last executing test programs: 48m8.783569529s ago: executing program 1 (id=1494): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x8000000000000000) 48m8.336883398s ago: executing program 1 (id=1498): openat$nvram(0xffffffffffffff9c, &(0x7f0000004b00), 0x80080, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000004b40), 0x42903, 0x0) 48m8.16042397s ago: executing program 1 (id=1500): socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) 48m7.293321786s ago: executing program 1 (id=1512): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x38ad211, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84000, 0x0) 48m7.187424004s ago: executing program 1 (id=1513): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) open$dir(&(0x7f0000000100)='./file0\x00', 0xe8c40, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40880, 0x20) getdents(r2, &(0x7f0000000340)=""/44, 0x6a) getdents64(r2, 0x0, 0x47) 48m6.857838278s ago: executing program 1 (id=1516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000010900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000140000000110800034000000005080002400000000114000000110001"], 0xdc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000140)={@val={0x800e}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}}, 0x2e) 48m6.506354033s ago: executing program 32 (id=1516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000010900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000140000000110800034000000005080002400000000114000000110001"], 0xdc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000140)={@val={0x800e}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}}, 0x2e) 44m39.783692073s ago: executing program 2 (id=3699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) listen(r2, 0xfffffffd) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x17, 0x28, 0x200, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x13}}, {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x5, 0x0, 0x1}}}}, 0x36) 44m39.58863801s ago: executing program 2 (id=3701): r0 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0x3}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005080800414901400604", 0x56}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000100)=""/208) r2 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x30}, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x520) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 44m39.469568932s ago: executing program 2 (id=3704): bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 44m39.376987454s ago: executing program 2 (id=3706): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 44m39.184955787s ago: executing program 2 (id=3709): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000002c0)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 44m39.086174468s ago: executing program 2 (id=3712): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x796f, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000003f00)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000480)="d479183d7d53f181a4b5f3e38100", 0xe}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2404c810) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x2040) 44m23.919927241s ago: executing program 33 (id=3712): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x796f, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000003f00)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000480)="d479183d7d53f181a4b5f3e38100", 0xe}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2404c810) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x2040) 42m47.02935445s ago: executing program 3 (id=4526): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e4010223010902"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 42m43.952156283s ago: executing program 3 (id=4547): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x12, r0, 0x7e423000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 42m42.954650086s ago: executing program 3 (id=4554): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$nci(r0, &(0x7f0000000dc0)=""/4096, 0x1000) 42m42.056856895s ago: executing program 3 (id=4558): syz_usb_connect(0x0, 0xaf, &(0x7f0000000100)=ANY=[@ANYBLOB="12014101217ad620e71a039008440102030109029d00010000100009044a020288dcb20009050602000202000a"], 0x0) 42m40.748235961s ago: executing program 3 (id=4564): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000002c0)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0) chdir(0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 42m40.706022875s ago: executing program 3 (id=4565): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f00000010c0), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000240)=ANY=[], 0x40000) r5 = accept4$unix(r3, 0x0, 0x0, 0x80000) recvfrom$unix(r5, &(0x7f0000000140)=""/243, 0x40000, 0x40000000, 0x0, 0x0) 42m25.235913303s ago: executing program 34 (id=4565): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f00000010c0), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000240)=ANY=[], 0x40000) r5 = accept4$unix(r3, 0x0, 0x0, 0x80000) recvfrom$unix(r5, &(0x7f0000000140)=""/243, 0x40000, 0x40000000, 0x0, 0x0) 9.571474068s ago: executing program 6 (id=14139): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="14678e7cfe43f1c263530400a45c3d5f640deb75013b32e70e9f2c826597b80720d420312839de825c89e02798b66e5d0dcbafbe7f8fda6786211ff24dce1793ac714f84e6db0b6fc3654bf67ac230209fdcac1d17acd91f7def2e0c8f261bc3741500b7e2affa5068", 0x69}, {&(0x7f0000002780)="21acaf08334a264ef994c92e7de95d40305bdfc3621e2fe6ff27e203fd7b457202dc0078c6f14ce3", 0x28}], 0x2}, 0x200440c4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x4, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000780)=ANY=[], 0x0, 0x1, 0xcf, &(0x7f00000003c0)=""/207, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r2}, 0x38) 9.056128502s ago: executing program 6 (id=14142): r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r0, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000d, 0x4008031, 0xffffffffffffffff, 0x2000) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000840)={0x2, 0x7}, 0x2) 8.788193642s ago: executing program 4 (id=14146): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_SET_DEBUG(r4, 0x227e, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x5, 0x0, 0x7043}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc}, 0x44004) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000"], 0xcdc}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) rt_sigqueueinfo(0x0, 0x11, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r8 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="b6bc5c1dceda7e83c18b5c6824f8121533bb741593170ac8016ceee2ded66f1344afe4adb00783e1b0dda34675fc02fe128734c55d40c6ca4faabc23be57f0f5b806d929d2c206f61436f7d89f53d4ac5d26f30d1a228ac7d73b909720ee70535d576e8e0c4dd861e2c62f7fb3f18334bc44fa736f2e98149cd62a7a64033a6ad0541af48ecef2719e2cb0a845a71e5472fc004bf694f5816930a5152e92fb2a724cbcf3ec04c18b5e2104a566ff9acd32c57ff89c5a30dde794997a2d22660f4eb67ad70994a7e9"}) socket$nl_route(0x10, 0x3, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 7.972243669s ago: executing program 6 (id=14152): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="14678e7cfe43f1c263530400a45c3d5f640deb75013b32e70e9f2c826597b80720d420312839de825c89e02798b66e5d0dcbafbe7f8fda6786211ff24dce1793ac714f84e6db0b6fc3654bf67ac230209fdcac1d17acd91f7def2e0c8f261bc3741500b7e2affa5068", 0x69}, {&(0x7f0000002780)="21acaf08334a264ef994c92e7de95d40305bdfc3621e2fe6ff27e203fd7b457202dc0078c6f14ce3", 0x28}], 0x2}, 0x200440c4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x4, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000780)=ANY=[], 0x0, 0x1, 0xcf, &(0x7f00000003c0)=""/207, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r2}, 0x38) 7.85563474s ago: executing program 5 (id=14153): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async, rerun: 32) io_setup(0x3fe, &(0x7f00000001c0)=0x0) (rerun: 32) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)=' -', 0x3fffff}]) (async, rerun: 32) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (rerun: 32) r2 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r4 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001200), 0x2, 0x0) sendfile(r4, r2, &(0x7f0000001240)=0x175, 0x6) (async) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="66643df281ff723991f119b9", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) read$FUSE(r3, &(0x7f00000050c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r3, &(0x7f0000007100)={0x78, 0x0, r5, {0xa0, 0x6, 0x0, {0x4, 0x0, 0x9, 0x8, 0x0, 0x4, 0xfffff92f, 0x0, 0x4, 0xa000, 0x402, 0xee00, 0x0, 0x80000003, 0x400004}}}, 0x78) (async, rerun: 64) r6 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x15b}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) (rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r9 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) (async, rerun: 32) r10 = epoll_create(0xaf2) (rerun: 32) epoll_pwait2(r10, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000080)={0xe000200f}) (rerun: 64) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r11 = userfaultfd(0x80001) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000100)) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (rerun: 32) ioctl$UFFDIO_CONTINUE(r11, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async, rerun: 64) r12 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (rerun: 64) writev(r12, &(0x7f00000001c0)=[{&(0x7f0000000180)="02", 0x1}, {&(0x7f0000000200)="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", 0x1000}], 0x2) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) (async) io_uring_enter(r6, 0x6f58, 0x0, 0x0, 0x0, 0x0) 7.793834097s ago: executing program 0 (id=14154): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffffffffe4a, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0x8, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000500050001000000050006000100000008000300010000004c67722c3c4d448970d716dce6de6ecc"], 0x2c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010040", 0x7) syz_emit_ethernet(0x4e, &(0x7f0000000f80)=ANY=[@ANYBLOB], 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r10, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000000540), 0x3c) 7.719692293s ago: executing program 6 (id=14155): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f01000000000000000000090581032000000000090582020800000000090503"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 7.512055112s ago: executing program 4 (id=14156): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0xbb) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000020, 0x0, 0x600000000000000}]}) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x3) r8 = dup2(r7, r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x401, 0x0, r7, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) mount(&(0x7f00000025c0)=@sg0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000380)='acl') 7.179684183s ago: executing program 5 (id=14157): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x8, &(0x7f00000000c0)=0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) r1 = memfd_secret(0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x0, 0x4, 0x6b, 0x7, 0x6, @mcast2, @mcast1, 0x8, 0x40, 0x3}}) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="660f7f262d947d4df981e7542a70bcf621bc64812df2b9b470e0178e082520271df4d9721abe9602df40eb249e93fb7b3d3be02b35451b0150c19a83e8fd599da2a366a4cfd554190c70ebbe2c5205fe61aad77444615c813acfb368"], 0x188}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001100)="a75a604e831ad39c281d30cbe856dc9a2ae45ff2a36ec32e363668698544347806411ed5eb2d3ed7983c3db036ec4fe69f2935db8cac15782fa092715ea90392ec0e73617c44c462d2b0df7f5dd6414665ac2264f19123207f9cfb4089fb9365930c0600edb30cf3edececb2e4e603d9d9657962f4b43bf6c8ce25b1e29c335a083e530b84dd51d9d7c730c66a8cdbf08c5e9c620159d46a8e150a3e8e74b78d9cc7fb4cb008d568185986cfd772248980fb8c5ab5789573a38f636d6d15e6e13ebb957fc97008bc37df0a6260ad7e0bf8eaf5db3a19b6eaf3fd902241aad1e8d9e0b5eaf23f876593ddcbf3857c969bfe21860f78aae3224b3f3f0ad3542b600e6de2aa695a36390b7040d4d8856256f7eb391aef7ef05eeafc76576b8d133f61d6bd46a52d0330b05102072062cd56cfaf522b532bfec22f61b12942f4c20232219c25d34a6ea77a4b74f756b443933b881bcd3f6aa901714c4bbbca15b2780e5c2e12e22674c0ce3ab65c612df47ced3affc25298a7e3ce0dc71a96575c5e73d884b46c1a11eef9663b4bcec09ede1c82d62068d64f4b8137a1681abba2e42b6e529cfbf610d7e2774453c22dcd92908df93b728325a15a99856b830f74e4e62b01cbdd1635c7323475a581d287c118bd62a9b3969ab0a55d6e43201b6eaf0b115a54700609dc1e75d03beb2bb783a6002dfee227c693b155387a35a0c4e0c572e13a4e741653f81d77f4835418cef00bee91497dcf5021dad88a8a96681b5a1fd6fc45f917f123eeecfe048175f36c5a02957b051e01eb691aa5b082ba435c200d450687cfaf480c9ab0c7ca4688d3bee9cf56229155c806993cc894bfeaed9cd79fe71207d11fa1183311a6b0dc5c6e4ed280a555aaf737a43ca195a5fabd0c10ebf09070401f0bbdfd06e63efb88a8b410618193418f8bd799f5d2538aec90e453642d3921fb61b7fe3e5c0207904ed3442e1f169073deb7ce4f5592609f978de7ee7e77128d474b6a5286e84d4a5f8df67f190cfd9558e65841b52d90006cc9e68705707278d523d9cffc0cfa0ea7745bae447098f129b45fb0a2b9534aa14dde07b88fdeed372410ed592944dc52cd96b3e4e8b9e35c8be40969355689868ab7025239062f2b3d393708a160054ffb1015fbe40aefb3102ea9d5694fd42245f5d4036ab2dfb75ca022461db864e32f86f0e9aa1bef88176d05f32a55f6b66853298c5b9cc508da72c12aebb6d626b6c61dd870f1ce96f984c125e611b319b4f40084d605fcf93ec49e6feb75aa0f386416ee539fa1d13500f2c8e8701d24cd875bcf290d8c03822d4e38658e12085d23bd0d2faa6e471c8114f1d41064bf61b66aa2e0e5cb293b19fb43d2809a9e59df80966145205561e2c1aee55b25ce13fa1191070563d1a3b419e0934913d68c31bdd650f2aa193e3e9572e1386961436f52be1b530f367c768c7d344ae044ddbf612c5aea7773a3a81f613d0f6fde1dabade8ab1bee58010cb7902b4e14eb2f3d4e9c02de649e6e5e55a6b8ad7160a46b161fd70280c0eefc5a6058104f0220281c9a961b0718319240e627e32b451e7efa073ca238677c9ac11dc11b60e447b2d0f8dc7d779e936409294645d6ac23fbc034ca94dfbb94fd063618526bb5af30f91e86c26e169fef4758b24896b7553eebe69e9cac3c82fdcb3851bc2f06f324aaec24f11326404ac20d23522aeaa74536c5df4e4c877a2d28c4cd307eb291e25cc04dd71c6f66dcaea13e908daa894970f0d68151de5367c8ffaa6d04d9de747ca4d296913b6a98866c6a80d9f729f15ff6f84b5361187c9a977972863da5728f684e8f32c704cbcc1fddd4e16d2ccc3ed93ee731c3ddf52f07af876ffdd49dc4b9e64173d4b143c1e5212bbaddd2b743bf0e7ab488783e5b62a0c654e6bc52af87b7c92b341f9f9e13b3a3b29ce027e0ac7884532c281fec6a2b0335f9dcd162e2c120fec34c8604f7744aa1eb9c4a0409ff0ca8b5d7ca6dab8a4b94d1bd39f6a43fba47f0e93ed37085ed74b1ab833364d16579cbb6c1356511162cc63d462895018d25c3a987f0f68d487297591db00689eafaed990175adc4f979e1b1c51da7b7aee5450c3c520fd5814a33a6926633c549d15b34044b9a16e89fc50ea038c490785286de4530b070c792d2613943a5b15f9a1368b8d0ecfb7d88371be7ff8ea0679270e32c6d6ea7de31e7f310146f4d19b96de0000f9e9f77723b4dac63a01e5f3d92a59fa31463d55682f7e52eccbf49121689cb23552e3402470f8f8e93b1b893f2c60db13c9a0a2898550e11cbdac700a8aaac1cd35e93e8905c42533a96f0f7f6d447802a7a9ae152a489b90efdaf7800d0031630458836d129eae606e863ab17132d712558fcab383dd458cea7bf7a36ed439e2c80d4ef95d9c71dca80d97dab5df7a85d483c5c4a44384d65383af4a25e6ba5b111ee2cb94a2a158c8301888d51a22bbbf29ba59cdc71fae73b9769794312726b624137f964a0b0ecf53460714a7c5cfde3aca0f503fa86d6613cb4d484aa7d816c9fcd85f60c266896c485da5e2bc6f33e2667307c52acdfddedee0d9e0bf03b9e2690c3c950d062476a891f4a8fa14d2e2d22fc85bd9c3a21703d91fa6e9e4d8267af34f67389016250847dae10378ed5072c2b386e8587df051aab6f60a42aae2147cd0ae5765f5b0c8f057477cbf9a73f01145c9a1b9222c7b4d4ec044f30b2e998b6ef68439f4f71832a4392e8385c006508886ca9f5819ceb23566e8f12ecade2688bed5b1098d2f39ad58c5651cf3371cfbcb973964ed405a5ca4961d3607d36391ba71b0f8537fe402863621afcb2dac8044e3315992cb66058bf4eb507876d63d5d31639a1828852b81682f759d7f2e27c970582526f00173380e16d140f72de3c2b90886487005e5c75a00bc9df3727a3a612af5290b11edbd3d88bedb70718f59af9638dc232fb49f11bc5bde85a3755308396ac18c5be23952ab736cef2319cbd822cb274f71cd62b1e0e151439106e3a183b61fd64ed367ffc330b5e3e481238fd26ee7275fdd7ddce4c09e0093bdd1f54c479147a700583166b711a7b4ec0bf3a39f1605a59738f19b205086c909c1e3502e961870df567e7176c5e48759717005bae158fb23007ab291c144538769cb936d7987b9e46f25fb4e5b8c3ce110ff40a8646cadaed4b73dc6e42d0dac3d5b519befe37ce443f93a8a2328404b3ea551c794443c98dc9e5a7b1b3c0aa372ea1bef91cb97596564203cc486cccaa9a62855bd01b5d0fdbdd29aa7059b7168a91c8c259295fc90227b2faf6998152b83395b0da1d03c1068fcb279254e38aef8134faf63c750dbc5c7d07f4e1bed7061d79cb0d8a0f3a80930e64d6c4f62b2394e36967497bc654ac8baee39a2f1d94a2afffe6d7c219fc733b59738ebb9abe17da13dd7f1409c8186d7399a3d28cae819b2e0333c400a7d144989417000c5df95caa2ef155c812dd9b19b43c6203262097536ede361d2df5bd1f998981e31d9edf60c9c1fe12d532594b64e2501dedfc1442669def1511eb07f4e7cd1f692da217d23a1ab6de3c7b25c506f8c0430675058a42287b602d77efa9083b0c705de0d6b864679a381cdbd154931b4b97933e3a90edb68f01eda812363e1828851e30b1596175e5a771ae3ea7e0aa755f319916ffc09a52c22c1c2365d4bf9dcf86ceccc1673a76c20fbc965394f529b7a12923b78249f48c8fb3b655fad75e55dd886fe9cb24bd8f1ceea81dd7b40022bbabf86a6ac5a5f06760766be50b3dd52f44f53fb105b396f18860f3608c84559322a49d46d8c905258ed556cdd1f90310442eb4f4c157592a5f07138bc5b4be8e8aacd0a14ac780e621f2b053c5ab9d1c618195b75c14b51a61011b5ee19cb9e1438c51d6c699dbe1223b3a54a0c06f71b27528bdd7a3732b7d5d2170368edfa36793772d948e46f7ee802e319695de78095f67114f1ee34845e44ef17dd22470b88fec471698a2e346f8e699cb92e850c915d20c8bfc8160a28ecaf90c2a387a28b7f7243b63311b4d1d8077bb6d4b144a5714378fde9256d4be56e9d8728825a247100530c83fa7b76d4a133e2d57595f224070f7df4bce9380ffc1c681f9b862e43f042934986d469819778fcb8bb3836e5194c98fa817195a6d04675df608c5f5cf5db5c6ba25bdaff247441773d7c81c9bdabce58562a295ca378ba90020890f3b3e03fcd7ed38c3ded881f0d75271f4141a1c111c2d72cfd54a82e23f40cb60686c7975112855ba75aa197c5bd0bc5769d1ead061f44e95d5de272c6ef10de1795c81d74b447015f1387042ebd80011c268825ca1249308346a949abbff105ccd46486c4cd905647dd77261efc2501958ad46296ed43c915cc9e9e87fe4640c7c70fba10e6d68967598197657da91faf112db1a9fac4113247937fe74c01ad5993cb2f00c0a457ec691f649d068fc5aac78a068e41a790b01655fd6c09593f010f600f9ccf3e1c9be17e94ca02969bc45b5ead0a547abed79c3edeefd24c9832eebe78bbcc43b7e2f2ca137e3c4d5865c0ad378d676bc1043e871fcb89dfb7f9fe4ce48753918f790a196e186889073db60fb9318c595569b93d8a4ac834bdc5edac00d787da4ddb5e188581184350b126d2010679a88491b012e6e107d74599d429aeff5efcaa463a6d72a3cb31fc1d53ab4db02aa4c84a0b7ec2fd17685d1b20d300343c216435bf91532b61c81a5142a5bfd86adda21c25f742b42334fa1ef1f46210b901077e6fd8a595a31598dc954146ecd8bcb8907ac26f819be6d082886a121118e2d6f45ba0e16777e1f81e7e85b953851ee946f44641aba88f8e8a2c310424c2b1260a5cdf7472789ab66fc9bf3815a6e81acc3cb4222c7c8e160e180191becf2652c6535313803487cddbabeca79e191839268089f295c850ce58c8dd213208de406248216c85518bf3bf097c41a1708ba17b957238f9ae96dd077049494005e5eafce2a5e635730f19d702869682591d711e11c3e7f61d67a0569c734da3624497b906018a246d89a0f345a282051988594dcee4fd74ac6c35a00d8378cc83a6e2a5c22a7c482426a99ebce1e4d30b692ec8ededc5572827de9128d9f6c26dc674fcbdbdbcffcfe8ab972daefa7165926e6550d29f84a6712d3ea4a2b5fb33ea1bcc278ee12d11acf3071aae24245a59662dad955ca1687dbedc72f55a76e3db56c6ce2a554dd0aa25096e8ec7f1789bd6f2a8fb5772b8c9628d6f83d01efc205f744dc4299fc58c3d273bc9bb8c82d0689a59c33a6f81d1d151a6caed783270f4a245e516f9258e0b85e2cf6b72d9999e56c8358d65ee809cf32f190900df9d2792fa3a3c3b903a5b28561d539dcab4cd872bb185b8821b3208957b4252d6010073e83532143365dd70f3d3f0b50f2358d64025cd13f415839f403a29e5a6a90153673d0d560da399ebafc6c4f515e9109bd35c65447cd1fc973abdc96cad59348cd1637eddaa88e8f57329e0607af258351fa4aeb4c705828fb0dc9e597e0fe898c2d3766ac6a29e80d9f252d09ffc24174afa7bf8857eb823da1ae26055ce8f25cf00c0ce7972def17222ddc55495e78cce00ee7882cab9170dc0af7102700a36cb4e810a885195f7ceb660a8dba4c0ca36ad55c586a61eb5814deac46f59d4b44b4b3ab24189e04fe7502e62972bc7e8e89790bf88b41827b6f6f42e340fa3eb264cb7f600a4e066b2572eaff8ea5954571c56a8c9a6486339e7dc12c41d8b10da4", 