0) 5m10.113219357s ago: executing program 3 (id=6332): setns(0xc9, 0x0) r0 = socket(0x8, 0x80000, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0xf, 0x4) 5m9.817511933s ago: executing program 0 (id=6333): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @empty, 0xf66e}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r1, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) 5m8.886071668s ago: executing program 4 (id=6334): syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r0, 0xfffffffffffffff5, 0x1) 5m8.771184653s ago: executing program 3 (id=6335): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 5m8.627362273s ago: executing program 0 (id=6336): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5m8.26982392s ago: executing program 4 (id=6337): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=0 wIndex=0 wLength=0', 0x35) 5m6.755923351s ago: executing program 4 (id=6338): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r2, 0x0, 0x0) 5m6.473526411s ago: executing program 3 (id=6339): syz_emit_vhci(0x0, 0x7) setxattr$incfs_size(0x0, 0x0, 0x0, 0x0, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x1) ioctl$TIOCOUTQ(r4, 0x5411, 0x0) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000040)=""/66) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) 5m5.462878027s ago: executing program 4 (id=6340): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x11, 0x148, 0x160, 0x0, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0xff000000, 'geneve1\x00', 'dvmrp0\x00', {}, {0xff}, 0x2e, 0x3, 0x2}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x9}}, @common=@unspec=@rateest={{0x68}, {'vcan0\x00', 'vxcan1\x00', 0x24, 0x3, 0xc00, 0x1, 0x952e, 0x2, {0x64c}, {0x6}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x2, 0x1, 0x2, 0x3, 0x3], 0x1, 0x4}, {0xffffffffffffffff, [0x4, 0x7, 0x0, 0x7, 0x1, 0x4], 0x2, 0x7}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000300)={'wg1\x00', 0x6ee}) 5m3.217508893s ago: executing program 3 (id=6341): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) unshare(0x2040400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x7ff, 0x100}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x3ff}, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 5m2.881832846s ago: executing program 3 (id=6342): lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) 5m1.536276461s ago: executing program 3 (id=6343): socket$inet6(0xa, 0x1, 0x84) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$PPPIOCSMAXCID(r1, 0x40047451, 0x0) 4m56.168249234s ago: executing program 32 (id=6327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(0x4) 4m54.671422007s ago: executing program 33 (id=6331): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000a40)=""/4093, 0xffd}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000300)=""/22, 0x16}], 0x5}, 0xd}], 0x1, 0x40000102, 0x0) 4m53.109705981s ago: executing program 34 (id=6336): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4m50.082128513s ago: executing program 35 (id=6340): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x11, 0x148, 0x160, 0x0, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0xff000000, 'geneve1\x00', 'dvmrp0\x00', {}, {0xff}, 0x2e, 0x3, 0x2}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x9}}, @common=@unspec=@rateest={{0x68}, {'vcan0\x00', 'vxcan1\x00', 0x24, 0x3, 0xc00, 0x1, 0x952e, 0x2, {0x64c}, {0x6}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x2, 0x1, 0x2, 0x3, 0x3], 0x1, 0x4}, {0xffffffffffffffff, [0x4, 0x7, 0x0, 0x7, 0x1, 0x4], 0x2, 0x7}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000300)={'wg1\x00', 0x6ee}) 4m46.116587084s ago: executing program 36 (id=6343): socket$inet6(0xa, 0x1, 0x84) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$PPPIOCSMAXCID(r1, 0x40047451, 0x0) 2m15.208793919s ago: executing program 5 (id=6461): socket(0x2b, 0x1, 0x1) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, 0x0, 0xff00) r1 = socket(0x15, 0x3, 0x179) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x4, 0x0, 0x8}, 0xc) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000380001800600010002000000080005000000"], 0x4c}}, 0x0) 2m12.042026123s ago: executing program 5 (id=6465): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x8) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000100)) landlock_restrict_self(r0, 0x6) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x7) landlock_restrict_self(r2, 0xf) landlock_restrict_self(r0, 0x1) landlock_restrict_self(r2, 0xc) landlock_restrict_self(r0, 0xe) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 2m11.058617816s ago: executing program 5 (id=6467): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x273c, 0x13002, 0x3, 0x15c}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb472, 0x20, 0x2, 0x358}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb510, 0x8000, 0x1, 0x272}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a29, 0x2000, 0x2, 0x1c1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeb7e, 0x10, 0x2, 0xfc}}], 0x4, &(0x7f0000001a00)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x2}, 0x0, 0x0, '\x00', {0x0, 0x53a, 0x0, &(0x7f0000000a00)=@buf_512="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"}}, &(0x7f0000001a80)) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x0, 0x1}, 0x10) sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x400000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') preadv(r5, &(0x7f0000000340)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1, 0x2c2, 0xca) 2m6.562306526s ago: executing program 5 (id=6476): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) 2m4.654440839s ago: executing program 5 (id=6483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = userfaultfd(0x80801) close(r3) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x8a700) ioctl$EVIOCGREP(r5, 0x5450, 0x0) 2m1.724604282s ago: executing program 5 (id=6487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x18}, @val={0x3, 0x4, 0x3, 0x7, 0xc5, 0x10}, @ipv4=@gre={{0x5, 0x4, 0x1, 0x7, 0xd9, 0x66, 0x0, 0x5, 0x2f, 0x0, @empty=0x400300, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "c29eed2f2bf814"}, {0x8, 0x88be, 0x3, {{0x9, 0x1, 0xde, 0x1, 0x1, 0x1, 0x6, 0x4}, 0x1, {0x100}}}, {0x8, 0x22eb, 0x2, {{0xc, 0x2, 0x42, 0x0, 0x0, 0x1, 0x0, 0x81}, 0x2, {0xf1, 0x200, 0x2, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "c60a1891ee42184d6c69e305b7a82a3dc45a42e2df696a257241df4db187b59d0874adc6fb98f42729216e060dfdcd871da0abfa54faec83519f0646824d1b5a00d94d50e271907d6c9e61c5749b41dd2a7b85358dd8eca78f465505de1668b82968537985b5dc566f9e2256b0374f1f588a8443e824b9f2ca99"}}}}, 0xe7) 1m46.269200322s ago: executing program 37 (id=6487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x18}, @val={0x3, 0x4, 0x3, 0x7, 0xc5, 0x10}, @ipv4=@gre={{0x5, 0x4, 0x1, 0x7, 0xd9, 0x66, 0x0, 0x5, 0x2f, 0x0, @empty=0x400300, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "c29eed2f2bf814"}, {0x8, 0x88be, 0x3, {{0x9, 0x1, 0xde, 0x1, 0x1, 0x1, 0x6, 0x4}, 0x1, {0x100}}}, {0x8, 0x22eb, 0x2, {{0xc, 0x2, 0x42, 0x0, 0x0, 0x1, 0x0, 0x81}, 0x2, {0xf1, 0x200, 0x2, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "c60a1891ee42184d6c69e305b7a82a3dc45a42e2df696a257241df4db187b59d0874adc6fb98f42729216e060dfdcd871da0abfa54faec83519f0646824d1b5a00d94d50e271907d6c9e61c5749b41dd2a7b85358dd8eca78f465505de1668b82968537985b5dc566f9e2256b0374f1f588a8443e824b9f2ca99"}}}}, 0xe7) 1m43.950870932s ago: executing program 8 (id=6536): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 1m43.475661355s ago: executing program 8 (id=6537): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getpid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m42.221390523s ago: executing program 8 (id=6541): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="b8", 0x1, 0x2404c8d5, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000002c0), &(0x7f0000000040)=0x8) 1m41.683830688s ago: executing program 8 (id=6542): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) lseek(r0, 0x0, 0x0) 1m41.130133689s ago: executing program 8 (id=6543): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000002000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00@\x00\x00\x00\x00']) 1m38.610723859s ago: executing program 8 (id=6546): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) io_setup(0x7ff, &(0x7f0000004200)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f002}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xfff2, 0xffff}, {0xa, 0xfff3}}}, 0x24}}, 0x0) 1m27.251412716s ago: executing program 9 (id=6574): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) syz_ublk_setup_io_uring(0x1b1e, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x1) read(r4, &(0x7f00000002c0)=""/10, 0x5b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002b00)=ANY=[@ANYBLOB="f4110000120001000000000000000000100000000c00"/31], 0x11f4}], 0x1}, 0x4000800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r6, 0x8002f515, 0x0) connect$unix(r6, 0x0, 0x0) 1m24.888045017s ago: executing program 9 (id=6577): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0xf3a, 0x0) fcntl$setpipe(r0, 0x407, 0xebea) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x3, 0x3, 0x0, 0x5}, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0x18c6) 1m21.875302549s ago: executing program 38 (id=6546): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) io_setup(0x7ff, &(0x7f0000004200)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f002}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xfff2, 0xffff}, {0xa, 0xfff3}}}, 0x24}}, 0x0) 1m21.875114376s ago: executing program 6 (id=6580): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m21.874113851s ago: executing program 9 (id=6582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=0 wIndex=0 wLength=0', 0x35) 1m21.714481219s ago: executing program 6 (id=6583): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) 1m18.206003864s ago: executing program 9 (id=6586): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x0, 0x53, 0x62, 0x30, 0x63, 0x38, 0x30, 0x32, 0x35, 0x31, 0x37, 0x31, 0x36, 0x33, 0x37, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x800040}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x30, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x33, 0x30, 0x64, 0x66, 0x30, 0x30, 0x38, 0xf]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x61, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) 1m17.589202352s ago: executing program 9 (id=6587): syz_usb_connect(0x1, 0xb60, &(0x7f000000a980)=ANY=[@ANYBLOB="12015002fc9f5108480b032088730102030109024e0b04080600"], &(0x7f000000a900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 1m14.902931499s ago: executing program 9 (id=6589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000180)={@val={0x70, 0x201}, @void, @eth={@link_local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0xf, 0x29, 0x68, 0x0, 0x0, 0x6, 0x0, @local, @rand_addr=0x64010101}, {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0xff, 0x0, 0x1}, {'Y'}}}}}}}, 0x3b) 1m11.948103869s ago: executing program 6 (id=6590): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x17e) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1m11.647080233s ago: executing program 6 (id=6591): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) fsync(r0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = socket(0x2b, 0x1, 0x0) syz_io_uring_setup(0x2993, &(0x7f0000000480)={0x0, 0xfad6, 0x20000, 0x3, 0x320}, 0x0, 0x0, &(0x7f0000000000)) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff00000000000000", 0x1d}], 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) getsockname$packet(r3, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES8], 0x48) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m6.380721192s ago: executing program 6 (id=6596): syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 1m4.951739932s ago: executing program 6 (id=6599): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008804}, 0x4048012) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0xb, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x17, 0x81, 0x5}, {@multicast1, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x20000) 59.577362919s ago: executing program 39 (id=6589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000180)={@val={0x70, 0x201}, @void, @eth={@link_local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0xf, 0x29, 0x68, 0x0, 0x0, 0x6, 0x0, @local, @rand_addr=0x64010101}, {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0xff, 0x0, 0x1}, {'Y'}}}}}}}, 0x3b) 49.646020911s ago: executing program 40 (id=6599): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008804}, 0x4048012) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0xb, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x17, 0x81, 0x5}, {@multicast1, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x20000) 1.21589838s ago: executing program 7 (id=6656): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 854.949632ms ago: executing program 7 (id=6657): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) 488.562494ms ago: executing program 7 (id=6658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x28}, 0x1, 0xff07}, 0x2000000) 330.564918ms ago: executing program 7 (id=6659): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000200", @ANYRES32=r1, @ANYBLOB="0000000000400000000000000080"]) 183.044134ms ago: executing program 7 (id=6660): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x2b00ad, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) 0s ago: executing program 7 (id=6661): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) kernel console output (not intermixed with test programs): ed promiscuous mode [ 1325.042775][ T5244] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1325.146724][T23415] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1325.699859][ T31] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1325.814162][T23207] team0: Port device team_slave_0 added [ 1325.818220][T23207] team0: Port device team_slave_1 added [ 1325.850726][ T31] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1325.852242][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1325.852272][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1325.852296][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1325.859168][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.859199][ T31] usb 1-1: Product: syz [ 1325.859216][ T31] usb 1-1: Manufacturer: syz [ 1325.859231][ T31] usb 1-1: SerialNumber: syz [ 1325.873065][ T31] usb 1-1: config 0 descriptor?? [ 1325.874387][T23430] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1325.874580][T23430] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1325.880007][ T31] usb 1-1: ucan: probing device on interface #0 [ 1325.969922][T14095] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 1326.096171][ T5696] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1326.370690][ T5696] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1326.400097][ T5696] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1326.400134][ T5696] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1326.400162][ T5696] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1326.608744][T14095] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice=34.15 [ 1326.752311][T14095] usb 4-1: config 9 interface 0 has no altsetting 0 [ 1326.766489][T14095] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.766519][T14095] usb 4-1: Product: syz [ 1326.766595][T14095] usb 4-1: Manufacturer: syz [ 1326.766611][T14095] usb 4-1: SerialNumber: syz [ 1326.788984][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.789015][ T5696] usb 2-1: Product: syz [ 1326.789032][ T5696] usb 2-1: Manufacturer: syz [ 1326.789048][ T5696] usb 2-1: SerialNumber: syz [ 1326.848373][ T5696] usb 2-1: config 0 descriptor?? [ 1326.856221][T23441] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1326.856529][T23441] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1326.897626][ T5696] usb 2-1: ucan: probing device on interface #0 [ 1327.027839][ T31] usb 1-1: ucan: failed to retrieve device info [ 1327.027943][ T31] usb 1-1: ucan: probe failed; try to update the device firmware [ 1327.113967][T23438] netlink: 'syz.3.6143': attribute type 1 has an invalid length. [ 1327.151816][ T31] usb 1-1: USB disconnect, device number 53 [ 1327.203724][T23207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1327.203744][T23207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1327.203774][T23207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1327.213804][T23446] dummy0: left promiscuous mode [ 1327.323098][T23438] netlink: 'syz.3.6143': attribute type 10 has an invalid length. [ 1327.323191][T23438] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6143'. [ 1327.389300][ T5696] usb 2-1: ucan: device reported invalid device info [ 1327.389328][ T5696] usb 2-1: ucan: probe failed; try to update the device firmware [ 1327.458749][T23207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1327.458770][T23207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1327.458800][T23207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1327.465823][T23438] dummy0: entered promiscuous mode [ 1327.542767][T23448] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6146'. [ 1327.688945][ T31] usb 2-1: USB disconnect, device number 47 [ 1327.691970][T14095] snd-usb-caiaq 4-1:9.0: can't set alt interface. [ 1327.691992][T14095] usb 4-1: unable to init card! (ret=-5) [ 1327.692464][T14095] snd-usb-caiaq 4-1:9.0: probe with driver snd-usb-caiaq failed with error -5 [ 1327.742328][T14095] usb 4-1: USB disconnect, device number 48 [ 1328.409240][T23207] hsr_slave_0: entered promiscuous mode [ 1328.419467][T23207] hsr_slave_1: entered promiscuous mode [ 1328.464780][T23462] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1328.571892][T23464] dummy0: left promiscuous mode [ 1328.828252][T23477] FAULT_INJECTION: forcing a failure. [ 1328.828252][T23477] name failslab, interval 1, probability 0, space 0, times 0 [ 1328.841269][T23477] CPU: 0 UID: 0 PID: 23477 Comm: syz.3.6152 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1328.841307][T23477] Tainted: [L]=SOFTLOCKUP [ 1328.841317][T23477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1328.841330][T23477] Call Trace: [ 1328.841340][T23477] [ 1328.841350][T23477] dump_stack_lvl+0xe8/0x150 [ 1328.841391][T23477] should_fail_ex+0x467/0x600 [ 1328.841430][T23477] should_failslab+0xa8/0x100 [ 1328.841459][T23477] __kmalloc_noprof+0xfe/0x780 [ 1328.841479][T23477] ? rcu_is_watching+0x15/0xb0 [ 1328.841506][T23477] ? tomoyo_realpath_from_path+0xef/0x640 [ 1328.841537][T23477] ? tomoyo_realpath_from_path+0xef/0x640 [ 1328.841573][T23477] tomoyo_realpath_from_path+0xef/0x640 [ 1328.841612][T23477] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1328.841647][T23477] tomoyo_path_number_perm+0x246/0x5f0 [ 1328.841687][T23477] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1328.841734][T23477] ? kstrtoull+0x12f/0x1d0 [ 1328.841807][T23477] ? __pfx_from_kuid+0x10/0x10 [ 1328.841842][T23477] ? rwbase_write_lock+0x550/0x720 [ 1328.841885][T23477] tomoyo_path_chown+0x46/0xc0 [ 1328.841917][T23477] security_path_chown+0x139/0x340 [ 1328.841951][T23477] chown_common+0x3c0/0x640 [ 1328.841995][T23477] ? __pfx_chown_common+0x10/0x10 [ 1328.842041][T23477] ? mnt_get_write_access+0x262/0x2d0 [ 1328.842074][T23477] ? mnt_want_write_file+0x17e/0x210 [ 1328.842106][T23477] ksys_fchown+0xe9/0x160 [ 1328.842137][T23477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.842162][T23477] __x64_sys_fchown+0x7a/0x90 [ 1328.842196][T23477] do_syscall_64+0x174/0x580 [ 1328.842226][T23477] ? trace_irq_disable+0x3b/0x140 [ 1328.842260][T23477] ? clear_bhb_loop+0x70/0xc0 [ 1328.842288][T23477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.842311][T23477] RIP: 0033:0x7fba695ee0d9 [ 1328.842334][T23477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1328.842353][T23477] RSP: 002b:00007fba67846028 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 1328.842379][T23477] RAX: ffffffffffffffda RBX: 00007fba69875fa0 RCX: 00007fba695ee0d9 [ 1328.842396][T23477] RDX: 000000000000ee01 RSI: 0000000000000000 RDI: 0000000000000005 [ 1328.842410][T23477] RBP: 00007fba67846090 R08: 0000000000000000 R09: 0000000000000000 [ 1328.842425][T23477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1328.842439][T23477] R13: 00007fba69876038 R14: 00007fba69875fa0 R15: 00007ffc6157be48 [ 1328.842476][T23477] [ 1328.903946][T23477] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1330.144676][ T5597] Bluetooth: hci1: unexpected event for opcode 0x040d [ 1330.406602][ T43] hsr_slave_0: left promiscuous mode [ 1330.454361][ T43] hsr_slave_1: left promiscuous mode [ 1330.455385][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1330.455409][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1330.502735][T23501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6159'. [ 1330.640775][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1330.640808][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1330.796889][ T43] veth1_macvtap: left promiscuous mode [ 1330.796966][ T43] veth0_macvtap: left promiscuous mode [ 1330.797132][ T43] veth1_vlan: left promiscuous mode [ 1330.797289][ T43] veth0_vlan: left promiscuous mode [ 1331.529426][ T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1331.719817][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1331.720705][ T9] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice=ff.d1 [ 1331.723621][ T9] usb 4-1: config 251 has an invalid interface number: 48 but max is 1 [ 1331.723652][ T9] usb 4-1: config 251 contains an unexpected descriptor of type 0x2, skipping [ 1331.723691][ T9] usb 4-1: config 251 has an invalid interface number: 55 but max is 1 [ 1331.723714][ T9] usb 4-1: config 251 has no interface number 0 [ 1331.723731][ T9] usb 4-1: config 251 has no interface number 1 [ 1331.723783][ T9] usb 4-1: config 251 interface 48 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 1331.723798][ T9] usb 4-1: config 251 interface 48 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1331.723812][ T9] usb 4-1: config 251 interface 48 altsetting 4 endpoint 0xD has invalid maxpacket 1136, setting to 64 [ 1331.723828][ T9] usb 4-1: config 251 interface 48 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1331.723845][ T9] usb 4-1: config 251 interface 48 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 1331.723861][ T9] usb 4-1: config 251 interface 48 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 1331.723883][ T9] usb 4-1: config 251 interface 55 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1331.723897][ T9] usb 4-1: config 251 interface 55 altsetting 5 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1331.723913][ T9] usb 4-1: config 251 interface 55 altsetting 5 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1331.723929][ T9] usb 4-1: config 251 interface 55 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 1331.723943][ T9] usb 4-1: config 251 interface 55 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 1331.723957][ T9] usb 4-1: config 251 interface 55 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 1331.723972][ T9] usb 4-1: config 251 interface 55 altsetting 5 endpoint 0x4 has an invalid bInterval 217, changing to 7 [ 1331.723988][ T9] usb 4-1: config 251 interface 48 has no altsetting 0 [ 1331.724000][ T9] usb 4-1: config 251 interface 55 has no altsetting 0 [ 1331.726467][ T9] usb 4-1: Dual-Role OTG device on HNP port [ 1331.726747][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.726761][ T9] usb 4-1: Product: 伢舵ꣲꞋ圁Ⳬ᪌鴵䦽謿胋憝禧滄孿峙嶯歟溋旨诊鰦웣뢦唺봄栊ᨩ횣⤗뢎躄槺幛纵❱騑 [ 1331.726774][ T9] usb 4-1: Manufacturer: 顆ڇ됸晉උᔁ㼽ᢲ䢲班띆楇䂜졉⭻蟻쥩牻䌇쬦ꇬ솳뎁ጓ㕀㖮娻ೠdz댓챙麍썃꩎돚浿舟㫭蔥礆＄ౡ횛䈫┻丸෿ˊ羗ꊡ뉛득霳﬜֑戳⢲Ṑ헓秊 [ 1331.726788][ T9] usb 4-1: SerialNumber: syz [ 1332.160693][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1332.219375][ T9] qmi_wwan 4-1:251.48: More than one union descriptor, skipping ... [ 1332.228239][ T9] qmi_wwan 4-1:251.48: probe with driver qmi_wwan failed with error -22 [ 1332.240704][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1332.284321][ T9] usb 4-1: USB disconnect, device number 49 [ 1332.573558][ T5244] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1332.596242][T23511] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1334.346450][T23540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6169'. [ 1334.639800][ T5865] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1334.856244][ T5865] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1334.856309][ T5865] usb 1-1: New USB device found, idVendor=0c45, idProduct=624f, bcdDevice=af.98 [ 1334.857585][ T5865] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.867020][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 1334.867049][ T5865] usb 1-1: Product: syz [ 1334.867064][ T5865] usb 1-1: Manufacturer: syz [ 1334.867077][ T5865] usb 1-1: SerialNumber: syz [ 1335.999872][ T5696] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1336.149826][ T5696] usb 4-1: Using ep0 maxpacket: 16 [ 1336.152203][ T5696] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice=ff.d1 [ 1336.169120][ T5696] usb 4-1: config 251 has an invalid interface number: 48 but max is 1 [ 1336.169153][ T5696] usb 4-1: config 251 contains an unexpected descriptor of type 0x2, skipping [ 1336.169174][ T5696] usb 4-1: config 251 has an invalid interface number: 55 but max is 1 [ 1336.169196][ T5696] usb 4-1: config 251 has no interface number 0 [ 1336.169213][ T5696] usb 4-1: config 251 has no interface number 1 [ 1336.169293][ T5696] usb 4-1: config 251 interface 48 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 1336.169319][ T5696] usb 4-1: config 251 interface 48 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1336.169346][ T5696] usb 4-1: config 251 interface 48 altsetting 4 endpoint 0xD has invalid maxpacket 1136, setting to 64 [ 1336.169375][ T5696] usb 4-1: config 251 interface 48 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1336.169403][ T5696] usb 4-1: config 251 interface 48 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 1336.169428][ T5696] usb 4-1: config 251 interface 48 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 1336.169471][ T5696] usb 4-1: config 251 interface 55 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1336.169495][ T5696] usb 4-1: config 251 interface 55 altsetting 5 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1336.169523][ T5696] usb 4-1: config 251 interface 55 altsetting 5 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1336.169551][ T5696] usb 4-1: config 251 interface 55 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 1336.169575][ T5696] usb 4-1: config 251 interface 55 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 1336.169600][ T5696] usb 4-1: config 251 interface 55 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 1336.169777][ T5696] usb 4-1: config 251 interface 55 altsetting 5 endpoint 0x4 has an invalid bInterval 217, changing to 7 [ 1336.169810][ T5696] usb 4-1: config 251 interface 48 has no altsetting 0 [ 1336.169830][ T5696] usb 4-1: config 251 interface 55 has no altsetting 0 [ 1336.242674][T14095] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1336.339863][ T5696] usb 4-1: Dual-Role OTG device on HNP port [ 1336.359802][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.359834][ T5696] usb 4-1: Product: 伢舵ꣲꞋ圁Ⳬ᪌鴵䦽謿胋憝禧滄孿峙嶯歟溋旨诊鰦웣뢦唺봄栊ᨩ횣⤗뢎躄槺幛纵❱騑 [ 1336.359857][ T5696] usb 4-1: Manufacturer: 顆ڇ됸晉උᔁ㼽ᢲ䢲班띆楇䂜졉⭻蟻쥩牻䌇쬦ꇬ솳뎁ጓ㕀㖮娻ೠdz댓챙麍썃꩎돚浿舟㫭蔥礆＄ౡ횛䈫┻丸෿ˊ羗ꊡ뉛득霳﬜֑戳⢲Ṑ헓秊 [ 1336.359882][ T5696] usb 4-1: SerialNumber: syz [ 1336.391295][T14095] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1336.393847][T14095] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1336.393876][T14095] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1336.393900][T14095] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1336.397989][T14095] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.398012][T14095] usb 2-1: Product: syz [ 1336.398026][T14095] usb 2-1: Manufacturer: syz [ 1336.398097][T14095] usb 2-1: SerialNumber: syz [ 1336.418278][T14095] usb 2-1: config 0 descriptor?? [ 1336.421595][T23570] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1336.421887][T23570] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1336.429527][T14095] usb 2-1: ucan: probing device on interface #0 [ 1336.802132][ T5696] qmi_wwan 4-1:251.48: More than one union descriptor, skipping ... [ 1336.807132][ T5696] qmi_wwan 4-1:251.48: probe with driver qmi_wwan failed with error -22 [ 1336.928088][T14095] usb 2-1: ucan: device reported invalid device info [ 1336.928184][T14095] usb 2-1: ucan: probe failed; try to update the device firmware [ 1336.928382][ T5696] usb 4-1: USB disconnect, device number 50 [ 1337.056450][T20620] udevd[20620]: setting owner of /dev/bus/usb/004/050 to uid=0, gid=0 failed: No such file or directory [ 1337.246255][ T5696] usb 2-1: USB disconnect, device number 48 [ 1337.802680][ T5865] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624f [ 1337.805439][ T5865] gspca_sn9c20x: Write register 1000 failed -71 [ 1337.805496][ T5865] gspca_sn9c20x: Device initialization failed [ 1337.805593][ T5865] gspca_sn9c20x 1-1:1.0: probe with driver gspca_sn9c20x failed with error -71 [ 1337.828814][ T5865] usb 1-1: USB disconnect, device number 54 [ 1339.313803][T23592] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1339.968655][T23612] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6188'. [ 1339.979542][T23612] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6188'. [ 1340.046493][T23614] FAULT_INJECTION: forcing a failure. [ 1340.046493][T23614] name failslab, interval 1, probability 0, space 0, times 0 [ 1340.046534][T23614] CPU: 0 UID: 0 PID: 23614 Comm: syz.3.6189 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1340.046567][T23614] Tainted: [L]=SOFTLOCKUP [ 1340.046576][T23614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1340.046590][T23614] Call Trace: [ 1340.046599][T23614] [ 1340.046609][T23614] dump_stack_lvl+0xe8/0x150 [ 1340.046651][T23614] should_fail_ex+0x467/0x600 [ 1340.046689][T23614] should_failslab+0xa8/0x100 [ 1340.046715][T23614] kmem_cache_alloc_noprof+0xa4/0x650 [ 1340.046748][T23614] ? do_getname+0x2e/0x250 [ 1340.046777][T23614] ? do_getname+0x2e/0x250 [ 1340.046810][T23614] do_getname+0x2e/0x250 [ 1340.046838][T23614] ? getname_uflags+0x11/0x30 [ 1340.046871][T23614] vfs_open_tree+0x289/0x3d0 [ 1340.046901][T23614] ? __pfx_vfs_open_tree+0x10/0x10 [ 1340.046936][T23614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1340.046961][T23614] __x64_sys_open_tree+0x96/0x110 [ 1340.046997][T23614] do_syscall_64+0x174/0x580 [ 1340.047031][T23614] ? trace_irq_disable+0x3b/0x140 [ 1340.047066][T23614] ? clear_bhb_loop+0x70/0xc0 [ 1340.047091][T23614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1340.047116][T23614] RIP: 0033:0x7fba695ee0d9 [ 1340.047139][T23614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1340.047158][T23614] RSP: 002b:00007fba67846028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 1340.047183][T23614] RAX: ffffffffffffffda RBX: 00007fba69875fa0 RCX: 00007fba695ee0d9 [ 1340.047199][T23614] RDX: 0000000000089901 RSI: 0000200000000640 RDI: 0000000000000003 [ 1340.047215][T23614] RBP: 00007fba67846090 R08: 0000000000000000 R09: 0000000000000000 [ 1340.047229][T23614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1340.047244][T23614] R13: 00007fba69876038 R14: 00007fba69875fa0 R15: 00007ffc6157be48 [ 1340.047288][T23614] [ 1340.160007][T16874] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1340.249789][ T5865] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 1340.368320][T16874] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1340.373790][T16874] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1340.373827][T16874] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1340.373854][T16874] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1340.549776][T16874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.549809][T16874] usb 2-1: Product: syz [ 1340.549825][T16874] usb 2-1: Manufacturer: syz [ 1340.549841][T16874] usb 2-1: SerialNumber: syz [ 1340.550034][ T5865] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1340.620556][ T5865] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.620664][ T5865] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1340.621158][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.155101][T16874] usb 2-1: config 0 descriptor?? [ 1341.175852][T23608] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1341.175962][T23608] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1341.190368][ T5865] usb 5-1: config 0 descriptor?? [ 1341.203928][T16874] usb 2-1: ucan: probing device on interface #0 [ 1341.226289][ T5865] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1341.226343][ T5865] dvb-usb: bulk message failed: -22 (3/0) [ 1341.315268][ T5865] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1341.324530][ T5865] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1341.324595][ T5865] usb 5-1: media controller created [ 1341.346598][ T5865] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1341.407094][ T5865] dvb-usb: bulk message failed: -22 (6/0) [ 1341.428207][ T5865] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1341.456202][ T5865] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input70 [ 1341.521356][ T5865] dvb-usb: schedule remote query interval to 150 msecs. [ 1341.521383][ T5865] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1341.563758][ T5865] usb 5-1: USB disconnect, device number 50 [ 1341.613048][T16874] usb 2-1: ucan: device reported invalid device info [ 1341.613075][T16874] usb 2-1: ucan: probe failed; try to update the device firmware [ 1341.903503][ T5865] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1342.083810][T16874] usb 2-1: USB disconnect, device number 49 [ 1342.173479][T23634] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1342.212197][T23634] bond1 (unregistering): Released all slaves [ 1342.220384][T23643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6196'. [ 1342.722612][T23651] trusted_key: encrypted_key: insufficient parameters specified [ 1343.055005][T23654] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1344.829889][ T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1344.991435][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1344.992331][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1344.993847][ T9] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1344.993886][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1344.993931][ T9] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1344.993958][ T9] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1344.993984][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1345.003088][ T9] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1345.003135][ T9] usb 1-1: Product: syz [ 1345.003151][ T9] usb 1-1: Manufacturer: syz [ 1345.003167][ T9] usb 1-1: SerialNumber: syz [ 1345.081778][T23207] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1345.110648][ T9] usb 1-1: config 0 descriptor?? [ 1345.116195][ T9] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1345.136269][ T9] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1345.182356][T23207] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1345.329970][T23696] syz_tun: entered allmulticast mode [ 1345.379330][ T31] usb 1-1: USB disconnect, device number 55 [ 1345.385275][T23207] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1345.435913][ T31] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1345.646316][T23207] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1345.646862][T23695] syz_tun: left allmulticast mode [ 1345.819516][T23702] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1345.979720][T23709] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6214'. [ 1345.982025][T23207] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1346.047754][T23207] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1346.060013][T23207] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1347.020090][T23207] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1347.615521][T23739] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6221'. [ 1347.635045][T23739] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6221'. [ 1347.873025][T23207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1347.891430][ T9] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 1348.012941][T23207] 8021q: adding VLAN 0 to HW filter on device team0 [ 1348.053788][ T9] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1348.057111][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1348.057141][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1348.057205][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.063779][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.063911][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1348.099866][ T9] usb 5-1: config 0 descriptor?? [ 1348.172109][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1348.172182][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1348.185879][T22291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.186012][T22291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1348.211784][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1348.244010][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1348.244075][ T9] usb 5-1: media controller created [ 1348.258657][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1348.320513][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1348.320607][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1348.386831][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input71 [ 1348.424238][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 1348.424263][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1348.478281][ T9] usb 5-1: USB disconnect, device number 51 [ 1348.497512][T23752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6223'. [ 1348.772974][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1349.036750][T23763] netlink: 'syz.1.6226': attribute type 1 has an invalid length. [ 1349.120405][T23763] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1350.997194][T23797] FAULT_INJECTION: forcing a failure. [ 1350.997194][T23797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1350.997234][T23797] CPU: 0 UID: 0 PID: 23797 Comm: syz.3.6234 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1350.997272][T23797] Tainted: [L]=SOFTLOCKUP [ 1350.997281][T23797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1350.997293][T23797] Call Trace: [ 1350.997301][T23797] [ 1350.997309][T23797] dump_stack_lvl+0xe8/0x150 [ 1350.997339][T23797] should_fail_ex+0x467/0x600 [ 1350.997366][T23797] _copy_from_user+0x2d/0xb0 [ 1350.997383][T23797] get_timespec64+0x96/0x1b0 [ 1350.997403][T23797] ? __pfx_get_timespec64+0x10/0x10 [ 1350.997420][T23797] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1350.997452][T23797] __se_sys_pselect6+0x13a/0x320 [ 1350.997490][T23797] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1350.997516][T23797] ? __pfx_ksys_write+0x10/0x10 [ 1350.997539][T23797] ? __x64_sys_pselect6+0x21/0xf0 [ 1350.997565][T23797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.997590][T23797] do_syscall_64+0x174/0x580 [ 1350.997619][T23797] ? trace_irq_disable+0x3b/0x140 [ 1350.997652][T23797] ? clear_bhb_loop+0x70/0xc0 [ 1350.997679][T23797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.997700][T23797] RIP: 0033:0x7fba695ee0d9 [ 1350.997717][T23797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1350.997732][T23797] RSP: 002b:00007fba67846028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1350.997756][T23797] RAX: ffffffffffffffda RBX: 00007fba69875fa0 RCX: 00007fba695ee0d9 [ 1350.997772][T23797] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000040 [ 1350.997786][T23797] RBP: 00007fba67846090 R08: 0000200000000740 R09: 0000000000000000 [ 1350.997801][T23797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.997814][T23797] R13: 00007fba69876038 R14: 00007fba69875fa0 R15: 00007ffc6157be48 [ 1350.997848][T23797] [ 1351.401821][T23810] netlink: 'syz.1.6235': attribute type 12 has an invalid length. [ 1351.480416][T23207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1351.603786][T23207] veth0_vlan: entered promiscuous mode [ 1351.628503][T23207] veth1_vlan: entered promiscuous mode [ 1351.649835][ T10] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1351.692900][T23814] netlink: 'syz.0.6237': attribute type 1 has an invalid length. [ 1351.796093][T23814] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1351.800771][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1351.802223][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.802246][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1351.802293][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1351.802337][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.954664][T23816] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1351.976212][T23820] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1352.106400][T23207] veth0_macvtap: entered promiscuous mode [ 1352.108350][ T9] usb 2-1: USB disconnect, device number 50 [ 1352.135954][T23207] veth1_macvtap: entered promiscuous mode [ 1352.192094][T23207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1352.220436][T23207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1352.450922][T23824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6238'. [ 1352.472573][T23829] trusted_key: encrypted_key: insufficient parameters specified [ 1352.703982][T22308] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.707306][ T3351] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.707354][ T3351] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.707387][ T3351] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.304708][ T2605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1353.304742][ T2605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1353.771780][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1353.771806][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1355.703376][T23855] binder: BINDER_SET_CONTEXT_MGR already set [ 1355.703388][T23855] binder: 23849:23855 ioctl 4018620d 200000000040 returned -16 [ 1355.726527][T23855] FAULT_INJECTION: forcing a failure. [ 1355.726527][T23855] name failslab, interval 1, probability 0, space 0, times 0 [ 1355.726567][T23855] CPU: 1 UID: 0 PID: 23855 Comm: syz.2.6246 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1355.726599][T23855] Tainted: [L]=SOFTLOCKUP [ 1355.726607][T23855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1355.726621][T23855] Call Trace: [ 1355.726630][T23855] [ 1355.726639][T23855] dump_stack_lvl+0xe8/0x150 [ 1355.726678][T23855] should_fail_ex+0x467/0x600 [ 1355.726714][T23855] should_failslab+0xa8/0x100 [ 1355.726745][T23855] __kmalloc_noprof+0xfe/0x780 [ 1355.726766][T23855] ? rcu_is_watching+0x15/0xb0 [ 1355.726802][T23855] ? tomoyo_realpath_from_path+0xef/0x640 [ 1355.726829][T23855] ? tomoyo_realpath_from_path+0xef/0x640 [ 1355.726863][T23855] tomoyo_realpath_from_path+0xef/0x640 [ 1355.726901][T23855] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1355.726937][T23855] tomoyo_path_number_perm+0x246/0x5f0 [ 1355.726972][T23855] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1355.727005][T23855] ? __lock_acquire+0x683/0x2ce0 [ 1355.727044][T23855] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1355.727074][T23855] ? hook_file_ioctl+0x1f3/0x600 [ 1355.727104][T23855] ? lockdep_hardirqs_on+0x7a/0x110 [ 1355.727156][T23855] ? __fget_files+0x2a/0x420 [ 1355.727181][T23855] ? __fget_files+0x2a/0x420 [ 1355.727201][T23855] ? __fget_files+0x3a8/0x420 [ 1355.727222][T23855] ? __fget_files+0x2a/0x420 [ 1355.727248][T23855] security_file_ioctl+0xc3/0x2a0 [ 1355.727274][T23855] __se_sys_ioctl+0x47/0x170 [ 1355.727302][T23855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.727326][T23855] do_syscall_64+0x174/0x580 [ 1355.727359][T23855] ? clear_bhb_loop+0x70/0xc0 [ 1355.727388][T23855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.727410][T23855] RIP: 0033:0x7fe42eafe0d9 [ 1355.727431][T23855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1355.727450][T23855] RSP: 002b:00007fe42cd56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1355.727474][T23855] RAX: ffffffffffffffda RBX: 00007fe42ed85fa0 RCX: 00007fe42eafe0d9 [ 1355.727490][T23855] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 1355.727504][T23855] RBP: 00007fe42cd56090 R08: 0000000000000000 R09: 0000000000000000 [ 1355.727517][T23855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1355.727531][T23855] R13: 00007fe42ed86038 R14: 00007fe42ed85fa0 R15: 00007ffef819f208 [ 1355.727565][T23855] [ 1355.737305][T23855] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1356.098979][T23863] netlink: 'syz.2.6248': attribute type 1 has an invalid length. [ 1356.469613][T23870] FAULT_INJECTION: forcing a failure. [ 1356.469613][T23870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1356.472849][T23870] CPU: 1 UID: 0 PID: 23870 Comm: syz.0.6251 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1356.472887][T23870] Tainted: [L]=SOFTLOCKUP [ 1356.472895][T23870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1356.472909][T23870] Call Trace: [ 1356.472918][T23870] [ 1356.472928][T23870] dump_stack_lvl+0xe8/0x150 [ 1356.472967][T23870] should_fail_ex+0x467/0x600 [ 1356.473005][T23870] _copy_from_user+0x2d/0xb0 [ 1356.473029][T23870] ___sys_sendmsg+0x1c6/0x360 [ 1356.473058][T23870] ? __lock_acquire+0x683/0x2ce0 [ 1356.473085][T23870] ? __pfx____sys_sendmsg+0x10/0x10 [ 1356.473150][T23870] ? __fget_files+0x2a/0x420 [ 1356.473171][T23870] ? __fget_files+0x3a8/0x420 [ 1356.473204][T23870] __x64_sys_sendmsg+0x1b7/0x290 [ 1356.473234][T23870] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1356.473279][T23870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.473305][T23870] do_syscall_64+0x174/0x580 [ 1356.473336][T23870] ? trace_irq_disable+0x3b/0x140 [ 1356.473369][T23870] ? clear_bhb_loop+0x70/0xc0 [ 1356.473398][T23870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.473420][T23870] RIP: 0033:0x7f32dfe3e0d9 [ 1356.473441][T23870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1356.473465][T23870] RSP: 002b:00007f32de096028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1356.473491][T23870] RAX: ffffffffffffffda RBX: 00007f32e00c5fa0 RCX: 00007f32dfe3e0d9 [ 1356.473508][T23870] RDX: 0000000020000090 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1356.473522][T23870] RBP: 00007f32de096090 R08: 0000000000000000 R09: 0000000000000000 [ 1356.473536][T23870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1356.473550][T23870] R13: 00007f32e00c6038 R14: 00007f32e00c5fa0 R15: 00007ffe33ca66e8 [ 1356.473585][T23870] [ 1357.762521][T23884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6256'. [ 1357.762549][T23884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6256'. [ 1359.760870][T16874] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1359.925656][T16874] usb 2-1: Using ep0 maxpacket: 16 [ 1359.926409][T16874] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice=ff.d1 [ 1359.927432][T16874] usb 2-1: config 251 has an invalid interface number: 48 but max is 1 [ 1359.927450][T16874] usb 2-1: config 251 contains an unexpected descriptor of type 0x2, skipping [ 1359.927469][T16874] usb 2-1: config 251 has an invalid interface number: 55 but max is 1 [ 1359.927482][T16874] usb 2-1: config 251 has no interface number 0 [ 1359.927494][T16874] usb 2-1: config 251 has no interface number 1 [ 1359.927995][T16874] usb 2-1: config 251 interface 48 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 1359.928016][T16874] usb 2-1: config 251 interface 48 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1359.928031][T16874] usb 2-1: config 251 interface 48 altsetting 4 endpoint 0xD has invalid maxpacket 1136, setting to 64 [ 1359.928049][T16874] usb 2-1: config 251 interface 48 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1359.928066][T16874] usb 2-1: config 251 interface 48 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 1359.928080][T16874] usb 2-1: config 251 interface 48 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 1359.928109][T16874] usb 2-1: config 251 interface 55 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1359.928123][T16874] usb 2-1: config 251 interface 55 altsetting 5 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1359.928140][T16874] usb 2-1: config 251 interface 55 altsetting 5 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1359.928156][T16874] usb 2-1: config 251 interface 55 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 1359.928171][T16874] usb 2-1: config 251 interface 55 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 1359.928185][T16874] usb 2-1: config 251 interface 55 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 1359.928209][T16874] usb 2-1: config 251 interface 55 altsetting 5 endpoint 0x4 has an invalid bInterval 217, changing to 7 [ 1359.928225][T16874] usb 2-1: config 251 interface 48 has no altsetting 0 [ 1359.928243][T16874] usb 2-1: config 251 interface 55 has no altsetting 0 [ 1359.932084][T16874] usb 2-1: Dual-Role OTG device on HNP port [ 1359.932413][T16874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.932435][T16874] usb 2-1: Product: 伢舵ꣲꞋ圁Ⳬ᪌鴵䦽謿胋憝禧滄孿峙嶯歟溋旨诊鰦웣뢦唺봄栊ᨩ횣⤗뢎躄槺幛纵❱騑 [ 1359.932456][T16874] usb 2-1: Manufacturer: 顆ڇ됸晉උᔁ㼽ᢲ䢲班띆楇䂜졉⭻蟻쥩牻䌇쬦ꇬ솳뎁ጓ㕀㖮娻ೠdz댓챙麍썃꩎돚浿舟㫭蔥礆＄ౡ횛䈫┻丸෿ˊ羗ꊡ뉛득霳﬜֑戳⢲Ṑ헓秊 [ 1359.932480][T16874] usb 2-1: SerialNumber: syz [ 1360.248088][T16874] qmi_wwan 2-1:251.48: More than one union descriptor, skipping ... [ 1360.249285][T16874] qmi_wwan 2-1:251.48: probe with driver qmi_wwan failed with error -22 [ 1360.349539][T16874] usb 2-1: USB disconnect, device number 51 [ 1360.642914][T14095] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1360.790706][T14095] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1360.792399][T14095] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1360.792433][T14095] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1360.792460][T14095] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1360.795059][T14095] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.795085][T14095] usb 1-1: Product: syz [ 1360.795100][T14095] usb 1-1: Manufacturer: syz [ 1360.795114][T14095] usb 1-1: SerialNumber: syz [ 1360.870293][T14095] usb 1-1: config 0 descriptor?? [ 1360.871235][T23903] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1360.871369][T23903] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1360.901716][T14095] usb 1-1: ucan: probing device on interface #0 [ 1361.091025][T14095] usb 1-1: ucan: could not read protocol version, ret=-71 [ 1361.091054][T14095] usb 1-1: ucan: probe failed; try to update the device firmware [ 1361.120648][T14095] usb 1-1: USB disconnect, device number 56 [ 1362.317823][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.317905][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.661064][T23927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6272'. [ 1363.132138][ T4964] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 1363.281493][ T4964] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice=34.15 [ 1363.283074][ T4964] usb 4-1: config 9 interface 0 has no altsetting 0 [ 1363.306112][T23946] bond2: Unable to set down delay as MII monitoring is disabled [ 1363.308432][ T4964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.308460][ T4964] usb 4-1: Product: syz [ 1363.308476][ T4964] usb 4-1: Manufacturer: syz [ 1363.308491][ T4964] usb 4-1: SerialNumber: syz [ 1364.299695][T23946] bond2 (unregistering): Released all slaves [ 1364.453166][T23958] netlink: 'syz.3.6279': attribute type 10 has an invalid length. [ 1364.453191][T23958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6279'. [ 1364.610222][T23947] bond1: (slave dummy0): Releasing backup interface [ 1364.708565][T23958] dummy0: entered promiscuous mode [ 1364.776541][ T4964] snd-usb-caiaq 4-1:9.0: can't set alt interface. [ 1364.776569][ T4964] usb 4-1: unable to init card! (ret=-5) [ 1364.777116][ T4964] snd-usb-caiaq 4-1:9.0: probe with driver snd-usb-caiaq failed with error -5 [ 1364.810315][ T4964] usb 4-1: USB disconnect, device number 51 [ 1365.029594][ T5597] Bluetooth: hci3: unexpected event for opcode 0x040d [ 1365.409815][ T5696] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1365.569858][ T5696] usb 1-1: Using ep0 maxpacket: 8 [ 1365.570750][ T5696] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1365.572873][ T5696] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.572890][ T5696] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1365.572920][ T5696] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1365.572938][ T5696] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1365.572964][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.687056][ T5696] hub 1-1:1.0: bad descriptor, ignoring hub [ 1365.687110][ T5696] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1365.688121][ T5696] cdc_wdm 1-1:1.0: skipping garbage [ 1365.688139][ T5696] cdc_wdm 1-1:1.0: skipping garbage [ 1365.721842][ T5696] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1365.721864][ T5696] cdc_wdm 1-1:1.0: Unknown control protocol [ 1366.012016][T23979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.012875][T23979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.668241][T23986] FAULT_INJECTION: forcing a failure. [ 1366.668241][T23986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1366.668282][T23986] CPU: 1 UID: 0 PID: 23986 Comm: syz.1.6293 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1366.668313][T23986] Tainted: [L]=SOFTLOCKUP [ 1366.668318][T23986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1366.668325][T23986] Call Trace: [ 1366.668331][T23986] [ 1366.668337][T23986] dump_stack_lvl+0xe8/0x150 [ 1366.668361][T23986] should_fail_ex+0x467/0x600 [ 1366.668386][T23986] _copy_from_user+0x2d/0xb0 [ 1366.668401][T23986] __sys_bpf+0x2e7/0xd90 [ 1366.668417][T23986] ? vfs_write+0x960/0xbb0 [ 1366.668432][T23986] ? __pfx___sys_bpf+0x10/0x10 [ 1366.668462][T23986] ? ksys_write+0x202/0x270 [ 1366.668477][T23986] ? __pfx_ksys_write+0x10/0x10 [ 1366.668494][T23986] __x64_sys_bpf+0xba/0xd0 [ 1366.668512][T23986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.668525][T23986] do_syscall_64+0x174/0x580 [ 1366.668543][T23986] ? trace_irq_disable+0x3b/0x140 [ 1366.668561][T23986] ? clear_bhb_loop+0x70/0xc0 [ 1366.668576][T23986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.668596][T23986] RIP: 0033:0x7fc09e68e0d9 [ 1366.668617][T23986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1366.668629][T23986] RSP: 002b:00007fc09c8e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1366.668644][T23986] RAX: ffffffffffffffda RBX: 00007fc09e915fa0 RCX: 00007fc09e68e0d9 [ 1366.668654][T23986] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 0000000000000018 [ 1366.668662][T23986] RBP: 00007fc09c8e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1366.668670][T23986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1366.668678][T23986] R13: 00007fc09e916038 R14: 00007fc09e915fa0 R15: 00007ffe7d4d6de8 [ 1366.668697][T23986] [ 1366.737266][T23979] misc userio: Begin command sent, but we're already running [ 1368.057203][T23991] bond5: Unable to set down delay as MII monitoring is disabled [ 1368.115911][T23991] bond5 (unregistering): Released all slaves [ 1368.853791][T24005] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6299'. [ 1368.860286][ T5696] usb 1-1: USB disconnect, device number 57 [ 1369.401035][ T37] kauditd_printk_skb: 49 callbacks suppressed [ 1369.401056][ T37] audit: type=1326 audit(1786501457.125:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24021 comm="syz.0.6307" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dfe3e0d9 code=0x7ffc0000 [ 1369.401109][ T37] audit: type=1326 audit(1786501457.125:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24021 comm="syz.0.6307" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dfe3e0d9 code=0x7ffc0000 [ 1369.401959][ T37] audit: type=1326 audit(1786501457.135:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24021 comm="syz.0.6307" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dfe3e0d9 code=0x7ffc0000 [ 1369.402012][ T37] audit: type=1326 audit(1786501457.135:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24021 comm="syz.0.6307" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f32dfe3e0d9 code=0x7ffc0000 [ 1369.402416][ T37] audit: type=1326 audit(1786501457.135:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24021 comm="syz.0.6307" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dfe3e0d9 code=0x7ffc0000 [ 1369.403034][ T37] audit: type=1326 audit(1786501457.135:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24021 comm="syz.0.6307" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dfe3e0d9 code=0x7ffc0000 [ 1369.403087][ T37] audit: type=1326 audit(1786501457.135:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24021 comm="syz.0.6307" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dfe3e0d9 code=0x7ffc0000 [ 1369.404370][ T37] audit: type=1326 audit(1786501457.135:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24021 comm="syz.0.6307" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dfe3e0d9 code=0x7ffc0000 [ 1369.406265][ T37] audit: type=1326 audit(1786501457.135:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24021 comm="syz.0.6307" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f32dfe3e0d9 code=0x7ffc0000 [ 1369.406856][ T37] audit: type=1326 audit(1786501457.135:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24021 comm="syz.0.6307" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dfe3e0d9 code=0x7ffc0000 [ 1369.479874][ T31] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1369.630745][ T31] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1369.632302][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1369.632332][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1369.632368][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.651555][ T31] usb 5-1: config 0 descriptor?? [ 1369.859757][ T10] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 1370.030698][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1370.032309][ T10] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1370.032345][ T10] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1370.032369][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1370.035976][ T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1370.036004][ T10] usb 2-1: Product: syz [ 1370.036021][ T10] usb 2-1: Manufacturer: syz [ 1370.036037][ T10] usb 2-1: SerialNumber: syz [ 1370.125971][ T10] usb 2-1: config 0 descriptor?? [ 1370.160530][ T10] usb 2-1: selecting invalid altsetting 0 [ 1370.331990][ T31] cp2112 0003:10C4:EA90.002A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1370.460376][ T31] cp2112 0003:10C4:EA90.002A: Part Number: 0x00 Device Version: 0x00 [ 1370.618094][ T31] cp2112 0003:10C4:EA90.002A: error requesting SMBus config [ 1370.665450][ T31] cp2112 0003:10C4:EA90.002A: probe with driver cp2112 failed with error -32 [ 1370.700280][ T31] usb 5-1: USB disconnect, device number 52 [ 1370.746741][T24020] snd-usb-audio 2-1:0.0: Runtime PM usage count underflow! [ 1370.776945][T14095] usb 2-1: USB disconnect, device number 52 [ 1371.003436][T24035] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 1371.121941][T19190] udevd[19190]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1371.432016][T24036] team0 (unregistering): Port device team_slave_0 removed [ 1371.550404][T24036] team0 (unregistering): Port device team_slave_1 removed [ 1372.099810][T14095] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1372.251018][T14095] usb 4-1: Using ep0 maxpacket: 16 [ 1372.252095][T14095] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1372.284102][T14095] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.284132][T14095] usb 4-1: Product: syz [ 1372.284146][T14095] usb 4-1: Manufacturer: syz [ 1372.284160][T14095] usb 4-1: SerialNumber: syz [ 1372.320870][T14095] usb 4-1: config 0 descriptor?? [ 1372.341795][T14095] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1372.570017][T14095] gspca_spca508: reg_read err -32 [ 1372.570868][T14095] gspca_spca508: reg_read err -32 [ 1372.571826][T14095] gspca_spca508: reg_read err -32 [ 1372.573463][T14095] gspca_spca508: reg_read err -32 [ 1372.574261][T14095] gspca_spca508: reg_read err -32 [ 1372.779101][T14095] gspca_spca508: reg write: error -71 [ 1372.779223][T14095] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 1372.814070][T14095] usb 4-1: USB disconnect, device number 52 [ 1372.873698][T24075] tipc: Can't bind to reserved service type 0 [ 1373.686362][T24085] i2c i2c-0: delete_device: Can't find device in list [ 1375.358936][T14095] kernel read not supported for file /vcs (pid: 14095 comm: kworker/1:2) [ 1380.254830][ T5597] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1388.033878][ T5603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1388.237081][ T5603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1388.280136][ T5603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1388.281792][ T5603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1388.282578][ T5603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1389.486094][ T5603] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1389.579023][ T5603] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1389.595483][ T5603] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1389.619402][ T5603] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1389.634462][ T5603] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1390.479902][ T5603] Bluetooth: hci5: command tx timeout [ 1391.636417][ T5597] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1391.666864][ T5597] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1391.692961][T20672] Bluetooth: hci6: command tx timeout [ 1391.921291][T24146] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1391.922778][T24146] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1391.960792][T24146] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1392.559798][ T5603] Bluetooth: hci5: command tx timeout [ 1393.778075][ T5603] Bluetooth: hci6: command tx timeout [ 1394.448064][T24146] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1394.486177][ T5597] Bluetooth: hci7: command tx timeout [ 1394.498579][T24146] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1394.516259][T24146] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1394.534672][T24146] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1394.535573][T24146] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1394.639863][T24146] Bluetooth: hci5: command tx timeout [ 1395.852734][ T5603] Bluetooth: hci6: command tx timeout [ 1396.559731][ T5603] Bluetooth: hci7: command tx timeout [ 1396.667317][ T5603] Bluetooth: hci8: command tx timeout [ 1396.719770][ T5603] Bluetooth: hci5: command tx timeout [ 1397.933262][ T5603] Bluetooth: hci6: command tx timeout [ 1398.213523][T24146] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1398.344271][T24146] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1398.360118][T24146] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1398.368548][T24146] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1398.393307][T24146] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1398.639805][ T5597] Bluetooth: hci7: command tx timeout [ 1398.720057][T24146] Bluetooth: hci8: command tx timeout [ 1400.479814][T24146] Bluetooth: hci9: command tx timeout [ 1400.729696][T24146] Bluetooth: hci7: command tx timeout [ 1400.800192][T24146] Bluetooth: hci8: command tx timeout [ 1402.582777][T24146] Bluetooth: hci9: command tx timeout [ 1402.879936][T24146] Bluetooth: hci8: command tx timeout [ 1404.648446][T24146] Bluetooth: hci9: command tx timeout [ 1406.719723][T24146] Bluetooth: hci9: command tx timeout [ 1423.122776][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.122857][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1435.457364][T24146] Bluetooth: hci2: command 0x0406 tx timeout [ 1448.506534][T24146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1448.565567][T24146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1448.611866][T24146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1448.615941][T24146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1448.618252][T24146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1450.100882][T24146] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1450.288638][T24146] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1450.303694][T24146] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1450.307755][T24146] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1450.308712][T24146] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1450.447051][T24138] lo speed is unknown, defaulting to 1000 [ 1450.722936][T24146] Bluetooth: hci0: command tx timeout [ 1450.723504][T24155] lo speed is unknown, defaulting to 1000 [ 1451.198982][ T5603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1451.244821][ T5603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1451.268830][ T5603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1451.277394][ T5603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1451.287831][ T5603] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1451.521746][T24150] lo speed is unknown, defaulting to 1000 [ 1451.622361][T24144] lo speed is unknown, defaulting to 1000 [ 1452.214239][T24199] lo speed is unknown, defaulting to 1000 [ 1452.405154][T24146] Bluetooth: hci3: command tx timeout [ 1452.801444][T24146] Bluetooth: hci0: command tx timeout [ 1453.520230][T24146] Bluetooth: hci4: command tx timeout [ 1453.806058][T24206] lo speed is unknown, defaulting to 1000 [ 1454.129221][T24215] lo speed is unknown, defaulting to 1000 [ 1454.479929][T24146] Bluetooth: hci3: command tx timeout [ 1454.890795][T24146] Bluetooth: hci0: command tx timeout [ 1455.586314][ T5603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1455.599797][ T5597] Bluetooth: hci4: command tx timeout [ 1455.665828][ T5603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1455.672550][ T5603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1455.737404][ T5603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1455.739906][ T5603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1456.461551][T24155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.462105][T24155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.462357][T24155] bridge_slave_0: entered allmulticast mode [ 1456.465345][T24155] bridge_slave_0: entered promiscuous mode [ 1456.559759][T24146] Bluetooth: hci3: command tx timeout [ 1456.589329][T24155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.589517][T24155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.599976][T24155] bridge_slave_1: entered allmulticast mode [ 1456.621832][T24155] bridge_slave_1: entered promiscuous mode [ 1456.959973][T24146] Bluetooth: hci0: command tx timeout [ 1457.016294][T24155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1457.456492][T24155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1457.680367][T24146] Bluetooth: hci4: command tx timeout [ 1457.920049][T24146] Bluetooth: hci5: command tx timeout [ 1458.209111][ T5603] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1458.274700][ T5603] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1458.278832][ T5603] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1458.346775][ T5603] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1458.347657][ T5603] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1458.639825][T24146] Bluetooth: hci3: command tx timeout [ 1459.742717][T24199] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.742862][T24199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.743114][T24199] bridge_slave_0: entered allmulticast mode [ 1459.759730][T24146] Bluetooth: hci4: command tx timeout [ 1459.781985][T24199] bridge_slave_0: entered promiscuous mode [ 1459.999843][T24146] Bluetooth: hci5: command tx timeout [ 1460.051924][T24199] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.052068][T24199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.052333][T24199] bridge_slave_1: entered allmulticast mode [ 1460.088435][T24199] bridge_slave_1: entered promiscuous mode [ 1460.644372][T24146] Bluetooth: hci8: command tx timeout [ 1460.769511][T24199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1460.780839][T24248] lo speed is unknown, defaulting to 1000 [ 1461.051940][T24199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1461.670783][T24206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.670929][T24206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.671229][T24206] bridge_slave_0: entered allmulticast mode [ 1461.677513][T24206] bridge_slave_0: entered promiscuous mode [ 1462.085789][T24146] Bluetooth: hci5: command tx timeout [ 1462.702047][T24206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.702194][T24206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.702417][T24206] bridge_slave_1: entered allmulticast mode [ 1462.705672][T24206] bridge_slave_1: entered promiscuous mode [ 1462.721451][T24146] Bluetooth: hci8: command tx timeout [ 1462.747626][T24199] team0: Port device team_slave_0 added [ 1462.816253][T24199] team0: Port device team_slave_1 added [ 1462.933965][T24215] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.934121][T24215] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.934441][T24215] bridge_slave_0: entered allmulticast mode [ 1462.938046][T24215] bridge_slave_0: entered promiscuous mode [ 1463.038183][T24215] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.059847][T24215] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.060141][T24215] bridge_slave_1: entered allmulticast mode [ 1463.063693][T24215] bridge_slave_1: entered promiscuous mode [ 1463.094297][T24206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1463.188598][T24199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1463.188618][T24199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1463.188648][T24199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1463.298768][T24206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1463.298864][T24268] lo speed is unknown, defaulting to 1000 [ 1463.338379][T24199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1463.338401][T24199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1463.338431][T24199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1463.550401][T24215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1463.633768][T24215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1463.637910][T24206] team0: Port device team_slave_0 added [ 1463.743973][T24206] team0: Port device team_slave_1 added [ 1464.160150][T24146] Bluetooth: hci5: command tx timeout [ 1464.318457][T24215] team0: Port device team_slave_0 added [ 1464.339500][T24199] hsr_slave_0: entered promiscuous mode [ 1464.347837][T24199] hsr_slave_1: entered promiscuous mode [ 1464.349076][T24199] debugfs: 'hsr0' already exists in 'hsr' [ 1464.349105][T24199] Cannot create hsr debugfs directory [ 1464.410148][T24215] team0: Port device team_slave_1 added [ 1464.417256][T24206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1464.417275][T24206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1464.417306][T24206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1464.533074][T24206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1464.533095][T24206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1464.533127][T24206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1464.708894][T24215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1464.708915][T24215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1464.708947][T24215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1464.797822][T24215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1464.797842][T24215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1464.797875][T24215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1464.799869][T24146] Bluetooth: hci8: command tx timeout [ 1465.252824][T24206] hsr_slave_0: entered promiscuous mode [ 1465.254565][T24206] hsr_slave_1: entered promiscuous mode [ 1465.255880][T24206] debugfs: 'hsr0' already exists in 'hsr' [ 1465.255908][T24206] Cannot create hsr debugfs directory [ 1465.509219][T24215] hsr_slave_0: entered promiscuous mode [ 1465.529785][T24215] hsr_slave_1: entered promiscuous mode [ 1465.532605][T24215] debugfs: 'hsr0' already exists in 'hsr' [ 1465.532637][T24215] Cannot create hsr debugfs directory [ 1466.881299][T24146] Bluetooth: hci8: command tx timeout [ 1467.168178][T24248] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.169271][T24248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1467.169548][T24248] bridge_slave_0: entered allmulticast mode [ 1467.197713][T24248] bridge_slave_0: entered promiscuous mode [ 1467.300578][T24248] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.300724][T24248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.300960][T24248] bridge_slave_1: entered allmulticast mode [ 1467.305287][T24248] bridge_slave_1: entered promiscuous mode [ 1467.895899][T24248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1467.975362][T24248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1468.271725][T24248] team0: Port device team_slave_0 added [ 1468.272661][T24199] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1468.358115][T24199] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1468.422174][T24248] team0: Port device team_slave_1 added [ 1468.923794][T24199] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1469.393494][T24199] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1469.394169][T24268] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.394309][T24268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.394585][T24268] bridge_slave_0: entered allmulticast mode [ 1469.398761][T24268] bridge_slave_0: entered promiscuous mode [ 1469.487863][T24199] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1469.593175][T24199] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1469.593816][T24268] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.594920][T24268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.595209][T24268] bridge_slave_1: entered allmulticast mode [ 