last executing test programs: 6m59.91257496s ago: executing program 4 (id=1235): sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="0002"], 0x18) r1 = userfaultfd(0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xb, 0x204031, 0xffffffffffffffff, 0x72b68000) r2 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)) sendmmsg$inet6(r0, &(0x7f00000034c0)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x4d7, @dev={0xfe, 0x80, '\x00', 0x47}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f00000000c0)="7f", 0x1}], 0x1}}], 0x1, 0x4c040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(0x0, 0x5, &(0x7f00000001c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) socket$kcm(0x2d, 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12) sched_setscheduler(0x0, 0x2, 0x0) 6m56.720839488s ago: executing program 4 (id=1242): r0 = openat$mice(0xffffff9c, &(0x7f0000000040), 0x2) write$UHID_INPUT(r0, &(0x7f0000001c40)={0x8, {"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", 0x1000}}, 0x101a) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xf, 0x3, 0x20, "0f6a66fce7b665b7ae8f2c8975f8d9621999605ea95f61dcf71db37948a63fe7", 0x3436324d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x130, 0x240, 0x130, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@remote, @local, 0xffffffff, 0x0, 0x10, 0x0, {@mac=@broadcast, {[0xff, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x4008, 0x0, 0x0, 0x1, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000030426bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa88801e80500180012800e0001007769726567756172640000000400028008000a00", @ANYRES32, @ANYBLOB='\b\x00?'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x440088c4) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000006c0)='.\x00', 0xaa) splice(r2, &(0x7f0000000540)=0xfff, r0, &(0x7f0000000580)=0x1, 0x8000000000000001, 0xd) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) r6 = getpgid(0x0) r7 = syz_pidfd_open(r6, 0x0) pidfd_getfd(r7, r7, 0x0) 6m50.01699806s ago: executing program 4 (id=1253): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000001, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x4008, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) utime(&(0x7f0000000000)='.\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x2000, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) 6m46.502105265s ago: executing program 4 (id=1260): r0 = userfaultfd(0x80001) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @empty, 0xfffffffc}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) shutdown(r3, 0x1) r4 = getpid() write$cgroup_pid(r2, &(0x7f0000000180)=r4, 0x12) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0xb}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f00000002c0)=""/153, 0x99) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000839000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000}) 6m39.297864728s ago: executing program 4 (id=1270): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000001, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x4008, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) utime(&(0x7f0000000000)='.\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x2000, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) 6m31.658919245s ago: executing program 4 (id=1278): r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x22) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) r7 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000001c0)={0xa0000001}) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8, 0x0, 0xf1}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) 6m14.107651643s ago: executing program 32 (id=1278): r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x22) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) r7 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000001c0)={0xa0000001}) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8, 0x0, 0xf1}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) 2m47.935464052s ago: executing program 5 (id=1763): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x2, 0xa4, &(0x7f0000000000)=ANY=[], 0x0) 2m42.048368032s ago: executing program 5 (id=1769): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xadc) r1 = syz_ublk_setup_io_uring(0x47bf, &(0x7f0000000080)={0x0, 0xcba0, 0x1, 0x2, 0x2d7}, &(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f0000000300)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x4010, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000540)={0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r1) syz_io_uring_setup(0xab4, &(0x7f0000000340)={0x0, 0x56fe, 0x4, 0x0, 0x3a0}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, r5, &(0x7f00000004c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x40, 0x0, @fd=r0, 0x7fff, 0x0, 0x7, 0x1, 0x1}) sendmsg$nl_route_sched(r0, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x81}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}}, 0x4000000) 2m37.944752314s ago: executing program 5 (id=1773): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xadc) r1 = syz_ublk_setup_io_uring(0x47bf, &(0x7f0000000080)={0x0, 0xcba0, 0x1, 0x2, 0x2d7}, &(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f0000000300)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x4010, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000540)={0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r1) syz_io_uring_setup(0xab4, &(0x7f0000000340)={0x0, 0x56fe, 0x4, 0x0, 0x3a0}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, r5, &(0x7f00000004c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x40, 0x0, @fd=r0, 0x7fff, 0x0, 0x7, 0x1, 0x1}) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x81}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}}, 0x4000000) ioctl$sock_SIOCOUTQ(r7, 0x5411, 0xffffffffffffffff) 2m32.226024269s ago: executing program 5 (id=1776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffd}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x108}, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20006, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xebe2}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in=@dev={0xac, 0x14, 0x14, 0x2e}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) statfs(0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futex(&(0x7f0000000000)=0x2, 0x0, 0x1, &(0x7f00000001c0)={r5, r6+10000000}, &(0x7f0000000280)=0x1, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 2m21.29392255s ago: executing program 5 (id=1787): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b134464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0xbd]}}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="080200000200000005f8"], 0x239) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r1) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001e40)=ANY=[@ANYBLOB="2400150800a0b8977ec066b92fa196a85e50f85df7999ae77360d59113dddbf1d0e70d7a093a99663c72ea88a5e5dddf", @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf250c000000080005000147ae140800060002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004011}, 0x4052) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="06c36a8d800e5384b23b1851665dd8354fc1a0a4ffd459703ed346bd3ac2e02d358aa35e083794bdd5d7a6756933fa9fd6e6614d8a41058db61353ae032f62499a7e92c373a735e11a0efec69b8adafe012932a96fb5178991613b03424accf105c08b906c859bef2fc2dc69cbbb4208c2e636a8394297a8847382b3f17162311492fcccd585a5478df2fb49c600b2b6eee3105a9b621f352990a0d7f7f9f9f41e06fe5d5724e6969429e9f7e3db76991c633e77070561e0f100e96994d2f4132d5955ba262fcb2975279479b3f40a25a954bafadd747cf8eb295fefea1f24fd8e17e1907d374573029450498ae1e1a323a8c00b2172c7a415368a3947db104a3526fd7d748c52858ae46c25834bbf4fe497b4539a0bd4db863e7d294390f0cf04d73cdbd91392f30f426ea2f334fe7c8a317daad972c640051e574321f51887a2b0abeb1f94e8a84742640f64e3f3fd0668a52acae06c69bee9fedbec720a29a2554bf29e88e228499b3c2242d9870d5e431c4f95a0556842ab0fbb7200cd662fae7304d5755229ebbc8fb6fe7b8f223dd11c5df1165625a2a1dd55e3d9e604e95dfe697842a7efb6649cb46d9125c31cd9610ff0b8a1de46048d7146605e4e788ec488515fa0d61f52142af084ab04f58825ce538e3f83b6d9b175d237b13b80d7876779655cd03e2f9172200f894dfdf6400e6d889b79377101036215afe464af67b4feb38f440c227feb2510b8ac9458e2f7b3a576d42185321d300c7a85741c706f6c4e2e6e0367ab6fee72b36c957bba825d76463c94cf9adfd3801f40cb85071412cf2574a057f133618ed0a70660f02d0e60da110b05122dbfa92dfac071f526391e651ea4d63a6438c5a85aea42fa4ac7f8f920fc8f5876e42306bd9802a124862a5d2b3fe82078ef6d9fa44c91fbfe46da03093d3e6a92e561c429a1d0958f0526f77134a16879dfbdd8e82d1b066d1e8fcb3951f168defe3a832b84a76acd958ba7d0a1226e592c89692035ae37fdcae808254aa205059b53b6bf96f154fa54f8d6cd75b223777684eda01f913123ca999a8561df06886c1903a754fc539733541f30a22168e4dfd8afcc47a3276eb95f948044f68b14bd1a24e506e91309267eceebfcb5fee6113b3124da2f164ee3e8471a976256968f136f4183760b37baa2e949d1e51824c1b52442e88c912886da733aab2b90390e72d905cd04dd65b960e665f5772a96797ff8119175c490310df9ec5c22ff7ef42995ad31271ed35e5aec09636b324baae2a091ee15ac7b974d6a6349972c416e08f44254f77d1b922f824b4ba14ecf76d95ecb9147fa60707190b65a327c55eceae77a3e780ea5f600b815d58d13aab78547e16ea0f7ff6eeaf4e97bb0dee059faef98cfa9b30c731d12f3e1da5804802a75f491b24f4510aa1e786e530806515d88d7fd1dfaa965728951eafd93741991dc2081b50c444fd43265343092af443e27285b0b2b78ce5936b3d258207c99691e196e2bb86698660185c4ad2bd01ec376b2fb619790b33fb9864929d577a518606d37c38579c0561b21bad2e87a3a719989f250408fdc161e805d2b17b649c61f6d5eaffb900a303507ea28955aa2f4046d2d02e430de607cfd530891eef0a8952b28ecaa7b4aa59781d9fd4b06ccc9236c16f52abe4abcc20abb3bca8ed03eaffba244248b7b6c408e505dcf0d78a3d41f3c876d347ed590358c9597b51a9444d1bd38c3d69ef021b5a52d04f8cebe43dfe410c57e29cc1534d29c29ce4df89e3b2acaa7fae776264f324c6d3e65455317c42742546c081b5219d7cce8c42946b6f3048b183931acda4252dc92ae9cbd60c8eb83a1d0f7a5d388a289be38ae5e5cd79209f661d77e8155d85dbccf5029b50ac3250d5f6e337737e725a1550b6396432d8462294ec51b6550b14190a9c0b56a8b5bb9cddf86be4223b7c853ea3de12c19bff9ef70976276e83fd5d06dac255771b8220fd81b32bde90ea795d419de9c4450c719257a145faa9e200160e919a23324641d33ee6866f1210dbbf10c0bf8a81eb198bef76e364c74d800aa447cff7fa9deec62d136057af3498c71b5659401189f4278c2ec578c148bdeb04176f9dc0c22308af98421d779aedb6f5031f5908c5ccb94305fcbffdd97d6423bf233a7e639296ac271f0801be317c410e55ebf88b2c6fdbe7685962cb8d2aba4842e01aa8118f146816856fd9418f57e2b01bfebf28cc4e020846682e2b828462e058a9f7d1373ca605baedddee64544ba675a0936b77ee6a2ca40ee76ffdde361b33dd7ead5b29faf18f9c4cad36dc9416a77cfab8e0044bbeed4d2fc067a1299ed57928e5326236aba9765d83eef871a5010d85188105de0e0e8b92c6a0c86154034d40407d3abc43d3521433962cd21dd27ade4ba3955a83b4f6c5c7e557aff5b3937fac7b63e54994d02be9f1f17a22cfb10b30e2169bc5e9ad5953d91dfe3687831f7ffbe7515f5e97b053474db6a62a35756c7c70bd3816ddd4678fedb6727204ed7198e9feb9b968daed6863edd37583362a66af812cec08e9486ece34d6dcbf3068756324b0c1c4b464d177d62bcf2d748713aa7ecaf6c4fcc525bd5623cc63e14bea2f9b3bcae35d0db566371f9ac8486f439c2fdacc8ec43243a5c09e2a9ae753fd3d000799728b3a04594d6663e55101b818de202f48b726790ce912cee199fa233d4cc5d77920baa65d7e92cf74ef365d2a779421853342867a492dd761d38bfbb8895c7058a0f38cea3c942c596fe52ccee1115ee77b1ecf91838ac38e17bc441f797ccf218c046bc36a6181a33276b5e19b53dd823d32c4c446f14e51d1f8c2a5426a56d416a6a57707c27b8404b1d7ad2d5bf93097d651d8d7d9d8707758ab53071c5a37a99388409d40f46d1e79610fcd538106e8d581a033d5ce0371fc478a1fd8cc2091b063c52784e866b357f494389d721a829f78f8d763ec91408d36bbfc8c3281b2a3ba38ccaf3c92309a9ee02c4b29a450c1216499719dfe6aef0b6abb37dc8ab04073520bbc96a5c7572fd4a5596a550fb5f44c9c3d710c06e016202f539ff88a368e6bcd05117e0a56483545933e05a4b34f193dd74cb7462662f32022720f7397a6d220cece6add4b6a55d53d5b67b89ed1c30560619af6bb0f27c060bd9b94a1fb63a83af7ce46f7c09fce56c9fef1e3b585524feaaa8864d8fc9d34ca2b161c2b366957fed36a630e90a340e5f9aac77f06cb0b0fcbc471ec83f100be1d743e0333e6ba54b6cc2aedf5e6bc131fff8eeb283650d4741999ed46595233bce0eac70bd30396c9445412d340098615846ace51fbaf1807d6bf4f45f39725226dc9dd2f9f019961fdbd0de3e4035a16f9328170ab4ea42a03c9848da9d5a3f491c9250f480ef4c418d19e9c87a730c5d32f0eb828d87bd71e4cca4495772e1ec9e12dda786b5af5931a9a84eb16288ccdbff3d49f9968f2c9f485d36110769b036a198628c8af952689c282ddecb14631b74d77605b69b5ceca887a6d7eafe6a1bce81f296955c29cbec3ed57efb974c21dbed486771c81c86a350d65a5dffaa99841241821b4d9d0d58f5080bec9fd7d9c96746440c9c25f661b87ed239986ed37b1abaae7646fa0f130cda54ff8293c43cf86beba386c63003a6772a5ed9f145b525599c80406eacf8b78aa26e460efb5af1dfd215578c206f9554d96ddaccc29d1d61467231cb9ae6c7ca1fcc7cd08bf92b509777210baa91005003e4af3ba71832eb1afbbc29364d941d12adc9cda236968e5160266c0605bae7553c7c27636e4263d113f2f3f02d102e21781a0ae32d9f53e64fcab82c9d687112da7db2077f8c083cc2ba99d58e4a22e8ab4d76c34deb2f7c6c71a7431e47dcaaa776196b5094923f6f1211cfeaf2dd3c7c3bf9ca609844caa756cb2b2def340e7e843bb40898bd9a7f526e8109f7aa0a3bb84adf8a18efb54d8faf043d8bf8302ce3d95246eb73322bb971dc9bbf0b5488b5225befab71c0c825b2ab028f13e52eb8cdb27a767b1b6788f6423a008be3c94df82d9e0b49584728c7bc3bc18bd7451fa8d1aec1865fbf4cfdbc0a7ac96339088744b30ace12432f78e96325d7d500a3bfb0bf3896f5e3e3e3ba89ef6c1235e4a8295a9c97f8613c55c70bb22a414d7bd87912f4c6c7bef56cae343abb7fb695c3d3498dfc5451915de7e58d49a0739ef6a8b627906d7c6fa6880bdba9a6b44911db1e8940f37e62f7321e69e87d28f5690913416b1fc9aefec12ce6c24fb704a90956d32119fde0f6dd7433494f1d69d90ba7081efa7a008874d47ca196964a603af25192542aacf2b7de4008b173eceeec77eda57aaf9ff74c2d6a69c34590ff4d29bdf029ce87a519644296f653f3d0f1dce242071df2f19ee9d70e0e7d7adaa89fc3deede4840e9993105ae9e274e77c3fe08d64a6e53620b144cd77761cf97139f50592fbe5435e75894c03fca7db025e6db944583d3e8cf53d7ad7589367fba82a243a7caa14e760011acbeb27295d4eb4391738d0e84e7f955498885c77326af2c6dc1e4a16dc438814285a835861f1aad46f851c2b43aeafac161c4429f0d406bf078e881937895cdf8d56eff12a0d09a33bafa89944c63c7b9547f597a09fa192cb4635b4047c133cffccde67174cb9a4350cf0d124eda254c26a284c07abfaee6ec4322d25dc458e7b144952dfc6fb8e540fc38180010129b4ffe9af3cd7a66911eb56e316930915103a5efb50e1bbfd603bdf578f0c427e13314cbd318921ade95de81e1f8e1ee58d93b82fe2415d5d5d3f520518903e1b96a22c5371952f96dbf455ea74aba975f95b506e405dac28304b6cc2de1e81ddd5b81e02cbaed02e816a0ae9401c0823a8902545e27223468bc272ec4ee7ece4e419e354c869980c8140008c240f0a6c99b8302e25f3f15186291c0720560deb4d31e1c70b6bbfbc179efe068e698685adbadcf4e8296afca2eb7242a327f66e1471fe194cc7a50205780570a4f7f17dc9111f6faa94656950c1b3e3e83e3793f2948fb2b0a5490ef5c66ad7b6b13743c86061d1022f3c686bdd6abb380185ec42c52624716907ee0cb706f5a0e9e97f51a968f3c37d42c533bfe9180ffd5659cd15e368512403d5fa4131bccbc356919c7c0a58653aa81b27eae55cf39b2fb47cd7f3f32234d3b287093109e45899ef8e829019ca5f3aa9457beca217df156cba895b9e98fd4ed5f6b8f1862721b57831c8890fdfaef0d74c745ba9d3172b17a1236acee5a550102a10d10b805f42d6c759006093a8f6fdb26677203d69dc82e3b6b1a2681bf9834d6c6c7b7ca9a310e7f40de4267924031555dd8bfbcce35ddd4022d89c134da5784cff59a3a442c1593b9b5c680000bd3bd56153ef3a4b8a05268851d99d5b42889ad78f27705260ee76ecf0a35b79b89412f2ad86665e4d600c8a52a509ee44f6f3f7a24494e0134232b750327b0c439eb4504abcdc657fc647410892650f0e0c6873ed9422395525ab7cfab40bc839e1ea1255aa6d1718fcc5c912045f2816e059170b393929abc9c62ad3b91dc228c14b8bb20be5814dee7832ccf071c94b959c5e023621f526a71884ab8053fbae11d50f8193699fc9a97d86ba99015bda3534937a38f1fdb8aa59524d0f4303ae507d15e99cbf7ad978f3ad72f5c33ed1f10850eccbe7ded6de3425f10014432acfba2f4b99fe8778c806f7d892f7a7a66e203e1da804f08bed0386044ac059d967ea394e418f8926da3c9063c5000d81fe", @ANYRES32, @ANYRESDEC=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES64=r0, @ANYRESOCT=r1], 0x0, 0x26}, 0x28) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x1, 0x2}) unshare(0x64000600) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f0000000240)={"342a9730ca12170a1263f97d4661ff9fa8cbdc0c345cf9403c8e0c714c7e", 0x80000000, 0x1, 0x1, 0x7, 0x9, 0x401, 0x10001, 0x3, [0x5, 0x6, 0x80000001, 0x6, 0x4, 0x7fffffff, 0xffffffff, 0x4, 0xff, 0xd, 0x0, 0x543, 0x77, 0x10, 0x2, 0x8000, 0x101, 0x1, 0x321e]}) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x84, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f00000001c0)=0x7ff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r3, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe}}, 0x10) 2m6.646512733s ago: executing program 5 (id=1798): syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpgid(0x0) ptrace$poke(0x3, r0, &(0x7f0000000000), 0x4) r1 = syz_pidfd_open(r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400c9a2795e010800000000000000000a00000108000340ffffffa72d00010001000000"], 0x24}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000080)={{0xf, 0x1}, 0x1, 0x2, 0x2, {0x0, 0xb}, 0x6, 0x6}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0xffffffff, 0x3, 0x3}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x1, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x400c1}, 0x4000000) close_range(r4, 0xffffffffffffffff, 0x0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_send_signal(r1, 0x11, 0x0, 0x4) 1m58.255866291s ago: executing program 3 (id=1803): r0 = getpgid(0x0) sched_setscheduler(r0, 0x6, &(0x7f0000000000)=0x2) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x21, 0x0, 0x4) 1m58.120656389s ago: executing program 1 (id=1804): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0xd, 0xc}, {0x5, 0xe}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x7, [0x4, 0x7, 0x45, 0x10, 0xff, 0x1d, 0x9, 0x8, 0xc, 0x5, 0xf, 0xd, 0x2, 0x6, 0xc, 0xd], 0x1, [0x200, 0xc, 0x101, 0x7, 0x486, 0x40, 0x8, 0x5, 0x8, 0x2a, 0x9, 0x134e, 0xfffc, 0x6, 0x8, 0xba], [0x3, 0x9, 0x3, 0x0, 0x3, 0x0, 0xc5d4, 0x3, 0x3, 0x48aa, 0xffff, 0x7, 0x5, 0x4, 0x6, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc004841}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x39000, 0x4) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1m55.952302439s ago: executing program 3 (id=1807): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180), 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x4, 0x7fffffffefff) r4 = socket$alg(0x26, 0x5, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xffff574b, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, r0, 0x0, 0x2, 0x2}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0xd2, 0x0}, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000640)={{0x1, 0x1, 0x18, r2, {0x61}}, './cgroup.cpu/cgroup.procs\x00'}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x5, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r8}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r9 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r10, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000300)='GPL\x00', 0xb, 0xe6, &(0x7f00000003c0)=""/230, 0x41000, 0x44, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000540)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0xd, 0xff, 0x4}, 0x10, r6, 0x0, 0x2, &(0x7f0000000700)=[r0, r7, r0, r8, r0, r0, r9, r10, r0, r0], &(0x7f0000000740)=[{0x0, 0x5, 0xa, 0xa}, {0x4, 0x5, 0x2, 0xb}], 0x10, 0x3}, 0x94) getpid() syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x0, 0xc9}}}, 0x6) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035", 0x47}, {&(0x7f00000003c0)}], 0x2, &(0x7f0000000380), 0x0, 0x4000000}], 0x1, 0x400c0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000680)=""/101, 0x65}, {&(0x7f0000000380)=""/51, 0x33}], 0x3}, 0x40000001) 1m53.912881841s ago: executing program 1 (id=1808): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bind$netlink(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)}, 0x12) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 1m50.202200145s ago: executing program 33 (id=1798): syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpgid(0x0) ptrace$poke(0x3, r0, &(0x7f0000000000), 0x4) r1 = syz_pidfd_open(r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400c9a2795e010800000000000000000a00000108000340ffffffa72d00010001000000"], 0x24}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000080)={{0xf, 0x1}, 0x1, 0x2, 0x2, {0x0, 0xb}, 0x6, 0x6}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0xffffffff, 0x3, 0x3}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x1, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x400c1}, 0x4000000) close_range(r4, 0xffffffffffffffff, 0x0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_send_signal(r1, 0x11, 0x0, 0x4) 1m50.19832987s ago: executing program 3 (id=1812): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x10, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0x0, 0xffff}, {0xffe0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0xd0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080001000100000014000700000000000000000500000000000000010800"], 0x74}}, 0x24005000) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2e, 0x2, 0x7, {0x6, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffff8, 0x3d, 0xc}, {0x0, @remote, 