0x1000}], 0x1, &(0x7f00000009c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x2f6}}, @hoplimit_2292={{0x14}}, @rthdr={{0x28, 0x29, 0x39, {0x11, 0x2, 0x2, 0x1, 0x0, [@local]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x67, 0x8, 0x2, 0x7, 0x0, [@remote, @dev={0xfe, 0x80, '\x00', 0x40}, @remote, @mcast2]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x2, 0x0, 0x0, 0x55}}}], 0xc8}}], 0x2, 0x810) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e", 0x75}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a24", 0x3b}, {&(0x7f0000000700)}, {0x0}, {&(0x7f0000000ac0)}], 0x6, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000090000000480080002400000000008000140000000000900010000008000000000004c000000060a0104000000000000000001000000240004802000018007000100727400001400028008000240ce31b6cf080001400000000308000b40000000000900010073797a3000e9ffff130000000100010000000000000aeeb9c7da275615ac46ea6889d53c4ae599307c3ebec1699a88c01503d6fa07347deedf1ea28f6f72f6f980cf56d609aa0aa2aba830c53cbb6f3d7823e6d132c066dd4c9ee3ec9c0b34dbefe68fa35363bb4c4fdded806dd29f43897acc350256c77f4e6e63466d3481f6bc59325ad99a551a874b901ed7478d589452109e200940bc27d0efb7bbce0bf88495c5e550beba28b917ea48cbb953b7ddf6fe250ead7aa0091e4679f3c41016ea"], 0xd4}}, 0x0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/75, 0x4b}, {&(0x7f0000000700)=""/71, 0x47}, {&(0x7f0000000880)=""/204, 0xcc}, {&(0x7f0000000bc0)=""/216, 0xd8}], 0x4}, 0x40000000) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) 6.908592921s ago: executing program 7 (id=14159): io_setup(0x7, &(0x7f0000000280)=0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_io_uring_setup(0x111, &(0x7f0000000400)={0x0, 0x9183, 0x10, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000006f40)=[{{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000640)="498748a3b399b0ec89a8b90163338a94d9a7d8f00bea71c64403e5cb234a43612272f1bef79289384ea6c9909b1ffdd1efb1710c09b6e10053ac6a05b17bcac3a3677063756b64f9258a85879143c9a287dd6a5a99a80540cdc3d37b43e61192307b546df669c870e46f664eeb5c7042e72c2eecdcabc5ede47dab4b5ae2a90b663070429f35be5c0eecd3fc60425c1616049d5ba3fe66c55bf653668074044efdb5999353c26cf188614d1faddb8624e25f24b08cee6aaefb3751fb782d8fe5da7dd17404071dbb5f9a6b603f6e197e422cdac65ccef929e7201198749cc17f3af7912f91f3f5d725e1"}, {&(0x7f0000000740)="fbf998ec061c467d82b0c3bf1c5e7fee3961b1e786465b7af83812df1177819379c97852aa1e131f379da072f994ccd663d5682f9bce2ce729ee6debc9d32fcd1822e1fe1b9ac296c3547a6ca3730395c3dc09307031c29ab52a086b95c375e5fbf7eeff11567e5802dd9241c4e8956bb133163f383db04009adc49eac75d29cf4e628586c55c8b5e02f731288ff336cd20785e07f32765ba41c1d342924f209d2c7c13635f6d964b67d97edc409ce8ce1fe416a18446c7800f7f8dad0064321011eedd3f2bfda7de1119d24eda9a4715f0de47d9848140cdccad7c28a45bcd23fc65063fbf81f5757e8"}, {&(0x7f0000000b00)="b97945eb78f4c8fdcb03f91b30a4721de36d390215c27e380a77fdac5a29532dd299e44e408a7ab7940d51a8b2206760435efb9d12859c5f2fbc838d9d4e1e8845f0a0fdf9a1c625d35abe2118960427a5f7b156d3bb110d895c20bcef214ebcffe4ea240a77cea3910239b573"}, {&(0x7f0000000b80)="6f80e8138cc3bb273755cdc4cc715a4dc11e18f6e5407547b5091808ee663afac64bc8f5450dbd1728499ab1cff2c88377981cdf56099b4a2a4d5a3f187d19dc189b536aa4f636528b3b2c3ca46fca9e2ed66ed4966a29a6986b45c8afa222734c9b125683861fd473dd147d41c4bcae4c492a33944e69285fb6434652f50c8b3b9401e2a1f411ac8524c0d2caae556dd59f9e7c4b2d81d33e985416b4f61add691abca2028ef966596f0260e18b9ac58463e23e51137718cb"}, {&(0x7f0000000c40)="9de28aa14c80756a7223ea9e6820fcbb57ad57b95cbb8b8b82ec036dd434c4a149fde98ae8845eb97c3ccea1eb3028b84a00b616bf199472d50db3a33c1b5016931502e93be9e0e4bcf67eeaea0f85e97932ec59385eb94ac5744a0183b14e06d6ac83d1cf5597e26f"}, {&(0x7f0000000cc0)="5bd540b6a86160cec69caf9d5e74a88c441072891fbabb9cb345b03ec15424350dc110aeba85218cdfae5e2f73d466681525f0564410048e1414d165c2957c7f25f06d225af0670a08b74d466cc3bf5c85b4e6c142df713180e93e105becbbbef0159672ba657e0cbea867096782744322e0c9dcf0fed87960df72663e816277ada24ed2aea2bb24acf6fbbae46ca73dd2d16f"}]}}, {{&(0x7f0000000e00)=@file={0x0, './file0\x00'}, 0x0, &(0x7f0000000140)=[{&(0x7f0000000e80)="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"}, {&(0x7f0000001e80)="b10bd2a79a8a3b3ae2e6bf0778a8ec8ecc7efcab57153b77921ba8b85be7d2c9b77b34f7360aae83065f383554d0d8b7e13b2879befb0500cfaae3d36e8471caf59a6f0dccf790abdbf6ded3f6"}], 0x0, &(0x7f0000002040)=[@rights={{0x0, 0x1, 0x1, [r1, r5, r9, r2, r1, r8, r4, r9]}}, @rights={{0x0, 0x1, 0x1, [r5, r5]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r1, r4, r9, 0xffffffffffffffff]}}, @cred], 0x0, 0x40}}, {{&(0x7f00000041c0)=@file={0x1, './file0\x00'}, 0x0, &(0x7f00000043c0)=[{&(0x7f0000004240)="ae5b275471dfa248958686fb0903a58bb2e8682a1c17faf74495f542b0749ec103bcd7774d225b32fff108e32ad621cfb450f8cc8da6138ff856ef7542de12c0b5ccfd30da599eec0349f754323f7e65192c949d21060e1cf2e6b4b271366cf583237691bb36711286fd2ff646e618f7095b35cd9abc691cf8554cbaaedec74d482a6b7d483919eb9b79add9334ad45e6d6b76ea8b7628b4a5453da903751706a90cec4014cdcbf34b2501651f7be7f1347051384ac72000a2"}, {&(0x7f0000004300)="9ebdf412b817fcc242e1c8c212cf7646b711a87af1cd1a12adcd1bd470ea5857051c96ba69fad15b41d56b14188db6289a38d113ba4d124d099640909f6656064c8d4ee647271a212e98a72501eded1767a72d65520d0b258df2ae725fe16d31b551d8daaa2ffbfbb1685ec8158380d4de499166c897642d84b5eba2d9afd3ec4caaa1338d83e8779eead9be20fc9423e3b3d4e5fbffa4eccd6cd9545ca5d37a89d8ddfd90d096eed61d43ea7e17e93b0678b38712dd579d6b2957"}], 0x0, 0x0, 0x0, 0x4008000}}, {{&(0x7f0000004400)=@abs={0x1, 0x0, 0x4e24}, 0x0, &(0x7f0000004900)=[{&(0x7f0000004480)}, {&(0x7f00000044c0)}, {&(0x7f0000004500)="63ef76b97f55594964a20aabb823a86793ddb5b9b5f415d579c51a002f28aae893cfc577caf5eb364aaba196cd4e066f97016b0979d581ddc7d47997feae276a281ee320cbb6b74f193fcd259f1fc67700d0216b8f7914049387146e4022807b757eaf2dc4c25f79f67940f96eb9c0a4fe89205723f0cb9fc3aff86a7246efbed6e4d6c7ef899f2e705cbd21c39e0baaa543920bebefc4c19b63ab1ba226905f194acc9459403467439492ca0301a17aeba7300acaa1f7352b6fa1888db79c0ca1244dbbd06d8240225415cb6fb56edbe3a1dd7d2e638fe5f8fbb206d114887f73599aafa539b643ea55a5c0c75c5773"}, {&(0x7f0000004600)="790f7d0602747b4b85301d15610289038a8400f02f71800db5beed"}, {&(0x7f0000004640)="b722b638e56e85de02c410bad4168e1b464feb25aa78384b0a81507141afa8178915ab90c2fe476c17465e00e9465cbb52b04ad1c71eab49441db2b0ea49a01701512ef52a2423c604ca434e54c40bb4a9d39782962320f1d39be23a336ea57ddb9d2b14b5f7cfca2ec4071a6e5c7fbfb928dd4c35a9e29b85f1da323559bf351c9be86f697b6c4883098a3d970ff502fd49aea2a558bf92f6a48087b63e1e1542e404656dfa817a919d290b94a107d1f1f4bd58b1e91e504c9e3a30b2b88af9b88cf4e935c08f4c48e10879e2154f4815562e56090ebfe0f4ad1a649a2a0bff4837e3400b024d"}, {&(0x7f0000004740)="5bab69360646c56ec51a430a89eaeb1a365eee3d12f6266db75e69fbf0d35d4d7a8e134939e76240fa9335753f1bccd9e154a4522d78574dc79eacbd5590e976aba7f312ed99ba78c3fc423dad054b33d37b0bfc5a1d67c3f184333a6edfa5651d427bdbad908ebbd1834e7488c5d0b08267f7bb58e96962898b976b9ce60bd3cb0be51b01754252682000ec417b6cc5915521def3812ac3a2b3cd1370b7151df089599f81dd183d679f27b894ac16a9a9a9030f0fc52468d828b6aaec46a765e4a30732b39cc56fa9c7c5e6f0fbba8b0ce3cb399f91f24918"}, {&(0x7f0000004840)="acce49b710811f718e6ed0807b7e886430ec0969a5a7848cbb93da20421e1bcaa9228c0f4f40f5f94355cbdc9123757346e13ae1dd5c4de421ae77cf3967117936f98c74a7edfbfadf3643e23d24e0a91e"}, {&(0x7f00000048c0)="bc2ffdef2cdac4e06f5e231b6e3acdd2aaf6dc23c6861306f20154f0a7aa35a93d08ff67eb0fb43488"}], 0x0, &(0x7f0000004980)=[@cred, @cred={{0x0, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x0, 0x4081}}, {{&(0x7f0000004a00)=@file={0x0, './file0\x00'}, 0x0, &(0x7f0000006e00)=[{&(0x7f0000004a80)="4bf859b9d0954d5806ec32c024e946dadea7ab0ab9f0e5f9f5adb3f693a63db77a8fb8dc89c2e777da5da0c60d97067f130f853ad042ff1df7eed87f64ec71"}, {&(0x7f0000004ac0)="12a23528ea5030c98397c6a45aa686f498c238cb73e470f56626f2a29e454d374131f337786ce2fc63e7e8374420e8220fbef647fd03a298be849055a73e05adb07d794fcb4b8c2e9d438730522ea3632551d74fb0ed6537093b67e937530f7625a5acd8292c31ef1f646b350eaaaafe2eed00f335f259619f1d1404391fa827ee034dea2568cc4ea48b9547d277f79b010922f9c8a44059011af20a49b6808a453e00ca81064c104f4af9c1eebac7f92e1c234782da"}, {&(0x7f0000004b80)="92ad9686331322f1e1a210844bff111ee45217c75933cc231c5b836361c8be0150b1ad43e55cbcc0e97258179e8ea1c35c9f3daa4cc740b421b5b1799263200506abb09e3933b0d5f4e39708e50ef2a9638b47b8aa9de7a85cbbe44c3cfdff133aa848c3cc35f4c5183db654d7145cffd0cb9a272b00e11262731152431604887337292c3e643eeeeb4f1abc714a83d3a061eda28b60b42580b6e061448185bb11eb742c4d0dd9"}, {&(0x7f0000004c40)="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"}, {&(0x7f0000005c40)="791607fec61f312822597f6b4a66484f4f817800b5da640bf4d6750a4946f56bc9de0781b521bfd47c0314ebd71804d8ae9cde2f28613997901991e2780496847df834304da5f7b5ea7a39447f299e0d3534a00df67686fff66226a8841bb3eeb2ca7ef681b86e926210aca1ea40d9b5480aace03022a90e2df4a5bc7daa4d12cc4e"}, {&(0x7f0000005d00)="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"}, {&(0x7f0000005e00)="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"}], 0x0, &(0x7f0000006f00)=[@rights={{0x0, 0x1, 0x1, [r8, r4, r3, 0xffffffffffffffff, r8, r4, 0xffffffffffffffff, 0xffffffffffffffff, r2, r8]}}], 0x0, 0x20000084}}], 0x5f, 0x4000414) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r10 = memfd_create(&(0x7f00000008c0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 5.759448111s ago: executing program 7 (id=14162): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000240)={0x4, 0x0, @ioapic={0xf000, 0x1, 0x7, 0x8001, 0x0, [{0x0, 0x7f, 0xa, '\x00', 0x4}, {0x5, 0x1, 0xf6, '\x00', 0x2}, {0x75, 0x4, 0x3, '\x00', 0x76}, {0xc, 0x1, 0x4, '\x00', 0x96}, {0x1, 0x4, 0x4, '\x00', 0x77}, {0x4, 0x3, 0x6, '\x00', 0xf}, {0x2, 0x9, 0xe1, '\x00', 0x4}, {0x3, 0x3, 0xff, '\x00', 0x38}, {0x9, 0x6, 0x40, '\x00', 0x2}, {0xf, 0xf, 0xb, '\x00', 0xfb}, {0xff, 0x3, 0xa1, '\x00', 0x52}, {0x4, 0x1, 0x4, '\x00', 0x1}, {0x1, 0x0, 0x0, '\x00', 0x2}, {0x4, 0x2, 0x7f, '\x00', 0x8}, {0x9f, 0x8, 0x7}, {0x40, 0xb, 0xa, '\x00', 0xb2}, {0x5, 0x80, 0x70, '\x00', 0x9}, {0x6, 0xff, 0x7, '\x00', 0x9}, {0x8, 0x8, 0xa, '\x00', 0x5}, {0x1, 0x9, 0x80, '\x00', 0x4a}, {0x6, 0x4, 0xff, '\x00', 0x6a}, {0x1, 0x7f, 0x8, '\x00', 0x80}, {0x42, 0x56, 0x4, '\x00', 0x6}, {0x7d, 0x5, 0x4, '\x00', 0x58}]}}) (fail_nth: 1) 5.684324347s ago: executing program 0 (id=14163): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000180)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, 0x0, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) sendmsg$kcm(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(r2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20044080) 5.142425041s ago: executing program 4 (id=14164): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="912695ea620c523779114f16d8da3af0", 0x10}, {&(0x7f0000001280)="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", 0x50f}], 0x2}, 0x4004045) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendfile(r0, r1, 0x0, 0x7ffff006) 4.482971916s ago: executing program 0 (id=14165): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_io_uring_setup(0x111, &(0x7f00000003c0)={0x0, 0xf346, 0x2, 0x0, 0x4033a}, &(0x7f0000000140), &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_procfs(0xffffffffffffffff, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f1000000270000000000000000000040"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r8, 0x4048587b, &(0x7f0000000e80)={{r9, &(0x7f0000000140)='\x00', 0x2042, &(0x7f0000000180)={@_ha_fsid={[0x165, 0x6]}, {0x7f, 0x5, 0x7, 0x8}}, 0x90000000, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x55}, 0x0, 0x0}) 4.172418134s ago: executing program 6 (id=14166): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000028c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 3.48761885s ago: executing program 7 (id=14167): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 3.455145669s ago: executing program 4 (id=14168): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x2, 0x300) syz_create_resource$binfmt(0x0) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 3.359880191s ago: executing program 6 (id=14169): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@loopback, 0xb23, 0x1, 0x0, 0xe, 0x77f, 0x4000}, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000240)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000580)={[0xa, 0x7, 0x488, 0xd6bffffffffffe, 0x8, 0x8000040000000001, 0xb3, 0x8, 0x4b1d, 0x4000000000000008, 0xfff, 0x2081, 0x7, 0xffffffffffffffff, 0xe6, 0xb289], 0x4, 0x383fc2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r6, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r7, &(0x7f00000044c0), 0x0, 0x4001) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$PTP_EXTTS_REQUEST2(r9, 0x40603d10, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r10, &(0x7f00000000c0)=0x10008e, 0x180000504) recvfrom(r8, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) io_setup(0x8, &(0x7f0000000240)=0x0) r12 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000200)=0x40) io_submit(r11, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x1, 0x0, r12, 0x0}]) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) mmap(&(0x7f0000202000/0x2000)=nil, 0x2000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x55b23000) 3.035354351s ago: executing program 5 (id=14170): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x15, 0x0, 0x0) 2.560507933s ago: executing program 7 (id=14171): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.648493877s ago: executing program 7 (id=14172): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af83, &(0x7f0000000000)={0x1}) (fail_nth: 1) 1.440590334s ago: executing program 4 (id=14173): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x3, &(0x7f0000000380)=@framed={{0x85, 0x0, 0x0, 0x0, 0x19, 0x4, 0x0, 0x0, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)={0x1c, 0x1, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x84) 1.039155862s ago: executing program 0 (id=14174): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcd0}, 0xffffffffffffffc9) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x1d, 0x0, @tid=r0}, &(0x7f00000002c0)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x80, 0xfffff008}, {0x6}]}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) lremovexattr(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000000000/0x2000)=nil) preadv2(r3, &(0x7f0000000200)=[{&(0x7f0000000500)=""/61, 0x3d}], 0x1, 0x40, 0x4, 0x0) r4 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f62196a6563745f723a6372796502adf663ff0c486082637270745f646576696365743a73302073797374656d5f751d73797774656d5f723a6b65726e656c5f743a733020313834343637343430373337303935353d313035009f38b477cdf083d3975db8ad109883558260ad2061daf3876a354df73be41546ed2693a43b9163dead3b3f9e507db145130fa8b47ae806e2a3d98debe5ecf54f4e74a392e4c605ee9600a5714e529525bf68444d638b6ab8c92e524fa13523ca4ba9fac5fa8f8fb77600d1e5ec532d459838179b010000000000000066780bae8100"], 0x57) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a000100008001400000002b0900020073797a310000000008000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRES8=r4, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES64=r1, @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@newqdisc={0x258, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}, [@TCA_STAB={0xb4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x80, 0x0, 0x2, 0x1, 0xffff4803, 0xdfa9, 0x6}}, {0x10, 0x2, [0xd09, 0xf3, 0x81, 0x3ff, 0x7, 0x3]}}, {{0x1c, 0x1, {0x2, 0x4, 0x9, 0x0, 0x1, 0x0, 0x3, 0x6}}, {0x10, 0x2, [0x1, 0x5, 0x5, 0x1, 0x10, 0x834]}}, {{0x1c, 0x1, {0x6a, 0xf7, 0x4, 0x3, 0x2, 0x8, 0x7, 0x7}}, {0x12, 0x2, [0x8, 0x7, 0x2, 0x5, 0x1, 0x4, 0x254d]}}, {{0x1c, 0x1, {0x5, 0x3, 0x5, 0x2, 0x0, 0x4, 0x1, 0x4}}, {0xc, 0x2, [0x1000, 0x4, 0xfffc, 0x1]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1260}, @TCA_RATE={0x6, 0x5, {0xd, 0x81}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7457ab9b}, @TCA_STAB={0x168, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x7d, 0x0, 0x8, 0x1, 0x0, 0x4, 0xa}}, {0x18, 0x2, [0x4, 0x7, 0x7, 0x8aae, 0x7, 0x9, 0x0, 0x2, 0x6, 0x100]}}, {{0x1c, 0x1, {0x0, 0x6, 0xe, 0x6, 0x0, 0x2e3, 0x10000}}, {0x4}}, {{0x1c, 0x1, {0xe, 0x2, 0xf, 0xf, 0x2, 0x8, 0x10, 0x1}}, {0x6, 0x2, [0xb2]}}, {{0x1c, 0x1, {0x8, 0x7, 0x4, 0x5, 0x2, 0xffffffff, 0x5, 0xa}}, {0x18, 0x2, [0x8001, 0x5, 0x5, 0x7ff, 0x6, 0x9, 0x400, 0x8001, 0x6, 0x8]}}, {{0x1c, 0x1, {0x9, 0x7, 0x9, 0x4d, 0x2, 0x407, 0x2, 0x9}}, {0x16, 0x2, [0x7fff, 0x4, 0xbb5, 0xebc, 0xfff7, 0x10, 0x8, 0x8, 0xe]}}, {{0x1c, 0x1, {0xfb, 0x9, 0xb5, 0x8, 0x1, 0x1000, 0xe, 0x7}}, {0x12, 0x2, [0x6, 0x1, 0x1, 0x1, 0x2, 0x4, 0x2]}}, {{0x1c, 0x1, {0xd1, 0x8, 0xb, 0x9, 0x0, 0x9, 0x491, 0x6}}, {0x10, 0x2, [0x2, 0x4, 0x7ff, 0x1, 0xffff, 0x0]}}, {{0x1c, 0x1, {0x62, 0x10, 0xeb, 0x5, 0x2, 0x7, 0x8, 0x3}}, {0xa, 0x2, [0x1, 0x4, 0x9]}}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r6, 0x1, 0x0) fchdir(0xffffffffffffffff) ioctl$USBDEVFS_CONNECTINFO(r8, 0x40085511, &(0x7f0000000180)) 461.929963ms ago: executing program 4 (id=14175): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b943", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x148}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 408.053344ms ago: executing program 7 (id=14176): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000015c0)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @multicast2, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e", 0x2}], 0x1}}], 0x1, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 302.069953ms ago: executing program 5 (id=14177): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0xffffffff, 0x1, 0x7}) 35.235017ms ago: executing program 5 (id=14178): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="912695ea620c523779114f16d8da3af0", 0x10}, {&(0x7f0000001280)="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", 0x512}], 0x2}, 0x4004045) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendfile(r0, r1, 0x0, 0x7ffff006) 0s ago: executing program 5 (id=14179): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"1b000500", 