1469.598556][T24268] bridge_slave_1: entered promiscuous mode [ 1469.750272][T24199] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1470.113572][T24199] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1470.158673][T24248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1470.158693][T24248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1470.158724][T24248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1470.288670][T24248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1470.288690][T24248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1470.288720][T24248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1470.413546][T24268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1470.443604][T24268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1470.893001][T24268] team0: Port device team_slave_0 added [ 1470.941300][T24248] hsr_slave_0: entered promiscuous mode [ 1470.942422][T24248] hsr_slave_1: entered promiscuous mode [ 1470.943073][T24248] debugfs: 'hsr0' already exists in 'hsr' [ 1470.943092][T24248] Cannot create hsr debugfs directory [ 1470.992313][T24268] team0: Port device team_slave_1 added [ 1471.080720][T24206] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1471.131612][T24206] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1471.297025][T24206] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1471.496093][T24206] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1471.529864][T24268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1471.529883][T24268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1471.529908][T24268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1471.595667][T24206] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1471.635066][T24206] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1471.891374][T24268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1471.891395][T24268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1471.891426][T24268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1471.979824][T24206] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1472.008982][T24206] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1472.599295][T24268] hsr_slave_0: entered promiscuous mode [ 1472.607958][T24268] hsr_slave_1: entered promiscuous mode [ 1472.609170][T24268] debugfs: 'hsr0' already exists in 'hsr' [ 1472.609199][T24268] Cannot create hsr debugfs directory [ 1472.802405][T24215] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1472.900803][T24215] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1473.023440][T24215] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1473.096788][T24215] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1473.555235][T24215] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1473.655394][T24215] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1473.732545][T24215] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1474.088705][T24215] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1477.328202][T24248] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1477.482597][T24248] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1477.576702][T24248] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1477.627145][T24248] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1477.652092][T24248] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1477.902258][T24248] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1477.966322][T24199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1477.997546][T24248] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1478.095302][T24248] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1478.738523][T24199] 8021q: adding VLAN 0 to HW filter on device team0 [ 1478.975469][T24206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1479.011466][ T2605] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.015924][ T2605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1479.088824][T24268] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1479.173217][T24268] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1479.196418][T24268] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1479.262789][T24268] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1479.742583][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.900587][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1480.102791][T24268] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1480.317870][T24268] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1480.348120][T24268] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1480.492587][T24268] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1480.734987][T24206] 8021q: adding VLAN 0 to HW filter on device team0 [ 1480.788506][T24215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1480.910643][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1480.910816][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1481.128146][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.128303][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1481.334362][T24215] 8021q: adding VLAN 0 to HW filter on device team0 [ 1481.427429][T22293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.427685][T22293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1481.530289][T22293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.530520][T22293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1481.783373][T24248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1482.356325][T24248] 8021q: adding VLAN 0 to HW filter on device team0 [ 1482.664960][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1482.678961][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1482.841501][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1482.841683][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1482.965617][T24268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1483.431132][T24268] 8021q: adding VLAN 0 to HW filter on device team0 [ 1483.575643][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.575889][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1483.665976][T22291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.666282][T22291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1484.572563][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.572645][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.408282][T24199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1485.456297][T24206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1486.976892][T24215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1487.660808][T24248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1488.219559][T24206] veth0_vlan: entered promiscuous mode [ 1488.314158][T24206] veth1_vlan: entered promiscuous mode [ 1488.374760][T24199] veth0_vlan: entered promiscuous mode [ 1488.547569][T24199] veth1_vlan: entered promiscuous mode [ 1488.600240][T24268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1489.346295][T24206] veth0_macvtap: entered promiscuous mode [ 1489.422943][T24206] veth1_macvtap: entered promiscuous mode [ 1489.712845][T24199] veth0_macvtap: entered promiscuous mode [ 1489.732709][T24206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1489.861734][T24199] veth1_macvtap: entered promiscuous mode [ 1489.880266][T24206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1490.356364][T24215] veth0_vlan: entered promiscuous mode [ 1490.414470][T24248] veth0_vlan: entered promiscuous mode [ 1490.459077][T24199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1490.713209][T24215] veth1_vlan: entered promiscuous mode [ 1490.736566][T24199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1490.793603][T24268] veth0_vlan: entered promiscuous mode [ 1490.868177][T24248] veth1_vlan: entered promiscuous mode [ 1491.611784][T24268] veth1_vlan: entered promiscuous mode [ 1492.545746][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1492.545771][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1493.357637][T24215] veth0_macvtap: entered promiscuous mode [ 1493.779530][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1493.779555][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1493.954986][T24215] veth1_macvtap: entered promiscuous mode [ 1494.069295][T24248] veth0_macvtap: entered promiscuous mode [ 1494.136963][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1494.136986][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1494.147626][T24268] veth0_macvtap: entered promiscuous mode [ 1494.151611][T24248] veth1_macvtap: entered promiscuous mode [ 1494.292115][T24268] veth1_macvtap: entered promiscuous mode [ 1494.349520][T24215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1494.488706][T24215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1494.593764][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1494.593789][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1494.597917][T24248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1494.632725][T24268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1494.702584][T24268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1494.753968][T24248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1501.345940][ T56] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.111233][ T3351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1502.111260][ T3351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1502.603408][ T5719] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 1503.013004][ T5719] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1503.013071][ T5719] usb 7-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88 [ 1503.020039][ T5719] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1503.020075][ T5719] usb 7-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 1503.093920][ T5719] usb 7-1: string descriptor 0 read error: -22 [ 1503.094108][ T5719] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.255567][ T5719] ttusbir 7-1:8.0: cannot find expected altsetting [ 1503.264013][ T2605] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.275035][T22284] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.277875][T22284] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.278100][T22284] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.278286][T22284] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.278483][T22284] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.278666][T22284] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.278848][T22284] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.279037][T22284] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.279216][T22284] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.279443][T22284] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.333745][T22284] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.333934][T22284] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.334456][T22284] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.334680][T22284] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.383867][ T6166] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.553487][ T5719] usb 7-1: USB disconnect, device number 2 [ 1503.823131][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1503.823155][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1503.830734][ T1016] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.841826][ T1016] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.841325][ T2605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1504.841349][ T2605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1505.448773][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.471423][ T6166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1505.471448][ T6166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1508.148151][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1508.148176][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1508.828850][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1508.828875][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1512.286986][T24146] Bluetooth: hci6: command 0x0406 tx timeout [ 1512.797264][ T10] kernel read not supported for file /vcs (pid: 10 comm: kworker/0:1) [ 1514.670774][T24485] overlayfs: failed to resolve './file1': -2 [ 1515.399753][T23832] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1515.609721][T23832] usb 10-1: Using ep0 maxpacket: 16 [ 1515.610647][T23832] usb 10-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1515.615503][T23832] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.615534][T23832] usb 10-1: Product: syz [ 1515.615550][T23832] usb 10-1: Manufacturer: syz [ 1515.615565][T23832] usb 10-1: SerialNumber: syz [ 1515.689528][T23832] usb 10-1: config 0 descriptor?? [ 1515.696480][T23832] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1516.028308][T23832] gspca_spca508: reg_read err -32 [ 1516.037726][T23832] gspca_spca508: reg_read err -32 [ 1516.039348][T23832] gspca_spca508: reg_read err -32 [ 1516.051548][T23832] gspca_spca508: reg_read err -32 [ 1516.065866][T23832] gspca_spca508: reg_read err -32 [ 1516.066480][T23832] gspca_spca508: reg write: error -71 [ 1516.066585][T23832] spca508 10-1:0.0: probe with driver spca508 failed with error -71 [ 1516.098696][T23832] usb 10-1: USB disconnect, device number 2 [ 1517.359818][ T5603] Bluetooth: hci7: command 0x0406 tx timeout [ 1517.795195][ T31] kernel read not supported for file /vcs (pid: 31 comm: kworker/1:0) [ 1519.330729][T24522] overlayfs: failed to resolve './file1': -2 [ 1520.307084][T24525] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1520.307108][T24525] overlayfs: missing 'lowerdir' [ 1520.343055][T24525] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6378'. [ 1521.642744][T24538] usb usb7: usbfs: process 24538 (syz.6.6383) did not claim interface 0 before use [ 1521.780114][T23832] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1521.991067][T23832] usb 10-1: Using ep0 maxpacket: 16 [ 1521.992489][T23832] usb 10-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1522.090474][T23832] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.090507][T23832] usb 10-1: Product: syz [ 1522.090524][T23832] usb 10-1: Manufacturer: syz [ 1522.090540][T23832] usb 10-1: SerialNumber: syz [ 1522.144939][T23832] usb 10-1: config 0 descriptor?? [ 1522.196220][T23832] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1522.644912][T23832] gspca_spca508: reg_read err -32 [ 1522.660661][T23832] gspca_spca508: reg_read err -32 [ 1522.662468][T23832] gspca_spca508: reg_read err -32 [ 1522.663062][T23832] gspca_spca508: reg_read err -32 [ 1522.668350][T23832] gspca_spca508: reg_read err -32 [ 1522.679060][T23832] gspca_spca508: reg write: error -71 [ 1522.679167][T23832] spca508 10-1:0.0: probe with driver spca508 failed with error -71 [ 1522.776442][T23832] usb 10-1: USB disconnect, device number 3 [ 1523.382043][T24552] overlayfs: failed to resolve './file0': -2 [ 1524.616029][T24562] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1524.616063][T24562] overlayfs: missing 'lowerdir' [ 1524.714085][T24568] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6392'. [ 1527.733420][T24594] overlayfs: failed to resolve './file0': -2 [ 1531.774613][ T67] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1532.888938][T24614] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1532.888970][T24614] overlayfs: missing 'lowerdir' [ 1533.110278][T24612] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6410'. [ 1534.152259][T24628] overlayfs: failed to resolve './file0': -2 [ 1536.541042][T24655] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1536.541064][T24655] overlayfs: missing 'lowerdir' [ 1536.661271][T24656] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6425'. [ 1536.702248][T24633] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6417'. [ 1538.388534][T16713] kernel read not supported for file /vcs (pid: 16713 comm: kworker/0:2) [ 1541.694699][T24681] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1541.694722][T24681] overlayfs: missing 'lowerdir' [ 1542.576312][T24681] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6436'. [ 1543.879819][T24697] netlink: 56 bytes leftover after parsing attributes in process `syz.8.6440'. [ 1544.874492][ T4964] kernel read not supported for file /vcs (pid: 4964 comm: kworker/0:3) [ 1545.816261][T24722] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6449'. [ 1546.004240][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.004325][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.442374][T23833] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1548.621719][T23833] usb 8-1: not running at top speed; connect to a high speed hub [ 1548.621766][T23833] usb 8-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=b5.97 [ 1548.623304][T23833] usb 8-1: config 14 has an invalid interface number: 168 but max is 0 [ 1548.623332][T23833] usb 8-1: config 14 has no interface number 0 [ 1548.623375][T23833] usb 8-1: config 14 interface 168 has no altsetting 0 [ 1548.718769][T23833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.718803][T23833] usb 8-1: Product: syz [ 1548.718820][T23833] usb 8-1: Manufacturer: syz [ 1548.718836][T23833] usb 8-1: SerialNumber: syz [ 1549.385908][T23833] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 1549.404374][T24754] netlink: 56 bytes leftover after parsing attributes in process `syz.9.6460'. [ 1549.406306][T23833] gspca_sunplus: reg_w_riv err -71 [ 1549.406486][T23833] sunplus 8-1:14.168: probe with driver sunplus failed with error -71 [ 1549.484189][T23833] usb 8-1: USB disconnect, device number 2 [ 1550.550509][T24757] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1550.550532][T24757] overlayfs: missing 'lowerdir' [ 1550.827884][T24758] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6461'. [ 1551.450731][ T5865] kernel read not supported for file /vcs (pid: 5865 comm: kworker/1:8) [ 1551.479969][ T10] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 1551.609846][ T10] usb 7-1: device descriptor read/64, error -71 [ 1551.853015][ T10] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 1552.077835][ T10] usb 7-1: device descriptor read/64, error -71 [ 1552.475397][ T10] usb usb7-port1: attempt power cycle [ 1552.919924][ T10] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 1552.940571][ T10] usb 7-1: device descriptor read/8, error -71 [ 1553.255000][ T10] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 1553.272649][ T10] usb 7-1: device descriptor read/8, error -71 [ 1553.417887][ T10] usb usb7-port1: unable to enumerate USB device [ 1556.994766][T24795] netlink: 56 bytes leftover after parsing attributes in process `syz.9.6473'. [ 