0xd, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010103, 0x1, 0x5}, {0x0, @empty, 0x6, 0x3, [0x6, 0x9]}, 0x4, 0x3}}}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r7, 0xc0bc5351, &(0x7f0000000140)={0x30, 0x0, 'client0\x00', 0x0, "8bb59c511d2c7153", "7b1ffc99516e6a1060981f2c7a4e468bb4967e6f85487a84b7709cd7c92a07e5", 0x0, 0x800}) sendmmsg(r6, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='P', 0x1}], 0x1, &(0x7f0000000800)=[{0x10, 0x84, 0x3ff}, {0x10, 0x1, 0x2}], 0x20}}], 0x1, 0x4000810) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000100)={0x21, 0x5}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) write(r2, &(0x7f0000000240)="94", 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000000c0)={0x4001, r1}, 0x0) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r1, r5, 0x8f5, 0x0) write$cgroup_devices(r5, 0x0, 0x8) r9 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0xa, r9, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)='\x00\x00\x00') write(r3, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m50.062711285s ago: executing program 1 (id=1813): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x419a, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001e40)=[{{&(0x7f0000000080)=@tipc=@name, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/215, 0xd7}], 0x1}, 0x3}, {{&(0x7f0000000300)=@nfc, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/199, 0xc7}, {&(0x7f0000001480)=""/205, 0xcd}, {&(0x7f0000000100)=""/104, 0x5b}, {&(0x7f0000001600)=""/238, 0xee}, {&(0x7f0000001700)=""/59, 0x3b}, {&(0x7f0000001740)=""/108, 0x6c}], 0x7, &(0x7f0000001840)=""/222, 0xcd}, 0x10001}, {{&(0x7f0000001940)=@generic, 0x80, &(0x7f0000001d40), 0x3a, &(0x7f0000001dc0)=""/119, 0x77}, 0x6}], 0x3, 0x2000, 0x0) 1m42.918888308s ago: executing program 1 (id=1816): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x101040) setuid(0xee01) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904", @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="a3f256c533e29aa4ed22c7b37073e1124337bf0ea6f700ebb184b1efdb10bc6d688e038734344d8f978965d7328e8ba3bc751e3800c931f6e3463a10ba8c61007aab0f10e0c6a141d5255d9285647f1715cbd2e58516bcb50b41ce0db6393bf5483cc36b82136ed0b3291887bd6e195137e4ee39f83d47485f4885fbe357b994a215a93b9900431682643fb11fda7b0b8f5e7ba3e6c49ae2207b70896357673332c1749763aa051f151aa21f9ccec7c49ef4c4160c3e769b44da0f39d25c9519de153e45a26a43c05372f8668a9c47ddf00d91d3323df4d54ae505101c56e8b605279742506a11dcc53ec7cc9a17df73d54f4e"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000f80)=ANY=[@ANYBLOB="120100025e022d2099115268d56cd02d0301090212000100824007090499030009"], 0x0) 1m42.208229972s ago: executing program 3 (id=1817): socket$packet(0x11, 0x3, 0x300) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2000c851, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) socket$inet(0x2, 0x80001, 0x84) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$afs(&(0x7f0000000540)=ANY=[], &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x1200000, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000100)='./file2\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @remote, 0x6}, 0x1c) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f00"], 0x0}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000200)={0x80, 0xa, 0x8, 0x6, 0x0, 0x81, 0x0}) 1m38.638439392s ago: executing program 1 (id=1819): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x3ff, 0x7, @local, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000740)=@gcm_256={{0x304}, "39ed1eeed4c491c1", "7842c761641b59e0371fe32cea0836438fc0cbae45b1465405cfd89ca21f9b3b", "45a4427e", "bfa9a7db1bd1ed54"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "1300"}, 0x28) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x4000}], 0x1) 1m33.319043769s ago: executing program 1 (id=1822): fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020600) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, 0x0, 0x0) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioprio_get$pid(0x1, r0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000080)="01", 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={0x0, 0x0, 0x88, 0x0, 0x1, 0x6abb}, 0x28) fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000200)=""/161, 0xa1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) landlock_restrict_self(0xffffffffffffffff, 0xa) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc048aeca, 0x0) 1m33.124883273s ago: executing program 3 (id=1823): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x10, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0x0, 0xffff}, {0xffe0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0xd0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2e, 0x2, 0x7, {0x6, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffff8, 0x3d, 0xc}, {0x0, @remote, 0xd, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010103, 0x1, 0x5}, {0x0, @empty, 0x6, 0x3, [0x6, 0x9]}, 0x4, 0x3}}}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r7, 0xc0bc5351, &(0x7f0000000140)={0x30, 0x0, 'client0\x00', 0x0, "8bb59c511d2c7153", "7b1ffc99516e6a1060981f2c7a4e468bb4967e6f85487a84b7709cd7c92a07e5", 0x0, 0x800}) sendmmsg(r6, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='P', 0x1}], 0x1, &(0x7f0000000800)=[{0x10, 0x84, 0x3ff}, {0x10, 0x1, 0x2}], 0x20}}], 0x1, 0x4000810) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000100)={0x21, 0x5}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) write(r2, &(0x7f0000000240)="94", 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000000c0)={0x4001, r1}, 0x0) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r1, r5, 0x8f5, 0x0) write$cgroup_devices(r5, 0x0, 0x8) r9 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0xa, r9, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)='\x00\x00\x00') write(r3, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m28.038627198s ago: executing program 0 (id=1825): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x419a, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001e40)=[{{&(0x7f0000000080)=@tipc=@name, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/215, 0xd7}], 0x1}, 0x3}, {{&(0x7f0000000300)=@nfc, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/199, 0xc7}, {&(0x7f0000001480)=""/205, 0xcd}, {&(0x7f0000000100)=""/104, 0x5b}, {&(0x7f0000001600)=""/238, 0xee}, {&(0x7f0000001700)=""/59, 0x3b}, {&(0x7f0000001740)=""/108, 0x6c}], 0x7, &(0x7f0000001840)=""/222, 0xcd}, 0x10001}, {{&(0x7f0000001940)=@generic, 0x80, &(0x7f0000001d40), 0x3a, &(0x7f0000001dc0)=""/119, 0x77}, 0x6}], 0x3, 0x2000, 0x0) 1m26.140262079s ago: executing program 3 (id=1826): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xadc) r1 = syz_ublk_setup_io_uring(0x47bf, &(0x7f0000000080)={0x0, 0xcba0, 0x1, 0x2, 0x2d7}, &(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f0000000300)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x4010, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000540)={0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r1) syz_io_uring_setup(0xab4, &(0x7f0000000340)={0x0, 0x56fe, 0x4, 0x0, 0x3a0}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, r5, &(0x7f00000004c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x40, 0x0, @fd=r0, 0x7fff, 0x0, 0x7, 0x1, 0x1}) sendmsg$nl_route_sched(r0, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x81}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}}, 0x4000000) 1m19.339736143s ago: executing program 0 (id=1828): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/37, 0x25}, {0x0}], 0x2, &(0x7f00000001c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000440)=""/18, 0x12}, {&(0x7f0000000480)=""/64, 0x40}, {&(0x7f00000004c0)=""/47, 0x2f}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000580)=""/199, 0xc7}, {&(0x7f0000000680)=""/201, 0xc9}, {&(0x7f0000000780)=""/114, 0x72}, {&(0x7f0000000f40)=""/208, 0xd0}], 0x8, &(0x7f0000000f00)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)=""/237, 0xed}], 0x1, &(0x7f0000000d00)}}, {{&(0x7f0000000e80), 0x6e, &(0x7f0000004740)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/121, 0x79}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000004600)=""/37, 0x25}, {&(0x7f0000004640)=""/43, 0x2b}, {&(0x7f0000004680)=""/19, 0x13}, {0x0}], 0x7}}, {{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000004980)=""/27, 0x1b}, {&(0x7f00000049c0)=""/22, 0x16}], 0x2, &(0x7f0000004a40)}}, {{0x0, 0x0, &(0x7f0000006f40)}}], 0x6, 0x40, &(0x7f00000071c0)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000100)={r0}, 0x1) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x410, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x40}}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x4, 0x40000) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) prctl$PR_CAPBSET_READ(0x59616d61, 0xffffffff) ptrace(0x10, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a1c010000060a010400000000000000000a0000030900010073797a310000000028000480240001800a000100717565756500000014000280060001400008000006000240000000000900020073797a32"], 0x144}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1m16.270134749s ago: executing program 34 (id=1822): fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020600) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, 0x0, 0x0) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioprio_get$pid(0x1, r0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000080)="01", 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={0x0, 0x0, 0x88, 0x0, 0x1, 0x6abb}, 0x28) fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000200)=""/161, 0xa1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) landlock_restrict_self(0xffffffffffffffff, 0xa) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc048aeca, 0x0) 1m7.451743239s ago: executing program 35 (id=1826): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xadc) r1 = syz_ublk_setup_io_uring(0x47bf, &(0x7f0000000080)={0x0, 0xcba0, 0x1, 0x2, 0x2d7}, &(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f0000000300)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x4010, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000540)={0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r1) syz_io_uring_setup(0xab4, &(0x7f0000000340)={0x0, 0x56fe, 0x4, 0x0, 0x3a0}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, r5, &(0x7f00000004c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x40, 0x0, @fd=r0, 0x7fff, 0x0, 0x7, 0x1, 0x1}) sendmsg$nl_route_sched(r0, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x81}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}}, 0x4000000) 1m7.441208698s ago: executing program 0 (id=1832): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xadc) r1 = syz_ublk_setup_io_uring(0x47bf, &(0x7f0000000080)={0x0, 0xcba0, 0x1, 0x2, 0x2d7}, &(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f0000000300)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x4010, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000540)={0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r1) syz_io_uring_setup(0xab4, &(0x7f0000000340)={0x0, 0x56fe, 0x4, 0x0, 0x3a0}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, r5, &(0x7f00000004c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x40, 0x0, @fd=r0, 0x7fff, 0x0, 0x7, 0x1, 0x1}) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x81}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}}, 0x4000000) ioctl$sock_SIOCOUTQ(r7, 0x5411, 0xffffffffffffffff) 1m0.394218334s ago: executing program 0 (id=1835): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @broadcast}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 53.934281004s ago: executing program 2 (id=1836): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x149a82, 0x52) 52.584991941s ago: executing program 0 (id=1837): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x419a, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001e40)=[{{&(0x7f0000000080)=@tipc=@name, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/215, 0xd7}], 0x1}, 0x3}, {{&(0x7f0000000300)=@nfc, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/199, 0xc7}, {&(0x7f0000001480)=""/205, 0xcd}, {&(0x7f0000000100)=""/104, 0x5b}, {&(0x7f0000001600)=""/238, 0xee}, {&(0x7f0000001700)=""/59, 0x3b}, {&(0x7f0000001740)=""/108, 0x6c}], 0x7, &(0x7f0000001840)=""/222, 0xcd}, 0x10001}, {{&(0x7f0000001940)=@generic, 0x80, &(0x7f0000001d40), 0x3a, &(0x7f0000001dc0)=""/119, 0x77}, 0x6}], 0x3, 0x2000, 0x0) 47.446012721s ago: executing program 2 (id=1838): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff03c}, {0x6, 0x6}]}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="c5558ea633f937c874cb59690f229787d713fec8d8dede9fc62a78518b7f8e4f576866673d0703269e1a7b4caf851f5854689ff38d7deb16cb829eb655a4869460bf119e8233a8c2e81208af2b2a46d5c71c81", @ANYRES32=r2, @ANYRESDEC=r1], &(0x7f00000000c0)='GPL\x00', 0xf2b6, 0x0, 0x0, 0x41100, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4c22, 0x0, @local, 0x6}, 0x1c) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092df5510ac052692"], 0x0) listen(r5, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900040000000000000000000000000000000000000000000200000000000000f7ffffffffffffff00000000000000000000000000000000000000020000000000000000000000ffffffffffffffff0700"/111], 0xb8}}, 0x10) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r9, 0xc08c5332, &(0x7f0000000400)={{0x40, 0x13}, 0x1, 0x4, 0x88, {}, 0x0, 0x4000ffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r9, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x3}}) unshare(0x6020400) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 40.700720303s ago: executing program 0 (id=1839): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/37, 0x25}, {0x0}], 0x2, &(0x7f00000001c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000440)=""/18, 0x12}, {&(0x7f0000000480)=""/64, 0x40}, {&(0x7f00000004c0)=""/47, 0x2f}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000580)=""/199, 0xc7}, {&(0x7f0000000680)=""/201, 0xc9}, {&(0x7f0000000780)=""/114, 0x72}, {&(0x7f0000000f40)=""/208, 0xd0}], 0x8, &(0x7f0000000f00)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)=""/237, 0xed}], 0x1, &(0x7f0000000d00)}}, {{&(0x7f0000000e80), 0x6e, &(0x7f0000004740)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/121, 0x79}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000004600)=""/37, 0x25}, {&(0x7f0000004640)=""/43, 0x2b}, {&(0x7f0000004680)=""/19, 0x13}, {0x0}], 0x7}}, {{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000004980)=""/27, 0x1b}, {&(0x7f00000049c0)=""/22, 0x16}], 0x2, &(0x7f0000004a40)}}, {{0x0, 0x0, &(0x7f0000006f40)}}], 0x6, 0x40, &(0x7f00000071c0)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000100)={r0}, 0x1) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x410, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x4, 0x40000) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) prctl$PR_CAPBSET_READ(0x59616d61, 0xffffffff) ptrace(0x10, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a1c010000060a010400000000000000000a0000030900010073797a310000000028000480240001800a000100717565756500000014000280060001400008000006000240000000000900020073797a32"], 0x144}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 34.326537441s ago: executing program 2 (id=1840): fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020600) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, 0x0, 0x0) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioprio_get$pid(0x1, r0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000080)="01", 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={0x0, 0x0, 0x88, 0x0, 0x1, 0x6abb}, 0x28) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) read$msr(r4, &(0x7f0000000200)=""/161, 0xa1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) landlock_restrict_self(0xffffffffffffffff, 0xa) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc048aeca, 0x0) 25.733898999s ago: executing program 2 (id=1841): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/37, 0x25}, {0x0}], 0x2, &(0x7f00000001c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000440)=""/18, 0x12}, {&(0x7f0000000480)=""/64, 0x40}, {&(0x7f00000004c0)=""/47, 0x2f}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000580)=""/199, 0xc7}, {&(0x7f0000000680)=""/201, 0xc9}, {&(0x7f0000000780)=""/114, 0x72}, {&(0x7f0000000f40)=""/208, 0xd0}], 0x8, &(0x7f0000000f00)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)=""/237, 0xed}], 0x1, &(0x7f0000000d00)}}, {{&(0x7f0000000e80), 0x6e, &(0x7f0000004740)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/121, 0x79}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000004600)=""/37, 0x25}, {&(0x7f0000004640)=""/43, 0x2b}, {&(0x7f0000004680)=""/19, 0x13}, {0x0}], 0x7}}, {{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000004980)=""/27, 0x1b}, {&(0x7f00000049c0)=""/22, 0x16}], 0x2, &(0x7f0000004a40)}}, {{0x0, 0x0, &(0x7f0000006f40)}}], 0x6, 0x40, &(0x7f00000071c0)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000100)={r0}, 0x1) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x4, 0x40000) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) prctl$PR_CAPBSET_READ(0x59616d61, 0xffffffff) ptrace(0x10, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a1c010000060a010400000000000000000a0000030900010073797a310000000028000480240001800a000100717565756500000014000280060001400008000006000240000000000900020073797a32"], 0x144}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 25.0839813s ago: executing program 36 (id=1839): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/37, 0x25}, {0x0}], 0x2, &(0x7f00000001c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000440)=""/18, 0x12}, {&(0x7f0000000480)=""/64, 0x40}, {&(0x7f00000004c0)=""/47, 0x2f}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000580)=""/199, 0xc7}, {&(0x7f0000000680)=""/201, 0xc9}, {&(0x7f0000000780)=""/114, 0x72}, {&(0x7f0000000f40)=""/208, 0xd0}], 0x8, &(0x7f0000000f00)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)=""/237, 0xed}], 0x1, &(0x7f0000000d00)}}, {{&(0x7f0000000e80), 0x6e, &(0x7f0000004740)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/121, 0x79}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000004600)=""/37, 0x25}, {&(0x7f0000004640)=""/43, 0x2b}, {&(0x7f0000004680)=""/19, 0x13}, {0x0}], 0x7}}, {{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000004980)=""/27, 0x1b}, {&(0x7f00000049c0)=""/22, 0x16}], 0x2, &(0x7f0000004a40)}}, {{0x0, 0x0, &(0x7f0000006f40)}}], 0x6, 0x40, &(0x7f00000071c0)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000100)={r0}, 0x1) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x410, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x4, 0x40000) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) prctl$PR_CAPBSET_READ(0x59616d61, 0xffffffff) ptrace(0x10, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a1c010000060a010400000000000000000a0000030900010073797a310000000028000480240001800a000100717565756500000014000280060001400008000006000240000000000900020073797a32"], 0x144}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 21.04863677s ago: executing program 2 (id=1843): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/37, 0x25}, {0x0}], 0x2, &(0x7f00000001c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000440)=""/18, 0x12}, {&(0x7f0000000480)=""/64, 0x40}, {&(0x7f00000004c0)=""/47, 0x2f}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000580)=""/199, 0xc7}, {&(0x7f0000000680)=""/201, 0xc9}, {&(0x7f0000000780)=""/114, 0x72}, {&(0x7f0000000f40)=""/208, 0xd0}], 0x8, &(0x7f0000000f00)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)=""/237, 0xed}], 0x1, &(0x7f0000000d00)}}, {{&(0x7f0000000e80), 0x6e, &(0x7f0000004740)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/121, 0x79}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000004600)=""/37, 0x25}, {&(0x7f0000004640)=""/43, 0x2b}, {&(0x7f0000004680)=""/19, 0x13}, {0x0}], 0x7}}, {{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000004980)=""/27, 0x1b}, {&(0x7f00000049c0)=""/22, 0x16}], 0x2, &(0x7f0000004a40)}}, {{0x0, 0x0, &(0x7f0000006f40)}}], 0x6, 0x40, &(0x7f00000071c0)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000100)={r0}, 0x1) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x410, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x4, 0x40000) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) prctl$PR_CAPBSET_READ(0x59616d61, 0xffffffff) ptrace(0x10, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a1c010000060a010400000000000000000a0000030900010073797a310000000028000480240001800a000100717565756500000014000280060001400008000006000240000000000900020073797a32"], 