0x100, 0x5, 0x2, 0x800, 0x0, "f759e100edc710000000d9fc6300", '\x00', "0300", "e8cc1304", ["8b59b4d766cbd6e4af000700", "c2fed6e1dcc98a1c907c6b40", '\x00', "0000000000000000001000"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000040)={0x8c, 0x3, 0x3, 0x1, 0x5, 0x1, "fc1127425210a17d0a13ef3c9f45ac38", 0x1, 0x9, 0x6, 0x80, 0x80, 0xd5, 0xa}) kernel console output (not intermixed with test programs): terface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3096.779630][T16709] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3096.791788][T16709] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 3096.799429][T16709] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3096.810373][T16709] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3096.822089][T16709] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3096.833271][T16709] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3096.847533][T16709] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 3096.854977][T16709] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3096.865934][T16709] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3096.878104][T16709] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3096.889283][T16709] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3096.902893][T16709] usb 8-1: string descriptor 0 read error: -22 [ 3096.909170][T16709] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3096.920545][T16709] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3096.936610][T16709] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 3096.998141][T19036] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3097.077768][T16709] usb 6-1: USB disconnect, device number 10 [ 3097.171611][T19041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3097.182282][T19041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3097.301679][ T2390] usb 8-1: USB disconnect, device number 84 [ 3097.301716][T19046] usb 8-1: Couldn't submit interrupt_out_urb -19 [ 3097.476652][T29255] Bluetooth: hci2: command tx timeout [ 3097.742079][T19052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13605'. [ 3098.671972][ T7487] usb 5-1: USB disconnect, device number 78 [ 3098.766689][T19065] fuse: Bad value for 'fd' [ 3098.810392][T19070] netlink: 'syz.7.13610': attribute type 1 has an invalid length. [ 3098.871984][T19070] bond2: (slave bridge2): making interface the new active one [ 3098.880812][T19070] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 3099.233971][T19083] netlink: 'syz.4.13614': attribute type 1 has an invalid length. [ 3099.252747][T19070] macvlan2: entered promiscuous mode [ 3099.258980][T19070] macvlan2: entered allmulticast mode [ 3099.265788][T19070] bond2: entered promiscuous mode [ 3099.271044][T19070] bridge2: entered promiscuous mode [ 3099.281732][T19070] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3099.297490][T19070] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 3099.315141][T19070] bond2: left promiscuous mode [ 3099.324499][T19070] bridge2: left promiscuous mode [ 3099.325036][T19088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13616'. [ 3099.383122][T19089] bond5: (slave bridge4): making interface the new active one [ 3099.425515][T19089] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 3100.701643][T19108] fuse: Bad value for 'fd' [ 3103.546243][ T2390] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 3103.705665][ T2390] usb 6-1: Using ep0 maxpacket: 8 [ 3103.712099][ T2390] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3103.722297][ T2390] usb 6-1: config 0 has no interfaces? [ 3103.900853][ T2390] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 3103.911955][ T2390] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3103.925642][ T2390] usb 6-1: Product: syz [ 3103.929823][ T2390] usb 6-1: Manufacturer: syz [ 3103.935960][ T2390] usb 6-1: SerialNumber: syz [ 3103.946412][ T2390] usb 6-1: config 0 descriptor?? [ 3103.985062][T19138] netlink: 'syz.0.13629': attribute type 1 has an invalid length. [ 3104.043001][T19138] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 3104.054706][T19138] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 3104.086745][T19129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13627'. [ 3104.113594][T19140] bond8: (slave bridge5): Enslaving as an active interface with a down link [ 3104.128225][T19129] openvswitch: netlink: Flow actions attr not present in new flow. [ 3104.323689][T19151] fuse: Bad value for 'fd' [ 3104.415820][T16708] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 3104.599518][T16708] usb 5-1: Using ep0 maxpacket: 32 [ 3104.606743][T16708] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 3104.629678][T16708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 3104.671603][T19159] netlink: 816 bytes leftover after parsing attributes in process `syz.6.13635'. [ 3104.684436][T16708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 3104.702384][T16708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 3104.717191][T16708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 3104.742266][T16708] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 3104.765613][T16708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3104.782451][T16708] usb 5-1: Product: syz [ 3104.791345][T16708] usb 5-1: Manufacturer: syz [ 3104.799351][T16708] usb 5-1: SerialNumber: syz [ 3104.842909][T16708] usb 5-1: config 0 descriptor?? [ 3105.389859][T16708] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 3105.404075][T16708] input input375: Device does not respond to id packet M [ 3105.429072][T16708] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 3105.435128][T16708] input input375: Device does not respond to id packet P [ 3105.458782][T16708] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 3105.464801][T16708] input input375: Device does not respond to id packet B [ 3105.476873][T16708] input input375: Limiting number of effects to 32 (device reports 105) [ 3105.478030][ T7487] usb 6-1: USB disconnect, device number 11 [ 3105.592730][T19163] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13636'. [ 3105.966313][T19175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13637'. [ 3105.991980][T16708] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 3106.003474][T19173] netlink: 60 bytes leftover after parsing attributes in process `syz.7.13638'. [ 3106.034853][T16708] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 3106.052255][T16708] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 3106.062214][T16708] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 3106.078387][T16708] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input375 [ 3106.163107][T16708] usb 5-1: USB disconnect, device number 79 [ 3106.473232][T19181] netlink: 'syz.4.13641': attribute type 1 has an invalid length. [ 3106.533808][T19181] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 3106.569453][T19181] bond6: (slave vxcan5): Error -95 calling set_mac_address [ 3106.833055][T19183] bond6: (slave bridge5): Enslaving as an active interface with a down link [ 3107.135920][ T5929] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 3107.306732][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3107.318146][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3107.328014][ T5929] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 3107.345047][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3107.358595][ T5929] usb 5-1: config 0 descriptor?? [ 3107.823706][T19197] netlink: 'syz.0.13646': attribute type 1 has an invalid length. [ 3107.864098][T19197] bond9: (slave bridge6): making interface the new active one [ 3107.872885][T19197] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 3107.904711][T19197] macvlan2: entered promiscuous mode [ 3107.910094][T19197] macvlan2: entered allmulticast mode [ 3107.916439][T19197] bond9: entered promiscuous mode [ 3107.921489][T19197] bridge6: entered promiscuous mode [ 3107.927796][T19197] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3107.935470][T19197] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 3107.951815][T19197] bond9: left promiscuous mode [ 3107.956905][T19197] bridge6: left promiscuous mode [ 3107.971184][ T5929] cm6533_jd 0003:0D8C:0022.008F: unknown main item tag 0x0 [ 3107.983578][ T5929] cm6533_jd 0003:0D8C:0022.008F: unknown main item tag 0x0 [ 3107.993236][ T5929] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.008F/input/input376 [ 3108.038228][ T5929] cm6533_jd 0003:0D8C:0022.008F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 3108.454451][T19186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3108.464287][T19186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3108.480928][T16708] usb 5-1: USB disconnect, device number 80 [ 3108.522390][T19209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13649'. [ 3109.932745][T19226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13655'. [ 3109.944649][T19226] openvswitch: netlink: Flow actions attr not present in new flow. [ 3110.111938][T19235] bridge_slave_0: left allmulticast mode [ 3110.118932][T19235] bridge_slave_0: left promiscuous mode [ 3110.124720][T19235] bridge0: port 1(bridge_slave_0) entered disabled state [ 3110.176569][T19235] bridge_slave_1: left allmulticast mode [ 3110.182494][T19235] bridge_slave_1: left promiscuous mode [ 3110.189340][T19235] bridge0: port 2(bridge_slave_1) entered disabled state [ 3110.209284][T19235] bond0: (slave bond_slave_0): Releasing backup interface [ 3110.233423][T19235] bond0: (slave bond_slave_1): Releasing backup interface [ 3110.235337][ T2390] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 3110.256119][T19235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3110.263580][T19235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3110.273118][T19235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3110.282886][T19235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3110.292795][T19235] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3110.465328][ T2390] usb 6-1: Using ep0 maxpacket: 32 [ 3110.479162][ T2390] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 3110.492122][ T2390] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 3110.538293][ T2390] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 3110.550882][ T2390] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 3110.567124][ T2390] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 3110.591662][ T2390] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 3110.726059][ T2390] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3110.734776][ T2390] usb 6-1: Product: syz [ 3110.744575][ T2390] usb 6-1: Manufacturer: syz [ 3110.750335][ T2390] usb 6-1: SerialNumber: syz [ 3110.757589][ T2390] usb 6-1: config 0 descriptor?? [ 3110.942859][T19252] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13662'. [ 3111.448275][T19262] netlink: 68 bytes leftover after parsing attributes in process `syz.4.13664'. [ 3111.672868][ T2390] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 3111.834415][T16708] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 3112.067358][T16708] usb 8-1: Using ep0 maxpacket: 8 [ 3112.080549][T16708] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 3112.102614][T16708] usb 8-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 3112.128501][T16708] usb 8-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 3112.140404][T16708] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3112.159348][ T2390] input input377: Device does not respond to id packet M [ 3112.166976][ T2390] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 3112.173287][ T2390] input input377: Device does not respond to id packet P [ 3112.182124][ T2390] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 3112.188329][ T2390] input input377: Device does not respond to id packet B [ 3112.200525][T16708] usb 8-1: Product: syz [ 3112.228550][ T2390] input input377: Limiting number of effects to 32 (device reports 105) [ 3112.258906][T16708] usb 8-1: Manufacturer: syz [ 3112.263504][T16708] usb 8-1: SerialNumber: syz [ 3112.434432][ T2390] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 3112.453146][ T2390] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 3112.568434][ T2390] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 3112.575599][ T2390] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 3112.586203][ T2390] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input377 [ 3112.659293][ T2390] usb 6-1: USB disconnect, device number 12 [ 3113.455149][T19818] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 3113.665101][T19818] usb 6-1: Using ep0 maxpacket: 16 [ 3113.672916][T19818] usb 6-1: config index 0 descriptor too short (expected 526, got 367) [ 3113.819394][T19818] usb 6-1: config 0 has an invalid interface number: 209 but max is 0 [ 3113.951150][T19818] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3114.013132][T19818] usb 6-1: config 0 has no interface number 0 [ 3114.031710][T19818] usb 6-1: config 0 interface 209 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 3114.065773][T19818] usb 6-1: config 0 interface 209 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 3114.092586][T19818] usb 6-1: config 0 interface 209 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 9 [ 3114.106446][T19818] usb 6-1: config 0 interface 209 has no altsetting 0 [ 3114.148362][T19818] usb 6-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96 [ 3114.165239][T19818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3114.173595][ T150] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3114.183854][T19818] usb 6-1: Product: syz [ 3114.194445][T19818] usb 6-1: Manufacturer: syz [ 3114.214223][T19818] usb 6-1: SerialNumber: syz [ 3114.232169][T19818] usb 6-1: config 0 descriptor?? [ 3114.246620][T19298] syzkaller0: entered promiscuous mode [ 3114.270532][T19298] syzkaller0: entered allmulticast mode [ 3114.358599][T19818] usb 8-1: USB disconnect, device number 85 [ 3114.983213][T19309] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13679'. [ 3115.769877][T19321] netlink: 816 bytes leftover after parsing attributes in process `syz.4.13681'. [ 3116.596374][T19818] usb 6-1: USB disconnect, device number 13 [ 3118.234912][ T2390] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 3118.394934][ T2390] usb 6-1: Using ep0 maxpacket: 16 [ 3118.401614][ T2390] usb 6-1: config index 0 descriptor too short (expected 526, got 367) [ 3118.413436][ T2390] usb 6-1: config 0 has an invalid interface number: 209 but max is 0 [ 3118.423982][ T2390] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3118.434293][ T2390] usb 6-1: config 0 has no interface number 0 [ 3118.440622][ T2390] usb 6-1: config 0 interface 209 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 3118.451644][ T2390] usb 6-1: config 0 interface 209 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 3118.461760][ T2390] usb 6-1: config 0 interface 209 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 9 [ 3118.475140][ T2390] usb 6-1: config 0 interface 209 has no altsetting 0 [ 3118.484037][ T2390] usb 6-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96 [ 3118.493413][ T2390] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3118.500493][T19314] bridge_slave_0: left allmulticast mode [ 3118.501535][ T2390] usb 6-1: Product: syz [ 3118.507992][T19314] bridge_slave_0: left promiscuous mode [ 3118.512784][ T2390] usb 6-1: Manufacturer: syz [ 3118.522237][ T2390] usb 6-1: SerialNumber: syz [ 3118.522269][T19314] bridge0: port 1(bridge_slave_0) entered disabled state [ 3118.536628][ T2390] usb 6-1: config 0 descriptor?? [ 3118.556773][T19314] bridge_slave_1: left allmulticast mode [ 3118.562416][T19314] bridge_slave_1: left promiscuous mode [ 3118.569220][T19314] bridge0: port 2(bridge_slave_1) entered disabled state [ 3118.582283][T19314] bond0: (slave bond_slave_0): Releasing backup interface [ 3118.594302][T19314] bond0: (slave bond_slave_1): Releasing backup interface [ 3118.612795][T19314] team0: Port device team_slave_0 removed [ 3118.623119][T19314] team0: Port device team_slave_1 removed [ 3118.631474][T19314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3118.639519][T19314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3118.649541][T19314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3118.657607][T19314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3118.666339][T19314] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3119.055159][T19348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13688'. [ 3119.094172][T19335] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3119.296136][T19356] netlink: 816 bytes leftover after parsing attributes in process `syz.0.13687'. [ 3121.087458][T16709] usb 6-1: USB disconnect, device number 14 [ 3122.829504][T19381] syzkaller0: entered promiscuous mode [ 3122.860350][T19381] syzkaller0: entered allmulticast mode [ 3122.887575][T19385] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3123.544182][T19392] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13701'. [ 3123.599699][T19392] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13701'. [ 3125.905468][T19405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13705'. [ 3125.915165][T19405] openvswitch: netlink: Flow actions attr not present in new flow. [ 3126.442107][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 3127.183994][T19420] netlink: 'syz.6.13709': attribute type 1 has an invalid length. [ 3127.244980][T19421] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13709'. [ 3127.254044][T19421] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13709'. [ 3127.796075][T19392] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13701'. [ 3127.805548][T19392] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13701'. [ 3127.868996][T19422] bond1: (slave bridge1): making interface the new active one [ 3127.881800][T19422] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 3127.926941][T19423] macvlan2: entered promiscuous mode [ 3127.932375][T19423] macvlan2: entered allmulticast mode [ 3127.943830][T19423] bond1: entered promiscuous mode [ 3127.959383][T19423] bridge1: entered promiscuous mode [ 3127.965143][T19428] netlink: 'syz.7.13711': attribute type 1 has an invalid length. [ 3127.968739][T19423] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3127.980714][T19423] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 3127.997486][T19423] bond1: left promiscuous mode [ 3128.002278][T19423] bridge1: left promiscuous mode [ 3128.027592][T19430] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13711'. [ 3128.053924][T19430] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13711'. [ 3128.099362][T19428] bond3: (slave bridge3): making interface the new active one [ 