1557.487781][T24803] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1557.487804][T24803] overlayfs: missing 'lowerdir' [ 1557.579301][T24807] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6475'. [ 1557.650484][T14095] kernel read not supported for file /vcs (pid: 14095 comm: kworker/1:2) [ 1559.317977][T24814] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1559.317999][T24814] overlayfs: missing 'lowerdir' [ 1559.412576][T24816] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6481'. [ 1559.509686][T23833] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 1559.880542][T23833] usb 9-1: device descriptor read/64, error -71 [ 1561.388830][T23833] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 1564.123683][T24839] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6488'. [ 1564.826362][T24851] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1564.826385][T24851] overlayfs: missing 'lowerdir' [ 1564.916064][T24851] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6491'. [ 1565.308753][T12388] kernel read not supported for file /vcs (pid: 12388 comm: kworker/0:6) [ 1565.436451][T24859] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1565.436474][T24859] overlayfs: missing 'lowerdir' [ 1565.655115][T24861] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6494'. [ 1568.014721][T24875] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6502'. [ 1568.363075][T23833] kernel read not supported for file /vcs (pid: 23833 comm: kworker/0:9) [ 1568.626885][T24887] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1568.626908][T24887] overlayfs: missing 'lowerdir' [ 1568.717112][T24890] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6507'. [ 1572.862651][T24928] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1572.862674][T24928] overlayfs: missing 'lowerdir' [ 1572.970690][T24930] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6520'. [ 1573.180420][T24936] 9p: Bad value for 'wfdno' [ 1573.783541][T20672] Bluetooth: hci4: command 0x0406 tx timeout [ 1573.839879][T20672] Bluetooth: hci0: command 0x0406 tx timeout [ 1573.839922][T20672] Bluetooth: hci3: command 0x0406 tx timeout [ 1577.977030][ T5597] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1577.994723][ T5597] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1578.042929][ T5597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1578.108073][ T5597] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1578.118457][ T5597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1578.639716][T14095] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1578.800191][ T5597] Bluetooth: hci5: command 0x0406 tx timeout [ 1578.856466][T14095] usb 10-1: not running at top speed; connect to a high speed hub [ 1578.856515][T14095] usb 10-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1578.860199][T14095] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1578.860255][T14095] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1578.860275][T14095] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1579.090447][T14095] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.090481][T14095] usb 10-1: Product: syz [ 1579.090498][T14095] usb 10-1: Manufacturer: syz [ 1579.090513][T14095] usb 10-1: SerialNumber: syz [ 1579.092628][T24965] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1579.092648][T24965] overlayfs: missing 'lowerdir' [ 1579.242160][T14095] keyspan 10-1:1.0: Keyspan 4 port adapter converter detected [ 1579.242485][T14095] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 1579.242532][T14095] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 1579.243987][T14095] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 1579.264961][T24966] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6535'. [ 1579.911973][T14095] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1579.963674][T14095] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 1580.125484][T14095] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1580.142301][T14095] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 4 [ 1580.304573][T14095] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1580.329997][T24917] Bluetooth: hci1: command tx timeout [ 1580.339493][T14095] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 1580.366227][T14095] usb 10-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1580.499836][T14095] usb 10-1: USB disconnect, device number 4 [ 1580.693128][T14095] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1580.731227][T14095] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1580.776844][T14095] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1580.826484][T14095] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1580.837163][T14095] keyspan 10-1:1.0: device disconnected [ 1582.403171][T24917] Bluetooth: hci1: command tx timeout [ 1583.686636][T24956] lo speed is unknown, defaulting to 1000 [ 1583.922942][T24917] Bluetooth: hci8: command 0x0406 tx timeout [ 1584.499679][T24917] Bluetooth: hci1: command tx timeout [ 1585.005813][T25003] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1585.005837][T25003] overlayfs: missing 'lowerdir' [ 1585.118855][T25003] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6545'. [ 1586.438729][T25008] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6546'. [ 1586.573726][ T5597] Bluetooth: hci1: command tx timeout [ 1589.826570][T25033] 9p: Bad value for 'wfdno' [ 1590.574643][T25042] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1590.574667][T25042] overlayfs: missing 'lowerdir' [ 1590.657042][T24956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.657300][T24956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.657600][T24956] bridge_slave_0: entered allmulticast mode [ 1590.686619][T24956] bridge_slave_0: entered promiscuous mode [ 1590.731802][T24956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.733707][T24956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.734017][T24956] bridge_slave_1: entered allmulticast mode [ 1590.775695][T24956] bridge_slave_1: entered promiscuous mode [ 1590.951758][T25046] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6557'. [ 1591.139952][ T4964] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 1591.257703][T16713] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1592.428210][T24956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1592.455348][ T4964] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1592.455416][ T4964] usb 10-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88 [ 1592.478931][ T4964] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1592.478962][ T4964] usb 10-1: config 0 has no interfaces? [ 1592.499266][ T4964] usb 10-1: string descriptor 0 read error: -22 [ 1592.499443][ T4964] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.515162][T16713] usb 8-1: Using ep0 maxpacket: 32 [ 1592.548901][T16713] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1592.564913][T16713] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1592.564943][T16713] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1592.609498][ T4964] usb 10-1: config 0 descriptor?? [ 1592.630976][T16713] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.631009][T16713] usb 8-1: Product: syz [ 1592.631026][T16713] usb 8-1: Manufacturer: syz [ 1592.631042][T16713] usb 8-1: SerialNumber: syz [ 1592.825425][T16713] usb 8-1: config 0 descriptor?? [ 1592.897917][T16713] usb 10-1: USB disconnect, device number 5 [ 1593.198653][T25057] 9pnet_fd: p9_fd_create_tcp (25057): problem connecting socket to 127.0.0.1 [ 1593.462001][T24956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1593.682848][T16713] usb 8-1: USB disconnect, device number 3 [ 1593.980690][T24956] team0: Port device team_slave_0 added [ 1594.039839][T25068] 9p: Bad value for 'wfdno' [ 1594.341561][T24956] team0: Port device team_slave_1 added [ 1594.958583][T25074] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1594.958606][T25074] overlayfs: missing 'lowerdir' [ 1595.127863][T24956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1595.127885][T24956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1595.127917][T24956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1595.797407][T24956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1595.797423][T24956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1595.797441][T24956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1596.116916][T25081] 9p: Bad value for 'rfdno' [ 1596.397346][T24956] hsr_slave_0: entered promiscuous mode [ 1596.419401][T24956] hsr_slave_1: entered promiscuous mode [ 1596.461531][T24956] debugfs: 'hsr0' already exists in 'hsr' [ 1596.461555][T24956] Cannot create hsr debugfs directory [ 1596.719857][ T4964] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 1596.948268][ T4964] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1596.948336][ T4964] usb 7-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88 [ 1596.982642][ T4964] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1596.982673][ T4964] usb 7-1: config 8 has 0 interfaces, different from the descriptor's value: 4 [ 1597.076417][ T4964] usb 7-1: string descriptor 0 read error: -22 [ 1597.076562][ T4964] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.689758][T23833] usb 7-1: USB disconnect, device number 7 [ 1598.008034][T25095] netlink: 4564 bytes leftover after parsing attributes in process `syz.9.6574'. [ 1605.766177][T24917] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1605.869231][T24917] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1605.900042][T24917] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1605.906752][T24917] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1605.908335][T24917] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1607.039755][ T4964] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 1607.451359][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.451454][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.963646][ T4964] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1607.963715][ T4964] usb 10-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88 [ 1607.999221][ T4964] usb 10-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1607.999252][ T4964] usb 10-1: config 8 has 0 interfaces, different from the descriptor's value: 4 [ 1608.049724][ T4964] usb 10-1: string descriptor 0 read error: -22 [ 1608.049821][ T4964] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.232813][T24917] Bluetooth: hci2: command tx timeout [ 1608.373879][T23833] usb 10-1: USB disconnect, device number 6 [ 1608.848625][T24956] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.319901][T24917] Bluetooth: hci2: command tx timeout [ 1611.171830][T25118] lo speed is unknown, defaulting to 1000 [ 1612.399733][T24917] Bluetooth: hci2: command tx timeout [ 1612.847784][T25118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.966189][T25118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.050774][T25118] bridge_slave_0: entered allmulticast mode [ 1613.061111][T25118] bridge_slave_0: entered promiscuous mode [ 1613.090668][T25118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1613.093732][T25118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.094797][T25118] bridge_slave_1: entered allmulticast mode [ 1613.125443][T25118] bridge_slave_1: entered promiscuous mode [ 1613.774992][T25118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1614.072606][T25118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1614.481334][T24917] Bluetooth: hci2: command tx timeout [ 1615.377828][T25118] team0: Port device team_slave_0 added [ 1615.462042][T25118] team0: Port device team_slave_1 added [ 1615.642519][T25118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1615.642542][T25118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1615.642574][T25118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1615.646137][T25118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1615.646155][T25118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1615.646185][T25118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1616.896615][T25118] hsr_slave_0: entered promiscuous mode [ 1616.914056][T25118] hsr_slave_1: entered promiscuous mode [ 1616.920788][T25118] debugfs: 'hsr0' already exists in 'hsr' [ 1616.920816][T25118] Cannot create hsr debugfs directory [ 1616.991336][T25171] 9p: Bad value for 'wfdno' [ 1617.926224][T23833] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1618.079938][T23833] usb 7-1: Using ep0 maxpacket: 32 [ 1618.083313][T23833] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1618.083379][T23833] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1618.086676][T23833] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 1618.086705][T23833] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 1618.086729][T23833] usb 7-1: config 14 has no interface number 0 [ 1618.086747][T23833] usb 7-1: config 14 has no interface number 1 [ 1618.086829][T23833] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1618.086857][T23833] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1618.086895][T23833] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1618.086925][T23833] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1618.086954][T23833] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1618.086981][T23833] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1618.087011][T23833] usb 7-1: config 14 interface 57 has no altsetting 0 [ 1618.087032][T23833] usb 7-1: config 14 interface 228 has no altsetting 0 [ 1618.107910][T23833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.107939][T23833] usb 7-1: Product: syz [ 1618.107953][T23833] usb 7-1: Manufacturer: syz [ 1618.107967][T23833] usb 7-1: SerialNumber: syz [ 1618.405072][T23833] legousbtower 7-1:14.57: interrupt endpoints not found [ 1618.544230][T23833] legousbtower 7-1:14.228: get version request failed: -71 [ 1618.544458][T23833] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 1618.615558][T23833] usb 7-1: USB disconnect, device number 8 [ 1619.616592][T25186] ubi0: attaching mtd0 [ 1619.708684][T25186] ubi0: scanning is finished [ 1619.709065][T25186] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1621.665138][T25188] Bluetooth: MGMT ver 1.23 [ 1621.667923][T25188] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 1624.416979][T25201] process 'syz.7.6603' launched './file0' with NULL argv: empty string added [ 1625.729810][T25203] 9p: Bad value for 'wfdno' [ 1626.583489][ T5597] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1626.656967][ T5597] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1626.666593][ T5597] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1626.667841][ T5597] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1626.688958][ T5597] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1628.273926][T25205] lo speed is unknown, defaulting to 1000 [ 1628.804173][T24917] Bluetooth: hci9: command tx timeout [ 1630.126413][T25205] bridge0: port 1(bridge_slave_0) entered blocking state [ 1630.128179][T25205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1630.128507][T25205] bridge_slave_0: entered allmulticast mode [ 1630.158682][T25205] bridge_slave_0: entered promiscuous mode [ 1630.176168][T25205] bridge0: port 2(bridge_slave_1) entered blocking state [ 1630.176313][T25205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1630.176638][T25205] bridge_slave_1: entered allmulticast mode [ 1630.201201][T25205] bridge_slave_1: entered promiscuous mode [ 1630.269322][T25205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1630.286763][T25205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1630.469234][T25205] team0: Port device team_slave_0 added [ 1630.587012][T25205] team0: Port device team_slave_1 added [ 1630.782633][T25205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1630.782653][T25205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1630.782700][T25205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1630.785548][T25205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1630.785565][T25205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1630.785594][T25205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1630.880034][T24917] Bluetooth: hci9: command tx timeout [ 1632.465802][T25205] hsr_slave_0: entered promiscuous mode [ 1632.491147][T25205] hsr_slave_1: entered promiscuous mode [ 1632.500131][T25205] debugfs: 'hsr0' already exists in 'hsr' [ 1632.500161][T25205] Cannot create hsr debugfs directory [ 1632.721762][T23833] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1632.920692][T23833] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1632.923314][T23833] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1632.923352][T23833] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1632.923395][T23833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.961436][T24917] Bluetooth: hci9: command tx timeout [ 1632.999939][T25237] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1633.053233][T23833] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1633.536264][T23833] usb 8-1: USB disconnect, device number 4 [ 1634.490477][T25240] 9pnet_fd: p9_fd_create_tcp (25240): problem connecting socket to 127.0.0.1 [ 1634.669141][T25242] 9p: Bad value for 'wfdno' [ 1634.979079][ T5597] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1635.021339][ T5597] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1635.040246][ T5603] Bluetooth: hci9: command tx timeout [ 1635.050021][ T5597] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1635.085518][ T5597] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1635.087693][ T5597] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1636.522869][T25244] lo speed is unknown, defaulting to 1000 [ 1637.367269][ T5597] Bluetooth: hci10: command tx timeout [ 1638.386857][T25244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.387140][T25244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.387573][T25244] bridge_slave_0: entered allmulticast mode [ 1638.431687][T25244] bridge_slave_0: entered promiscuous mode [ 1638.504891][T25244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1638.507158][T25244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.507504][T25244] bridge_slave_1: entered allmulticast mode [ 1638.547817][T25244] bridge_slave_1: entered promiscuous mode [ 1638.680836][T25244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1638.732482][T25244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1638.798329][T25244] team0: Port device team_slave_0 added [ 1638.815376][T25244] team0: Port device team_slave_1 added [ 