0x144}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 15.543691264s ago: executing program 2 (id=1844): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000007380)=[{{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000001c0)=""/142, 0x8e}, {&(0x7f0000000400)=""/230, 0xe6}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000000000)=""/206, 0xce}, {&(0x7f0000002940)=""/246, 0xf6}], 0x5}, 0x5fb5}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x3ff}, {{0x0, 0x0, 0x0}, 0xf3cd}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x4000000}, {{0x0, 0x0, 0x0}, 0x7f}], 0x8, 0x100, 0x0) 0s ago: executing program 37 (id=1844): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000007380)=[{{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000001c0)=""/142, 0x8e}, {&(0x7f0000000400)=""/230, 0xe6}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000000000)=""/206, 0xce}, {&(0x7f0000002940)=""/246, 0xf6}], 0x5}, 0x5fb5}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x3ff}, {{0x0, 0x0, 0x0}, 0xf3cd}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x4000000}, {{0x0, 0x0, 0x0}, 0x7f}], 0x8, 0x100, 0x0) kernel console output (not intermixed with test programs): ][ T1077] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 587.127203][ T9724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1124'. [ 588.213989][ T9731] binder: 9730:9731 ioctl c00c620f 200000000000 returned -22 [ 588.540006][ T6097] usb 2-1: USB disconnect, device number 44 [ 588.850122][ T9738] loop5: detected capacity change from 0 to 7 [ 588.956002][ T9740] FAULT_INJECTION: forcing a failure. [ 588.956002][ T9740] name failslab, interval 1, probability 0, space 0, times 0 [ 588.956044][ T9740] CPU: 1 UID: 0 PID: 9740 Comm: syz.1.1140 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 588.956074][ T9740] Tainted: [L]=SOFTLOCKUP [ 588.956082][ T9740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 588.956094][ T9740] Call Trace: [ 588.956108][ T9740] [ 588.956119][ T9740] dump_stack_lvl+0xe8/0x150 [ 588.956157][ T9740] should_fail_ex+0x467/0x600 [ 588.956197][ T9740] should_failslab+0xa8/0x100 [ 588.956228][ T9740] __kvmalloc_node_noprof+0x16a/0x900 [ 588.956258][ T9740] ? alloc_netdev_mqs+0xa9/0x1270 [ 588.956408][ T9740] ? snprintf+0xe8/0x140 [ 588.956441][ T9740] alloc_netdev_mqs+0xa9/0x1270 [ 588.956462][ T9740] ? __pfx_snprintf+0x10/0x10 [ 588.956483][ T9740] ? __pfx_veth_setup+0x10/0x10 [ 588.956595][ T9740] rtnl_create_link+0x321/0xd70 [ 588.956647][ T9740] rtnl_newlink_create+0x25f/0xb00 [ 588.956710][ T9740] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 588.956755][ T9740] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 588.956789][ T9740] ? lockdep_hardirqs_on+0x7a/0x110 [ 588.956820][ T9740] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 588.956856][ T9740] rtnl_newlink+0x167f/0x1bd0 [ 588.956900][ T9740] ? __pfx_rtnl_newlink+0x10/0x10 [ 588.956931][ T9740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.957034][ T9740] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 588.957061][ T9740] ? lockdep_hardirqs_on+0x7a/0x110 [ 588.957093][ T9740] ? __dev_queue_xmit+0x291/0x3890 [ 588.957173][ T9740] ? __dev_queue_xmit+0x1f31/0x3890 [ 588.957213][ T9740] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 588.957258][ T9740] ? __pfx_rtnl_newlink+0x10/0x10 [ 588.957283][ T9740] rtnetlink_rcv_msg+0x802/0xc00 [ 588.957315][ T9740] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 588.957342][ T9740] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 588.957367][ T9740] ? ref_tracker_free+0x668/0x820 [ 588.957401][ T9740] ? __pfx_ref_tracker_free+0x10/0x10 [ 588.957444][ T9740] netlink_rcv_skb+0x226/0x4a0 [ 588.957476][ T9740] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 588.957506][ T9740] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 588.957550][ T9740] ? netlink_deliver_tap+0x2e/0x1b0 [ 588.957579][ T9740] ? netlink_deliver_tap+0x2e/0x1b0 [ 588.957614][ T9740] netlink_unicast+0x7f5/0x990 [ 588.957654][ T9740] netlink_sendmsg+0x813/0xb40 [ 588.957695][ T9740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.957735][ T9740] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 588.957758][ T9740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.957791][ T9740] ____sys_sendmsg+0x9a2/0xa10 [ 588.957823][ T9740] ? __might_fault+0xaf/0x130 [ 588.957858][ T9740] ? __pfx_____sys_sendmsg+0x10/0x10 [ 588.957901][ T9740] ? import_iovec+0x73/0xa0 [ 588.957948][ T9740] ___sys_sendmsg+0x2a5/0x360 [ 588.957979][ T9740] ? __lock_acquire+0x683/0x2cc0 [ 588.958014][ T9740] ? __pfx____sys_sendmsg+0x10/0x10 [ 588.958088][ T9740] ? __fget_files+0x2a/0x420 [ 588.958109][ T9740] ? __fget_files+0x3a8/0x420 [ 588.958143][ T9740] __x64_sys_sendmsg+0x1c3/0x2a0 [ 588.958178][ T9740] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 588.958222][ T9740] ? __pfx_ksys_write+0x10/0x10 [ 588.958260][ T9740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.958282][ T9740] do_syscall_64+0x174/0x580 [ 588.958308][ T9740] ? trace_irq_disable+0x3b/0x140 [ 588.958333][ T9740] ? clear_bhb_loop+0x40/0x90 [ 588.958357][ T9740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.958374][ T9740] RIP: 0033:0x7f337abece59 [ 588.958393][ T9740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.958408][ T9740] RSP: 002b:00007f3378e3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.958428][ T9740] RAX: ffffffffffffffda RBX: 00007f337ae65fa0 RCX: 00007f337abece59 [ 588.958439][ T9740] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 588.958449][ T9740] RBP: 00007f3378e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 588.958459][ T9740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.958468][ T9740] R13: 00007f337ae66038 R14: 00007f337ae65fa0 R15: 00007ffd82354c48 [ 588.958493][ T9740] [ 589.451624][ T9738] Dev loop5: unable to read RDB block 7 [ 589.451683][ T9738] loop5: unable to read partition table [ 589.452017][ T9738] loop5: partition table beyond EOD, truncated [ 589.452053][ T9738] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 591.577590][ T6097] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 591.733462][ T6097] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 591.733501][ T6097] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 591.733531][ T6097] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 591.736130][ T6097] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 591.736162][ T6097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.736183][ T6097] usb 2-1: Product: syz [ 591.736199][ T6097] usb 2-1: Manufacturer: syz [ 591.736214][ T6097] usb 2-1: SerialNumber: syz [ 591.754135][ T6097] usb 2-1: config 0 descriptor?? [ 591.776487][ T6097] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 592.180824][ T9769] binder: 9768:9769 ioctl c00c620f 200000000000 returned -22 [ 592.185436][ T9] usb 2-1: USB disconnect, device number 45 [ 594.383143][ T9777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1150'. [ 595.300918][ T9786] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1155'. [ 595.300944][ T9786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1155'. [ 596.388161][ T37] kauditd_printk_skb: 71 callbacks suppressed [ 596.388297][ T37] audit: type=1326 audit(1781525022.092:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.0.1159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc302ce59 code=0x7ffc0000 [ 596.419771][ T37] audit: type=1326 audit(1781525022.422:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.0.1159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fadc302ce59 code=0x7ffc0000 [ 596.419840][ T37] audit: type=1326 audit(1781525022.422:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.0.1159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc302ce59 code=0x7ffc0000 [ 596.446103][ T37] audit: type=1326 audit(1781525022.452:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.0.1159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadc302ce59 code=0x7ffc0000 [ 596.491445][ T37] audit: type=1326 audit(1781525022.492:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.0.1159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc302ce59 code=0x7ffc0000 [ 596.492143][ T37] audit: type=1326 audit(1781525022.502:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.0.1159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadc302ce59 code=0x7ffc0000 [ 596.605385][ T37] audit: type=1326 audit(1781525022.612:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.0.1159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc302ce59 code=0x7ffc0000 [ 596.605449][ T37] audit: type=1326 audit(1781525022.612:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.0.1159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc302ce59 code=0x7ffc0000 [ 596.626872][ T37] audit: type=1326 audit(1781525022.632:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.0.1159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fadc302ce59 code=0x7ffc0000 [ 596.702961][ T37] audit: type=1326 audit(1781525022.712:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.0.1159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc302ce59 code=0x7ffc0000 [ 597.651544][ T6097] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 597.655696][ T9808] kAFS: No cell specified [ 597.812179][ T6097] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.812210][ T6097] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 597.815426][ T6097] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 597.815460][ T6097] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 597.815482][ T6097] usb 4-1: Manufacturer: syz [ 597.870444][ T6097] usb 4-1: config 0 descriptor?? [ 598.143882][ T9813] FAULT_INJECTION: forcing a failure. [ 598.143882][ T9813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.143925][ T9813] CPU: 1 UID: 0 PID: 9813 Comm: syz.0.1164 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 598.143957][ T9813] Tainted: [L]=SOFTLOCKUP [ 598.143965][ T9813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 598.143978][ T9813] Call Trace: [ 598.143987][ T9813] [ 598.143997][ T9813] dump_stack_lvl+0xe8/0x150 [ 598.144030][ T9813] should_fail_ex+0x467/0x600 [ 598.144067][ T9813] _copy_from_user+0x2d/0xb0 [ 598.144100][ T9813] bpf_test_init+0xd8/0x150 [ 598.144143][ T9813] bpf_prog_test_run_skb+0x31e/0x2230 [ 598.144195][ T9813] ? __fget_files+0x3a8/0x420 [ 598.144217][ T9813] ? __fget_files+0x2a/0x420 [ 598.144242][ T9813] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 598.144272][ T9813] bpf_prog_test_run+0x2cb/0x340 [ 598.144307][ T9813] __sys_bpf+0x643/0x950 [ 598.144336][ T9813] ? __pfx___sys_bpf+0x10/0x10 [ 598.144359][ T9813] ? rt_mutex_slowunlock+0x1cb/0x300 [ 598.144402][ T9813] ? ksys_write+0x248/0x270 [ 598.144431][ T9813] ? __pfx_ksys_write+0x10/0x10 [ 598.144461][ T9813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.144486][ T9813] __x64_sys_bpf+0x7c/0x90 [ 598.144509][ T9813] do_syscall_64+0x174/0x580 [ 598.144540][ T9813] ? trace_irq_disable+0x3b/0x140 [ 598.144565][ T9813] ? clear_bhb_loop+0x40/0x90 [ 598.144591][ T9813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.144614][ T9813] RIP: 0033:0x7fadc302ce59 [ 598.144634][ T9813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.144652][ T9813] RSP: 002b:00007fadc127e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 598.144676][ T9813] RAX: ffffffffffffffda RBX: 00007fadc32a5fa0 RCX: 00007fadc302ce59 [ 598.144692][ T9813] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 598.144705][ T9813] RBP: 00007fadc127e090 R08: 0000000000000000 R09: 0000000000000000 [ 598.144751][ T9813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.144764][ T9813] R13: 00007fadc32a6038 R14: 00007fadc32a5fa0 R15: 00007ffcbe535028 [ 598.144799][ T9813] [ 598.835381][ C1] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 599.614772][ T3378] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 600.374706][ T9826] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 600.411353][ T9826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1167'. [ 600.602708][ T6097] usb 4-1: USB disconnect, device number 32 [ 601.361368][ T1008] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 601.515794][ T1008] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 601.515828][ T1008] usb 4-1: config 0 has no interface number 0 [ 601.515875][ T1008] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 601.515902][ T1008] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 601.515925][ T1008] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 601.515953][ T1008] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid maxpacket 49152, setting to 1024 [ 601.525146][ T1008] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 601.525176][ T1008] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 601.525196][ T1008] usb 4-1: Product: syz [ 601.525210][ T1008] usb 4-1: Manufacturer: syz [ 601.525224][ T1008] usb 4-1: SerialNumber: syz [ 601.551960][ T1008] usb 4-1: config 0 descriptor?? [ 601.838658][ T1008] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 601.905805][ T1008] xpad 4-1:0.237: probe with driver xpad failed with error -90 [ 602.157472][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1170'. [ 602.318000][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061cc0400: rx timeout, send abort [ 602.436016][ T9834] team0 (unregistering): Port device team_slave_0 removed [ 602.551582][ T9834] team0 (unregistering): Port device team_slave_1 removed [ 602.870084][ T1008] usb 4-1: USB disconnect, device number 33 [ 602.982716][ T9842] syz.1.1170 (9842) used greatest stack depth: 18120 bytes left [ 603.323667][ T9855] bridge0: port 3(macsec1) entered blocking state [ 603.323926][ T9855] bridge0: port 3(macsec1) entered disabled state [ 603.324137][ T9855] macsec1: entered allmulticast mode [ 603.324155][ T9855] bridge0: entered allmulticast mode [ 603.598526][ T9855] macsec1: left allmulticast mode [ 603.598553][ T9855] bridge0: left allmulticast mode [ 603.791407][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 603.981377][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 603.983784][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 603.985025][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 603.987716][ T9] usb 4-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 603.987748][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.987769][ T9] usb 4-1: Product: syz [ 603.987785][ T9] usb 4-1: Manufacturer: syz [ 603.987800][ T9] usb 4-1: SerialNumber: syz [ 604.064175][ T9853] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 604.304463][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 604.304532][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 605.356383][ T9] usb 4-1: USB disconnect, device number 34 [ 605.788210][ T9878] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1183'. [ 605.788240][ T9878] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 608.486481][ T3132] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 609.907887][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 609.907908][ T37] audit: type=1326 audit(1781525035.912:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9904 comm="syz.3.1191" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff511b1ce59 code=0x7ffc0000 [ 609.908564][ T37] audit: type=1326 audit(1781525035.912:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9904 comm="syz.3.1191" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff511b1ce59 code=0x7ffc0000 [ 609.985059][ T37] audit: type=1326 audit(1781525035.992:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9904 comm="syz.3.1191" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff511b1ce59 code=0x7ffc0000 [ 609.987820][ T37] audit: type=1326 audit(1781525035.992:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9904 comm="syz.3.1191" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7ff511b1ce59 code=0x7ffc0000 [ 609.988198][ T37] audit: type=1326 audit(1781525035.992:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9904 comm="syz.3.1191" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff511b1ce59 code=0x7ffc0000 [ 609.989945][ T37] audit: type=1326 audit(1781525035.992:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9904 comm="syz.3.1191" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff511b1ce59 code=0x7ffc0000 [ 609.990304][ T37] audit: type=1326 audit(1781525035.992:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9904 comm="syz.3.1191" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff511b1ce59 code=0x7ffc0000 [ 610.042648][ T37] audit: type=1326 audit(1781525036.052:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9904 comm="syz.3.1191" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff511b1ce59 code=0x7ffc0000 [ 610.042789][ T37] audit: type=1326 audit(1781525036.052:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9904 comm="syz.3.1191" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff511b1ce59 code=0x7ffc0000 [ 610.666295][ T9910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 611.087847][ T9916] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5616] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[9916] [ 611.135035][ T9916] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1194'. [ 613.964440][ T9945] tmpfs: Cannot enable quota on remount [ 614.539482][ T9930] mmap: syz.2.1201 (9930): VmData 37855232 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 614.586203][ T9938] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1199'. [ 615.757672][ T9961] FAULT_INJECTION: forcing a failure. [ 615.757672][ T9961] name failslab, interval 1, probability 0, space 0, times 0 [ 615.757714][ T9961] CPU: 1 UID: 0 PID: 9961 Comm: syz.0.1205 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 615.757746][ T9961] Tainted: [L]=SOFTLOCKUP [ 615.757753][ T9961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 615.757766][ T9961] Call Trace: [ 615.757775][ T9961] [ 615.757784][ T9961] dump_stack_lvl+0xe8/0x150 [ 615.757817][ T9961] should_fail_ex+0x467/0x600 [ 615.757854][ T9961] should_failslab+0xa8/0x100 [ 615.757884][ T9961] kmem_cache_alloc_node_noprof+0x8f/0x710 [ 615.757909][ T9961] ? __alloc_skb+0x1d7/0x7a0 [ 615.757936][ T9961] ? lockdep_hardirqs_on+0x7a/0x110 [ 615.757975][ T9961] __alloc_skb+0x1d7/0x7a0 [ 615.758007][ T9961] xfrm_send_policy_notify+0x2a0/0x1c30 [ 615.758145][ T9961] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 615.758171][ T9961] ? km_policy_notify+0x28/0x200 [ 615.758224][ T9961] ? km_policy_notify+0x28/0x200 [ 615.758258][ T9961] ? km_policy_notify+0x28/0x200 [ 615.758285][ T9961] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 615.758311][ T9961] km_policy_notify+0x121/0x200 [ 615.758335][ T9961] ? km_policy_notify+0x28/0x200 [ 615.758364][ T9961] xfrm_add_policy+0x4d1/0x810 [ 615.758389][ T9961] ? rcu_is_watching+0x15/0xb0 [ 615.758427][ T9961] ? __pfx_xfrm_add_policy+0x10/0x10 [ 615.758461][ T9961] ? __nla_parse+0x40/0x60 [ 615.758501][ T9961] xfrm_user_rcv_msg+0x9a9/0xc60 [ 615.758525][ T9961] ? is_bpf_text_address+0x292/0x2b0 [ 615.758561][ T9961] ? kernel_text_address+0xa5/0xe0 [ 615.758594][ T9961] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 615.758662][ T9961] ? __lock_acquire+0x683/0x2cc0 [ 615.758697][ T9961] ? __lock_acquire+0x683/0x2cc0 [ 615.758735][ T9961] netlink_rcv_skb+0x226/0x4a0 [ 615.758766][ T9961] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 615.758795][ T9961] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 615.758839][ T9961] ? lockdep_hardirqs_on+0x7a/0x110 [ 615.758872][ T9961] ? mutex_lock_nested+0x152/0x1d0 [ 615.758896][ T9961] ? xfrm_netlink_rcv+0x6a/0x90 [ 615.758927][ T9961] xfrm_netlink_rcv+0x79/0x90 [ 615.758953][ T9961] netlink_unicast+0x7f5/0x990 [ 615.758993][ T9961] netlink_sendmsg+0x813/0xb40 [ 615.759042][ T9961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.759082][ T9961] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 615.759105][ T9961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.759137][ T9961] ____sys_sendmsg+0x9a2/0xa10 [ 615.759168][ T9961] ? __might_fault+0xaf/0x130 [ 615.759202][ T9961] ? __pfx_____sys_sendmsg+0x10/0x10 [ 615.759244][ T9961] ? import_iovec+0x73/0xa0 [ 615.759283][ T9961] ___sys_sendmsg+0x2a5/0x360 [ 615.759313][ T9961] ? __lock_acquire+0x683/0x2cc0 [ 615.759347][ T9961] ? __pfx____sys_sendmsg+0x10/0x10 [ 615.759420][ T9961] ? __fget_files+0x2a/0x420 [ 615.759441][ T9961] ? __fget_files+0x3a8/0x420 [ 615.759475][ T9961] __x64_sys_sendmsg+0x1c3/0x2a0 [ 615.759510][ T9961] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 615.759552][ T9961] ? __pfx_ksys_write+0x10/0x10 [ 615.759589][ T9961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.759614][ T9961] do_syscall_64+0x174/0x580 [ 615.759644][ T9961] ? trace_irq_disable+0x3b/0x140 [ 615.759671][ T9961] ? clear_bhb_loop+0x40/0x90 [ 615.759698][ T9961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.759720][ T9961] RIP: 0033:0x7fadc302ce59 [ 615.759742][ T9961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.759759][ T9961] RSP: 002b:00007fadc127e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 615.759783][ T9961] RAX: ffffffffffffffda RBX: 00007fadc32a5fa0 RCX: 00007fadc302ce59 [ 615.759799][ T9961] RDX: 000000000c000014 RSI: 0000200000000000 RDI: 0000000000000003 [ 615.759813][ T9961] RBP: 00007fadc127e090 R08: 0000000000000000 R09: 0000000000000000 [ 615.759827][ T9961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.759840][ T9961] R13: 00007fadc32a6038 R14: 00007fadc32a5fa0 R15: 00007ffcbe535028 [ 615.759876][ T9961] [ 617.494217][ T72] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 618.087560][ T9976] FAULT_INJECTION: forcing a failure. [ 618.087560][ T9976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.087602][ T9976] CPU: 1 UID: 0 PID: 9976 Comm: syz.0.1211 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 618.087638][ T9976] Tainted: [L]=SOFTLOCKUP [ 618.087645][ T9976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 618.087657][ T9976] Call Trace: [ 618.087665][ T9976] [ 618.087675][ T9976] dump_stack_lvl+0xe8/0x150 [ 618.087707][ T9976] should_fail_ex+0x467/0x600 [ 618.087744][ T9976] _copy_from_iter+0x1d3/0x1660 [ 618.087788][ T9976] ? __pfx__copy_from_iter+0x10/0x10 [ 618.087818][ T9976] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 618.087843][ T9976] ? __lock_acquire+0x683/0x2cc0 [ 618.087874][ T9976] ? _parse_integer_limit+0x1ae/0x1f0 [ 618.087898][ T9976] ? skb_put+0x112/0x210 [ 618.087930][ T9976] hci_sock_sendmsg+0x42a/0xf50 [ 618.088033][ T9976] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 618.088064][ T9976] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 618.088090][ T9976] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 618.088114][ T9976] sock_write_iter+0x49e/0x4f0 [ 618.088137][ T9976] ? __pfx_sock_write_iter+0x10/0x10 [ 618.088172][ T9976] ? bpf_lsm_file_permission+0x9/0x20 [ 618.088197][ T9976] ? security_file_permission+0x75/0x260 [ 618.088239][ T9976] vfs_write+0x61e/0xbb0 [ 618.088272][ T9976] ? __pfx_vfs_write+0x10/0x10 [ 618.088308][ T9976] ? __fget_files+0x2a/0x420 [ 618.088339][ T9976] ksys_write+0x156/0x270 [ 618.088367][ T9976] ? __pfx_ksys_write+0x10/0x10 [ 618.088402][ T9976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.088426][ T9976] do_syscall_64+0x174/0x580 [ 618.088457][ T9976] ? trace_irq_disable+0x3b/0x140 [ 618.088491][ T9976] ? clear_bhb_loop+0x40/0x90 [ 618.088519][ T9976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.088541][ T9976] RIP: 0033:0x7fadc302ce59 [ 618.088562][ T9976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.088580][ T9976] RSP: 002b:00007fadc127e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 618.088604][ T9976] RAX: ffffffffffffffda RBX: 00007fadc32a5fa0 RCX: 00007fadc302ce59 [ 618.088620][ T9976] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 618.088634][ T9976] RBP: 00007fadc127e090 R08: 0000000000000000 R09: 0000000000000000 [ 618.088647][ T9976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.088660][ T9976] R13: 00007fadc32a6038 R14: 00007fadc32a5fa0 R15: 00007ffcbe535028 [ 618.088693][ T9976] [ 619.260070][ T9984] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1213'. [ 619.260289][ T9984] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 622.048867][ T9994] netlink: 'syz.0.1217': attribute type 10 has an invalid length. [ 622.067208][ T9994] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 622.080849][ T9994] team0: Port device netdevsim1 added [ 622.092800][ T9994] netlink: 'syz.0.1217': attribute type 10 has an invalid length. [ 623.630528][ T9994] team0: Port device netdevsim1 removed [ 623.680465][ T9994] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 623.700717][ T9994] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 629.850618][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.850703][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.006446][T10035] netlink: 'syz.2.1229': attribute type 1 has an invalid length. [ 630.006473][T10035] netlink: 'syz.2.1229': attribute type 1 has an invalid length. [ 631.320026][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 636.241353][T10065] virtio-fs: tag not found [ 639.815855][ T1034] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 641.352481][ T1008] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 641.534053][ T1008] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 641.534086][ T1008] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 641.534110][ T1008] usb 4-1: config 150 has no interface number 0 [ 641.534160][ T1008] usb 4-1: config 150 interface 204 has no altsetting 0 [ 641.537418][ T1008] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 641.537448][ T1008] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.537468][ T1008] usb 4-1: Product: syz [ 641.537482][ T1008] usb 4-1: Manufacturer: syz [ 641.537498][ T1008] usb 4-1: SerialNumber: syz [ 641.913793][ T1008] xr_serial 4-1:150.204: skipping garbage [ 641.913857][ T1008] xr_serial 4-1:150.204: xr_serial converter detected [ 642.506385][ T1008] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 642.506465][ T1008] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 642.546506][ T1008] usb 4-1: USB disconnect, device number 35 [ 642.645010][ T1008] xr_serial 4-1:150.204: device disconnected [ 642.968095][T10107] kAFS: No cell specified [ 643.415482][T10077] syz.4.1242 (10077) used greatest stack depth: 17888 bytes left [ 644.696972][T10121] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5617] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[10121] [ 644.951850][T10122] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1254'. [ 646.407264][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1255'. [ 646.407293][T10125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1255'. [ 646.497645][T10118] virtio-fs: tag not found [ 648.639885][ T3132] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 651.097995][T10143] fuse: fd is not a fuse device [ 654.701956][T10169] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 656.145979][T10171] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1269'. [ 656.146006][T10171] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 656.791374][ T36] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 657.137917][ T36] usb 4-1: config 0 has an invalid interface number: 33 but max is 0 [ 657.137939][ T36] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.137950][ T36] usb 4-1: config 0 has no interface number 0 [ 657.137978][ T36] usb 4-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 657.137993][ T36] usb 4-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 657.163676][ T36] usb 4-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 657.163712][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.163734][ T36] usb 4-1: Product: syz [ 657.163749][ T36] usb 4-1: Manufacturer: syz [ 657.163766][ T36] usb 4-1: SerialNumber: syz [ 657.235689][ T36] usb 4-1: config 0 descriptor?? [ 657.237585][T10179] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 657.262233][ T36] hdpvr 4-1:0.33: Could not find bulk-in endpoint [ 657.262357][ T36] hdpvr 4-1:0.33: probe with driver hdpvr failed with error -12 [ 659.411487][T10192] virtio-fs: tag not found [ 663.299741][ T9] usb 4-1: USB disconnect, device number 36 [ 664.684080][T10221] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1280'. [ 664.684121][T10221] netlink: 'syz.3.1280': attribute type 7 has an invalid length. [ 664.684135][T10221] netlink: 'syz.3.1280': attribute type 8 has an invalid length. [ 664.684148][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1280'. [ 666.876588][ T5858] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 670.694930][ T36] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 672.291816][ T3053] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 675.288741][T10236] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1285'. [ 675.288761][T10236] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 677.261525][T10245] virtio-fs: tag not found [ 681.614492][ T1427] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 681.680941][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 681.785209][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 681.813572][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 681.819719][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 681.906086][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 683.962553][ T5634] Bluetooth: hci5: command tx timeout [ 685.735954][T10280] syz.1.1296 (10280) used greatest stack depth: 17728 bytes left [ 686.200131][ T5634] Bluetooth: hci5: command tx timeout [ 686.468650][ T1427] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.931401][ T7865] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 687.081660][ T7865] usb 2-1: Using ep0 maxpacket: 16 [ 688.065986][T10297] virtio-fs: tag not found [ 688.596544][ T5634] Bluetooth: hci5: command tx timeout [ 688.685499][ T7865] usb 2-1: unable to get BOS descriptor or descriptor too short [ 688.689797][ T7865] usb 2-1: config 6 has an invalid interface number: 227 but max is 0 [ 688.689819][ T7865] usb 2-1: config 6 has no interface number 0 [ 688.689848][ T7865] usb 2-1: config 6 interface 227 altsetting 6 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 688.689866][ T7865] usb 2-1: config 6 interface 227 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 688.689879][ T7865] usb 2-1: config 6 interface 227 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 688.689893][ T7865] usb 2-1: config 6 interface 227 has no altsetting 0 [ 688.724808][ T7865] usb 2-1: New USB device found, idVendor=19d2, idProduct=ffab, bcdDevice=30.e0 [ 688.724839][ T7865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.724858][ T7865] usb 2-1: Product: 䠊 [ 688.724871][ T7865] usb 2-1: Manufacturer: 、 [ 688.724885][ T7865] usb 2-1: SerialNumber: У [ 690.549100][ T1427] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.601343][ T5634] Bluetooth: hci5: command tx timeout [ 690.708729][T10308] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5614] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[10308] [ 690.709690][T10308] fuse: fd is not a fuse device [ 690.715767][T10308] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1303'. [ 691.166724][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.166803][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.399081][ T7865] hub 2-1:6.227: bad descriptor, ignoring hub [ 691.399123][ T7865] hub 2-1:6.227: probe with driver hub failed with error -5 [ 691.405210][ T7865] option 2-1:6.227: GSM modem (1-port) converter detected [ 691.712771][ T7865] usb 2-1: USB disconnect, device number 47 [ 692.856079][ T7865] option 2-1:6.227: device disconnected [ 692.890267][ T1427] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.384426][ T1427] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.591388][ T7865] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 694.115313][ T7865] usb 4-1: Using ep0 maxpacket: 16 [ 694.148213][ T7865] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 694.148244][ T7865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.148264][ T7865] usb 4-1: Product: 㴔ৎ깯ꦍ鬞팟捗툥硚Ł瓾뼵浬晻狓⨶⫲ㅬ擆ṫ袣侦ᎂ胣슈愊躵緱梥୒껽쩲ᆰ瘙庽갅룳✗皢肤篈꘺ኍ悐缳ྦ⑮랢쓜秔⇈℥魯氲鯩ԕᚈ쟗볬磍誃 [ 694.148281][ T7865] usb 4-1: Manufacturer: ෴蝡﹯뺢磱燴䐻钏帕췗俴骃曦阙늳ꇽ铹ุ㵛ꚲ艠䵨퉎ꐴ뉙ꕀ圖奠볈慊딵㒲彘厹뭐ጙ蹴⛖﵁㔣約ḓ긲ﾟ聠ᗭ藩匲⬬∊쳗ौ㒗녶鼃釯덌ᾇ䒱㨛숴훯⇁眍ꌀ퍱䈎馚흒鸸ب㝮촔㏫趚竖⢢띄3Ꚙ뺄芫벃邻훜紵켼審紿騳 [ 694.148299][ T7865] usb 4-1: SerialNumber: syz [ 695.426229][T10351] fuse: fd is not a fuse device [ 696.414816][ T7865] usb 4-1: found format II with max.bitrate = 6230, frame size=2 [ 696.414836][ T7865] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 696.425441][ T7865] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 697.285936][ T7865] usb 4-1: USB disconnect, device number 37 [ 697.408570][T10360] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5614] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[10360] [ 697.409074][T10360] fuse: fd is not a fuse device [ 697.418068][T10360] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1315'. [ 697.418638][T10363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1316'. [ 697.868676][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 698.032465][T10261] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.037917][T10261] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.043138][T10261] bridge_slave_0: entered allmulticast mode [ 698.081965][T10261] bridge_slave_0: entered promiscuous mode [ 698.408979][T10261] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.409056][T10261] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.409241][T10261] bridge_slave_1: entered allmulticast mode [ 698.432034][T10261] bridge_slave_1: entered promiscuous mode [ 698.637913][T10261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.654991][T10261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.721645][ T1427] bridge_slave_1: left allmulticast mode [ 699.721897][ T1427] bridge_slave_1: left promiscuous mode [ 699.780720][ T1427] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.968510][ T1427] bridge_slave_0: left allmulticast mode [ 699.968549][ T1427] bridge_slave_0: left promiscuous mode [ 699.968839][ T1427] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.846809][T10417] kAFS: No cell specified [ 700.948658][ T5862] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 702.083383][ T7865] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 702.302181][ T7865] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 702.302214][ T7865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 702.306969][ T7865] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 702.307000][ T7865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.307022][ T7865] usb 2-1: Product: syz [ 702.307037][ T7865] usb 2-1: Manufacturer: syz [ 702.307053][ T7865] usb 2-1: SerialNumber: syz [ 702.367860][ T7865] usb 2-1: config 0 descriptor?? [ 703.623498][ T7865] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 704.503567][ T1427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.582276][ T1427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.656168][ T1427] bond0 (unregistering): Released all slaves [ 704.690330][ T1427] bond1 (unregistering): Released all slaves [ 704.995036][ T5268] 8021q: adding VLAN 0 to HW filter on device eth1 [ 705.338043][ T1427] tipc: Left network mode [ 705.359472][T10261] team0: Port device team_slave_0 added [ 705.383036][T10261] team0: Port device team_slave_1 added [ 705.801725][ T1077] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 706.189242][T10261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.189262][T10261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.189293][T10261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.241800][T10261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.241814][T10261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.241830][T10261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.522994][ T7857] usb 2-1: USB disconnect, device number 48 [ 706.652156][T10261] hsr_slave_0: entered promiscuous mode [ 706.653832][T10261] hsr_slave_1: entered promiscuous mode [ 706.654848][T10261] debugfs: 'hsr0' already exists in 'hsr' [ 706.654874][T10261] Cannot create hsr debugfs directory [ 706.901961][T10472] 9p: Bad value for 'wfdno' [ 707.801495][ T7865] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 707.961382][ T7865] usb 4-1: Using ep0 maxpacket: 16 [ 707.964538][ T7865] usb 4-1: unable to get BOS descriptor or descriptor too short [ 707.966080][ T7865] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.966195][ T7865] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 707.970512][ T7865] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 707.970541][ T7865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.970563][ T7865] usb 4-1: Product: syz [ 707.970579][ T7865] usb 4-1: Manufacturer: syz [ 707.970594][ T7865] usb 4-1: SerialNumber: syz [ 708.421423][ T7865] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 708.422001][ T7865] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 709.821831][ T5268] 8021q: adding VLAN 0 to HW filter on device eth2 [ 710.283244][ T7865] usb 4-1: USB disconnect, device number 38 [ 712.337143][ T7859] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 712.536244][ T7859] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 712.536275][ T7859] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 713.022139][ T7859] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 713.022174][ T7859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.022196][ T7859] usb 2-1: Product: syz [ 713.022211][ T7859] usb 2-1: Manufacturer: syz [ 713.022226][ T7859] usb 2-1: SerialNumber: syz [ 713.078649][ T7859] usb 2-1: config 0 descriptor?? [ 713.138146][ T7859] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 715.294521][ T36] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 715.461382][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 715.466735][ T36] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 715.466770][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.466791][ T36] usb 4-1: Product: syz [ 715.466806][ T36] usb 4-1: Manufacturer: syz [ 715.466821][ T36] usb 4-1: SerialNumber: syz [ 715.524223][ T36] usb 4-1: config 0 descriptor?? [ 715.624846][ T1427] hsr_slave_0: left promiscuous mode [ 715.686814][ T1427] hsr_slave_1: left promiscuous mode [ 715.826235][ T36] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 039 [ 715.888992][ T1427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.949652][ T1427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.077391][ T1427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.077422][ T1427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.659930][ T36] usb 2-1: USB disconnect, device number 49 [ 717.784017][ T1427] veth1_macvtap: left promiscuous mode [ 717.836475][ T1427] veth0_macvtap: left promiscuous mode [ 717.836823][ T1427] veth1_vlan: left promiscuous mode [ 717.837249][ T1427] veth0_vlan: left promiscuous mode [ 718.057397][T10526] i2c i2c-1: failure writing data [ 718.201331][ T7857] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 718.441349][ T7857] usb 2-1: Using ep0 maxpacket: 16 [ 718.455635][ T7857] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 140, changing to 11 [ 718.455685][ T7857] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 718.455711][ T7857] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 718.459603][ T7857] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 718.459631][ T7857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.459650][ T7857] usb 2-1: Product: syz [ 718.459664][ T7857] usb 2-1: Manufacturer: syz [ 718.459677][ T7857] usb 2-1: SerialNumber: syz [ 719.663124][ T7857] cdc_ncm 2-1:1.0: bind() failure [ 719.744384][ T7857] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 719.745480][ T7857] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 719.790833][ T7857] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 719.836466][ T7857] usb 2-1: USB disconnect, device number 50 [ 720.569120][T10565] tmpfs: Unknown parameter '' [ 720.853260][ T1427] team0 (unregistering): Port device team_slave_1 removed [ 720.897005][ T1427] team0 (unregistering): Port device team_slave_0 removed [ 721.323253][ T5268] 8021q: adding VLAN 0 to HW filter on device eth3 [ 721.485793][ T7865] usb 4-1: USB disconnect, device number 39 [ 723.190443][T10596] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 723.739636][T10261] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 723.824864][T10261] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 723.826550][T10261] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 724.037175][T10261] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 724.084204][T10605] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5614] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[10605] [ 724.084848][T10605] fuse: fd is not a fuse device [ 724.099840][T10605] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1370'. [ 724.144845][T10261] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 724.315781][T10261] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 724.316836][T10261] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 724.391276][ T7857] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 724.469970][T10261] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 724.571344][ T7857] usb 2-1: Using ep0 maxpacket: 32 [ 724.574229][ T7857] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 724.574264][ T7857] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 724.574286][ T7857] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 724.574305][ T7857] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 724.574326][ T7857] usb 2-1: config 1 has no interface number 0 [ 724.574378][ T7857] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 724.574413][ T7857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.717331][ T7857] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 725.538900][ T7857] snd_usb_pod 2-1:1.1: set_interface failed [ 725.539295][ T7857] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 725.539535][ T7857] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 725.620781][ T7857] usb 2-1: USB disconnect, device number 51 [ 726.948186][ T5268] 8021q: adding VLAN 0 to HW filter on device eth4 [ 727.451397][T10643] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1375'. [ 727.451447][T10643] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 727.784549][ T1427] IPVS: stop unused estimator thread 0... [ 728.567271][T10261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.168694][T10261] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.237669][ T3132] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.240973][ T3132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.428499][ T3132] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.428585][ T3132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.045044][ T1077] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 732.246966][T10666] FAULT_INJECTION: forcing a failure. [ 732.246966][T10666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.247006][T10666] CPU: 1 UID: 0 PID: 10666 Comm: syz.1.1380 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 732.247038][T10666] Tainted: [L]=SOFTLOCKUP [ 732.247045][T10666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 732.247059][T10666] Call Trace: [ 732.247067][T10666] [ 732.247077][T10666] dump_stack_lvl+0xe8/0x150 [ 732.247113][T10666] should_fail_ex+0x467/0x600 [ 732.247153][T10666] strncpy_from_user+0x36/0x2c0 [ 732.247186][T10666] path_removexattrat+0x130/0x760 [ 732.247227][T10666] ? __pfx_path_removexattrat+0x10/0x10 [ 732.247255][T10666] ? __pfx___seccomp_filter+0x10/0x10 [ 732.247377][T10666] ? __pfx_ksys_write+0x10/0x10 [ 732.247409][T10666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.247434][T10666] __x64_sys_lremovexattr+0x65/0x80 [ 732.247460][T10666] do_syscall_64+0x174/0x580 [ 732.247493][T10666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.247516][T10666] ? clear_bhb_loop+0x40/0x90 [ 732.247542][T10666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.247564][T10666] RIP: 0033:0x7f337abece59 [ 732.247584][T10666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.247603][T10666] RSP: 002b:00007f3378e3e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6 [ 732.247627][T10666] RAX: ffffffffffffffda RBX: 00007f337ae65fa0 RCX: 00007f337abece59 [ 732.247643][T10666] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 732.247656][T10666] RBP: 00007f3378e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 732.247669][T10666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.247682][T10666] R13: 00007f337ae66038 R14: 00007f337ae65fa0 R15: 00007ffd82354c48 [ 732.247719][T10666] [ 732.814076][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1381'. [ 735.446770][ T5750] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 735.631077][ T5750] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.633146][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 735.633179][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 735.633201][ T5750] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 735.633249][ T5750] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 735.633273][ T5750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.735113][ T5750] usb 2-1: config 0 descriptor?? [ 736.026852][T10261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.131277][ T7857] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 736.295324][ T7857] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 736.295364][ T7857] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 736.298437][ T7857] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 736.298468][ T7857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.298490][ T7857] usb 4-1: Product: syz [ 736.298505][ T7857] usb 4-1: Manufacturer: syz [ 736.298520][ T7857] usb 4-1: SerialNumber: syz [ 736.337465][ T7857] usb 4-1: config 0 descriptor?? [ 736.339430][T10698] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 736.339612][T10698] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 736.544023][T10698] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 736.544163][T10698] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 736.917940][T10261] veth0_vlan: entered promiscuous mode [ 736.948399][ T7857] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 736.976239][T10261] veth1_vlan: entered promiscuous mode [ 737.373887][ T7857] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 737.377928][T10698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.378607][T10698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.380738][T10261] veth0_macvtap: entered promiscuous mode [ 737.461932][T10261] veth1_macvtap: entered promiscuous mode [ 737.541412][ T7857] usb 4-1: USB disconnect, device number 40 [ 737.612663][T10622] usb 2-1: USB disconnect, device number 52 [ 737.639677][T10261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.690241][T10261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.961869][ T5857] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 737.982585][ T1077] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.983810][ T1077] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.984262][ T1077] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.984677][ T1077] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.657255][T10750] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1396'. [ 740.657299][T10750] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 740.988395][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 741.045361][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 741.069770][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 741.136039][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 741.161491][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 741.546358][T10755] binder: 10754:10755 ioctl 40049366 200000000080 returned -22 [ 742.909637][ T5634] Bluetooth: hci5: command tx timeout [ 743.481323][ T5634] Bluetooth: hci4: command tx timeout [ 746.284281][ T5634] Bluetooth: hci4: command tx timeout [ 747.984369][T10812] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1409'. [ 748.380278][ T5634] Bluetooth: hci4: command tx timeout [ 748.551363][ T7830] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 748.795661][ T7830] usb 2-1: Using ep0 maxpacket: 16 [ 749.577099][ T7830] usb 2-1: unable to get BOS descriptor or descriptor too short [ 749.585974][ T7830] usb 2-1: config 106 has an invalid interface number: 22 but max is 0 [ 749.586006][ T7830] usb 2-1: config 106 has no interface number 0 [ 749.586062][ T7830] usb 2-1: config 106 interface 22 altsetting 2 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 749.586092][ T7830] usb 2-1: config 106 interface 22 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 749.586117][ T7830] usb 2-1: config 106 interface 22 has no altsetting 0 [ 749.600112][ T7830] usb 2-1: New USB device found, idVendor=05ac, idProduct=9218, bcdDevice=eb.64 [ 749.600147][ T7830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.600167][ T7830] usb 2-1: Product: syz [ 749.600183][ T7830] usb 2-1: Manufacturer: syz [ 749.600197][ T7830] usb 2-1: SerialNumber: syz [ 749.672652][ T3294] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.031899][T10820] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1411'. [ 750.057015][T10830] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5614] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[10830] [ 750.057675][T10830] fuse: fd is not a fuse device [ 750.059071][T10830] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1413'. [ 750.248767][ T7830] appledisplay 2-1:106.22: Could not find int-in endpoint [ 750.262538][ T7830] usbhid 2-1:106.22: couldn't find an input interrupt endpoint [ 750.358320][ T7830] usb 2-1: USB disconnect, device number 53 [ 750.451354][ T5634] Bluetooth: hci4: command tx timeout [ 751.416411][T10749] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.416788][T10749] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.417007][T10749] bridge_slave_0: entered allmulticast mode [ 751.420094][T10749] bridge_slave_0: entered promiscuous mode [ 751.434034][T10749] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.434259][T10749] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.434486][T10749] bridge_slave_1: entered allmulticast mode [ 751.437269][T10749] bridge_slave_1: entered promiscuous mode [ 752.239937][ T3294] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.623716][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.623786][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.672698][ T37] audit: type=1804 audit(1781525178.482:251): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1419" name="/newroot/290/file0" dev="tmpfs" ino=1542 res=1 errno=0 [ 752.732104][T10749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.770120][T10862] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1417'. [ 752.770817][T10862] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 752.878030][T10749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.176049][T10749] team0: Port device team_slave_0 added [ 753.339036][ T5634] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 753.719056][ T3294] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.803434][T10749] team0: Port device team_slave_1 added [ 754.051312][ T7857] IPVS: starting estimator thread 0... [ 754.141541][T10887] IPVS: using max 13 ests per chain, 31200 per kthread [ 754.728281][ T3294] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.013998][T10749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.014018][T10749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.014045][T10749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.195794][T10895] virtio-fs: tag not found [ 756.324258][T10749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.324278][T10749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.324307][T10749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.696426][T10749] hsr_slave_0: entered promiscuous mode [ 756.715830][T10749] hsr_slave_1: entered promiscuous mode [ 758.576237][T10914] binder: 10912:10914 ioctl 40049366 200000000080 returned -22 [ 761.198434][ T5634] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 761.865809][ T5750] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 762.527452][ T5750] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 762.527505][ T5750] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 762.530376][ T5750] usb 4-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 762.530406][ T5750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.530424][ T5750] usb 4-1: Product: syz [ 762.530437][ T5750] usb 4-1: Manufacturer: syz [ 762.530451][ T5750] usb 4-1: SerialNumber: syz [ 763.883231][ T3294] bridge_slave_1: left allmulticast mode [ 763.883269][ T3294] bridge_slave_1: left promiscuous mode [ 763.883560][ T3294] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.983859][ T5750] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 764.065733][ T5750] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 764.128711][ T1427] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 764.295755][ T5750] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 764.336526][ T5750] usb 4-1: USB disconnect, device number 41 [ 764.360239][ T3294] bridge_slave_0: left allmulticast mode [ 764.360289][ T3294] bridge_slave_0: left promiscuous mode [ 764.360561][ T3294] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.598582][T10962] virtio-fs: tag not found [ 766.378244][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 766.466128][T10977] FAULT_INJECTION: forcing a failure. [ 766.466128][T10977] name failslab, interval 1, probability 0, space 0, times 0 [ 766.466170][T10977] CPU: 0 UID: 0 PID: 10977 Comm: syz.0.1444 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 766.466202][T10977] Tainted: [L]=SOFTLOCKUP [ 766.466209][T10977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 766.466223][T10977] Call Trace: [ 766.466231][T10977] [ 766.466241][T10977] dump_stack_lvl+0xe8/0x150 [ 766.466282][T10977] should_fail_ex+0x467/0x600 [ 766.466319][T10977] should_failslab+0xa8/0x100 [ 766.466354][T10977] __kmalloc_cache_noprof+0x84/0x690 [ 766.466381][T10977] ? sctp_association_new+0x89/0x25d0 [ 766.466519][T10977] ? sctp_has_association+0x2f/0x1f0 [ 766.466596][T10977] sctp_association_new+0x89/0x25d0 [ 766.466643][T10977] sctp_connect_new_asoc+0x2e4/0x6b0 [ 766.466721][T10977] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 766.466757][T10977] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 766.466786][T10977] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 766.466819][T10977] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 766.466854][T10977] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 766.466881][T10977] ? security_sctp_bind_connect+0x7e/0x2c0 [ 766.466922][T10977] sctp_sendmsg+0x1506/0x2a50 [ 766.466966][T10977] ? smack_socket_sendmsg+0x4b4/0x590 [ 766.466988][T10977] ? __lock_acquire+0x683/0x2cc0 [ 766.467021][T10977] ? __pfx_sctp_sendmsg+0x10/0x10 [ 766.467058][T10977] ? __lock_acquire+0x683/0x2cc0 [ 766.467092][T10977] ? __lock_acquire+0x683/0x2cc0 [ 766.467132][T10977] ? sock_rps_record_flow+0x19/0x350 [ 766.467202][T10977] ? inet_sendmsg+0x298/0x320 [ 766.467232][T10977] ? __pfx_inet_sendmsg+0x10/0x10 [ 766.467273][T10977] ____sys_sendmsg+0x830/0xa10 [ 766.467317][T10977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 766.467360][T10977] ? import_iovec+0x73/0xa0 [ 766.467399][T10977] ___sys_sendmsg+0x2a5/0x360 [ 766.467428][T10977] ? __lock_acquire+0x683/0x2cc0 [ 766.467459][T10977] ? __pfx____sys_sendmsg+0x10/0x10 [ 766.467492][T10977] ? kstrtouint+0x6e/0xe0 [ 766.467547][T10977] ? __fget_files+0x2a/0x420 [ 766.467568][T10977] ? __fget_files+0x3a8/0x420 [ 766.467600][T10977] __sys_sendmmsg+0x282/0x4e0 [ 766.467638][T10977] ? __pfx___sys_sendmmsg+0x10/0x10 [ 766.467680][T10977] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 766.467724][T10977] ? ksys_write+0x248/0x270 [ 766.467752][T10977] ? __pfx_ksys_write+0x10/0x10 [ 766.467784][T10977] __x64_sys_sendmmsg+0xa0/0xc0 [ 766.467817][T10977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.467840][T10977] do_syscall_64+0x174/0x580 [ 766.467870][T10977] ? trace_irq_disable+0x3b/0x140 [ 766.467896][T10977] ? clear_bhb_loop+0x40/0x90 [ 766.467924][T10977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.467946][T10977] RIP: 0033:0x7fadc302ce59 [ 766.467966][T10977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.467984][T10977] RSP: 002b:00007fadc127e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 766.468008][T10977] RAX: ffffffffffffffda RBX: 00007fadc32a5fa0 RCX: 00007fadc302ce59 [ 766.468024][T10977] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000004 [ 766.468037][T10977] RBP: 00007fadc127e090 R08: 0000000000000000 R09: 0000000000000000 [ 766.468049][T10977] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 766.468063][T10977] R13: 00007fadc32a6038 R14: 00007fadc32a5fa0 R15: 00007ffcbe535028 [ 766.468098][T10977] [ 769.799324][ T3402] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 769.895445][T11003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1449'. [ 770.327797][ T3294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.402514][ T3294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.760797][ T3294] bond0 (unregistering): Released all slaves [ 770.828755][ T5268] 8021q: adding VLAN 0 to HW filter on device eth5 [ 772.261282][ T5750] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 772.411303][ T7830] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 772.413939][ T5750] usb 2-1: Using ep0 maxpacket: 16 [ 772.418225][ T5750] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.418285][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 772.418313][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 772.418337][ T5750] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 772.418360][ T5750] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 772.420052][ T5750] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 772.420083][ T5750] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 772.420104][ T5750] usb 2-1: Manufacturer: syz [ 772.532936][ T5750] usb 2-1: config 0 descriptor?? [ 772.626562][ T7830] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.626600][ T7830] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 772.626614][ T7830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.736057][ T7830] usb 4-1: config 0 descriptor?? [ 772.951372][ T5750] rc_core: IR keymap rc-hauppauge not found [ 772.951395][ T5750] Registered IR keymap rc-empty [ 772.952206][ T5750] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 772.974548][T11041] program syz.1.1459 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 772.989483][ T5750] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 773.076346][ T5750] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 773.156617][ T5750] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 773.185971][ T5750] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 773.205651][ T7830] ath6kl: Failed to read usb control message: -71 [ 773.205779][ T7830] ath6kl: Unable to read the bmi data from the device: -71 [ 773.205796][ T7830] ath6kl: Unable to recv target info: -71 [ 773.231666][ T5750] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 773.252886][ T5750] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 773.260900][ T7830] ath6kl: Failed to init ath6kl core: -71 [ 773.305397][ T5750] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 773.306230][ T7830] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 773.327539][ T5750] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 773.341099][ T7830] usb 4-1: USB disconnect, device number 42 [ 773.341342][ T5750] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 773.361408][ T5750] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 773.391700][ T5750] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 773.402552][T11057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.404938][T11057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.429408][ T5750] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 773.441289][ T5750] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 773.493415][ T5750] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 773.493445][ T5750] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 773.693735][ T3294] hsr_slave_0: left promiscuous mode [ 773.736705][ T3294] hsr_slave_1: left promiscuous mode [ 773.739059][ T3294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.739089][ T3294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.834135][ T3294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.834253][ T3294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.255520][ T3294] veth1_macvtap: left promiscuous mode [ 774.323936][ T3294] veth0_macvtap: left promiscuous mode [ 774.324254][ T3294] veth1_vlan: left promiscuous mode [ 774.324413][ T3294] veth0_vlan: left promiscuous mode [ 774.959475][T11076] kAFS: No cell specified [ 775.027490][T10622] usb 2-1: USB disconnect, device number 54 [ 775.707969][T11093] FAULT_INJECTION: forcing a failure. [ 775.707969][T11093] name failslab, interval 1, probability 0, space 0, times 0 [ 775.707996][T11093] CPU: 0 UID: 0 PID: 11093 Comm: syz.3.1468 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 775.708014][T11093] Tainted: [L]=SOFTLOCKUP [ 775.708019][T11093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 775.708026][T11093] Call Trace: [ 775.708031][T11093] [ 775.708036][T11093] dump_stack_lvl+0xe8/0x150 [ 775.708056][T11093] should_fail_ex+0x467/0x600 [ 775.708077][T11093] should_failslab+0xa8/0x100 [ 775.708094][T11093] __kvmalloc_node_noprof+0x16a/0x900 [ 775.708110][T11093] ? rhashtable_init_noprof+0x53d/0xaf0 [ 775.708132][T11093] ? rhashtable_init_noprof+0x12e/0xaf0 [ 775.708151][T11093] rhashtable_init_noprof+0x53d/0xaf0 [ 775.708170][T11093] rhltable_init_noprof+0x1e/0x60 [ 775.708188][T11093] nf_tables_newtable+0x6a0/0x1940 [ 775.708285][T11093] nfnetlink_rcv+0x1291/0x28d0 [ 775.708328][T11093] ? __local_bh_enable+0x1e1/0x2f0 [ 775.708361][T11093] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 775.708385][T11093] ? ref_tracker_free+0x668/0x820 [ 775.708417][T11093] ? skb_clone+0x246/0x3a0 [ 775.708438][T11093] ? __netlink_deliver_tap+0x811/0x860 [ 775.708460][T11093] ? netlink_deliver_tap+0x2e/0x1b0 [ 775.708475][T11093] ? netlink_deliver_tap+0x2e/0x1b0 [ 775.708494][T11093] netlink_unicast+0x7f5/0x990 [ 775.708520][T11093] netlink_sendmsg+0x813/0xb40 [ 775.708543][T11093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.708565][T11093] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 775.708577][T11093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.708595][T11093] ____sys_sendmsg+0x9a2/0xa10 [ 775.708612][T11093] ? __might_fault+0xaf/0x130 [ 775.708639][T11093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 775.708662][T11093] ? import_iovec+0x73/0xa0 [ 775.708683][T11093] ___sys_sendmsg+0x2a5/0x360 [ 775.708700][T11093] ? __lock_acquire+0x683/0x2cc0 [ 775.708719][T11093] ? __pfx____sys_sendmsg+0x10/0x10 [ 775.708758][T11093] ? __fget_files+0x2a/0x420 [ 775.708770][T11093] ? __fget_files+0x3a8/0x420 [ 775.708787][T11093] __x64_sys_sendmsg+0x1c3/0x2a0 [ 775.708806][T11093] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 775.708831][T11093] ? __pfx_ksys_write+0x10/0x10 [ 775.708850][T11093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.708864][T11093] do_syscall_64+0x174/0x580 [ 775.708882][T11093] ? trace_irq_disable+0x3b/0x140 [ 775.708896][T11093] ? clear_bhb_loop+0x40/0x90 [ 775.708911][T11093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.708923][T11093] RIP: 0033:0x7ff511b1ce59 [ 775.708935][T11093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.708947][T11093] RSP: 002b:00007ff50fd6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.708961][T11093] RAX: ffffffffffffffda RBX: 00007ff511d95fa0 RCX: 00007ff511b1ce59 [ 775.708970][T11093] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 775.708978][T11093] RBP: 00007ff50fd6e090 R08: 0000000000000000 R09: 0000000000000000 [ 775.708985][T11093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.708993][T11093] R13: 00007ff511d96038 R14: 00007ff511d95fa0 R15: 00007ffe2fbecb28 [ 775.709012][T11093] [ 775.709159][T11093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1468'. [ 776.641922][ T3294] team0 (unregistering): Port device team_slave_1 removed [ 776.702036][ T3294] team0 (unregistering): Port device team_slave_0 removed [ 777.047596][T11101] syzkaller0: entered promiscuous mode [ 777.047630][T11101] syzkaller0: entered allmulticast mode [ 778.212423][T11126] 9p: Bad value for 'wfdno' [ 779.771050][ T7858] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 780.203090][ T7858] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 780.203121][ T7858] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 780.205388][ T7858] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 780.205418][ T7858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 780.205440][ T7858] usb 4-1: SerialNumber: syz [ 780.620744][ T7858] usb 4-1: 0:2 : does not exist [ 780.763405][ T7858] usb 4-1: USB disconnect, device number 43 [ 780.929966][T11158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1479'. [ 781.005244][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 785.522825][T10749] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 785.582654][T10749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 785.587912][T10749] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 785.719490][T10749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 785.728970][T10749] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 785.919325][T10749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 785.940413][T10749] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 786.779550][T10749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 787.156879][T10749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.170862][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1494'. [ 787.217602][T10749] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.323103][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.323354][ T5862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.349091][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.365306][ T5862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.084575][T11298] bridge1: entered promiscuous mode [ 792.119364][T11298] bridge1: entered allmulticast mode [ 792.207689][T10749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.571318][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 792.723806][ T9] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 792.723840][ T9] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 792.723860][ T9] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 792.723880][ T9] usb 4-1: config 220 has no interface number 2 [ 792.723960][ T9] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 792.723991][ T9] usb 4-1: config 220 interface 0 has no altsetting 0 [ 792.724010][ T9] usb 4-1: config 220 interface 76 has no altsetting 0 [ 792.724030][ T9] usb 4-1: config 220 interface 1 has no altsetting 0 [ 792.728818][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 792.728852][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.728872][ T9] usb 4-1: Product: syz [ 792.728885][ T9] usb 4-1: Manufacturer: syz [ 792.728898][ T9] usb 4-1: SerialNumber: syz [ 793.181490][T11333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1508'. [ 794.255302][ T9] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 794.255380][ T9] uvcvideo 4-1:220.0: No valid video chain found. [ 794.255502][ T9] usb 4-1: selecting invalid altsetting 0 [ 794.324711][ T9] usb 4-1: selecting invalid altsetting 0 [ 794.324749][ T9] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 794.345876][ T9] usb 4-1: USB disconnect, device number 44 [ 794.358134][T10749] veth0_vlan: entered promiscuous mode [ 794.391056][T10749] veth1_vlan: entered promiscuous mode [ 794.690216][T10749] veth0_macvtap: entered promiscuous mode [ 794.701662][T10749] veth1_macvtap: entered promiscuous mode [ 794.847466][T10749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 794.915895][T10749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.981073][ T1077] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.984159][ T1077] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.984205][ T1077] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.984243][ T1077] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.729985][ T6097] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 796.002334][ T6097] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 796.002366][ T6097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.002386][ T6097] usb 2-1: Product: syz [ 796.002401][ T6097] usb 2-1: Manufacturer: syz [ 796.002415][ T6097] usb 2-1: SerialNumber: syz [ 796.159232][ T6097] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 796.235270][ T5750] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 796.386874][ T1427] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 796.733398][ T1077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.733864][ T1077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.834055][ T7858] usb 2-1: USB disconnect, device number 55 [ 797.152821][ T5860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.152845][ T5860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.331615][ T5750] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 797.426537][ T5750] ath9k_htc: Failed to initialize the device [ 797.427846][ T7858] usb 2-1: ath9k_htc: USB layer deinitialized [ 797.947718][T11400] IPv6: sit1: Disabled Multicast RS [ 799.121288][ T7858] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 799.251892][ T7858] usb 6-1: device descriptor read/64, error -71 [ 799.491293][ T7858] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 799.621302][ T7858] usb 6-1: device descriptor read/64, error -71 [ 799.636900][T11426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1526'. [ 799.732034][ T7858] usb usb6-port1: attempt power cycle [ 799.759773][T11426] ipvlan2: entered allmulticast mode [ 799.759798][T11426] veth1_to_hsr: entered allmulticast mode [ 800.153005][ T7858] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 800.177286][ T7858] usb 6-1: device descriptor read/8, error -71 [ 800.353292][T11428] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 800.441848][ T7858] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 800.462026][ T7858] usb 6-1: device descriptor read/8, error -71 [ 800.571656][ T7858] usb usb6-port1: unable to enumerate USB device [ 800.788046][ T5860] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 801.028666][T11443] IPv6: sit1: Disabled Multicast RS [ 803.351386][ T5750] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 803.473176][T11473] IPVS: Error connecting to the multicast addr [ 803.534102][ T5750] usb 4-1: Using ep0 maxpacket: 16 [ 803.567045][ T5750] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 803.567080][ T5750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.567101][ T5750] usb 4-1: Product: 㴔ৎ깯ꦍ鬞팟捗툥硚Ł瓾뼵浬晻狓⨶⫲ㅬ擆ṫ袣侦ᎂ胣슈愊躵緱梥୒껽쩲ᆰ瘙庽갅룳✗皢肤篈꘺ኍ悐缳ྦ⑮랢쓜秔⇈℥魯氲鯩ԕᚈ쟗볬磍誃 [ 803.567126][ T5750] usb 4-1: Manufacturer: ෴蝡﹯뺢磱燴䐻钏帕췗俴骃曦阙늳ꇽ铹ุ㵛ꚲ艠䵨퉎ꐴ뉙ꕀ圖奠볈慊딵㒲彘厹뭐ጙ蹴⛖﵁㔣約ḓ긲ﾟ聠ᗭ藩匲⬬∊쳗ौ㒗녶鼃釯덌ᾇ䒱㨛숴훯⇁眍ꌀ퍱䈎馚흒鸸ب㝮촔㏫趚竖⢢띄3Ꚙ뺄芫벃邻훜紵켼審紿騳 [ 803.567159][ T5750] usb 4-1: SerialNumber: syz [ 805.358485][T11485] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1543'. [ 805.358509][T11485] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1543'. [ 806.384842][ T5750] usb 4-1: found format II with max.bitrate = 6230, frame size=2 [ 806.387349][ T5750] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 806.387878][ T5750] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 806.680720][T11499] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 806.730594][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1548'. [ 806.730719][T11501] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1548'. [ 806.730990][T11501] netlink: 'syz.5.1548': attribute type 15 has an invalid length. [ 806.731061][T11501] netlink: 'syz.5.1548': attribute type 18 has an invalid length. [ 807.629166][ T5750] usb 4-1: USB disconnect, device number 45 [ 807.865112][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 808.359994][T11521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1556'. [ 808.361019][T11521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1556'. [ 809.101443][ T5750] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 809.251401][ T5750] usb 2-1: Using ep0 maxpacket: 16 [ 809.295213][ T5750] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 809.295251][ T5750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.295273][ T5750] usb 2-1: Product: 㴔ৎ깯ꦍ鬞팟捗툥硚Ł瓾뼵浬晻狓⨶⫲ㅬ擆ṫ袣侦ᎂ胣슈愊躵緱梥୒껽쩲ᆰ瘙庽갅룳✗皢肤篈꘺ኍ悐缳ྦ⑮랢쓜秔⇈℥魯氲鯩ԕᚈ쟗볬磍誃 [ 809.295304][ T5750] usb 2-1: Manufacturer: ෴蝡﹯뺢磱燴䐻钏帕췗俴骃曦阙늳ꇽ铹ุ㵛ꚲ艠䵨퉎ꐴ뉙ꕀ圖奠볈慊딵㒲彘厹뭐ጙ蹴⛖﵁㔣約ḓ긲ﾟ聠ᗭ藩匲⬬∊쳗ौ㒗녶鼃釯덌ᾇ䒱㨛숴훯⇁眍ꌀ퍱䈎馚흒鸸ب㝮촔㏫趚竖⢢띄3Ꚙ뺄芫벃邻훜紵켼審紿騳 [ 809.295340][ T5750] usb 2-1: SerialNumber: syz [ 812.408313][ T5750] usb 2-1: found format II with max.bitrate = 6230, frame size=2 [ 812.408333][ T5750] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 812.416064][ T5750] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 812.577182][ T5750] usb 2-1: USB disconnect, device number 56 [ 813.026246][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 813.351292][ T5750] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 813.584406][ T5750] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 813.584437][ T5750] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.584457][ T5750] usb 6-1: config 0 has no interface number 0 [ 813.584504][ T5750] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 813.584520][ T5750] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 813.584534][ T5750] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 813.587121][ T5750] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 813.587151][ T5750] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.587171][ T5750] usb 6-1: Product: syz [ 813.587186][ T5750] usb 6-1: Manufacturer: syz [ 813.589137][ T5750] usb 6-1: SerialNumber: syz [ 813.671007][ T5750] usb 6-1: config 0 descriptor?? [ 814.622142][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.622223][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 817.135472][ T7859] usb 6-1: USB disconnect, device number 6 [ 818.014137][T11599] FAULT_INJECTION: forcing a failure. [ 818.014137][T11599] name failslab, interval 1, probability 0, space 0, times 0 [ 818.014165][T11599] CPU: 0 UID: 0 PID: 11599 Comm: syz.3.1580 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 818.014183][T11599] Tainted: [L]=SOFTLOCKUP [ 818.014188][T11599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 818.014196][T11599] Call Trace: [ 818.014201][T11599] [ 818.014206][T11599] dump_stack_lvl+0xe8/0x150 [ 818.014226][T11599] should_fail_ex+0x467/0x600 [ 818.014247][T11599] should_failslab+0xa8/0x100 [ 818.014265][T11599] kmem_cache_alloc_noprof+0x87/0x680 [ 818.014278][T11599] ? __lock_acquire+0x683/0x2cc0 [ 818.014294][T11599] ? alloc_empty_file+0x5b/0x1d0 [ 818.014316][T11599] alloc_empty_file+0x5b/0x1d0 [ 818.014335][T11599] path_openat+0x11b/0x38d0 [ 818.014411][T11599] ? unwind_next_frame+0x8f/0x2550 [ 818.014439][T11599] ? is_bpf_text_address+0x26/0x2b0 [ 818.014459][T11599] ? __pfx_path_openat+0x10/0x10 [ 818.014472][T11599] ? is_bpf_text_address+0x26/0x2b0 [ 818.014497][T11599] ? kernel_text_address+0xa5/0xe0 [ 818.014516][T11599] ? __kernel_text_address+0xd/0x30 [ 818.014534][T11599] ? unwind_get_return_address+0x4d/0x90 [ 818.014549][T11599] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 818.014564][T11599] ? arch_stack_walk+0xfb/0x150 [ 818.014588][T11599] do_file_open+0x23e/0x4a0 [ 818.014605][T11599] ? __pfx_do_file_open+0x10/0x10 [ 818.014635][T11599] ? do_open_execat+0xad/0x590 [ 818.014650][T11599] do_open_execat+0x12b/0x590 [ 818.014664][T11599] ? __pfx_do_open_execat+0x10/0x10 [ 818.014685][T11599] alloc_bprm+0x24/0x5a0 [ 818.014700][T11599] do_execveat_common+0x172/0x670 [ 818.014716][T11599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.014734][T11599] __x64_sys_execve+0x97/0xc0 [ 818.014749][T11599] do_syscall_64+0x174/0x580 [ 818.014768][T11599] ? trace_irq_disable+0x3b/0x140 [ 818.014782][T11599] ? clear_bhb_loop+0x40/0x90 [ 818.014797][T11599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.014809][T11599] RIP: 0033:0x7ff511b1ce59 [ 818.014822][T11599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.014834][T11599] RSP: 002b:00007ff50fd6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 818.014848][T11599] RAX: ffffffffffffffda RBX: 00007ff511d95fa0 RCX: 00007ff511b1ce59 [ 818.014858][T11599] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 818.014865][T11599] RBP: 00007ff50fd6e090 R08: 0000000000000000 R09: 0000000000000000 [ 818.014873][T11599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.014880][T11599] R13: 00007ff511d96038 R14: 00007ff511d95fa0 R15: 00007ffe2fbecb28 [ 818.014899][T11599] [ 818.861377][ T5750] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 819.045111][T11604] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1581'. [ 819.045131][T11604] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 819.147127][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 819.147152][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 819.147166][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 819.147190][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 819.149226][ T5750] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 819.149245][ T5750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.149257][ T5750] usb 2-1: Product: syz [ 819.149266][ T5750] usb 2-1: Manufacturer: syz [ 819.149275][ T5750] usb 2-1: SerialNumber: syz [ 819.155127][ T5750] usb 2-1: config 0 descriptor?? [ 819.479440][ T5750] adutux 2-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 819.509046][ T5750] usb 2-1: USB disconnect, device number 57 [ 819.941258][ T7857] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 820.091846][ T7857] usb 4-1: Using ep0 maxpacket: 16 [ 820.098900][ T7857] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 820.098931][ T7857] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 820.107327][ T7857] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 820.107349][ T7857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.107361][ T7857] usb 4-1: Product: syz [ 820.107370][ T7857] usb 4-1: Manufacturer: syz [ 820.107379][ T7857] usb 4-1: SerialNumber: syz [ 820.210879][ T7857] usb 4-1: 0:2 : does not exist [ 822.810686][ T7857] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 822.998422][ T7857] usb 4-1: USB disconnect, device number 46 [ 823.043595][T11634] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1593'. [ 824.347958][T11639] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1594'. [ 824.347981][T11639] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 824.588243][T11642] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 824.659448][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 827.372487][ T67] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 827.666444][T11677] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1606'. [ 827.666484][T11677] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1606'. [ 827.694111][T11677] erspan0: entered promiscuous mode [ 827.696553][T11677] gretap0: entered promiscuous mode [ 827.881316][T10622] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 828.034922][T10622] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 828.034954][T10622] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 828.034973][T10622] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 828.034993][T10622] usb 4-1: config 220 has no interface number 2 [ 828.035036][T10622] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 828.035052][T10622] usb 4-1: config 220 interface 0 has no altsetting 0 [ 828.035063][T10622] usb 4-1: config 220 interface 76 has no altsetting 0 [ 828.035074][T10622] usb 4-1: config 220 interface 1 has no altsetting 0 [ 828.038462][T10622] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 828.038495][T10622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.038516][T10622] usb 4-1: Product: syz [ 828.038530][T10622] usb 4-1: Manufacturer: syz [ 828.038544][T10622] usb 4-1: SerialNumber: syz [ 828.380955][T10622] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 828.380995][T10622] uvcvideo 4-1:220.0: No valid video chain found. [ 828.381067][T10622] usb 4-1: selecting invalid altsetting 0 [ 828.469899][T10622] usb 4-1: selecting invalid altsetting 0 [ 828.469944][T10622] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 828.497316][T10622] usb 4-1: USB disconnect, device number 47 [ 828.500268][T11683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1608'. [ 828.500296][T11683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1608'. [ 828.581481][T11683] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1608'. [ 828.985591][T11692] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5614] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[11692] [ 828.986221][T11692] fuse: fd is not a fuse device [ 828.987533][T11692] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1612'. [ 829.345326][T11698] qnx4: no qnx4 filesystem (no root dir). [ 829.397011][T11698] qnx4: no qnx4 filesystem (no root dir). [ 831.713508][ T55] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 832.134438][ T36] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 832.316421][ T36] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 832.316455][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.316476][ T36] usb 4-1: Product: syz [ 832.316489][ T36] usb 4-1: Manufacturer: syz [ 832.316504][ T36] usb 4-1: SerialNumber: syz [ 832.364379][ T36] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 832.388161][ T1008] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 833.861731][ T1008] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 833.903268][ T7857] usb 4-1: USB disconnect, device number 48 [ 833.951477][ T1008] ath9k_htc: Failed to initialize the device [ 833.984258][ T7857] usb 4-1: ath9k_htc: USB layer deinitialized [ 834.026693][ T36] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 834.184860][ T36] usb 6-1: unable to get BOS descriptor or descriptor too short [ 834.184952][ T36] usb 6-1: too many configurations: 151, using maximum allowed: 8 [ 834.186011][ T36] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 834.186047][ T36] usb 6-1: can't read configurations, error -71 [ 834.557375][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 834.665545][ T9] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 834.858855][T11742] fido_id[11742]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 836.898501][T11758] snd_dummy snd_dummy.0: control 4:96:1:syz1:-14 is already present [ 837.118124][T11763] ip6erspan0: entered allmulticast mode [ 837.191258][ T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 837.341847][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 837.353135][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 837.353168][ T9] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 837.353193][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 837.389881][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 837.389914][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.389935][ T9] usb 4-1: Product: syz [ 837.389949][ T9] usb 4-1: Manufacturer: syz [ 837.389964][ T9] usb 4-1: SerialNumber: syz [ 837.427013][T11765] trusted_key: encrypted_key: insufficient parameters specified [ 837.454857][ T9] usb 4-1: config 0 descriptor?? [ 837.602070][T11768] kAFS: No cell specified [ 838.578817][ T9] gs_usb 4-1:0.0: Couldn't get device config: (err=-121) [ 838.578850][ T9] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 839.491576][T11788] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1641'. [ 839.497802][T11788] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1641'. [ 839.955904][ T9] usb 4-1: USB disconnect, device number 49 [ 841.982841][ T9] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 843.255956][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 843.318186][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 843.318222][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.318244][ T9] usb 2-1: Product: 㴔ৎ깯ꦍ鬞팟捗툥硚Ł瓾뼵浬晻狓⨶⫲ㅬ擆ṫ袣侦ᎂ胣슈愊躵緱梥୒껽쩲ᆰ瘙庽갅룳✗皢肤篈꘺ኍ悐缳ྦ⑮랢쓜秔⇈℥魯氲鯩ԕᚈ쟗볬磍誃 [ 843.318270][ T9] usb 2-1: Manufacturer: ෴蝡﹯뺢磱燴䐻钏帕췗俴骃曦阙늳ꇽ铹ุ㵛ꚲ艠䵨퉎ꐴ뉙ꕀ圖奠볈慊딵㒲彘厹뭐ጙ蹴⛖﵁㔣約ḓ긲ﾟ聠ᗭ藩匲⬬∊쳗ौ㒗녶鼃釯덌ᾇ䒱㨛숴훯⇁眍ꌀ퍱䈎馚흒鸸ب㝮촔㏫趚竖⢢띄3Ꚙ뺄芫벃邻훜紵켼審紿騳 [ 843.318303][ T9] usb 2-1: SerialNumber: syz [ 845.539978][T11830] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1652'. [ 845.554413][T11830] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1652'. [ 846.732862][ T9] usb 2-1: found format II with max.bitrate = 6230, frame size=2 [ 846.732893][ T9] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 846.734805][ T9] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 846.838658][T11845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1656'. [ 847.471500][T11847] futex_wake_op: syz.5.1656 tries to shift op by 36; fix this program [ 848.882950][ T9] usb 2-1: USB disconnect, device number 58 [ 849.058514][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 851.441331][T11873] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1666'. [ 851.446532][T11873] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1666'. [ 852.414116][T11883] netlink: 'syz.0.1671': attribute type 4 has an invalid length. [ 854.811393][T11911] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1679'. [ 855.121343][ T9] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 855.824467][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 855.825364][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 855.831365][ T9] usb 6-1: config 7 has an invalid interface number: 161 but max is 0 [ 855.831396][ T9] usb 6-1: config 7 has no interface number 0 [ 855.831430][ T9] usb 6-1: config 7 interface 161 has no altsetting 0 [ 855.888039][ T9] usb 6-1: New USB device found, idVendor=1645, idProduct=0005, bcdDevice=40.61 [ 855.888071][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.888091][ T9] usb 6-1: Product: syz [ 855.888106][ T9] usb 6-1: Manufacturer: syz [ 855.888120][ T9] usb 6-1: SerialNumber: syz [ 856.160101][T11914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.176229][T11914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.424343][ T9] kaweth 6-1:7.161: couldn't find required endpoints [ 858.440183][ T197] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 858.440466][ T9] usb 6-1: USB disconnect, device number 9 [ 858.820621][T11940] fuse: Bad value for 'fd' [ 860.881026][ T5634] Bluetooth: hci2: connection err: -111 [ 861.171687][T11950] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 861.669781][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 861.689064][ T9] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 861.783991][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1695'. [ 862.715706][ T3132] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 863.241285][ T1008] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 863.371426][ T1008] usb 6-1: device descriptor read/64, error -71 [ 863.632786][ T1008] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 863.771334][ T1008] usb 6-1: device descriptor read/64, error -71 [ 863.890431][ T1008] usb usb6-port1: attempt power cycle [ 864.125388][T11993] fuse: Bad value for 'fd' [ 864.701327][ T1008] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 864.733202][ T1008] usb 6-1: device descriptor read/8, error -71 [ 865.071297][ T1008] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 865.317160][ T1008] usb 6-1: device descriptor read/8, error -71 [ 865.503107][ T1008] usb usb6-port1: unable to enumerate USB device [ 866.303103][T12007] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1707'. [ 867.322698][ T5634] Bluetooth: hci4: command 0x0406 tx timeout [ 868.820790][ T1008] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 868.934002][T12039] fuse: Bad value for 'fd' [ 869.803994][ T1008] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 869.804029][ T1008] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 869.804048][ T1008] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 869.804067][ T1008] usb 4-1: config 220 has no interface number 2 [ 869.804120][ T1008] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 869.804136][ T1008] usb 4-1: config 220 interface 0 has no altsetting 0 [ 869.804152][ T1008] usb 4-1: config 220 interface 76 has no altsetting 0 [ 869.804170][ T1008] usb 4-1: config 220 interface 1 has no altsetting 0 [ 869.810316][ T1008] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 869.810349][ T1008] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.810369][ T1008] usb 4-1: Product: syz [ 869.810378][ T1008] usb 4-1: Manufacturer: syz [ 869.810387][ T1008] usb 4-1: SerialNumber: syz [ 870.962507][T12047] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1721'. [ 871.253360][ T1008] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 871.253401][ T1008] uvcvideo 4-1:220.0: No valid video chain found. [ 871.253473][ T1008] usb 4-1: selecting invalid altsetting 0 [ 871.318737][ T1008] usb 4-1: selecting invalid altsetting 0 [ 871.318776][ T1008] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 871.348337][ T1008] usb 4-1: USB disconnect, device number 50 [ 871.685767][T12058] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:19999 [ 874.052871][T12088] fuse: Bad value for 'fd' [ 875.351702][T12102] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1733'. [ 875.485318][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.485405][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.071202][ T1008] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 878.241425][ T1008] usb 6-1: Using ep0 maxpacket: 16 [ 878.246055][ T1008] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 878.246123][ T1008] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 878.251322][ T1008] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 878.251352][ T1008] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.251373][ T1008] usb 6-1: Product: syz [ 878.251385][ T1008] usb 6-1: Manufacturer: syz [ 878.251398][ T1008] usb 6-1: SerialNumber: syz [ 878.269603][ T1008] usb 6-1: config 0 descriptor?? [ 878.295125][ T1008] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 878.295160][ T1008] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 878.858033][T12136] fuse: fd is not a fuse device [ 879.807021][T12123] NILFS (loop1): device size too small [ 879.915087][ T1008] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 879.916704][ T1008] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 880.355463][T12144] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1744'. [ 880.524646][ T1008] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 880.526054][ T1008] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 881.534917][T12132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.535607][T12132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.559210][T12132] comedi comedi1: comedi_config --init_data is deprecated [ 881.615584][ T1008] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 881.616082][ T1008] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 881.618593][ T1008] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 881.668629][ T1008] usb 6-1: USB disconnect, device number 14 [ 881.737495][T12174] fuse: fd is not a fuse device [ 885.251731][T12193] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1758'. [ 885.551713][T12198] tmpfs: Bad value for 'mpol' [ 885.559025][ T5624] Bluetooth: hci3: unexpected event for opcode 0x0441 [ 888.371281][ T5750] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 888.571287][ T5750] usb 6-1: device descriptor read/64, error -71 [ 889.111201][ T5750] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 889.262446][ T5750] usb 6-1: device descriptor read/64, error -71 [ 889.467288][ T5750] usb usb6-port1: attempt power cycle [ 890.028845][ T5750] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 890.052024][ T5750] usb 6-1: device descriptor read/8, error -71 [ 890.919982][ T5750] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 891.214174][ T5750] usb 6-1: device descriptor read/8, error -71 [ 891.347326][ T5750] usb usb6-port1: unable to enumerate USB device [ 891.611904][ T3402] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 892.708763][T12218] fuse: fd is not a fuse device [ 893.515903][T12220] kAFS: No cell specified [ 893.690326][ T3402] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 894.021377][ T7857] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 894.225489][ T7857] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 894.225528][ T7857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 894.225555][ T7857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 894.225580][ T7857] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 894.225625][ T7857] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 894.225650][ T7857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.337729][ T7857] usb 4-1: config 0 descriptor?? [ 895.377661][ T7857] usbhid 4-1:0.0: can't add hid device: -71 [ 895.377799][ T7857] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 895.446460][ T7857] usb 4-1: USB disconnect, device number 51 [ 896.799991][T12234] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1772'. [ 896.841196][ T7857] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 897.077083][ T7857] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 897.077123][ T7857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.077145][ T7857] usb 2-1: Product: syz [ 897.077161][ T7857] usb 2-1: Manufacturer: syz [ 897.077176][ T7857] usb 2-1: SerialNumber: syz [ 897.143111][ T7857] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 897.431205][ T7859] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 898.664135][ T7859] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 900.591941][ T7859] ath9k_htc: Failed to initialize the device [ 901.034379][ T7859] usb 2-1: ath9k_htc: USB layer deinitialized [ 901.461818][ T9] usb 2-1: USB disconnect, device number 59 [ 903.284479][T12248] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1776'. [ 903.284520][T12248] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1776'. [ 910.035081][T12273] fuse: Bad value for 'rootmode' [ 912.704051][T12281] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 912.748300][T12280] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1784'. [ 914.357437][T12284] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1785'. [ 915.296555][ T9] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 915.481616][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 915.504927][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 915.504963][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.504982][ T9] usb 2-1: Product: 㴔ৎ깯ꦍ鬞팟捗툥硚Ł瓾뼵浬晻狓⨶⫲ㅬ擆ṫ袣侦ᎂ胣슈愊躵緱梥୒껽쩲ᆰ瘙庽갅룳✗皢肤篈꘺ኍ悐缳ྦ⑮랢쓜秔⇈℥魯氲鯩ԕᚈ쟗볬磍誃 [ 915.505009][ T9] usb 2-1: Manufacturer: ෴蝡﹯뺢磱燴䐻钏帕췗俴骃曦阙늳ꇽ铹ุ㵛ꚲ艠䵨퉎ꐴ뉙ꕀ圖奠볈慊딵㒲彘厹뭐ጙ蹴⛖﵁㔣約ḓ긲ﾟ聠ᗭ藩匲⬬∊쳗ौ㒗녶鼃釯덌ᾇ䒱㨛숴훯⇁眍ꌀ퍱䈎馚흒鸸ب㝮촔㏫趚竖⢢띄3Ꚙ뺄芫벃邻훜紵켼審紿騳 [ 915.505043][ T9] usb 2-1: SerialNumber: syz [ 920.430001][ T9] usb 2-1: found format II with max.bitrate = 6230, frame size=2 [ 920.430032][ T9] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 920.458260][ T9] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 921.148884][ T9] usb 2-1: USB disconnect, device number 60 [ 924.081272][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 925.337365][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 925.616925][ T1077] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 931.401420][ T1008] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 931.811203][ T1008] usb 4-1: Using ep0 maxpacket: 16 [ 932.194833][ T1008] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 932.194869][ T1008] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.194891][ T1008] usb 4-1: Product: 㴔ৎ깯ꦍ鬞팟捗툥硚Ł瓾뼵浬晻狓⨶⫲ㅬ擆ṫ袣侦ᎂ胣슈愊躵緱梥୒껽쩲ᆰ瘙庽갅룳✗皢肤篈꘺ኍ悐缳ྦ⑮랢쓜秔⇈℥魯氲鯩ԕᚈ쟗볬磍誃 [ 932.194919][ T1008] usb 4-1: Manufacturer: ෴蝡﹯뺢磱燴䐻钏帕췗俴骃曦阙늳ꇽ铹ุ㵛ꚲ艠䵨퉎ꐴ뉙ꕀ圖奠볈慊딵㒲彘厹뭐ጙ蹴⛖﵁㔣約ḓ긲ﾟ聠ᗭ藩匲⬬∊쳗ौ㒗녶鼃釯덌ᾇ䒱㨛숴훯⇁眍ꌀ퍱䈎馚흒鸸ب㝮촔㏫趚竖⢢띄3Ꚙ뺄芫벃邻훜紵켼審紿騳 [ 932.194952][ T1008] usb 4-1: SerialNumber: syz [ 934.721367][ T6097] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 935.029095][ T1008] usb 4-1: found format II with max.bitrate = 6230, frame size=2 [ 935.029126][ T1008] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 935.048063][ T1008] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 935.103384][ T6097] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 935.103418][ T6097] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 935.135457][ T6097] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 935.135490][ T6097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.135511][ T6097] usb 2-1: Product: syz [ 935.135526][ T6097] usb 2-1: Manufacturer: syz [ 935.135542][ T6097] usb 2-1: SerialNumber: syz [ 935.322435][ T6097] usb 2-1: config 0 descriptor?? [ 935.326483][ T6097] usb 2-1: can't set config #0, error -71 [ 935.355259][ T6097] usb 2-1: USB disconnect, device number 61 [ 935.604816][ T1008] usb 4-1: USB disconnect, device number 52 [ 936.948364][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.948448][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.761407][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 946.828203][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 946.888421][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 946.900662][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 946.927985][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 946.946549][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 949.241801][ T5634] Bluetooth: hci5: command tx timeout [ 951.331992][ T5634] Bluetooth: hci5: command tx timeout [ 953.401754][ T5634] Bluetooth: hci5: command tx timeout [ 955.500299][ T5634] Bluetooth: hci5: command tx timeout [ 956.277676][T12401] afs: Bad value for 'source' [ 957.303656][T12403] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5614] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[12403] [ 957.304205][T12403] fuse: fd is not a fuse device [ 957.304911][T12403] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1818'. [ 957.320520][ T3378] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 959.877452][ T3294] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 960.045392][ T7857] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 960.405760][T12407] binder: 12406:12407 ioctl c018620c 200000000100 returned -22 [ 972.077304][T12376] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.092730][T12376] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.093150][T12376] bridge_slave_0: entered allmulticast mode [ 972.098904][T12376] bridge_slave_0: entered promiscuous mode [ 972.400470][T12376] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.411355][T12376] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.411645][T12376] bridge_slave_1: entered allmulticast mode [ 972.492581][T12376] bridge_slave_1: entered promiscuous mode [ 974.730128][T12376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.757967][T12376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 980.823939][T12376] team0: Port device team_slave_0 added [ 980.826845][T12376] team0: Port device team_slave_1 added [ 983.305209][T12449] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5617] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[12449] [ 983.365213][T12376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 983.365228][T12376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 983.365255][T12376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 984.840323][T12376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 984.840343][T12376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.840373][T12376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 987.536945][T12376] hsr_slave_0: entered promiscuous mode [ 987.544961][T12376] hsr_slave_1: entered promiscuous mode [ 987.547572][T12376] debugfs: 'hsr0' already exists in 'hsr' [ 987.547599][T12376] Cannot create hsr debugfs directory [ 988.606933][ T5624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 988.669039][ T5624] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 988.683866][ T5624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 988.829755][ T5624] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 990.528946][ T5624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 990.567083][ T5858] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 992.331554][ T3402] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 992.613263][ T5634] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 992.619216][ T5634] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 992.669775][ T5634] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 992.671600][ T5634] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 992.672463][ T5634] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 993.721597][ T5624] Bluetooth: hci7: command tx timeout [ 994.841172][ T5624] Bluetooth: hci6: command tx timeout [ 995.801361][ T5624] Bluetooth: hci7: command tx timeout [ 996.970341][ T5624] Bluetooth: hci6: command tx timeout [ 997.881420][ T5624] Bluetooth: hci7: command tx timeout [ 998.412012][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.412095][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.074251][ T5634] Bluetooth: hci6: command tx timeout [ 1000.052353][ T5624] Bluetooth: hci7: command tx timeout [ 1001.916112][ T5624] Bluetooth: hci6: command tx timeout [ 1015.349889][ T5634] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1015.455756][ T5634] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1015.461500][ T5634] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1015.468621][ T5634] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1015.497550][ T5634] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1019.002812][ T5634] Bluetooth: hci8: command tx timeout [ 1019.431069][T12511] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5617] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[12511] [ 1021.081662][ T5634] Bluetooth: hci8: command tx timeout [ 1022.807846][ T3378] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1023.212438][ T5634] Bluetooth: hci8: command tx timeout [ 1025.241471][ T5634] Bluetooth: hci8: command tx timeout [ 1025.411260][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1030.870599][T12523] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5614] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[12523] [ 1030.871312][T12523] fuse: fd is not a fuse device [ 