3128.109209][T19428] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 3128.165247][ T5929] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 3128.310966][T19428] macvlan2: entered promiscuous mode [ 3128.331542][ T5929] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 3128.368430][T19428] macvlan2: entered allmulticast mode [ 3128.385554][ T5929] usb 5-1: config 0 has no interface number 0 [ 3128.415860][ T5929] usb 5-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3128.481807][ T5929] usb 5-1: config 0 interface 41 has no altsetting 0 [ 3128.493585][ T5929] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 3128.494621][T19428] bond3: entered promiscuous mode [ 3128.503151][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3128.546566][ T5929] usb 5-1: Product: syz [ 3128.550912][ T5929] usb 5-1: Manufacturer: syz [ 3128.559465][ T5929] usb 5-1: SerialNumber: syz [ 3128.579099][ T5929] usb 5-1: config 0 descriptor?? [ 3128.584374][T19428] bridge3: entered promiscuous mode [ 3128.592641][ T5929] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 3128.621104][T19428] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3128.646994][T19428] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 3128.679846][T19428] bond3: left promiscuous mode [ 3128.688644][T19428] bridge3: left promiscuous mode [ 3130.972866][T19818] usb 5-1: USB disconnect, device number 81 [ 3132.093058][T19481] syzkaller0: entered promiscuous mode [ 3132.390794][T19481] syzkaller0: entered allmulticast mode [ 3132.560276][T19490] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13723'. [ 3132.707370][T19492] netlink: 36 bytes leftover after parsing attributes in process `syz.6.13724'. [ 3134.068892][T19525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13728'. [ 3135.927743][T19521] netlink: 68 bytes leftover after parsing attributes in process `syz.0.13728'. [ 3135.929818][T19492] netlink: 36 bytes leftover after parsing attributes in process `syz.6.13724'. [ 3135.945986][T19521] tipc: Enabling of bearer <}dp:s> rejected, media not registered [ 3136.095309][T19532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13731'. [ 3136.104514][T19532] openvswitch: netlink: Flow actions attr not present in new flow. [ 3136.223939][T16709] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 3136.401433][ T2390] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 3137.643749][T16709] usb 6-1: Using ep0 maxpacket: 32 [ 3137.656780][T16709] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3137.667127][T16709] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3137.709686][T16709] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 3137.723881][ T2390] usb 5-1: Using ep0 maxpacket: 32 [ 3137.729124][T16709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3137.746846][T16709] usb 6-1: Product: syz [ 3137.751134][T16709] usb 6-1: Manufacturer: syz [ 3137.752502][ T2390] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 3137.771375][T16709] usb 6-1: SerialNumber: syz [ 3137.777135][T19547] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 3137.787015][ T2390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 3137.807393][T19547] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 3137.824317][ T2390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 3137.842203][ T2390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 3137.915436][T19547] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3137.925577][T16709] usb 6-1: config 0 descriptor?? [ 3137.960642][ T2390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 3138.073217][ T2390] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 3138.120986][ T2390] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3138.173734][ T2390] usb 5-1: Product: syz [ 3138.180085][ T2390] usb 5-1: Manufacturer: syz [ 3138.192422][ T2390] usb 5-1: SerialNumber: syz [ 3138.217505][ T2390] usb 5-1: config 0 descriptor?? [ 3138.450774][T19818] usb 6-1: USB disconnect, device number 15 [ 3138.748777][ T2390] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 3138.755693][ T2390] input input378: Device does not respond to id packet M [ 3138.796077][ T2390] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 3138.852711][ T2390] input input378: Device does not respond to id packet P [ 3139.303128][ T2390] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 3139.321897][ T2390] input input378: Device does not respond to id packet B [ 3139.417498][ T2390] input input378: Limiting number of effects to 32 (device reports 105) [ 3139.627118][ T2390] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 3139.694836][ T2390] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 3139.744547][ T2390] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 3139.769322][ T2390] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 3139.810083][ T2390] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input378 [ 3139.922463][ T2390] usb 5-1: USB disconnect, device number 82 [ 3139.974271][T19818] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 3140.150050][T19818] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 3140.172261][T19818] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3140.300503][T19818] usb 8-1: config 0 descriptor?? [ 3140.335677][T19818] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 3140.624542][T19591] syzkaller0: entered promiscuous mode [ 3140.631518][T19599] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13743'. [ 3140.657184][T19591] syzkaller0: entered allmulticast mode [ 3140.695811][T19599] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13743'. [ 3141.329290][T19609] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 3141.340217][T19609] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 3141.359077][T19609] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3141.453608][T16709] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 3141.572432][T19612] netlink: 'syz.6.13747': attribute type 1 has an invalid length. [ 3141.606286][T19818] usb 8-1: USB disconnect, device number 86 [ 3141.649989][T16709] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 3141.658078][T16709] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3141.670601][T16709] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3141.682643][T16709] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3141.694396][T16709] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3141.707384][T16709] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 3141.715535][T16709] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3141.736100][T16709] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3141.748901][T16709] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3141.760472][T16709] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3141.773124][T16709] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 3141.781199][T16709] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3141.792683][T16709] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3141.813039][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 3141.821086][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 3141.828459][T16709] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3141.840062][T16709] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3141.854676][T16709] usb 6-1: string descriptor 0 read error: -22 [ 3141.860946][T16709] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3141.870620][T16709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3141.901056][T16709] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 3142.209458][T16709] Process accounting resumed [ 3143.677083][T16709] usb 8-1: new low-speed USB device number 87 using dummy_hcd [ 3143.867626][T16709] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 3143.876396][T16709] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3143.901611][T16709] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3143.920424][T16709] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3143.932140][T16709] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3143.944621][T16709] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 3143.952101][T16709] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3143.963619][T16709] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3143.975979][T16709] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3143.987258][T16709] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3143.999374][T16709] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 3144.007544][T16709] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3144.018472][T16709] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3144.030185][T16709] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3144.047949][T16709] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3144.067429][T16709] usb 8-1: string descriptor 0 read error: -22 [ 3144.074168][T16709] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3144.083425][T16709] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3144.103903][T19612] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 3144.107294][T16709] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 3144.175788][T19637] syzkaller0: entered promiscuous mode [ 3144.181326][T19637] syzkaller0: entered allmulticast mode [ 3144.188466][T19648] netlink: 68 bytes leftover after parsing attributes in process `syz.0.13753'. [ 3144.198866][T19648] tipc: Enabling of bearer <}dp:s> rejected, media not registered [ 3144.327386][T19656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13753'. [ 3144.357847][T16709] usb 6-1: USB disconnect, device number 16 [ 3144.375168][T19818] usb 8-1: USB disconnect, device number 87 [ 3145.094568][T10675] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3145.413333][T18166] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 3145.574233][T18166] usb 8-1: Using ep0 maxpacket: 8 [ 3145.614018][T18166] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 3145.624234][T18166] usb 8-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 3145.671016][T18166] usb 8-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 3145.691503][T18166] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3145.706993][T18166] usb 8-1: Product: syz [ 3145.720687][T18166] usb 8-1: Manufacturer: syz [ 3145.726781][T18166] usb 8-1: SerialNumber: syz [ 3146.761140][T19693] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13758'. [ 3146.770958][T19693] openvswitch: netlink: Flow actions attr not present in new flow. [ 3147.233687][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5410 ms [ 3147.241686][ C1] lec:lec_tx_timeout: lec0 [ 3147.508277][T19662] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3149.456579][T19818] usb 8-1: USB disconnect, device number 88 [ 3150.863604][ T7487] Process accounting resumed [ 3151.447260][T17589] lec:lec_start_xmit: lec0:No lecd attached [ 3152.265104][T19740] bridge_slave_0: left allmulticast mode [ 3152.270862][T19740] bridge_slave_0: left promiscuous mode [ 3152.276796][T19740] bridge0: port 1(bridge_slave_0) entered disabled state [ 3152.286428][T19740] bridge_slave_1: left allmulticast mode [ 3152.292123][T19740] bridge_slave_1: left promiscuous mode [ 3152.306758][T19740] bridge0: port 2(bridge_slave_1) entered disabled state [ 3152.361270][T19740] team0: Port device team_slave_0 removed [ 3152.382727][T19740] team0: Port device team_slave_1 removed [ 3152.390366][T19740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3152.399201][T19740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3152.415725][T19740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3152.428403][T19740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3152.439845][T19740] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3152.603267][ T7487] usb 5-1: new low-speed USB device number 83 using dummy_hcd [ 3152.805137][ T7487] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 3152.824795][ T7487] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3152.878061][ T7487] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3152.914818][ T7487] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3153.000028][ T7487] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3153.001249][T19747] Cannot find add_set index 0 as target [ 3153.081501][ T7487] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 3153.147718][ T7487] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3153.202844][ T7487] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3153.279445][ T7487] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3153.382203][ T7487] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3154.385025][ T7487] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 3154.441157][ T7487] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3154.482863][ T7487] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3154.506428][ T7487] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3154.533634][T19756] netlink: 'syz.6.13776': attribute type 1 has an invalid length. [ 3154.550501][ T7487] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3154.562419][T19758] netlink: 'syz.5.13777': attribute type 1 has an invalid length. [ 3154.575381][ T7487] usb 5-1: string descriptor 0 read error: -22 [ 3154.581641][ T7487] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3154.602827][ T7487] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3154.624174][T19762] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13777'. [ 3154.639450][ T7487] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 3154.697899][T19760] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 3154.710939][T19760] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 3154.747260][T19758] bond2: (slave bridge2): making interface the new active one [ 3154.755998][T19758] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 3154.823086][T19762] macvlan2: entered promiscuous mode [ 3154.847153][T19762] macvlan2: entered allmulticast mode [ 3154.861427][T19762] bond2: entered promiscuous mode [ 3154.872764][T19762] bridge2: entered promiscuous mode [ 3154.881824][T19762] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3154.890250][T19762] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 3154.908015][T19762] bond2: left promiscuous mode [ 3154.913160][T19762] bridge2: left promiscuous mode [ 3154.930733][T19763] macvlan2: entered promiscuous mode [ 3154.936437][T19763] macvlan2: entered allmulticast mode [ 3154.942637][T19763] bond2: entered promiscuous mode [ 3154.949260][T19763] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3154.968531][T19763] bond2: left promiscuous mode [ 3156.759838][T19775] netlink: 'syz.0.13780': attribute type 1 has an invalid length. [ 3157.226718][T19779] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13780'. [ 3157.232640][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 3157.243730][ C1] lec:lec_tx_timeout: lec0 [ 3157.327441][T19775] bond10: (slave bridge7): making interface the new active one [ 3157.351962][T19775] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 3157.373239][T19779] macvlan2: entered promiscuous mode [ 3157.378631][T19779] macvlan2: entered allmulticast mode [ 3157.385259][T19779] bond10: entered promiscuous mode [ 3157.390436][T19779] bridge7: entered promiscuous mode [ 3157.399016][T19779] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3157.406916][T19779] bond10: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 3157.438370][T19779] bond10: left promiscuous mode [ 3157.454437][T19779] bridge7: left promiscuous mode [ 3157.522647][ T7487] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 3157.681328][ T7487] usb 6-1: device descriptor read/64, error -71 [ 3157.719165][T19786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13784'. [ 3157.739145][T19786] openvswitch: netlink: Flow actions attr not present in new flow. [ 3157.932645][ T7487] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 3158.062665][ T7487] usb 6-1: device descriptor read/64, error -71 [ 3158.182871][ T7487] usb usb6-port1: attempt power cycle [ 3158.355734][ T5929] usb 5-1: USB disconnect, device number 83 [ 3158.522606][ T7487] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 3158.543178][ T7487] usb 6-1: device descriptor read/8, error -71 [ 3158.712559][ T5929] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 3158.782755][ T7487] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 3158.803541][ T7487] usb 6-1: device descriptor read/8, error -71 [ 3158.864337][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 3158.870858][ T5929] usb 5-1: config index 0 descriptor too short (expected 526, got 367) [ 3158.879360][ T5929] usb 5-1: config 0 has an invalid interface number: 209 but max is 0 [ 3158.887890][ T5929] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3158.898319][ T5929] usb 5-1: config 0 has no interface number 0 [ 3158.905333][ T5929] usb 5-1: config 0 interface 209 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 3158.918487][ T7487] usb usb6-port1: unable to enumerate USB device [ 3158.925001][ T5929] usb 5-1: config 0 interface 209 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 3159.019409][ T5929] usb 5-1: config 0 interface 209 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 9 [ 3159.032737][ T5929] usb 5-1: config 0 interface 209 has no altsetting 0 [ 3159.041713][ T5929] usb 5-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96 [ 3159.050811][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3159.058959][ T5929] usb 5-1: Product: syz [ 3159.063180][ T5929] usb 5-1: Manufacturer: syz [ 3159.067756][ T5929] usb 5-1: SerialNumber: syz [ 3159.082436][ T5929] usb 5-1: config 0 descriptor?? [ 3159.492911][ T5929] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 3159.825475][ T5929] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3159.836564][ T5929] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3159.846593][ T5929] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3159.859504][ T5929] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3159.868546][ T5929] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3159.878364][ T5929] usb 8-1: config 0 descriptor?? [ 3160.667619][T19825] SET target dimension over the limit! [ 3160.684504][T19818] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 3160.842501][T19818] usb 6-1: Using ep0 maxpacket: 32 [ 3160.850595][T19818] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 3160.859147][T19818] usb 6-1: config 0 has no interface number 0 [ 3160.869579][T19818] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 3160.879051][T19818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3160.887611][T19818] usb 6-1: Product: syz [ 3160.891883][T19818] usb 6-1: Manufacturer: syz [ 3160.897743][T19818] usb 6-1: SerialNumber: syz [ 3160.907497][T19818] usb 6-1: config 0 descriptor?? [ 