1638.877590][T25244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1638.877610][T25244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1638.877641][T25244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1638.925523][T25244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1638.925543][T25244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1638.925575][T25244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1639.439751][ T5597] Bluetooth: hci10: command tx timeout [ 1640.558901][T24917] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1640.626273][T24917] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1640.671946][T24917] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1640.676255][T24917] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1640.681973][T24917] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1641.315125][T25244] hsr_slave_0: entered promiscuous mode [ 1641.329368][T25244] hsr_slave_1: entered promiscuous mode [ 1641.344209][T25244] debugfs: 'hsr0' already exists in 'hsr' [ 1641.344244][T25244] Cannot create hsr debugfs directory [ 1641.519620][ T5597] Bluetooth: hci10: command tx timeout [ 1642.879936][ T5597] Bluetooth: hci11: command tx timeout [ 1643.611935][ T5597] Bluetooth: hci10: command tx timeout [ 1644.504514][T25271] lo speed is unknown, defaulting to 1000 [ 1644.955498][ T37] kauditd_printk_skb: 234 callbacks suppressed [ 1644.955524][ T37] audit: type=1800 audit(1786501732.645:936): pid=25289 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.6619" name="/" dev="fuse" ino=4 res=0 errno=0 [ 1644.963633][ T5597] Bluetooth: hci11: command tx timeout [ 1645.746272][T25271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1645.746525][T25271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1645.747699][T25271] bridge_slave_0: entered allmulticast mode [ 1645.775014][T25271] bridge_slave_0: entered promiscuous mode [ 1645.792165][T25271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1645.792421][T25271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1645.792750][T25271] bridge_slave_1: entered allmulticast mode [ 1645.796227][T25271] bridge_slave_1: entered promiscuous mode [ 1645.940254][T25271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1645.945718][T25271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1646.199864][T25271] team0: Port device team_slave_0 added [ 1646.211842][T25271] team0: Port device team_slave_1 added [ 1646.678126][T25299] 9p: Bad value for 'wfdno' [ 1646.991268][T25271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1646.991283][T25271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1646.991302][T25271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1647.041159][ T5597] Bluetooth: hci11: command tx timeout [ 1647.430544][T25271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1647.430564][T25271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1647.430596][T25271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1647.782506][T25271] hsr_slave_0: entered promiscuous mode [ 1647.786002][T25271] hsr_slave_1: entered promiscuous mode [ 1647.787250][T25271] debugfs: 'hsr0' already exists in 'hsr' [ 1647.787278][T25271] Cannot create hsr debugfs directory [ 1649.121353][ T5597] Bluetooth: hci11: command tx timeout [ 1649.600617][T12388] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1649.808350][T12388] usb 8-1: Using ep0 maxpacket: 16 [ 1649.809378][T12388] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1649.832257][T12388] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1649.832288][T12388] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1649.835452][T12388] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.835482][T12388] usb 8-1: Product: syz [ 1649.835498][T12388] usb 8-1: Manufacturer: syz [ 1649.835514][T12388] usb 8-1: SerialNumber: syz [ 1650.004418][T12388] usb 8-1: 0:2 : does not exist [ 1650.232598][T12388] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1650.332411][T12388] usb 8-1: USB disconnect, device number 5 [ 1650.547967][T24598] udevd[24598]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1652.040291][T12388] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1652.190845][T12388] usb 8-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1652.193048][T12388] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1652.193107][T12388] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.238530][T12388] usb 8-1: config 0 descriptor?? [ 1652.307291][T25315] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1652.743207][T12388] usbhid 8-1:0.0: can't add hid device: -71 [ 1652.743356][T12388] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1652.801070][T12388] usb 8-1: USB disconnect, device number 6 [ 1653.922938][T25317] 9p: Bad value for 'wfdno' [ 1656.763566][T12388] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1656.929867][T12388] usb 8-1: Using ep0 maxpacket: 16 [ 1656.930984][T12388] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1656.932961][T12388] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1656.933020][T12388] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1656.933060][T12388] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 1656.933089][T12388] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1656.933115][T12388] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1656.935021][T12388] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1656.935056][T12388] usb 8-1: Manufacturer: syz [ 1657.056826][T12388] usb 8-1: config 0 descriptor?? [ 1657.360112][T12388] rc_core: IR keymap rc-hauppauge not found [ 1657.360136][T12388] Registered IR keymap rc-empty [ 1657.363497][T12388] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1657.386111][T12388] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1657.412287][T12388] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1657.417246][T12388] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input74 [ 1657.461145][T12388] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1657.480149][T12388] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1657.501759][T12388] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1657.520677][T12388] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1657.561275][T12388] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1657.580222][T12388] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1657.600038][T12388] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1657.620186][T12388] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1657.641007][T12388] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1657.660906][T12388] mceusb 8-1:0.0: Error: mce write urb status = -71 [ 1657.726141][T12388] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1657.726173][T12388] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1657.804036][T12388] usb 8-1: USB disconnect, device number 7 [ 1661.721418][T25340] 9p: Bad value for 'wfdno' [ 1662.636740][T24917] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1662.701960][T24917] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1662.723834][T24917] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1662.748109][T24917] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1662.773730][T24917] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1664.301532][T25343] lo speed is unknown, defaulting to 1000 [ 1664.879766][T24917] Bluetooth: hci12: command tx timeout [ 1665.649666][T23832] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1665.803518][T23832] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1665.803585][T23832] usb 8-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1665.805123][T23832] usb 8-1: config 129 has an invalid interface number: 135 but max is 0 [ 1665.805150][T23832] usb 8-1: config 129 has an invalid interface number: 5 but max is 0 [ 1665.805172][T23832] usb 8-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1665.805196][T23832] usb 8-1: config 129 has no interface number 0 [ 1665.805214][T23832] usb 8-1: config 129 has no interface number 1 [ 1665.805277][T23832] usb 8-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1665.805308][T23832] usb 8-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1665.805362][T23832] usb 8-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1665.805391][T23832] usb 8-1: config 129 interface 135 has no altsetting 0 [ 1665.805411][T23832] usb 8-1: config 129 interface 5 has no altsetting 0 [ 1665.941168][T23832] usb 8-1: string descriptor 0 read error: -22 [ 1665.941336][T23832] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.096215][T23832] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1666.096287][T23832] usb 8-1: MIDIStreaming interface descriptor not found [ 1666.692140][T23832] usb 8-1: USB disconnect, device number 8 [ 1667.001975][T24917] Bluetooth: hci12: command tx timeout [ 1668.858538][T25380] 9p: Bad value for 'wfdno' [ 1668.882288][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.882464][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.883836][T25343] bridge0: port 1(bridge_slave_0) entered blocking state [ 1668.884078][T25343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1668.884468][T25343] bridge_slave_0: entered allmulticast mode [ 1668.888073][T25343] bridge_slave_0: entered promiscuous mode [ 1668.920207][T25343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1668.920414][T25343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1668.920740][T25343] bridge_slave_1: entered allmulticast mode [ 1668.923574][T25343] bridge_slave_1: entered promiscuous mode [ 1669.039618][T24917] Bluetooth: hci12: command tx timeout [ 1669.073957][T25343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1669.083747][T25343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1669.176332][T25343] team0: Port device team_slave_0 added [ 1669.182355][T25343] team0: Port device team_slave_1 added [ 1669.411240][T25343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1669.411263][T25343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1669.411294][T25343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1669.838458][T25343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1669.838481][T25343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1669.838514][T25343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1670.024073][T25343] hsr_slave_0: entered promiscuous mode [ 1670.026346][T25343] hsr_slave_1: entered promiscuous mode [ 1670.027882][T25343] debugfs: 'hsr0' already exists in 'hsr' [ 1670.027914][T25343] Cannot create hsr debugfs directory [ 1671.119640][T24917] Bluetooth: hci12: command tx timeout [ 1676.589302][T25402] 9p: Bad value for 'wfdno' [ 1677.499895][ T4964] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1677.650645][ T4964] usb 8-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1677.653810][ T4964] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1677.653870][ T4964] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.697361][ T4964] usb 8-1: config 0 descriptor?? [ 1677.705733][T25405] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1678.193792][ T4964] usbhid 8-1:0.0: can't add hid device: -71 [ 1678.194013][ T4964] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1678.227129][ T4964] usb 8-1: USB disconnect, device number 9 [ 1681.875729][T25419] 9p: Bad value for 'wfdno' [ 1685.520117][ T38] INFO: task syz.4.6340:24120 blocked for more than 143 seconds. [ 1685.520151][ T38] Tainted: G L syzkaller #0 [ 1685.520165][ T38] Blocked by coredump. [ 1685.520173][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1685.520183][ T38] task:syz.4.6340 state:D stack:25200 pid:24120 tgid:24119 ppid:14675 task_flags:0x40054c flags:0x00080001 [ 1685.520256][ T38] Call Trace: [ 1685.520266][ T38] [ 1685.520282][ T38] __schedule+0x16dc/0x5500 [ 1685.520415][ T38] ? __pfx___schedule+0x10/0x10 [ 1685.520464][ T38] rt_mutex_schedule+0x76/0xf0 [ 1685.520493][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 1685.520546][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1685.520574][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1685.520602][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1685.520641][ T38] ? rcu_barrier+0x4c/0x530 [ 1685.520676][ T38] ? rcu_barrier+0x4c/0x530 [ 1685.520712][ T38] ? rcu_barrier+0x4c/0x530 [ 1685.520738][ T38] mutex_lock_nested+0x168/0x1d0 [ 1685.520762][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1685.520794][ T38] rcu_barrier+0x4c/0x530 [ 1685.520844][ T38] netdev_run_todo+0x2ff/0x10d0 [ 1685.520932][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 1685.521008][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 1685.521035][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 1685.521071][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 1685.521113][ T38] ? netdev_state_change+0x1bc/0x210 [ 1685.521179][ T38] tun_chr_close+0x13f/0x1c0 [ 1685.521283][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1685.521322][ T38] __fput+0x42a/0xa80 [ 1685.521356][ T38] task_work_run+0x1d9/0x270 [ 1685.521395][ T38] ? __pfx_task_work_run+0x10/0x10 [ 1685.521431][ T38] ? do_exit+0x735/0x2360 [ 1685.521494][ T38] ? kmem_cache_free+0x187/0x6c0 [ 1685.521526][ T38] ? put_net+0x191/0x260 [ 1685.521550][ T38] ? do_exit+0x735/0x2360 [ 1685.521586][ T38] do_exit+0x73a/0x2360 [ 1685.521616][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 1685.521656][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1685.521694][ T38] ? __pfx_do_exit+0x10/0x10 [ 1685.521726][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1685.521751][ T38] ? rt_spin_lock+0x1e0/0x400 [ 1685.521783][ T38] ? rt_spin_unlock+0x157/0x200 [ 1685.521813][ T38] do_group_exit+0x22d/0x2f0 [ 1685.521846][ T38] ? rt_spin_unlock+0x163/0x200 [ 1685.521875][ T38] get_signal+0x121b/0x12c0 [ 1685.521925][ T38] arch_do_signal_or_restart+0xbb/0x860 [ 1685.521959][ T38] ? __pfx_task_work_add+0x10/0x10 [ 1685.521993][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1685.522030][ T38] ? __fput_deferred+0x253/0x3e0 [ 1685.522063][ T38] exit_to_user_mode_loop+0x104/0x730 [ 1685.522099][ T38] ? rcu_is_watching+0x15/0xb0 [ 1685.522127][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.522154][ T38] do_syscall_64+0x353/0x580 [ 1685.522186][ T38] ? trace_irq_disable+0x3b/0x140 [ 1685.522223][ T38] ? clear_bhb_loop+0x70/0xc0 [ 1685.522252][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.522275][ T38] RIP: 0033:0x7f377d54e0d9 [ 1685.522297][ T38] RSP: 002b:00007f377b7a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1685.522323][ T38] RAX: fffffffffffffff2 RBX: 00007f377d7d5fa0 RCX: 00007f377d54e0d9 [ 1685.522348][ T38] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000004 [ 1685.522365][ T38] RBP: 00007f377d5e5024 R08: 0000000000000000 R09: 0000000000000000 [ 1685.522380][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1685.522394][ T38] R13: 00007f377d7d6038 R14: 00007f377d7d5fa0 R15: 00007fff34209428 [ 1685.522432][ T38] [ 1685.522443][ T38] INFO: task syz-executor:24138 blocked for more than 143 seconds. [ 1685.522463][ T38] Tainted: G L syzkaller #0 [ 1685.522475][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1685.522486][ T38] task:syz-executor state:D stack:23432 pid:24138 tgid:24138 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1685.522559][ T38] Call Trace: [ 1685.522567][ T38] [ 1685.522581][ T38] __schedule+0x16dc/0x5500 [ 1685.522645][ T38] ? __pfx___schedule+0x10/0x10 [ 1685.522693][ T38] rt_mutex_schedule+0x76/0xf0 [ 1685.522726][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 1685.522769][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1685.522797][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1685.522824][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1685.522863][ T38] ? rcu_barrier+0x4c/0x530 [ 1685.522897][ T38] ? rcu_barrier+0x4c/0x530 [ 1685.522932][ T38] ? rcu_barrier+0x4c/0x530 [ 1685.522958][ T38] mutex_lock_nested+0x168/0x1d0 [ 1685.522981][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1685.523011][ T38] rcu_barrier+0x4c/0x530 [ 1685.523050][ T38] netdev_run_todo+0x2ff/0x10d0 [ 1685.523083][ T38] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1685.523117][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 1685.523165][ T38] default_device_exit_batch+0x966/0x9e0 [ 1685.523199][ T38] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1685.523237][ T38] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1685.523260][ T38] ops_undo_list+0x4b4/0x8d0 [ 1685.523291][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 1685.523313][ T38] ? ops_init+0x46a/0x5d0 [ 1685.523347][ T38] setup_net+0x2f6/0x350 [ 1685.523415][ T38] ? __pfx_setup_net+0x10/0x10 [ 1685.523466][ T38] ? preinit_net+0x4b5/0x7d0 [ 1685.523502][ T38] copy_net_ns+0x4f9/0x720 [ 1685.523549][ T38] create_new_namespaces+0x3f0/0x6b0 [ 1685.523579][ T38] ? security_capable+0x7e/0x2c0 [ 1685.523617][ T38] unshare_nsproxy_namespaces+0x149/0x190 [ 1685.523648][ T38] ksys_unshare+0x57d/0xa00 [ 1685.523690][ T38] ? __pfx_ksys_unshare+0x10/0x10 [ 1685.523731][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.523757][ T38] __x64_sys_unshare+0x38/0x50 [ 1685.523802][ T38] do_syscall_64+0x174/0x580 [ 1685.523834][ T38] ? trace_irq_disable+0x3b/0x140 [ 1685.523867][ T38] ? clear_bhb_loop+0x70/0xc0 [ 1685.523896][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.523919][ T38] RIP: 0033:0x7f06b2cdf3a7 [ 1685.523939][ T38] RSP: 002b:00007fff0a459d48 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1685.523962][ T38] RAX: ffffffffffffffda RBX: 00007f06b2f65f40 RCX: 00007f06b2cdf3a7 [ 1685.523978][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1685.523993][ T38] RBP: 00007f06b2f667b8 R08: 0000000000000000 R09: 0000000000000000 [ 1685.524008][ T38] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 1685.524021][ T38] R13: 0000000000000003 R14: 00007fff0a459f88 R15: 0000000000000000 [ 1685.524056][ T38] [ 1685.524066][ T38] INFO: task syz-executor:24144 blocked for more than 143 seconds. [ 1685.524084][ T38] Tainted: G L syzkaller #0 [ 1685.524096][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1685.524106][ T38] task:syz-executor state:D stack:24256 pid:24144 tgid:24144 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1685.524179][ T38] Call Trace: [ 1685.524187][ T38] [ 1685.524201][ T38] __schedule+0x16dc/0x5500 [ 1685.524263][ T38] ? __pfx___schedule+0x10/0x10 [ 1685.524325][ T38] rt_mutex_schedule+0x76/0xf0 [ 1685.524357][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 1685.524400][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1685.524428][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1685.524468][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1685.524537][ T38] ? rcu_barrier+0x4c/0x530 [ 1685.524580][ T38] ? rcu_barrier+0x4c/0x530 [ 1685.524629][ T38] ? rcu_barrier+0x4c/0x530 [ 1685.524655][ T38] mutex_lock_nested+0x168/0x1d0 [ 1685.524678][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1685.524727][ T38] rcu_barrier+0x4c/0x530 [ 1685.524767][ T38] netdev_run_todo+0x2ff/0x10d0 [ 1685.524799][ T38] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1685.524833][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 1685.524881][ T38] default_device_exit_batch+0x966/0x9e0 [ 1685.524916][ T38] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1685.524954][ T38] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1685.524977][ T38] ops_undo_list+0x4b4/0x8d0 [ 1685.525008][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 1685.525028][ T38] ? ops_init+0x46a/0x5d0 [ 1685.525028][ T38] ? ops_init+0x46a/0x5d0 [ 1685.525062][ T38] setup_net+0x2f6/0x350 [ 1685.525100][ T38] ? __pfx_setup_net+0x10/0x10 [ 1685.525141][ T38] ? preinit_net+0x4b5/0x7d0 [ 1685.525191][ T38] copy_net_ns+0x4f9/0x720 [ 1685.525229][ T38] create_new_namespaces+0x3f0/0x6b0 [ 1685.525259][ T38] ? security_capable+0x7e/0x2c0 [ 1685.525301][ T38] unshare_nsproxy_namespaces+0x149/0x190 [ 1685.525332][ T38] ksys_unshare+0x57d/0xa00 [ 1685.525373][ T38] ? __pfx_ksys_unshare+0x10/0x10 [ 1685.525415][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.525440][ T38] __x64_sys_unshare+0x38/0x50 [ 1685.525470][ T38] do_syscall_64+0x174/0x580 [ 1685.525501][ T38] ? trace_irq_disable+0x3b/0x140 [ 1685.525542][ T38] ? clear_bhb_loop+0x70/0xc0 [ 1685.525571][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.525594][ T38] RIP: 0033:0x7fa615e7f3a7 [ 1685.525614][ T38] RSP: 002b:00007ffcaa047218 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1685.525636][ T38] RAX: ffffffffffffffda RBX: 00007fa616105f40 RCX: 00007fa615e7f3a7 [ 1685.525653][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1685.525668][ T38] RBP: 00007fa6161067b8 R08: 0000000000000000 R09: 0000000000000000 [ 1685.525683][ T38] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 1685.525697][ T38] R13: 0000000000000003 R14: 00007ffcaa047458 R15: 0000000000000000 [ 1685.525732][ T38] [ 1685.525798][ T38] [ 1685.525798][ T38] Showing all locks held in the system: [ 1685.525848][ T38] 2 locks held by kworker/u8:0/12: [ 1685.525886][ T38] #0: ffff88801dbbb938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1685.525968][ T38] #1: ffffc90000117c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1685.526027][ T38] 3 locks held by rcuc/1/28: [ 1685.526041][ T38] 1 lock held by khungtaskd/38: [ 1685.526054][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1685.526124][ T38] 6 locks held by kworker/u8:5/67: [ 1685.526138][ T38] #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1685.526194][ T38] #1: ffffc9000153fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1685.526250][ T38] #2: ffffffff8f59d8a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1685.526303][ T38] #3: ffff88805ec47160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 1685.526423][ T38] #4: ffff888063196310 (&devlink->lock_key#13){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 1685.526510][ T38] #5: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1685.526609][ T38] 2 locks held by getty/5337: [ 1685.526624][ T38] #0: ffff88803612c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1685.526715][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1685.526792][ T38] 1 lock held by syz.4.6340/24120: [ 1685.526805][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1685.526864][ T38] 2 locks held by syz-executor/24138: [ 1685.526877][ T38] #0: ffffffff8f59d8a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 1685.526941][ T38] #1: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1685.527000][ T38] 2 locks held by syz-executor/24144: [ 1685.527013][ T38] #0: ffffffff8f59d8a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 1685.527076][ T38] #1: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1685.527149][ T38] 1 lock held by syz.5.6487/24835: [ 1685.527162][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1685.527221][ T38] 7 locks held by syz-executor/24956: [ 1685.527234][ T38] #0: ffff888034f0e500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1685.527295][ T38] #1: ffff88806b3a2c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1685.527360][ T38] #2: ffff888028e11a58 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1685.527426][ T38] #3: ffffffff8ee21098 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1685.527551][ T38] #4: ffff88802b583160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1685.527729][ T38] #5: ffff888025016310 (&devlink->lock_key#14){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1685.527789][ T38] #6: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1685.999099][ T38] 1 lock held by syz.8.6546/25008: [ 1685.999116][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1685.999179][ T38] 4 locks held by syz-executor/25118: [ 1685.999193][ T38] #0: ffff888034f0e500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1685.999253][ T38] #1: ffff88802747c478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1685.999315][ T38] #2: ffff888028e11a58 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1685.999380][ T38] #3: ffffffff8ee21098 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1685.999444][ T38] 1 lock held by syz.9.6589/25143: [ 1685.999457][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1686.007649][ T38] 2 locks held by syz.6.6599/25186: [ 1686.007665][ T38] #0: ffffffff8ecc27b8 (ubi_devices_mutex){+.+.}-{4:4}, at: ctrl_cdev_ioctl+0x298/0x480 [ 1686.007747][ T38] #1: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1686.007806][ T38] 4 locks held by syz-executor/25200: [ 1686.007820][ T38] 4 locks held by syz-executor/25205: [ 1686.007833][ T38] #0: ffff888034f0e500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1686.007893][ T38] #1: ffff88804f885478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1686.007953][ T38] #2: ffff888028e11a58 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1686.008016][ T38] #3: ffffffff8ee21098 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1686.008081][ T38] 4 locks held by syz-executor/25244: [ 1686.008095][ T38] #0: ffff888034f0e500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1686.008153][ T38] #1: ffff88808a757878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1686.008211][ T38] #2: ffff888028e11a58 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1686.008275][ T38] #3: ffffffff8ee21098 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1686.008339][ T38] 4 locks held by syz-executor/25271: [ 1686.008352][ T38] #0: ffff888034f0e500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1686.008409][ T38] #1: ffff88807baa8878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1686.008467][ T38] #2: ffff888028e11a58 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1686.146485][ T38] #3: ffffffff8ee21098 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1686.146574][ T38] 4 locks held by syz-executor/25343: [ 1686.146588][ T38] #0: ffff888034f0e500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1686.146660][ T38] #1: ffff88802523e478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1686.146736][ T38] #2: ffff888028e11a58 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1686.146802][ T38] #3: ffffffff8ee21098 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1686.146864][ T38] 2 locks held by syz.7.6661/25433: [ 1686.146907][ T38] [ 1686.146914][ T38] ============================================= [ 1686.146914][ T38] [ 1686.146925][ T38] NMI backtrace for cpu 0 [ 1686.146944][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1686.146973][ T38] Tainted: [L]=SOFTLOCKUP [ 1686.146980][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1686.146993][ T38] Call Trace: [ 1686.147003][ T38] [ 1686.147013][ T38] dump_stack_lvl+0xe8/0x150 [ 1686.147048][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1686.147075][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1686.147110][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1686.147139][ T38] sys_info+0x135/0x170 [ 1686.147161][ T38] watchdog+0xfd7/0x1030 [ 1686.147203][ T38] ? watchdog+0x1c7/0x1030 [ 1686.147243][ T38] kthread+0x388/0x470 [ 1686.147274][ T38] ? __pfx_watchdog+0x10/0x10 [ 1686.147304][ T38] ? __pfx_kthread+0x10/0x10 [ 1686.147337][ T38] ret_from_fork+0x514/0xb70 [ 1686.147372][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1686.147405][ T38] ? __switch_to+0xc89/0x1420 [ 1686.147435][ T38] ? __pfx_kthread+0x10/0x10 [ 1686.147467][ T38] ret_from_fork_asm+0x1a/0x30 [ 1686.147518][ T38] [ 1686.147527][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1686.147557][ C1] NMI backtrace for cpu 1 [ 1686.147576][ C1] CPU: 1 UID: 0 PID: 22308 Comm: kworker/u8:27 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1686.147601][ C1] Tainted: [L]=SOFTLOCKUP [ 1686.147608][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1686.147620][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 1686.147644][ C1] RIP: 0010:__lock_acquire+0x446/0x2ce0 [ 1686.147664][ C1] Code: 44 ca 89 4c 24 10 45 8b a6 00 0c 00 00 41 8d 4c 24 ff 83 f9 ff 41 bd ff ff ff ff 44 0f 4c e9 41 ff c5 41 8d 5c 24 01 49 ff cc <89> d9 83 c1 fe 78 40 45 89 e7 41 81 e7 ff ff ff 7f 83 f9 31 73 1d [ 1686.147679][ C1] RSP: 0018:ffffc90000a6d738 EFLAGS: 00000046 [ 1686.147694][ C1] RAX: 000000000002000b RBX: 0000000000000001 RCX: 000000000006012c [ 1686.147706][ C1] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 1686.147717][ C1] RBP: ffff888039186a20 R08: ffffffff8177725f R09: 0000000000000000 [ 1686.147730][ C1] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: ffffffffffffffff [ 1686.147742][ C1] R13: 0000000000000000 R14: ffff888039185d00 R15: 0000000000000000 [ 1686.147753][ C1] FS: 0000000000000000(0000) GS:ffff888125d46000(0000) knlGS:0000000000000000 [ 1686.147768][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1686.147780][ C1] CR2: 00007fa3aab566b9 CR3: 000000000dfb0000 CR4: 00000000003526f0 [ 1686.147798][ C1] Call Trace: [ 1686.147804][ C1] [ 1686.147814][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1686.147832][ C1] ? unwind_next_frame+0x1baf/0x2550 [ 1686.147852][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1686.147870][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1686.147886][ C1] lock_acquire+0x106/0x350 [ 1686.147902][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1686.147924][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1686.147942][ C1] ? kmem_cache_alloc_noprof+0x355/0x650 [ 1686.147966][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1686.147982][ C1] unwind_next_frame+0xac/0x2550 [ 1686.147998][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1686.148016][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 1686.148032][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1686.148050][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1686.148075][ C1] arch_stack_walk+0x11b/0x150 [ 1686.148101][ C1] ? kmem_cache_alloc_noprof+0x355/0x650 [ 1686.148127][ C1] stack_trace_save+0xa9/0x100 [ 1686.148150][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1686.148177][ C1] kasan_save_track+0x3e/0x80 [ 1686.148201][ C1] ? kasan_save_track+0x3e/0x80 [ 1686.148224][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 1686.148240][ C1] ? kmem_cache_alloc_noprof+0x355/0x650 [ 1686.148283][ C1] __kasan_slab_alloc+0x6c/0x80 [ 1686.148299][ C1] kmem_cache_alloc_noprof+0x355/0x650 [ 1686.148324][ C1] ? dst_alloc+0x105/0x170 [ 1686.148345][ C1] ? dst_alloc+0x105/0x170 [ 1686.148367][ C1] dst_alloc+0x105/0x170 [ 1686.148389][ C1] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 1686.148413][ C1] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1686.148431][ C1] ip_route_output_key_hash+0x18d/0x2a0 [ 1686.148449][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1686.148473][ C1] ip_route_output_flow+0x2a/0x150 [ 1686.148544][ C1] ? ip_route_me_harder+0x74b/0xfe0 [ 1686.148598][ C1] ip_route_me_harder+0x762/0xfe0 [ 1686.148619][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 1686.148642][ C1] ? __cookie_v4_init_sequence+0x273/0x510 [ 1686.148685][ C1] synproxy_send_tcp+0x347/0x670 [ 1686.148747][ C1] synproxy_send_client_synack+0x89b/0xde0 [ 1686.148776][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1686.148800][ C1] ? nft_symhash_eval+0x178/0x1c0 [ 1686.148858][ C1] ? synproxy_pernet+0x45/0x270 [ 1686.148876][ C1] nft_synproxy_eval_v4+0x362/0x4e0 [ 1686.148903][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1686.148930][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1686.148966][ C1] nft_synproxy_do_eval+0x335/0x550 [ 1686.148993][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1686.149019][ C1] ? __lock_acquire+0x683/0x2ce0 [ 1686.149040][ C1] nft_do_chain+0x48d/0x1b10 [ 1686.149085][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1686.149109][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1686.149136][ C1] ? __lock_acquire+0x683/0x2ce0 [ 1686.149155][ C1] nft_do_chain_inet+0x360/0x4b0 [ 1686.149191][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1686.149211][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1686.149233][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1686.149254][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1686.149271][ C1] nf_hook_slow+0xc5/0x220 [ 1686.149312][ C1] NF_HOOK+0x21f/0x3c0 [ 1686.149334][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1686.149356][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1686.149376][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1686.149398][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1686.149423][ C1] ? ip_local_deliver+0x113/0x190 [ 1686.149445][ C1] NF_HOOK+0x336/0x3c0 [ 1686.149467][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1686.149493][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1686.149514][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1686.149537][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1686.149561][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1686.149581][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1686.149602][ C1] ? process_backlog+0x261/0xc50 [ 1686.149627][ C1] process_backlog+0x564/0xc50 [ 1686.149652][ C1] ? process_scheduled_works+0xa8e/0x14e0 [ 1686.149670][ C1] ? ret_from_fork+0x514/0xb70 [ 1686.149699][ C1] __napi_poll+0xae/0x550 [ 1686.149723][ C1] net_rx_action+0x621/0xd70 [ 1686.149752][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1686.149775][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1686.149801][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1686.149819][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1686.149847][ C1] handle_softirqs+0x1d9/0x6c0 [ 1686.149870][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 1686.149890][ C1] ? cfg80211_inform_single_bss_data+0xc06/0x1bf0 [ 1686.149930][ C1] cfg80211_inform_single_bss_data+0x135d/0x1bf0 [ 1686.149956][ C1] ? cfg80211_inform_single_bss_data+0xc06/0x1bf0 [ 1686.149983][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1686.150019][ C1] ? _ieee802_11_parse_elems_full+0x2c0/0x4950 [ 1686.150044][ C1] ? cfg80211_inform_bss_data+0x248/0x3d50 [ 1686.150071][ C1] cfg80211_inform_bss_data+0x25b/0x3d50 [ 1686.150114][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1686.150153][ C1] ? __lock_acquire+0x683/0x2ce0 [ 1686.150176][ C1] ? cfg80211_defragment_element+0x3e/0x360 [ 1686.150203][ C1] ? ieee80211_bss_info_update+0x30f/0xa50 [ 1686.150234][ C1] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 1686.150262][ C1] ? ieee80211_bss_info_update+0x30f/0xa50 [ 1686.150286][ C1] ieee80211_bss_info_update+0x791/0xa50 [ 1686.150311][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1686.150333][ C1] ? sta_info_get+0x4f/0x300 [ 1686.150361][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 1686.150386][ C1] ieee80211_ibss_rx_queued_mgmt+0x1ce3/0x2c40 [ 1686.150415][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 1686.150438][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1686.150464][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1686.150487][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1686.150509][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1686.150532][ C1] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1686.150552][ C1] ? reacquire_held_locks+0x104/0x190 [ 1686.150577][ C1] ? rt_spin_unlock+0x163/0x200 [ 1686.150598][ C1] ieee80211_iface_work+0x78a/0x1010 [ 1686.150626][ C1] cfg80211_wiphy_work+0x29e/0x420 [ 1686.150646][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1686.150671][ C1] process_scheduled_works+0xa8e/0x14e0 [ 1686.150700][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1686.150721][ C1] ? assign_work+0x3cf/0x5d0 [ 1686.150741][ C1] worker_thread+0xa47/0xfb0 [ 1686.150769][ C1] kthread+0x388/0x470 [ 1686.150791][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1686.150809][ C1] ? __pfx_kthread+0x10/0x10 [ 1686.150832][ C1] ret_from_fork+0x514/0xb70 [ 1686.150856][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1686.150878][ C1] ? __switch_to+0xc89/0x1420 [ 1686.150899][ C1] ? __pfx_kthread+0x10/0x10 [ 1686.150922][ C1] ret_from_fork_asm+0x1a/0x30 [ 1686.150952][ C1] [ 1686.423276][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1686.423301][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1686.423328][ T38] Tainted: [L]=SOFTLOCKUP [ 1686.423336][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1686.423348][ T38] Call Trace: [ 1686.423357][ T38] [ 1686.423365][ T38] vpanic+0x56c/0xa60 [ 1686.423401][ T38] ? __pfx___schedule+0x10/0x10 [ 1686.423428][ T38] ? __pfx_vpanic+0x10/0x10 [ 1686.423465][ T38] panic+0xc5/0xd0 [ 1686.423492][ T38] ? __pfx_panic+0x10/0x10 [ 1686.423517][ T38] ? preempt_schedule_common+0x82/0xd0 [ 1686.423543][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 1686.423566][ T38] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1686.423592][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1686.423625][ T38] watchdog+0x1030/0x1030 [ 1686.423661][ T38] ? watchdog+0x1c7/0x1030 [ 1686.423695][ T38] kthread+0x388/0x470 [ 1686.423722][ T38] ? __pfx_watchdog+0x10/0x10 [ 1686.423746][ T38] ? __pfx_kthread+0x10/0x10 [ 1686.423773][ T38] ret_from_fork+0x514/0xb70 [ 1686.423805][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1686.423832][ T38] ? __switch_to+0xc89/0x1420 [ 1686.423859][ T38] ? __pfx_kthread+0x10/0x10 [ 1686.423886][ T38] ret_from_fork_asm+0x1a/0x30 [ 1686.423929][ T38] [ 1686.424235][ T38] Kernel Offset: disabled