1030.894258][T12523] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1841'. [ 1033.890016][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1033.979097][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1034.000006][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1034.001560][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1034.007377][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1036.201153][ T5634] Bluetooth: hci2: command tx timeout [ 1037.455683][T12535] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5614] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[12535] [ 1037.455962][T12536] fuse: fd is not a fuse device [ 1038.291359][ T5634] Bluetooth: hci2: command tx timeout [ 1040.361249][ T5634] Bluetooth: hci2: command tx timeout [ 1042.761208][ T5634] Bluetooth: hci2: command tx timeout [ 1047.901614][ T5624] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1048.094147][ T5624] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1048.111557][ T5624] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1049.119732][ T5624] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1049.120799][ T5624] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1053.011235][ T5624] Bluetooth: hci9: command tx timeout [ 1053.573379][ T5634] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1053.655922][ T5634] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1053.659440][ T5634] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1053.660769][ T5634] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1053.670347][ T5634] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1055.160938][ T5634] Bluetooth: hci9: command tx timeout [ 1057.241307][ T5624] Bluetooth: hci9: command tx timeout [ 1057.541356][ T5624] Bluetooth: hci10: command tx timeout [ 1057.861505][ T3378] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1059.331331][ T5624] Bluetooth: hci9: command tx timeout [ 1059.450502][ T3132] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1059.651159][ T5624] Bluetooth: hci10: command tx timeout [ 1059.804965][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.805032][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.874070][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1059.935643][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1059.938148][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1059.998476][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1060.000440][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1061.721477][ T5624] Bluetooth: hci10: command tx timeout [ 1062.213441][ T5624] Bluetooth: hci3: command tx timeout [ 1063.811796][ T5624] Bluetooth: hci10: command tx timeout [ 1064.321604][ T5624] Bluetooth: hci3: command tx timeout [ 1066.361299][ T5624] Bluetooth: hci3: command tx timeout [ 1068.442165][ T5634] Bluetooth: hci3: command tx timeout [ 1068.706798][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1068.774871][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1068.794003][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1068.796112][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1068.797685][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1071.081384][ T5624] Bluetooth: hci1: command tx timeout [ 1073.161260][ T5624] Bluetooth: hci1: command tx timeout [ 1075.251303][ T5624] Bluetooth: hci1: command tx timeout [ 1077.321159][ T5624] Bluetooth: hci1: command tx timeout [ 1089.932520][ T3132] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1091.502652][ T3378] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1093.544478][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1093.616104][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1093.636878][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1093.675360][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1093.680131][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1095.801328][ T5624] Bluetooth: hci5: command tx timeout [ 1097.901214][ T5624] Bluetooth: hci5: command tx timeout [ 1099.971285][ T5624] Bluetooth: hci5: command tx timeout [ 1102.072879][ T5624] Bluetooth: hci5: command tx timeout [ 1102.900787][ T5634] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1102.968964][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1102.992974][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1103.041308][ T5634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1103.042150][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1105.641912][ T5624] Bluetooth: hci2: command tx timeout [ 1107.080243][ T5634] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1107.127592][ T5634] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1107.161827][ T5634] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1107.169387][ T5634] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1107.237655][ T5634] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1107.721155][ T5624] Bluetooth: hci2: command tx timeout [ 1109.749014][ T5624] Bluetooth: hci11: command tx timeout [ 1109.850253][ T5624] Bluetooth: hci2: command tx timeout [ 1111.856893][ T5624] Bluetooth: hci11: command tx timeout [ 1111.960667][ T5634] Bluetooth: hci2: command tx timeout [ 1113.881274][ T5634] Bluetooth: hci11: command tx timeout [ 1114.841481][ T38] INFO: task syz.5.1798:12322 blocked for more than 143 seconds. [ 1114.841512][ T38] Tainted: G L syzkaller #0 [ 1114.841524][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1114.841535][ T38] task:syz.5.1798 state:D stack:21536 pid:12322 tgid:12321 ppid:10749 task_flags:0x400140 flags:0x00080002 [ 1114.841601][ T38] Call Trace: [ 1114.841609][ T38] [ 1114.841625][ T38] __schedule+0x16d8/0x55e0 [ 1114.841702][ T38] ? __pfx___schedule+0x10/0x10 [ 1114.841750][ T38] rt_mutex_schedule+0x76/0xf0 [ 1114.841791][ T38] rt_mutex_slowlock_block+0x55f/0x690 [ 1114.841853][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1114.841882][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1114.841909][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1114.841946][ T38] ? rcu_barrier+0x4c/0x530 [ 1114.841975][ T38] ? rcu_barrier+0x4c/0x530 [ 1114.842003][ T38] ? rcu_barrier+0x4c/0x530 [ 1114.842022][ T38] mutex_lock_nested+0x168/0x1d0 [ 1114.842045][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1114.842077][ T38] rcu_barrier+0x4c/0x530 [ 1114.842111][ T38] netdev_run_todo+0x2e0/0xde0 [ 1114.842156][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 1114.842207][ T38] default_device_exit_batch+0x966/0x9e0 [ 1114.842248][ T38] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1114.842290][ T38] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1114.842317][ T38] ops_undo_list+0x4b4/0x8d0 [ 1114.842397][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 1114.842432][ T38] ? ops_init+0x46a/0x5d0 [ 1114.842470][ T38] setup_net+0x2f6/0x350 [ 1114.842500][ T38] ? __pfx_setup_net+0x10/0x10 [ 1114.842526][ T38] ? mutex_rt_init_lockdep+0x66/0x80 [ 1114.842552][ T38] ? preinit_net+0x4b5/0x7d0 [ 1114.842582][ T38] copy_net_ns+0x4f9/0x720 [ 1114.842612][ T38] create_new_namespaces+0x3f0/0x6b0 [ 1114.842642][ T38] ? security_capable+0x7e/0x2c0 [ 1114.842674][ T38] ? copy_namespaces+0x5c/0x4b0 [ 1114.842696][ T38] copy_namespaces+0x432/0x4b0 [ 1114.842725][ T38] copy_process+0x1dfc/0x4390 [ 1114.842768][ T38] ? copy_process+0xced/0x4390 [ 1114.842805][ T38] ? __pfx_copy_process+0x10/0x10 [ 1114.842845][ T38] kernel_clone+0x2d2/0x8d0 [ 1114.842874][ T38] ? __pfx_kernel_clone+0x10/0x10 [ 1114.842898][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 1114.842944][ T38] __x64_sys_clone+0x1b6/0x230 [ 1114.842975][ T38] ? __pfx___x64_sys_clone+0x10/0x10 [ 1114.843024][ T38] ? __pfx_kcov_ioctl+0x10/0x10 [ 1114.843058][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.843084][ T38] do_syscall_64+0x174/0x580 [ 1114.843116][ T38] ? trace_irq_disable+0x3b/0x140 [ 1114.843143][ T38] ? clear_bhb_loop+0x40/0x90 [ 1114.843171][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.843193][ T38] RIP: 0033:0x7f78579fce59 [ 1114.843214][ T38] RSP: 002b:00007f7855c4dfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1114.843239][ T38] RAX: ffffffffffffffda RBX: 00007f7857c75fa0 RCX: 00007f78579fce59 [ 1114.843255][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1114.843270][ T38] RBP: 00007f7857a92d6f R08: 0000000000000000 R09: 0000000000000000 [ 1114.843283][ T38] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1114.843297][ T38] R13: 00007f7857c76038 R14: 00007f7857c75fa0 R15: 00007ffd338973d8 [ 1114.843333][ T38] [ 1114.843454][ T38] [ 1114.[ 1114.843454][ T38] [ 1114.843454][ T38] Showing all locks held in the system: [ 1114.843467][ T38] 3 locks held by rcuc/0/20: [ 1114.843511][ T38] 3 locks held by rcuc/1/28: [ 1114.843523][ T38] 6 locks held by ksoftirqd/1/30: [ 1114.843535][ T38] 3 locks held by kworker/1:1/36: [ 1114.843547][ T38] #0: ffff88813fe33938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1114.843668][ T38] #1: ffffc90000ab7c40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1114.843720][ T38] #2: ffffffff8ddcdcf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1114.843770][ T38] 1 lock held by khungtaskd/38: [ 1114.843781][ T38] #0: ffffffff8ddc7b60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1114.843846][ T38] 3 locks held by kworker/u8:7/197: [ 1114.843864][ T38] 6 locks held by kworker/u8:12/1427: [ 1114.843886][ T38] 7 locks held by kworker/u8:14/3132: [ 1114.843900][ T38] 3 locks held by kworker/u8:17/3402: [ 1114.843911][ T38] #0: ffff888019c34138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1114.843961][ T38] #1: ffffc9000ee67c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1114.844011][ T38] #2: ffffffff8f1484b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1114.844092][ T38] 2 locks held by getty/5363: [ 1114.844103][ T38] #0: ffff8880327c10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1114.844199][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1390 [ 1114.844256][ T38] 1 lock held by syz-executor/5614: [ 1114.844268][ T38] #0: ffffffff8ddcdcf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1114.844323][ T38] 3 locks held by kworker/u8:25/5860: [ 1114.844338][ T38] 2 locks held by syz.5.1798/12322: [ 1114.844350][ T38] #0: ffffffff8f139760 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 1114.844403][ T38] #1: ffffffff8ddcdcf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1114.844463][ T38] 2 locks held by syz.5.1798/12327: [ 1114.844475][ T38] #0: ffffffff8f139760 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 1114.844527][ T38] #1: ffffffff8ddcdcf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1114.844577][ T38] 1 lock held by syz-executor/12376: [ 1114.844589][ T38] #0: ffffffff8ddcdcf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1114.844638][ T38] 1 lock held by syz.1.1822/12414: [ 1114.844649][ T38] #0: ffffffff8ddcdcf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1114.844697][ T38] 1 lock held by syz.3.1826/12442: [ 1114.844708][ T38] #0: ffffffff8ddcdcf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1114.844758][ T38] 2 locks held by syz-executor/12456: [ 1114.844769][ T38] #0: ffffffff8f139760 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 1114.844821][ T38] #1: ffffffff8ddcdcf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1114.844870][ T38] 2 locks held by syz-executor/12457: [ 1114.844882][ T38] #0: ffffffff8f139760 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 1114.844933][ T38] #1: ffffffff8ddcdcf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1114.844984][ T38] 2 locks held by syz-executor/12499: [ 1114.844995][ T38] #0: ffffffff8f139760 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 1114.845047][ T38] #1: ffffffff8ddcdcf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1114.845095][ T38] 1 lock held by syz.0.1839/12508: [ 1114.845107][ T38] #0: ffffffff8ddcdcf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1114.845154][ T38] 1 lock held by syz-executor/12528: [ 1114.845165][ T38] #0: ffffffff8ddcdcf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1114.845211][ T38] 1 lock held by syz-executor/12546: [ 1114.845224][ T38] #0: ffffffff8f1484b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1114.845286][ T38] 1 lock held by syz-executor/12553: [ 1114.845298][ T38] #0: ffff888061450f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1114.845771][ T38] 1 lock held by syz-executor/12560: [ 1114.845786][ T38] #0: ffffffff8f1484b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 1114.845844][ T38] 2 locks held by syz-executor/12572: [ 1114.845857][ T38] #0: ffffffff8f67e748 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1114.845947][ T38] #1: ffffffff8f1484b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 1114.846005][ T38] 2 locks held by syz-executor/12605: [ 1114.846017][ T38] #0: ffffffff8f139760 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 1114.846070][ T38] #1: ffffffff8f1484b8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2da/0x810 [ 1114.846182][ T38] 1 lock held by syz-executor/12636: [ 1114.846194][ T38] #0: ffffffff8f1484b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 1114.846250][ T38] 1 lock held by syz-executor/12641: [ 1114.846262][ T38] #0: ffffffff8f1484b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 1114.846321][ T38] 1 lock held by syz-executor/12649: [ 1114.846335][ T38] [ 1114.846340][ T38] ============================================= [ 1114.846340][ T38] [ 1114.846349][ T38] NMI backtrace for cpu 1 [ 1114.846366][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1114.846395][ T38] Tainted: [L]=SOFTLOCKUP [ 1114.846403][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1114.846424][ T38] Call Trace: [ 1114.846433][ T38] [ 1114.846442][ T38] dump_stack_lvl+0xe8/0x150 [ 1114.846469][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1114.846519][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1114.846546][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1114.846574][ T38] sys_info+0x135/0x170 [ 1114.846594][ T38] watchdog+0xfd7/0x1030 [ 1114.846627][ T38] ? watchdog+0x1c7/0x1030 [ 1114.846659][ T38] kthread+0x388/0x470 [ 1114.846687][ T38] ? __pfx_watchdog+0x10/0x10 [ 1114.846709][ T38] ? __pfx_kthread+0x10/0x10 [ 1114.846738][ T38] ret_from_fork+0x514/0xb70 [ 1114.846767][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1114.846791][ T38] ? __switch_to+0xc89/0x1420 [ 1114.846827][ T38] ? __pfx_kthread+0x10/0x10 [ 1114.846871][ T38] ret_from_fork_asm+0x1a/0x30 [ 1114.846914][ T38] [ 1114.846922][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1114.846951][ C0] NMI backtrace for cpu 0 [ 1114.846970][ C0] CPU: 0 UID: 0 PID: 3132 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1114.846995][ C0] Tainted: [L]=SOFTLOCKUP [ 1114.847001][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1114.847012][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1114.847086][ C0] RIP: 0010:debug_check_no_obj_freed+0x5/0x530 [ 1114.847152][ C0] Code: e8 50 e6 80 fd 48 89 da e9 cf fd ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 55 <41> 57 41 56 41 55 41 54 53 48 83 ec 50 80 3d 7f 93 bd 0a 00 0f 85 [ 1114.847171][ C0] RSP: 0018:ffffc9000e776dd0 EFLAGS: 00000246 [ 1114.847185][ C0] RAX: 0000000000000046 RBX: ffff88801e6a6a00 RCX: ffffffff8ddc7b00 [ 1114.847198][ C0] RDX: ffffea0000cd27c0 RSI: 00000000000000f0 RDI: ffff88803349fb40 [ 1114.847211][ C0] RBP: 0000000000a12110 R08: ffff888031bdbd80 R09: 0000000000000002 [ 1114.847222][ C0] R10: 0000000000000100 R11: 0000000000000001 R12: ffff88803349fb40 [ 1114.847233][ C0] R13: 0000000000000000 R14: ffffea0000cd27c0 R15: ffffffff89587953 [ 1114.847245][ C0] FS: 0000000000000000(0000) GS:ffff8881263a1000(0000) knlGS:0000000000000000 [ 1114.847258][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1114.847270][ C0] CR2: 000055b2cc4860b0 CR3: 000000000dbb6000 CR4: 00000000003526f0 [ 1114.847286][ C0] Call Trace: [ 1114.847293][ C0] [ 1114.847300][ C0] kmem_cache_free+0xfd/0x6c0 [ 1114.847327][ C0] nft_synproxy_eval_v4+0x383/0x530 [ 1114.847401][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1114.847428][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1114.847448][ C0] nft_synproxy_do_eval+0x335/0x550 [ 1114.847472][ C0] ? __lock_acquire+0x683/0x2cc0 [ 1114.847495][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1114.847521][ C0] ? __lock_acquire+0x683/0x2cc0 [ 1114.847547][ C0] nft_do_chain+0x48d/0x1ad0 [ 1114.847585][ C0] ? lock_acquire+0x106/0x350 [ 1114.847611][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1114.847631][ C0] ? trace_hrtimer_start+0x82/0x200 [ 1114.847683][ C0] ? __lock_acquire+0x683/0x2cc0 [ 1114.847707][ C0] nft_do_chain_inet+0x360/0x4b0 [ 1114.847746][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1114.847767][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1114.847804][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1114.847821][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1114.847838][ C0] nf_hook_slow+0xc5/0x220 [ 1114.847884][ C0] NF_HOOK+0x21f/0x3c0 [ 1114.847903][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1114.847929][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1114.847945][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1114.847963][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1114.847984][ C0] ? ip_local_deliver+0x113/0x190 [ 1114.848003][ C0] NF_HOOK+0x336/0x3c0 [ 1114.848019][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1114.848043][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1114.848061][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1114.848077][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1114.848095][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1114.848115][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1114.848131][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1114.848148][ C0] ? process_backlog+0x261/0xc50 [ 1114.848166][ C0] process_backlog+0x564/0xc50 [ 1114.848193][ C0] __napi_poll+0xae/0x550 [ 1114.848212][ C0] net_rx_action+0x621/0xd70 [ 1114.848237][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1114.848255][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1114.848281][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1114.848340][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1114.848369][ C0] handle_softirqs+0x1d9/0x6c0 [ 1114.848391][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 1114.848409][ C0] ? __alloc_skb+0x189/0x7a0 [ 1114.848430][ C0] __alloc_skb+0x1ad/0x7a0 [ 1114.848453][ C0] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1114.848478][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1114.848495][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1114.848525][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1114.848545][ C0] ? assign_work+0x3cf/0x5d0 [ 1114.848564][ C0] worker_thread+0xa47/0xfb0 [ 1114.848587][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1114.848610][ C0] kthread+0x388/0x470 [ 1114.848631][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1114.848647][ C0] ? __pfx_kthread+0x10/0x10 [ 1114.848668][ C0] ret_from_fork+0x514/0xb70 [ 1114.848687][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1114.848705][ C0] ? __switch_to+0xc89/0x1420 [ 1114.848729][ C0] ? __pfx_kthread+0x10/0x10 [ 1114.848751][ C0] ret_from_fork_asm+0x1a/0x30 [ 1114.848778][ C0] [ 1115.201378][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1115.201405][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1115.201446][ T38] Tainted: [L]=SOFTLOCKUP [ 1115.201454][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1115.201467][ T38] Call Trace: [ 1115.201475][ T38] [ 1115.201485][ T38] vpanic+0x56c/0xa60 [ 1115.201530][ T38] ? __pfx___schedule+0x10/0x10 [ 1115.201567][ T38] ? __pfx_vpanic+0x10/0x10 [ 1115.201605][ T38] panic+0xc5/0xd0 [ 1115.201631][ T38] ? __pfx_panic+0x10/0x10 [ 1115.201655][ T38] ? preempt_schedule_common+0x82/0xd0 [ 1115.201685][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1115.201718][ T38] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1115.201747][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1115.201776][ T38] watchdog+0x1030/0x1030 [ 1115.201809][ T38] ? watchdog+0x1c7/0x1030 [ 1115.201840][ T38] kthread+0x388/0x470 [ 1115.201869][ T38] ? __pfx_watchdog+0x10/0x10 [ 1115.201890][ T38] ? __pfx_kthread+0x10/0x10 [ 1115.201920][ T38] ret_from_fork+0x514/0xb70 [ 1115.201947][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1115.201971][ T38] ? __switch_to+0xc89/0x1420 [ 1115.202006][ T38] ? __pfx_kthread+0x10/0x10 [ 1115.202036][ T38] ret_from_fork_asm+0x1a/0x30 [ 1115.202080][ T38] [ 1115.202361][ T38] Kernel Offset: disabled