3160.918694][T19818] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 3160.928027][T19818] usb 6-1: selecting invalid altsetting 1 [ 3160.934615][T19818] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 3160.946977][T19818] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 3160.958006][T19818] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 3160.967147][T19818] usb 6-1: media controller created [ 3160.986180][T19818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3161.291198][T19829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13796'. [ 3161.300481][T19829] openvswitch: netlink: Flow actions attr not present in new flow. [ 3161.417538][ T794] usb 5-1: USB disconnect, device number 84 [ 3161.534577][T19834] SET target dimension over the limit! [ 3161.950644][ T5929] usbhid 8-1:0.0: can't add hid device: -71 [ 3161.969059][ T5929] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 3161.994203][ T5929] usb 8-1: USB disconnect, device number 89 [ 3162.043078][T19818] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 3162.062061][T19818] zl10353_read_register: readreg error (reg=127, ret==-110) [ 3162.085141][T19822] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 3162.142106][T19818] usb 6-1: USB disconnect, device number 21 [ 3164.682243][T29255] Bluetooth: hci5: command 0x0406 tx timeout [ 3167.869926][T19918] SET target dimension over the limit! [ 3168.054860][T19921] netlink: 'syz.5.13817': attribute type 1 has an invalid length. [ 3168.115268][T19921] bond3: entered promiscuous mode [ 3168.127540][T19921] 8021q: adding VLAN 0 to HW filter on device bond3 [ 3168.188378][T19921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13817'. [ 3168.198595][T19921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13817'. [ 3168.404802][T16709] usb 5-1: new low-speed USB device number 85 using dummy_hcd [ 3168.474021][ T794] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 3168.680732][T16709] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 3168.688291][T16709] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3168.699437][T16709] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3168.730583][T16709] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3168.753615][T16709] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3168.770403][ T794] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3168.785541][T16709] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 3168.793155][ T794] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3168.802220][T16709] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3168.818325][ T794] usb 8-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 3168.829047][T16709] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3168.843277][ T794] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3168.854003][T16709] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3168.870124][ T794] usb 8-1: config 0 descriptor?? [ 3168.885371][T16709] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3168.917665][T16709] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 3168.930538][T16709] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3168.948099][T16709] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3168.967798][T16709] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3168.986592][T16709] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3169.025982][T16709] usb 5-1: string descriptor 0 read error: -22 [ 3169.034994][T16709] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3169.048188][T16709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3169.182937][T16709] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 3169.520188][T19959] blktrace: Concurrent blktraces are not allowed on sg0 [ 3169.532762][T19960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3169.546059][T19960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3169.565045][ T7487] usb 5-1: USB disconnect, device number 85 [ 3169.769932][T19967] netlink: 'syz.5.13829': attribute type 1 has an invalid length. [ 3169.843561][T19969] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 3169.855924][T19969] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 3169.899035][T19967] macvlan2: entered promiscuous mode [ 3169.904660][T19967] macvlan2: entered allmulticast mode [ 3169.911376][T19967] bond4: entered promiscuous mode [ 3169.920019][T19967] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3169.929884][T19967] bond4: left promiscuous mode [ 3170.236551][T19981] SET target dimension over the limit! [ 3170.560383][T19983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13835'. [ 3170.614938][T19983] openvswitch: netlink: Flow actions attr not present in new flow. [ 3170.637993][T19991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13837'. [ 3170.647987][T19991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13837'. [ 3170.871996][T16709] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 3171.042640][T16709] usb 6-1: Using ep0 maxpacket: 32 [ 3171.087104][T16709] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 3171.099846][T16709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 3171.117965][T16709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 3171.138050][T16709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 3171.161936][T16709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 3171.193948][T16709] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 3171.214999][ T5929] usb 8-1: USB disconnect, device number 90 [ 3171.245480][T20002] fuse: Unknown parameter 'grou00000000000000000000' [ 3171.248015][T16709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3171.269782][T16709] usb 6-1: Product: syz [ 3171.277417][T16709] usb 6-1: Manufacturer: syz [ 3171.284302][T16709] usb 6-1: SerialNumber: syz [ 3171.299574][T16709] usb 6-1: config 0 descriptor?? [ 3171.441508][T20006] blktrace: Concurrent blktraces are not allowed on sg0 [ 3171.675115][T16709] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 3171.687766][T16709] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 3172.675191][T16709] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 3172.696078][T16709] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 3173.081588][T16709] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 3173.098531][T16709] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 3173.112500][T16709] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 3173.697439][T16709] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 3173.703873][T16709] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 3173.710207][T16709] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 3173.755243][T16709] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 3173.812960][T16709] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 3173.819965][T16709] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 3173.864311][T16709] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 3173.883906][T16709] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 3174.062316][T20036] blktrace: Concurrent blktraces are not allowed on sg0 [ 3174.112053][T16709] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 3174.132248][T16709] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 3174.141708][ T5929] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 3174.151020][T16709] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 3174.157620][T16709] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 3174.196195][T16709] input input379: Timeout waiting for response from device. [ 3174.275184][T16709] usb 6-1: USB disconnect, device number 22 [ 3174.322966][ T5929] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3174.367316][ T5929] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3174.436158][ T5929] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 3174.507864][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 3174.549149][ T5929] usb 5-1: SerialNumber: syz [ 3174.585370][ T5929] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 3174.644041][ T5929] usb-storage 5-1:1.0: USB Mass Storage device detected [ 3174.673435][ T5929] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 3174.691383][ T5929] scsi host1: usb-storage 5-1:1.0 [ 3174.814831][T20057] SET target dimension over the limit! [ 3175.115756][T20058] blktrace: Concurrent blktraces are not allowed on sg0 [ 3175.262073][T20064] netlink: 'syz.0.13854': attribute type 1 has an invalid length. [ 3176.246841][ T2827] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3176.285127][T20067] bond11: (slave bridge8): making interface the new active one [ 3176.313535][T20067] bond11: (slave bridge8): Enslaving as an active interface with an up link [ 3176.503974][T18166] usb 5-1: USB disconnect, device number 86 [ 3176.875340][T20074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13856'. [ 3176.890934][T20074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13856'. [ 3177.058970][T20080] blktrace: Concurrent blktraces are not allowed on sg0 [ 3177.245810][T20084] blktrace: Concurrent blktraces are not allowed on sg0 [ 3177.507224][T20087] netlink: 'syz.7.13860': attribute type 1 has an invalid length. [ 3177.588400][T20087] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 3177.599188][T20087] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 3177.633444][T20089] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13860'. [ 3177.667449][T20089] macvlan2: entered promiscuous mode [ 3177.682400][T20089] macvlan2: entered allmulticast mode [ 3177.695827][T20089] bond4: entered promiscuous mode [ 3177.718009][T20089] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3177.970474][T20089] bond4: left promiscuous mode [ 3178.099254][T20098] blktrace: Concurrent blktraces are not allowed on sg0 [ 3178.451430][T16709] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 3178.611428][T16709] usb 8-1: Using ep0 maxpacket: 32 [ 3178.627116][T16709] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 3178.658368][T16709] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3178.690759][T16709] usb 8-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 3178.721819][T16709] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3178.739644][T16709] usb 8-1: Product: syz [ 3178.762614][T16709] usb 8-1: Manufacturer: syz [ 3178.770139][T16709] usb 8-1: SerialNumber: syz [ 3178.789666][T16709] usb 8-1: config 0 descriptor?? [ 3179.292448][T20118] blktrace: Concurrent blktraces are not allowed on sg0 [ 3183.072640][ T5929] usb 8-1: USB disconnect, device number 91 [ 3183.103475][T20161] netlink: 'syz.6.13883': attribute type 1 has an invalid length. [ 3183.186960][T20164] Cannot find add_set index 0 as target [ 3183.547950][T20163] blktrace: Concurrent blktraces are not allowed on sg0 [ 3184.038481][T20168] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 3184.054105][T20168] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 3184.117354][T20172] bond3: (slave bridge2): Enslaving as an active interface with a down link [ 3184.426298][T13211] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 3184.493313][T20184] netlink: 'syz.4.13890': attribute type 1 has an invalid length. [ 3184.632652][T20192] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13890'. [ 3184.963535][T20188] macvlan2: entered promiscuous mode [ 3184.968964][T20188] macvlan2: entered allmulticast mode [ 3184.980961][T20188] bond7: entered promiscuous mode [ 3184.981100][T13211] usb 6-1: device descriptor read/64, error -71 [ 3184.993068][T20188] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3185.034969][T20188] bond7: left promiscuous mode [ 3185.191961][T20196] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13891'. [ 3185.202101][T20196] openvswitch: netlink: Flow actions attr not present in new flow. [ 3185.266264][T13211] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 3185.441080][T13211] usb 6-1: device descriptor read/64, error -71 [ 3185.531163][T16709] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 3185.561300][T13211] usb usb6-port1: attempt power cycle [ 3185.681194][T16709] usb 8-1: Using ep0 maxpacket: 32 [ 3185.687618][T16709] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 3185.707499][T16709] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 3185.724586][T16709] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 3185.740085][T16709] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 3185.757720][T16709] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 3185.779491][T16709] usb 8-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 3185.794089][T16709] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3185.851835][T16709] usb 8-1: Product: syz [ 3185.856070][T16709] usb 8-1: Manufacturer: syz [ 3185.864209][T16709] usb 8-1: SerialNumber: syz [ 3185.873435][T16709] usb 8-1: config 0 descriptor?? [ 3185.921060][T13211] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 3185.941698][T13211] usb 6-1: device descriptor read/8, error -71 [ 3186.192091][T13211] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 3186.211428][T13211] usb 6-1: device descriptor read/8, error -71 [ 3186.290602][T16709] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 3186.299744][T16709] input input380: Device does not respond to id packet M [ 3186.309331][T16709] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 3186.315794][T16709] input input380: Device does not respond to id packet P [ 3186.330502][T13211] usb usb6-port1: unable to enumerate USB device [ 3186.347271][T16709] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 3186.355355][T16709] input input380: Device does not respond to id packet B [ 3186.364693][T16709] input input380: Limiting number of effects to 32 (device reports 105) [ 3186.449807][T20216] netlink: 'syz.4.13899': attribute type 1 has an invalid length. [ 3186.492826][T20216] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 3186.504555][T20216] bond8: (slave vxcan5): Error -95 calling set_mac_address [ 3186.566929][T16709] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 3186.581404][T16709] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 3186.605729][T20220] bond8: (slave bridge6): Enslaving as an active interface with a down link [ 3186.635440][T16709] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 3186.645103][T16709] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 3186.653283][T16709] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input380 [ 3186.675063][T16709] usb 8-1: USB disconnect, device number 92 [ 3187.217353][T20226] SET target dimension over the limit! [ 3187.584139][T20230] netlink: 'syz.5.13902': attribute type 1 has an invalid length. [ 3187.647537][T20230] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 3187.659987][T20230] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 3187.733557][T20236] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13902'. [ 3187.740283][T20235] blktrace: Concurrent blktraces are not allowed on sg0 [ 3188.002723][T20230] macvlan2: entered promiscuous mode [ 3188.010556][T20230] macvlan2: entered allmulticast mode [ 3188.020435][T20230] bond5: entered promiscuous mode [ 3188.026859][T20230] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3188.059155][T20230] bond5: left promiscuous mode [ 3188.220972][T19818] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 3188.372334][T19818] usb 5-1: Using ep0 maxpacket: 32 [ 3188.384573][T19818] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 3188.423322][T20248] syzkaller0: entered promiscuous mode [ 3188.428881][T20248] syzkaller0: entered allmulticast mode [ 3188.435347][T19818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 3188.450044][T19818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 3188.466329][T19818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 3188.478380][T19818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 3188.645163][T20251] Cannot find add_set index 0 as target [ 3188.697911][T19818] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 3188.713713][T19818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3188.723220][T19818] usb 5-1: Product: syz [ 3188.728342][T19818] usb 5-1: Manufacturer: syz [ 3188.735614][T19818] usb 5-1: SerialNumber: syz [ 3188.809810][T19818] usb 5-1: config 0 descriptor?? [ 3189.042868][T19818] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 3189.070663][T19818] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 3189.104099][T19818] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 3189.237992][T13211] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 3189.346378][T19818] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 3189.354273][T19818] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 3189.360875][T19818] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 3189.658995][T13211] usb 6-1: device descriptor read/64, error -71 [ 3189.691999][T19818] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 3189.698402][T19818] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 3189.704894][T19818] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 3189.711785][T19818] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 3189.718200][T19818] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 3189.724701][T19818] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 3189.731517][T19818] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 3189.738167][T19818] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 3189.744990][T19818] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 3189.760221][T19818] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 3189.766935][T19818] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 3189.773952][T19818] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 3189.780420][T19818] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 3189.786601][T19818] input input381: Timeout waiting for response from device. [ 3189.803743][T19818] usb 5-1: USB disconnect, device number 87 [ 3189.930828][T13211] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 3190.080801][T13211] usb 6-1: device descriptor read/64, error -71 [ 3190.229751][T13211] usb usb6-port1: attempt power cycle [ 3190.650867][T13211] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 3190.681417][T13211] usb 6-1: device descriptor read/8, error -71 [ 3190.812972][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 3190.812986][ T29] audit: type=1326 audit(2000000182.380:4717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20273 comm="syz.0.13916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbff39c799 code=0x7ffc0000 [ 3190.846665][ T29] audit: type=1326 audit(2000000182.380:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20273 comm="syz.0.13916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fbbff39c799 code=0x7ffc0000 [ 3190.889119][ T29] audit: type=1326 audit(2000000182.380:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20273 comm="syz.0.13916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbff39c799 code=0x7ffc0000 [ 3190.984361][T13211] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 3191.014205][T13211] usb 6-1: device descriptor read/8, error -71 [ 3191.023278][ T29] audit: type=1326 audit(2000000182.380:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20273 comm="syz.0.13916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbbff39c799 code=0x7ffc0000 [ 3191.047840][ T29] audit: type=1326 audit(2000000182.380:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20273 comm="syz.0.13916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbff39c799 code=0x7ffc0000 [ 3191.108737][ T29] audit: type=1326 audit(2000000182.380:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20273 comm="syz.0.13916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbbff39c799 code=0x7ffc0000 [ 3191.148370][T13211] usb usb6-port1: unable to enumerate USB device [ 3191.158099][ T29] audit: type=1326 audit(2000000182.380:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20273 comm="syz.0.13916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbff39c799 code=0x7ffc0000 [ 3191.182658][ T29] audit: type=1326 audit(2000000182.380:4724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20273 comm="syz.0.13916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fbbff39c799 code=0x7ffc0000 [ 3191.249075][ T29] audit: type=1326 audit(2000000182.380:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20273 comm="syz.0.13916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbff39c799 code=0x7ffc0000 [ 3191.289699][ T29] audit: type=1326 audit(2000000182.380:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20273 comm="syz.0.13916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fbbff39c799 code=0x7ffc0000 [ 3193.299489][T20266] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3193.527484][T20296] SET target dimension over the limit! [ 3194.970768][T20311] netlink: 'syz.4.13925': attribute type 1 has an invalid length. [ 3195.155209][T20311] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address [ 3195.205328][T20311] bond9: (slave vxcan5): Error -95 calling set_mac_address [ 3195.237704][T20319] bond9: (slave bridge7): Enslaving as an active interface with a down link [ 3195.274695][T20322] blktrace: Concurrent blktraces are not allowed on sg0 [ 3195.290679][ T5929] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 3195.347126][T20323] macvlan2: entered promiscuous mode [ 3195.386903][T20323] macvlan2: entered allmulticast mode [ 3195.418974][T20323] bond9: (slave macvlan2): Error -98 calling set_mac_address [ 3195.444050][ T5929] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3195.489503][ T5929] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3195.511191][ T5929] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3195.560816][ T5929] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3195.586739][ T5929] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3195.625445][ T5929] usb 8-1: config 0 descriptor?? [ 3196.994689][ T5929] usbhid 8-1:0.0: can't add hid device: -71 [ 3197.005933][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 3197.005951][ T29] audit: type=1400 audit(2000000188.580:4743): avc: denied { setattr } for pid=20350 comm="chmod" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3197.011358][ T5929] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 3197.063098][ T5929] usb 8-1: USB disconnect, device number 93 [ 3203.233483][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 3203.241465][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 3207.218746][T20375] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3207.334729][T20385] Cannot find add_set index 0 as target [ 3207.402036][ T3544] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3207.631630][T20374] syzkaller0: entered promiscuous mode [ 3207.637134][T20374] syzkaller0: entered allmulticast mode [ 3208.225288][T20400] netlink: 'syz.7.13940': attribute type 1 has an invalid length. [ 3208.269764][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 3208.277826][ C1] lec:lec_tx_timeout: lec0 [ 3208.401073][T20409] blktrace: Concurrent blktraces are not allowed on sg0 [ 3210.709741][T20400] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 3210.854024][T20428] netlink: 36 bytes leftover after parsing attributes in process `syz.7.13947'. [ 3210.875511][T20428] netlink: 36 bytes leftover after parsing attributes in process `syz.7.13947'. [ 3211.033621][T20436] bridge_slave_0: left allmulticast mode [ 3211.037722][ T29] audit: type=1326 audit(2000000202.601:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20431 comm="syz.7.13949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963839c799 code=0x7ffc0000 [ 3211.123116][ T29] audit: type=1326 audit(2000000202.631:4745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20431 comm="syz.7.13949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f963839c799 code=0x7ffc0000 [ 3211.123120][T20436] bridge_slave_0: left promiscuous mode [ 3211.123161][ T29] audit: type=1326 audit(2000000202.631:4746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20431 comm="syz.7.13949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963839c799 code=0x7ffc0000 [ 3211.147604][T20436] bridge0: port 1(bridge_slave_0) entered disabled state [ 3211.152751][ T29] audit: type=1326 audit(2000000202.631:4747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20431 comm="syz.7.13949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963839c799 code=0x7ffc0000 [ 3211.240086][ T29] audit: type=1326 audit(2000000202.631:4748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20431 comm="syz.7.13949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f963839c799 code=0x7ffc0000 [ 3211.264697][ T29] audit: type=1326 audit(2000000202.631:4749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20431 comm="syz.7.13949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963839c799 code=0x7ffc0000 [ 3211.290162][ T29] audit: type=1326 audit(2000000202.631:4750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20431 comm="syz.7.13949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f963839c799 code=0x7ffc0000 [ 3211.317008][T20436] bridge_slave_1: left allmulticast mode [ 3211.324099][T20436] bridge_slave_1: left promiscuous mode [ 3211.380675][T18166] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 3211.435839][T20436] bridge0: port 2(bridge_slave_1) entered disabled state [ 3211.480942][T20436] bond0: (slave bond_slave_0): Releasing backup interface [ 3211.499070][ T29] audit: type=1326 audit(2000000202.641:4751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20431 comm="syz.7.13949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963839c799 code=0x7ffc0000 [ 3211.532421][T20436] bond0: (slave bond_slave_1): Releasing backup interface [ 3211.549342][T20436] team0: Port device team_slave_0 removed [ 3211.559300][T20436] team0: Port device team_slave_1 removed [ 3211.568898][T20436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3211.576879][T20436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3211.584864][T18166] usb 8-1: Using ep0 maxpacket: 16 [ 3211.594315][ T29] audit: type=1326 audit(2000000202.641:4752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20431 comm="syz.7.13949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963839c799 code=0x7ffc0000 [ 3211.628214][T18166] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3211.643844][T20436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3211.651432][T20436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3211.660304][T20436] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3211.678112][T18166] usb 8-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 3211.691798][T18166] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3211.708687][T18166] usb 8-1: config 0 descriptor?? [ 3211.726568][T18166] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 3211.736111][ T29] audit: type=1326 audit(2000000202.641:4753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20431 comm="syz.7.13949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f963839c799 code=0x7ffc0000 [ 3213.869602][T16709] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 3214.450768][T16709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3214.471740][T16709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3214.497502][T16709] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3214.527244][T16709] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3214.564189][T16709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3214.596674][T16709] usb 5-1: config 0 descriptor?? [ 3214.947707][T18166] usb 8-1: USB disconnect, device number 94 [ 3214.975494][T20467] syzkaller0: entered promiscuous mode [ 3214.992188][T20467] syzkaller0: entered allmulticast mode [ 3215.024223][T20470] netlink: 'syz.5.13958': attribute type 1 has an invalid length. [ 3215.697241][T20479] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 3215.791919][T29255] Bluetooth: hci2: command 0x0406 tx timeout [ 3216.027883][T17589] lec:lec_start_xmit: lec0:No lecd attached [ 3216.260029][T16709] usbhid 5-1:0.0: can't add hid device: -71 [ 3216.266041][T16709] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3216.290782][T16709] usb 5-1: USB disconnect, device number 88 [ 3217.339001][T20506] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13964'. [ 3217.701046][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 3217.701062][ T29] audit: type=1400 audit(2000000209.271:4804): avc: denied { mount } for pid=20516 comm="syz.4.13966" name="/" dev="hugetlbfs" ino=226163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 3217.741907][T20518] hugetlbfs: Bad value 'k^]ØñŠô%' for mount option 'nr_inodes' [ 3217.741907][T20518] [ 3217.743085][ T29] audit: type=1400 audit(2000000209.301:4805): avc: denied { remount } for pid=20516 comm="syz.4.13966" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 3217.840467][T19818] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 3217.864029][ T29] audit: type=1400 audit(2000000209.441:4806): avc: denied { ioctl } for pid=20516 comm="syz.4.13966" path="/dev/uhid" dev="devtmpfs" ino=1273 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 3217.889633][T19818] hid-generic 0000:0000:0000.0090: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3217.920202][T20523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13966'. [ 3217.996056][T20525] ieee802154 phy0 wpan0: encryption failed: -22 [ 3218.146620][T20527] overlayfs: unescaped trailing colons in lowerdir mount option. [ 3218.148089][ T29] audit: type=1400 audit(2000000209.711:4807): avc: denied { mounton } for pid=20524 comm="syz.0.13968" path="/512/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 3219.085743][T20470] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 3219.162654][T20517] geneve2: entered promiscuous mode [ 3219.226866][ T29] audit: type=1400 audit(2000000210.791:4808): avc: denied { unmount } for pid=14883 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 3219.820193][ T5929] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 3220.051743][ T5929] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3220.069105][ T5929] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3220.087448][ T5929] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3220.112269][ T5929] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3220.139551][ T5929] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3220.158596][ T5929] usb 8-1: config 0 descriptor?? [ 3221.229331][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5200 ms [ 3221.237349][ C1] lec:lec_tx_timeout: lec0 [ 3222.693603][ T5929] usbhid 8-1:0.0: can't add hid device: -71 [ 3222.703252][ T5929] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 3222.738526][ T5929] usb 8-1: USB disconnect, device number 95 [ 3222.788994][T19818] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 3223.161924][T19818] usb 6-1: Using ep0 maxpacket: 16 [ 3223.177729][T19818] usb 6-1: config index 0 descriptor too short (expected 526, got 367) [ 3223.639842][T19818] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3223.653264][T19818] usb 6-1: config 0 has no interfaces? [ 3223.698976][T19818] usb 6-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96 [ 3223.711917][T19818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3223.730487][T19818] usb 6-1: Product: syz [ 3223.735047][T19818] usb 6-1: Manufacturer: syz [ 3223.740055][T19818] usb 6-1: SerialNumber: syz [ 3223.750634][T19818] usb 6-1: config 0 descriptor?? [ 3223.980321][T19818] usb 6-1: USB disconnect, device number 31 [ 3226.076327][T20594] netlink: 'syz.4.13989': attribute type 2 has an invalid length. [ 3226.498330][T20607] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 3228.947339][T20625] FAULT_INJECTION: forcing a failure. [ 3228.947339][T20625] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 3228.998993][T20625] CPU: 1 UID: 0 PID: 20625 Comm: syz.5.13996 Tainted: G L syzkaller #0 PREEMPT(full) [ 3228.999024][T20625] Tainted: [L]=SOFTLOCKUP [ 3228.999030][T20625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3228.999041][T20625] Call Trace: [ 3228.999046][T20625] [ 3228.999053][T20625] dump_stack_lvl+0x100/0x190 [ 3228.999084][T20625] should_fail_ex.cold+0x5/0xa [ 3228.999105][T20625] _copy_to_user+0x32/0xd0 [ 3228.999131][T20625] dev_ethtool+0x619/0x5d70 [ 3228.999157][T20625] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3228.999182][T20625] ? is_bpf_text_address+0x94/0x1a0 [ 3228.999206][T20625] ? kernel_text_address+0x8d/0x100 [ 3228.999230][T20625] ? __pfx_dev_ethtool+0x10/0x10 [ 3228.999259][T20625] ? tomoyo_path_number_perm+0x46d/0x580 [ 3228.999287][T20625] ? stack_trace_save+0x8e/0xc0 [ 3228.999308][T20625] ? __pfx_stack_trace_save+0x10/0x10 [ 3228.999331][T20625] ? stack_depot_save_flags+0x27/0x9d0 [ 3228.999361][T20625] ? __lock_acquire+0x4a5/0x2630 [ 3228.999385][T20625] ? __kasan_slab_free+0x5f/0x80 [ 3228.999407][T20625] ? kfree+0x1f6/0x6b0 [ 3228.999424][T20625] ? tomoyo_path_number_perm+0x46d/0x580 [ 3228.999448][T20625] ? security_file_ioctl+0xd3/0x230 [ 3228.999466][T20625] ? __x64_sys_ioctl+0xb7/0x210 [ 3228.999488][T20625] ? do_syscall_64+0x106/0xf80 [ 3228.999506][T20625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3228.999534][T20625] ? find_held_lock+0x2b/0x80 [ 3228.999555][T20625] ? avc_has_extended_perms+0x33a/0x1080 [ 3228.999579][T20625] ? avc_has_extended_perms+0x33a/0x1080 [ 3228.999611][T20625] ? __lock_acquire+0x4a5/0x2630 [ 3228.999639][T20625] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 3228.999689][T20625] ? find_held_lock+0x2b/0x80 [ 3228.999709][T20625] ? dev_load+0x8e/0x240 [ 3228.999733][T20625] ? dev_load+0x8e/0x240 [ 3228.999763][T20625] dev_ioctl+0x63b/0x10e0 [ 3228.999791][T20625] sock_do_ioctl+0x1a0/0x280 [ 3228.999819][T20625] ? __pfx_sock_do_ioctl+0x10/0x10 [ 3228.999846][T20625] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 3228.999870][T20625] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 3228.999896][T20625] sock_ioctl+0x599/0x6b0 [ 3228.999919][T20625] ? __pfx_sock_ioctl+0x10/0x10 [ 3228.999939][T20625] ? hook_file_ioctl_common+0x146/0x410 [ 3228.999970][T20625] ? selinux_file_ioctl+0x139/0x290 [ 3228.999988][T20625] ? selinux_file_ioctl+0xb4/0x290 [ 3229.000009][T20625] ? __pfx_sock_ioctl+0x10/0x10 [ 3229.000033][T20625] __x64_sys_ioctl+0x18e/0x210 [ 3229.000058][T20625] do_syscall_64+0x106/0xf80 [ 3229.000075][T20625] ? clear_bhb_loop+0x40/0x90 [ 3229.000096][T20625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3229.000114][T20625] RIP: 0033:0x7f66cd39c799 [ 3229.000130][T20625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3229.000147][T20625] RSP: 002b:00007f66cb5ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3229.000165][T20625] RAX: ffffffffffffffda RBX: 00007f66cd615fa0 RCX: 00007f66cd39c799 [ 3229.000176][T20625] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000003 [ 3229.000187][T20625] RBP: 00007f66cb5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 3229.000198][T20625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3229.000209][T20625] R13: 00007f66cd616038 R14: 00007f66cd615fa0 R15: 00007ffc8bf586f8 [ 3229.000232][T20625] [ 3229.678832][T20649] netlink: 120 bytes leftover after parsing attributes in process `syz.0.13995'. [ 3229.778510][ T29] audit: type=1400 audit(2000000221.332:4809): avc: denied { mounton } for pid=20618 comm="syz.0.13995" path="/515/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 3229.810120][T20649] netlink: 'syz.0.13995': attribute type 1 has an invalid length. [ 3229.818583][ T7487] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 3229.871127][T20649] netlink: 64 bytes leftover after parsing attributes in process `syz.0.13995'. [ 3230.089063][ T7487] usb 5-1: Using ep0 maxpacket: 16 [ 3230.168031][ T7487] usb 5-1: config index 0 descriptor too short (expected 526, got 367) [ 3230.253465][ T7487] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3230.386896][ T7487] usb 5-1: config 0 has no interfaces? [ 3230.456048][ T7487] usb 5-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96 [ 3230.544553][ T7487] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3230.568735][ T7487] usb 5-1: Product: syz [ 3230.583318][ T7487] usb 5-1: Manufacturer: syz [ 3230.587922][ T7487] usb 5-1: SerialNumber: syz [ 3230.640299][ T7487] usb 5-1: config 0 descriptor?? [ 3230.869947][T20654] lo speed is unknown, defaulting to 1000 [ 3230.875752][T20654] lo speed is unknown, defaulting to 1000 [ 3230.891575][T20654] lo speed is unknown, defaulting to 1000 [ 3230.900855][T20654] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 3230.917004][T20654] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 3230.947776][T20655] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 3230.967467][T20654] lo speed is unknown, defaulting to 1000 [ 3230.975184][T20654] lo speed is unknown, defaulting to 1000 [ 3230.982311][T20654] lo speed is unknown, defaulting to 1000 [ 3230.989528][T20654] lo speed is unknown, defaulting to 1000 [ 3230.996605][T20654] lo speed is unknown, defaulting to 1000 [ 3231.003692][T20654] lo speed is unknown, defaulting to 1000 [ 3231.010963][T20654] lo speed is unknown, defaulting to 1000 [ 3231.017981][T20654] lo speed is unknown, defaulting to 1000 [ 3231.025129][T20654] lo speed is unknown, defaulting to 1000 [ 3231.032546][T20654] lo speed is unknown, defaulting to 1000 [ 3231.039956][T20654] lo speed is unknown, defaulting to 1000 [ 3231.047017][T20654] lo speed is unknown, defaulting to 1000 [ 3231.076728][ T7487] usb 5-1: USB disconnect, device number 89 [ 3231.370736][ T29] audit: type=1400 audit(2000000222.942:4810): avc: denied { nlmsg_read } for pid=20659 comm="syz.0.14002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3234.665551][ T29] audit: type=1400 audit(2000000225.382:4811): avc: denied { create } for pid=20661 comm="syz.5.14003" name="#29" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 3234.761377][ T29] audit: type=1400 audit(2000000225.382:4812): avc: denied { link } for pid=20661 comm="syz.5.14003" name="#29" dev="tmpfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 3234.974684][ T29] audit: type=1400 audit(2000000225.382:4813): avc: denied { rename } for pid=20661 comm="syz.5.14003" name="#2a" dev="tmpfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 3235.931580][ T29] audit: type=1400 audit(2000000227.502:4814): avc: denied { bind } for pid=20690 comm="syz.5.14010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 3236.227585][ T29] audit: type=1400 audit(2000000227.792:4815): avc: denied { setopt } for pid=20693 comm="syz.0.14012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 3236.250931][ T7487] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 3236.450759][ T7487] usb 6-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 3236.528597][ T7487] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3236.707446][ T7487] usb 6-1: config 0 descriptor?? [ 3236.780333][ T7487] rndis_host 6-1:0.0: skipping garbage [ 3236.785834][ T7487] usb 6-1: bad CDC descriptors [ 3237.095534][T16709] usb 6-1: USB disconnect, device number 32 [ 3237.303211][T20718] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 3237.718506][ T7487] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 3238.338260][T20722] siw: device registration error -23 [ 3238.722059][ T7487] usb 5-1: device descriptor read/64, error -71 [ 3238.772913][T15344] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3238.968054][ T7487] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 3239.064812][T20720] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 3239.284414][ T7487] usb 5-1: device descriptor read/64, error -71 [ 3239.839663][ T7487] usb usb5-port1: attempt power cycle [ 3240.417985][ T29] audit: type=1400 audit(2000000231.982:4816): avc: denied { create } for pid=20740 comm="syz.7.14026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 3240.458885][ T29] audit: type=1400 audit(2000000231.982:4817): avc: denied { ioctl } for pid=20740 comm="syz.7.14026" path="socket:[228639]" dev="sockfs" ino=228639 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 3240.525399][ T29] audit: type=1400 audit(2000000231.992:4818): avc: denied { write } for pid=20740 comm="syz.7.14026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 3242.278150][ T5859] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 3242.439838][ T5859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3242.471056][ T5859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3242.506527][ T5859] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3242.820315][ T5859] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 3242.830020][ T5859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3242.841404][ T5859] usb 6-1: config 0 descriptor?? [ 3243.458145][T20761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3243.494344][T20761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3243.534531][ T5859] steelseries 0003:1038:1410.0091: unknown main item tag 0x0 [ 3243.558293][ T5859] steelseries 0003:1038:1410.0091: unknown main item tag 0x0 [ 3243.831475][ T5859] steelseries 0003:1038:1410.0091: unknown main item tag 0x0 [ 3243.854710][ T5859] steelseries 0003:1038:1410.0091: unknown main item tag 0x0 [ 3244.008836][ T5859] steelseries 0003:1038:1410.0091: unknown main item tag 0x0 [ 3244.016302][ T5859] steelseries 0003:1038:1410.0091: unknown main item tag 0x0 [ 3244.025738][ T5859] steelseries 0003:1038:1410.0091: unknown main item tag 0x0 [ 3244.034125][ T5859] steelseries 0003:1038:1410.0091: missing HID_OUTPUT_REPORT 0 [ 3244.062669][ T5859] usb 6-1: USB disconnect, device number 33 [ 3244.450649][T20780] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3244.836823][T20790] dummy0: entered promiscuous mode [ 3245.655510][T20796] bond5: option lp_interval: invalid value (0) [ 3245.661783][T20796] bond5: option lp_interval: allowed values 1 - 2147483647 [ 3245.680002][T20796] bond5 (unregistering): Released all slaves [ 3245.687234][T20798] netlink: 204 bytes leftover after parsing attributes in process `syz.7.14041'. [ 3245.712439][T20789] dummy0: left promiscuous mode [ 3245.883525][T20805] FAULT_INJECTION: forcing a failure. [ 3245.883525][T20805] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 3245.897923][T20805] CPU: 0 UID: 0 PID: 20805 Comm: syz.5.14043 Tainted: G L syzkaller #0 PREEMPT(full) [ 3245.897952][T20805] Tainted: [L]=SOFTLOCKUP [ 3245.897958][T20805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3245.897966][T20805] Call Trace: [ 3245.897970][T20805] [ 3245.897975][T20805] dump_stack_lvl+0x100/0x190 [ 3245.897998][T20805] should_fail_ex.cold+0x5/0xa [ 3245.898011][T20805] ? prepare_alloc_pages+0x16d/0x5f0 [ 3245.898024][T20805] should_fail_alloc_page+0xeb/0x140 [ 3245.898043][T20805] prepare_alloc_pages+0x1f0/0x5f0 [ 3245.898056][T20805] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 3245.898072][T20805] ? rcu_is_watching+0x12/0xc0 [ 3245.898086][T20805] ? trace_sched_exit_tp+0x13a/0x180 [ 3245.898104][T20805] ? __schedule+0x1000/0x60e0 [ 3245.898125][T20805] ? rcu_is_watching+0x12/0xc0 [ 3245.898137][T20805] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 3245.898154][T20805] ? css_rstat_updated+0x1ce/0x5a0 [ 3245.898172][T20805] ? __pfx_css_rstat_updated+0x10/0x10 [ 3245.898194][T20805] ? __cgroup_account_cputime+0xd5/0x130 [ 3245.898211][T20805] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3245.898227][T20805] ? policy_nodemask+0xed/0x4f0 [ 3245.898247][T20805] alloc_pages_mpol+0x1fb/0x550 [ 3245.898266][T20805] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 3245.898283][T20805] ? trace_sched_exit_tp+0x13a/0x180 [ 3245.898302][T20805] folio_alloc_mpol_noprof+0x36/0x340 [ 3245.898315][T20805] shmem_alloc_folio+0x135/0x160 [ 3245.898328][T20805] shmem_alloc_and_add_folio+0x371/0xd40 [ 3245.898347][T20805] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 3245.898364][T20805] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 3245.898383][T20805] shmem_get_folio_gfp+0x6ab/0x1900 [ 3245.898401][T20805] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 3245.898420][T20805] shmem_write_begin+0x1a4/0x420 [ 3245.898437][T20805] ? __pfx_shmem_write_begin+0x10/0x10 [ 3245.898453][T20805] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 3245.898472][T20805] ? __mark_inode_dirty+0xff5/0x1790 [ 3245.898490][T20805] generic_perform_write+0x292/0xa40 [ 3245.898508][T20805] ? __pfx_generic_perform_write+0x10/0x10 [ 3245.898522][T20805] ? __mark_inode_dirty+0x55c/0x1790 [ 3245.898538][T20805] ? mnt_put_write_access_file+0x4e/0x100 [ 3245.898550][T20805] ? file_update_time_flags+0x373/0x500 [ 3245.898566][T20805] shmem_file_write_iter+0x10e/0x140 [ 3245.898585][T20805] do_iter_readv_writev+0x6ee/0x920 [ 3245.898601][T20805] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 3245.898625][T20805] vfs_writev+0x360/0xe10 [ 3245.898640][T20805] ? rcu_is_watching+0x12/0xc0 [ 3245.898656][T20805] ? __pfx_vfs_writev+0x10/0x10 [ 3245.898670][T20805] ? fdget_pos+0x2aa/0x380 [ 3245.898682][T20805] ? find_held_lock+0x2b/0x80 [ 3245.898705][T20805] ? __fget_files+0x21f/0x3d0 [ 3245.898719][T20805] ? do_writev+0x13e/0x340 [ 3245.898733][T20805] do_writev+0x13e/0x340 [ 3245.898748][T20805] ? __pfx_do_writev+0x10/0x10 [ 3245.898768][T20805] do_syscall_64+0x106/0xf80 [ 3245.898779][T20805] ? clear_bhb_loop+0x40/0x90 [ 3245.898793][T20805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3245.898804][T20805] RIP: 0033:0x7f66cd39c799 [ 3245.898815][T20805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3245.898826][T20805] RSP: 002b:00007f66cb5cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3245.898837][T20805] RAX: ffffffffffffffda RBX: 00007f66cd616090 RCX: 00007f66cd39c799 [ 3245.898844][T20805] RDX: 0000000000000021 RSI: 0000200000000a40 RDI: 0000000000000006 [ 3245.898851][T20805] RBP: 00007f66cb5cd090 R08: 0000000000000000 R09: 0000000000000000 [ 3245.898857][T20805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3245.898868][T20805] R13: 00007f66cd616128 R14: 00007f66cd616090 R15: 00007ffc8bf586f8 [ 3245.898883][T20805] [ 3246.307266][T20808] binder: 20807:20808 ioctl c018620c 200000000240 returned -22 [ 3246.882649][T20823] ªªªªªª5gæ¹Q[Ô: renamed from lo (while UP) [ 3247.792971][ T5859] kernel read not supported for file /dsp1 (pid: 5859 comm: kworker/0:4) [ 3247.807135][T20829] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3250.298942][ T7487] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 3250.433058][T20865] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3250.468965][ T7487] usb 8-1: Using ep0 maxpacket: 16 [ 3250.479587][ T7487] usb 8-1: config index 0 descriptor too short (expected 526, got 367) [ 3250.497494][ T7487] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3250.517887][ T7487] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3250.548174][ T7487] usb 8-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96 [ 3250.557233][ T7487] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3250.607930][ T7487] usb 8-1: Product: syz [ 3250.612127][ T7487] usb 8-1: Manufacturer: syz [ 3250.616720][ T7487] usb 8-1: SerialNumber: syz [ 3250.787843][ T7487] usb 8-1: config 0 descriptor?? [ 3251.138210][ T7487] usb 8-1: USB disconnect, device number 96 [ 3251.355394][T20881] dummy0: entered promiscuous mode [ 3251.362420][ T5818] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 3251.362507][T20881] netlink: 'syz.0.14066': attribute type 3 has an invalid length. [ 3251.388181][T20871] ip6gretap0: entered promiscuous mode [ 3251.394004][T20871] vlan2: entered promiscuous mode [ 3251.422296][T20880] dummy0: left promiscuous mode [ 3251.608956][T20886] overlayfs: failed to resolve 'dont_measure': -2 [ 3251.609640][ T29] audit: type=1400 audit(2000000243.183:4819): avc: denied { mounton } for pid=20885 comm="syz.4.14067" path="/295/file0" dev="configfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3251.655856][ T29] audit: type=1400 audit(2000000243.223:4820): avc: denied { unmount } for pid=20885 comm="syz.4.14067" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 3251.690538][T20886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14067'. [ 3252.201771][T20909] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3252.558316][T20916] syzkaller0: entered promiscuous mode [ 3252.563852][T20916] syzkaller0: entered allmulticast mode [ 3252.711942][T20921] FAULT_INJECTION: forcing a failure. [ 3252.711942][T20921] name failslab, interval 1, probability 0, space 0, times 1 [ 3252.818930][T20923] kAFS: unable to lookup cell 'ÿ' [ 3252.825070][T20923] kAFS: unable to lookup cell '(,c¾Ì' [ 3252.862521][T20921] CPU: 1 UID: 0 PID: 20921 Comm: syz.7.14076 Tainted: G L syzkaller #0 PREEMPT(full) [ 3252.862550][T20921] Tainted: [L]=SOFTLOCKUP [ 3252.862556][T20921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3252.862566][T20921] Call Trace: [ 3252.862572][T20921] [ 3252.862579][T20921] dump_stack_lvl+0x100/0x190 [ 3252.862612][T20921] should_fail_ex.cold+0x5/0xa [ 3252.862634][T20921] ? tomoyo_encode2+0xfb/0x3c0 [ 3252.862654][T20921] should_failslab+0xc2/0x120 [ 3252.862681][T20921] __kmalloc_noprof+0xe0/0x850 [ 3252.862710][T20921] ? d_absolute_path+0x136/0x1b0 [ 3252.862737][T20921] tomoyo_encode2+0xfb/0x3c0 [ 3252.862761][T20921] tomoyo_encode+0x29/0x50 [ 3252.862780][T20921] tomoyo_realpath_from_path+0x18c/0x690 [ 3252.862806][T20921] tomoyo_check_open_permission+0x2af/0x3c0 [ 3252.862836][T20921] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 3252.862888][T20921] ? do_raw_spin_lock+0x128/0x260 [ 3252.862909][T20921] ? path_get+0x61/0x80 [ 3252.862931][T20921] tomoyo_file_open+0x6b/0x90 [ 3252.862956][T20921] security_file_open+0xb5/0x1e0 [ 3252.862977][T20921] do_dentry_open+0x5aa/0x1660 [ 3252.863005][T20921] ? security_inode_permission+0xbf/0x250 [ 3252.863028][T20921] vfs_open+0x82/0x3f0 [ 3252.863051][T20921] path_openat+0x208c/0x31a0 [ 3252.863077][T20921] ? __pfx_path_openat+0x10/0x10 [ 3252.863104][T20921] do_file_open+0x20e/0x430 [ 3252.863123][T20921] ? __pfx_do_file_open+0x10/0x10 [ 3252.863160][T20921] ? alloc_fd+0x476/0x790 [ 3252.863180][T20921] ? do_getname+0x191/0x390 [ 3252.863204][T20921] do_sys_openat2+0x10d/0x1e0 [ 3252.863225][T20921] ? __pfx_do_sys_openat2+0x10/0x10 [ 3252.863243][T20921] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3252.863266][T20921] ? __fget_files+0x21f/0x3d0 [ 3252.863287][T20921] __x64_sys_openat+0x12d/0x210 [ 3252.863309][T20921] ? __pfx___x64_sys_openat+0x10/0x10 [ 3252.863327][T20921] ? ksys_write+0x1ac/0x250 [ 3252.863360][T20921] do_syscall_64+0x106/0xf80 [ 3252.863377][T20921] ? clear_bhb_loop+0x40/0x90 [ 3252.863398][T20921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3252.863415][T20921] RIP: 0033:0x7f963839c799 [ 3252.863431][T20921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3252.863447][T20921] RSP: 002b:00007f9639332028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3252.863464][T20921] RAX: ffffffffffffffda RBX: 00007f9638615fa0 RCX: 00007f963839c799 [ 3252.863475][T20921] RDX: 0000000000004000 RSI: 0000200000003a00 RDI: ffffffffffffff9c [ 3252.863486][T20921] RBP: 00007f9639332090 R08: 0000000000000000 R09: 0000000000000000 [ 3252.863496][T20921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3252.863506][T20921] R13: 00007f9638616038 R14: 00007f9638615fa0 R15: 00007ffd1e19ee18 [ 3252.863531][T20921] [ 3252.863551][T20921] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3253.528301][T20929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14078'. [ 3253.537498][T20929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14078'. [ 3253.546583][T20929] netlink: 'syz.4.14078': attribute type 13 has an invalid length. [ 3253.554599][T20929] netlink: 'syz.4.14078': attribute type 12 has an invalid length. [ 3254.700368][ T29] audit: type=1400 audit(2000000246.253:4821): avc: denied { execheap } for pid=20940 comm="syz.7.14083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 3256.319229][T20950] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3256.397990][T20957] blktrace: Concurrent blktraces are not allowed on sg0 [ 3256.797071][ T7487] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 3256.797071][T19818] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 3256.837055][T18166] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 3256.949142][ T7487] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 3256.960880][ T7487] usb 6-1: config 0 has no interface number 0 [ 3256.968255][ T7487] usb 6-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3256.980898][ T7487] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3256.996131][T19818] usb 8-1: unable to get BOS descriptor or descriptor too short [ 3256.997878][T18166] usb 5-1: Using ep0 maxpacket: 32 [ 3257.010625][ T7487] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3257.015266][T19818] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 3257.021257][ T7487] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 3257.028560][T19818] usb 8-1: can't read configurations, error -71 [ 3257.038543][ T7487] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3257.052380][T18166] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3257.064291][T18166] usb 5-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 3257.073783][ T7487] usb 6-1: config 0 descriptor?? [ 3257.079000][T18166] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3257.090040][T18166] usb 5-1: Product: syz [ 3257.094771][ T7487] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input382 [ 3257.105881][T18166] usb 5-1: Manufacturer: syz [ 3257.110559][T18166] usb 5-1: SerialNumber: syz [ 3257.181715][ T29] audit: type=1400 audit(2000000248.753:4822): avc: denied { map } for pid=20974 comm="syz.0.14097" path="socket:[228253]" dev="sockfs" ino=228253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 3257.424598][T18166] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 3257.436467][T18166] usb 5-1: unit 37 not found! [ 3257.441256][T18166] usb 5-1: unit 0 not found! [ 3257.469087][T18166] usb 5-1: USB disconnect, device number 93 [ 3257.534686][T20832] udevd[20832]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3257.946617][T20986] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3258.248987][ T29] audit: type=1400 audit(2000000249.823:4823): avc: denied { listen } for pid=20992 comm="syz.0.14101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 3258.416481][T20999] syzkaller0: entered promiscuous mode [ 3258.447038][T20999] syzkaller0: entered allmulticast mode [ 3259.719624][T21007] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3259.801886][T21007] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3259.926257][T21007] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3259.946805][ T5859] usb 6-1: USB disconnect, device number 34 [ 3259.974100][T21007] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3260.082634][ T153] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3260.095770][ T153] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3260.127346][ T153] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3260.155866][ T153] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3260.187051][ T29] audit: type=1326 audit(2000000251.744:4824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21012 comm="syz.5.14108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66cd39c799 code=0x7ffc0000 [ 3260.206858][T19818] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 3260.225193][ T29] audit: type=1326 audit(2000000251.744:4825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21012 comm="syz.5.14108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66cd39c799 code=0x7ffc0000 [ 3260.257993][ T29] audit: type=1326 audit(2000000251.744:4826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21012 comm="syz.5.14108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f66cd39c799 code=0x7ffc0000 [ 3260.338261][ T29] audit: type=1326 audit(2000000251.744:4827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21012 comm="syz.5.14108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66cd39c799 code=0x7ffc0000 [ 3260.362538][ T29] audit: type=1326 audit(2000000251.754:4828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21012 comm="syz.5.14108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66cd39c799 code=0x7ffc0000 [ 3260.414546][ T29] audit: type=1326 audit(2000000251.754:4829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21012 comm="syz.5.14108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66cd39c799 code=0x7ffc0000 [ 3260.477277][T19818] usb 5-1: Using ep0 maxpacket: 16 [ 3260.484832][T19818] usb 5-1: config index 0 descriptor too short (expected 526, got 367) [ 3260.506253][T21021] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3260.522483][ T29] audit: type=1326 audit(2000000251.754:4830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21012 comm="syz.5.14108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66cd39c799 code=0x7ffc0000 [ 3260.558567][ T29] audit: type=1326 audit(2000000251.754:4831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21012 comm="syz.5.14108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f66cd39c799 code=0x7ffc0000 [ 3260.608707][ T5859] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 3260.635117][T21025] FAULT_INJECTION: forcing a failure. [ 3260.635117][T21025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3260.650497][T21025] CPU: 1 UID: 0 PID: 21025 Comm: syz.0.14113 Tainted: G L syzkaller #0 PREEMPT(full) [ 3260.650526][T21025] Tainted: [L]=SOFTLOCKUP [ 3260.650533][T21025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3260.650542][T21025] Call Trace: [ 3260.650549][T21025] [ 3260.650556][T21025] dump_stack_lvl+0x100/0x190 [ 3260.650595][T21025] should_fail_ex.cold+0x5/0xa [ 3260.650619][T21025] _copy_from_user+0x2e/0xd0 [ 3260.650643][T21025] move_addr_to_kernel+0x65/0x170 [ 3260.650669][T21025] __sys_bind+0x11d/0x260 [ 3260.650693][T21025] ? __pfx___sys_bind+0x10/0x10 [ 3260.650715][T21025] ? __fget_files+0x21f/0x3d0 [ 3260.650741][T21025] ? __pfx_ksys_write+0x10/0x10 [ 3260.650771][T21025] __x64_sys_bind+0x72/0xb0 [ 3260.650793][T21025] ? lockdep_hardirqs_on+0x78/0x100 [ 3260.650810][T21025] do_syscall_64+0x106/0xf80 [ 3260.650826][T21025] ? clear_bhb_loop+0x40/0x90 [ 3260.650847][T21025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3260.650865][T21025] RIP: 0033:0x7fbbff39c799 [ 3260.650880][T21025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3260.650896][T21025] RSP: 002b:00007fbc002e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 3260.650913][T21025] RAX: ffffffffffffffda RBX: 00007fbbff615fa0 RCX: 00007fbbff39c799 [ 3260.650924][T21025] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 3260.650935][T21025] RBP: 00007fbc002e7090 R08: 0000000000000000 R09: 0000000000000000 [ 3260.650945][T21025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3260.650955][T21025] R13: 00007fbbff616038 R14: 00007fbbff615fa0 R15: 00007ffce6899758 [ 3260.650979][T21025] [ 3260.653616][T19818] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3260.848182][T19818] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3260.862723][T19818] usb 5-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96 [ 3260.877392][T19818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3260.885662][T19818] usb 5-1: Product: syz [ 3260.890259][T19818] usb 5-1: Manufacturer: syz [ 3260.894855][T19818] usb 5-1: SerialNumber: syz [ 3260.938094][ T5859] usb 6-1: Using ep0 maxpacket: 16 [ 3260.959735][T19818] usb 5-1: config 0 descriptor?? [ 3261.005998][ T5859] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3261.034117][ T5859] usb 6-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 3261.056103][ T5859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3261.085289][ T5859] usb 6-1: config 0 descriptor?? [ 3261.122293][ T5859] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 3261.184081][ T5929] usb 5-1: USB disconnect, device number 94 [ 3261.875949][T21044] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 3261.884811][T21044] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3262.072282][T21054] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 3262.426809][ T5929] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 3262.590350][ T5929] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3262.604193][ T5929] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3262.616520][ T5929] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3262.630546][ T5929] usb 8-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 3262.642320][ T5929] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3262.655970][ T5929] usb 8-1: config 0 descriptor?? [ 3263.077076][T21058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3263.108756][ T5919] usb 6-1: USB disconnect, device number 35 [ 3263.150946][T21058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3263.188846][ T5929] steelseries 0003:1038:1410.0092: unknown main item tag 0x0 [ 3263.206517][ T5929] steelseries 0003:1038:1410.0092: unknown main item tag 0x0 [ 3263.231899][ T5929] steelseries 0003:1038:1410.0092: unknown main item tag 0x0 [ 3263.241996][ T5929] steelseries 0003:1038:1410.0092: unknown main item tag 0x0 [ 3263.262208][ T5929] steelseries 0003:1038:1410.0092: unknown main item tag 0x0 [ 3263.282450][ T5929] steelseries 0003:1038:1410.0092: unknown main item tag 0x0 [ 3263.297339][ T5929] steelseries 0003:1038:1410.0092: unknown main item tag 0x0 [ 3263.316960][ T5929] steelseries 0003:1038:1410.0092: missing HID_OUTPUT_REPORT 0 [ 3263.384380][ T5929] usb 8-1: USB disconnect, device number 99 [ 3263.495516][T21070] fuse: Unknown parameter 'user_i00000000000000000000' [ 3263.754937][T21078] autofs: Bad value for 'fd' [ 3264.397041][T18166] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 3264.645146][T21103] fuse: Unknown parameter 'user_i00000000000000000000' [ 3264.671720][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 3264.680305][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 3264.856296][T21107] netlink: 36 bytes leftover after parsing attributes in process `syz.4.14143'. [ 3264.876986][T21107] overlayfs: missing 'lowerdir' [ 3264.977132][T21112] FAULT_INJECTION: forcing a failure. [ 3264.977132][T21112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3265.014821][T21112] CPU: 0 UID: 0 PID: 21112 Comm: syz.5.14145 Tainted: G L syzkaller #0 PREEMPT(full) [ 3265.014851][T21112] Tainted: [L]=SOFTLOCKUP [ 3265.014858][T21112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3265.014867][T21112] Call Trace: [ 3265.014873][T21112] [ 3265.014880][T21112] dump_stack_lvl+0x100/0x190 [ 3265.014915][T21112] should_fail_ex.cold+0x5/0xa [ 3265.014939][T21112] _copy_from_user+0x2e/0xd0 [ 3265.014965][T21112] move_addr_to_kernel+0x65/0x170 [ 3265.014991][T21112] __sys_sendto+0x1c9/0x520 [ 3265.015018][T21112] ? __pfx___sys_sendto+0x10/0x10 [ 3265.015065][T21112] ? __pfx_sched_clock_cpu+0x10/0x10 [ 3265.015093][T21112] ? __pfx_flush_tlb_func+0x10/0x10 [ 3265.015112][T21112] ? rcu_is_watching+0x12/0xc0 [ 3265.015136][T21112] __x64_sys_sendto+0xe0/0x1c0 [ 3265.015163][T21112] ? do_syscall_64+0x95/0xf80 [ 3265.015181][T21112] ? lockdep_hardirqs_on+0x78/0x100 [ 3265.015200][T21112] do_syscall_64+0x106/0xf80 [ 3265.015217][T21112] ? clear_bhb_loop+0x40/0x90 [ 3265.015240][T21112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3265.015259][T21112] RIP: 0033:0x7f66cd39c799 [ 3265.015274][T21112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3265.015291][T21112] RSP: 002b:00007f66cb5ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 3265.015309][T21112] RAX: ffffffffffffffda RBX: 00007f66cd615fa0 RCX: 00007f66cd39c799 [ 3265.015320][T21112] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 3265.015330][T21112] RBP: 00007f66cb5ee090 R08: 0000200000000140 R09: 0000000000000014 [ 3265.015340][T21112] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 3265.015350][T21112] R13: 00007f66cd616038 R14: 00007f66cd615fa0 R15: 00007ffc8bf586f8 [ 3265.015374][T21112] [ 3265.372384][T21117] blktrace: Concurrent blktraces are not allowed on sg0 [ 3265.943418][T21139] fuse: Bad value for 'fd' [ 3266.040269][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 3266.040286][ T29] audit: type=1326 audit(2000000257.614:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21137 comm="syz.5.14153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66cd39c799 code=0x7ffc0000 [ 3266.179336][ T29] audit: type=1326 audit(2000000257.614:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21137 comm="syz.5.14153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66cd39c799 code=0x7ffc0000 [ 3266.275771][ T29] audit: type=1326 audit(2000000257.614:4881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21137 comm="syz.5.14153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f66cd39c799 code=0x7ffc0000 [ 3266.306729][ T29] audit: type=1326 audit(2000000257.614:4882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21137 comm="syz.5.14153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f66cd39c502 code=0x7ffc0000 [ 3266.339395][ T29] audit: type=1326 audit(2000000257.614:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21137 comm="syz.5.14153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f66cd39c502 code=0x7ffc0000 [ 3266.512830][ T29] audit: type=1326 audit(2000000257.614:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21137 comm="syz.5.14153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f66cd39c799 code=0x7ffc0000 [ 3266.578965][T21153] block device autoloading is deprecated and will be removed. [ 3266.697989][ T29] audit: type=1326 audit(2000000257.624:4885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21137 comm="syz.5.14153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f66cd39c502 code=0x7ffc0000 [ 3266.740041][T21165] /dev/sg0: Can't lookup blockdev [ 3266.820656][ T29] audit: type=1326 audit(2000000257.624:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21137 comm="syz.5.14153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f66cd39c502 code=0x7ffc0000 [ 3266.905821][ T29] audit: type=1326 audit(2000000257.624:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21137 comm="syz.5.14153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f66cd39c799 code=0x7ffc0000 [ 3266.934588][ T29] audit: type=1326 audit(2000000257.624:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21137 comm="syz.5.14153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f66cd39c502 code=0x7ffc0000 [ 3268.105047][T21183] FAULT_INJECTION: forcing a failure. [ 3268.105047][T21183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3269.032296][T21183] CPU: 1 UID: 0 PID: 21183 Comm: syz.7.14162 Tainted: G L syzkaller #0 PREEMPT(full) [ 3269.032325][T21183] Tainted: [L]=SOFTLOCKUP [ 3269.032332][T21183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3269.032342][T21183] Call Trace: [ 3269.032348][T21183] [ 3269.032354][T21183] dump_stack_lvl+0x100/0x190 [ 3269.032385][T21183] should_fail_ex.cold+0x5/0xa [ 3269.032408][T21183] _copy_to_user+0x32/0xd0 [ 3269.032436][T21183] simple_read_from_buffer+0xcb/0x170 [ 3269.032464][T21183] proc_fail_nth_read+0x1af/0x230 [ 3269.032486][T21183] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3269.032515][T21183] ? rw_verify_area+0xce/0x6d0 [ 3269.032535][T21183] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3269.032556][T21183] vfs_read+0x1e4/0xb30 [ 3269.032582][T21183] ? __pfx_vfs_read+0x10/0x10 [ 3269.032603][T21183] ? __fget_files+0x215/0x3d0 [ 3269.032624][T21183] ? __fget_files+0x21f/0x3d0 [ 3269.032645][T21183] ksys_read+0x12a/0x250 [ 3269.032668][T21183] ? __pfx_ksys_read+0x10/0x10 [ 3269.032699][T21183] do_syscall_64+0x106/0xf80 [ 3269.032716][T21183] ? clear_bhb_loop+0x40/0x90 [ 3269.032739][T21183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3269.032757][T21183] RIP: 0033:0x7f963835cfce [ 3269.032773][T21183] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3269.032789][T21183] RSP: 002b:00007f9639310fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3269.032806][T21183] RAX: ffffffffffffffda RBX: 00007f96393116c0 RCX: 00007f963835cfce [ 3269.032818][T21183] RDX: 000000000000000f RSI: 00007f96393110a0 RDI: 0000000000000005 [ 3269.032828][T21183] RBP: 00007f9639311090 R08: 0000000000000000 R09: 0000000000000000 [ 3269.032838][T21183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3269.032848][T21183] R13: 00007f9638616128 R14: 00007f9638616090 R15: 00007ffd1e19ee18 [ 3269.032872][T21183] [ 3270.266298][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 3270.274345][ C1] lec:lec_tx_timeout: lec0 [ 3272.332931][T21208] FAULT_INJECTION: forcing a failure. [ 3272.332931][T21208] name failslab, interval 1, probability 0, space 0, times 0 [ 3272.383516][T21208] CPU: 1 UID: 0 PID: 21208 Comm: syz.7.14172 Tainted: G L syzkaller #0 PREEMPT(full) [ 3272.383547][T21208] Tainted: [L]=SOFTLOCKUP [ 3272.383553][T21208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3272.383564][T21208] Call Trace: [ 3272.383570][T21208] [ 3272.383577][T21208] dump_stack_lvl+0x100/0x190 [ 3272.383611][T21208] should_fail_ex.cold+0x5/0xa [ 3272.383634][T21208] ? tomoyo_realpath_from_path+0xb6/0x690 [ 3272.383655][T21208] should_failslab+0xc2/0x120 [ 3272.383682][T21208] __kmalloc_noprof+0xe0/0x850 [ 3272.383712][T21208] tomoyo_realpath_from_path+0xb6/0x690 [ 3272.383739][T21208] tomoyo_path_number_perm+0x23c/0x580 [ 3272.383767][T21208] ? tomoyo_path_number_perm+0x22e/0x580 [ 3272.383796][T21208] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3272.383850][T21208] ? find_held_lock+0x2b/0x80 [ 3272.383872][T21208] ? __fget_files+0x215/0x3d0 [ 3272.383888][T21208] ? hook_file_ioctl_common+0x146/0x410 [ 3272.383916][T21208] ? __fget_files+0x21f/0x3d0 [ 3272.383937][T21208] security_file_ioctl+0xd3/0x230 [ 3272.383958][T21208] __x64_sys_ioctl+0xb7/0x210 [ 3272.383985][T21208] do_syscall_64+0x106/0xf80 [ 3272.384004][T21208] ? clear_bhb_loop+0x40/0x90 [ 3272.384027][T21208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3272.384046][T21208] RIP: 0033:0x7f963839c799 [ 3272.384061][T21208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3272.384078][T21208] RSP: 002b:00007f9639332028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3272.384096][T21208] RAX: ffffffffffffffda RBX: 00007f9638615fa0 RCX: 00007f963839c799 [ 3272.384108][T21208] RDX: 0000200000000000 RSI: 000000008008af83 RDI: 0000000000000003 [ 3272.384118][T21208] RBP: 00007f9639332090 R08: 0000000000000000 R09: 0000000000000000 [ 3272.384129][T21208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3272.384139][T21208] R13: 00007f9638616038 R14: 00007f9638615fa0 R15: 00007ffd1e19ee18 [ 3272.384164][T21208] [ 3272.384172][T21208] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3272.726357][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 3272.726375][ T29] audit: type=1326 audit(2000000264.264:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21211 comm="syz.0.14174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbff39c799 code=0x7ffc0000 [ 3273.100836][ T29] audit: type=1326 audit(2000000264.274:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21211 comm="syz.0.14174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbff39c799 code=0x7ffc0000 [ 3273.124696][ T29] audit: type=1326 audit(2000000264.274:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21211 comm="syz.0.14174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbff39c799 code=0x7ffc0000 [ 3273.152663][ T29] audit: type=1326 audit(2000000264.274:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21211 comm="syz.0.14174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fbbff39c799 code=0x7ffc0000 [ 3273.229385][ T29] audit: type=1326 audit(2000000264.274:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21211 comm="syz.0.14174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbff39c799 code=0x7ffc0000 [ 3273.356882][ T29] audit: type=1326 audit(2000000264.274:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21211 comm="syz.0.14174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbff39c799 code=0x7ffc0000 [ 3273.511055][ T29] audit: type=1326 audit(2000000264.274:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21211 comm="syz.0.14174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbff39c799 code=0x7ffc0000 [ 3273.579746][ T29] audit: type=1326 audit(2000000264.274:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21211 comm="syz.0.14174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fbbff39c799 code=0x7ffc0000 [ 3273.658358][ T29] audit: type=1326 audit(2000000264.274:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21211 comm="syz.0.14174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbff39c799 code=0x7ffc0000 [ 3273.720936][ T29] audit: type=1326 audit(2000000264.274:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21211 comm="syz.0.14174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbff39c799 code=0x7ffc0000 [ 3319.698856][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 3319.698875][ T29] audit: type=1326 audit(2000000311.237:4968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21211 comm="syz.0.14174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fbbff39c799 code=0x7ffc0000 [ 3360.323539][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 3361.537723][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 3367.222057][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5680 ms [ 3367.230071][ C1] lec:lec_tx_timeout: lec0 [ 3378.840075][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 3378.847025][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P21223/3:b..l [ 3378.855516][ C1] rcu: (detected by 1, t=10502 jiffies, g=412309, q=941649 ncpus=2) [ 3378.863568][ C1] task:syz.4.14175 state:R running task stack:27000 pid:21223 tgid:21221 ppid:14883 task_flags:0x400040 flags:0x00080002 [ 3378.878858][ C1] Call Trace: [ 3378.882137][ C1] [ 3378.885061][ C1] __schedule+0xfee/0x60e0 [ 3378.889479][ C1] ? enqueue_to_backlog+0x498/0x1010 [ 3378.894761][ C1] ? netif_rx_internal+0x109/0x630 [ 3378.899871][ C1] ? __pfx___schedule+0x10/0x10 [ 3378.904719][ C1] ? trace_netif_rx_exit+0x6d/0x240 [ 3378.909894][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 3378.915253][ C1] preempt_schedule_common+0x42/0xc0 [ 3378.920552][ C1] preempt_schedule_thunk+0x16/0x30 [ 3378.925754][ C1] ? __dev_queue_xmit+0x8a0/0x4800 [ 3378.930896][ C1] __local_bh_enable_ip+0xff/0x120 [ 3378.936011][ C1] ? __dev_queue_xmit+0x8a0/0x4800 [ 3378.941117][ C1] __dev_queue_xmit+0x8b5/0x4800 [ 3378.946059][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 3378.951425][ C1] ? __lock_acquire+0x4a5/0x2630 [ 3378.956367][ C1] ip_finish_output2+0xf4a/0x24d0 [ 3378.961373][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 3378.966824][ C1] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 3378.972889][ C1] __ip_finish_output.part.0+0x444/0x6f0 [ 3378.978515][ C1] ip_output+0x39b/0xec0 [ 3378.982752][ C1] ? __pfx_ip_output+0x10/0x10 [ 3378.987510][ C1] ? __pfx_ip_finish_output+0x10/0x10 [ 3378.992873][ C1] ? ip4_dst_hoplimit+0x1a9/0x400 [ 3378.997894][ C1] __ip_queue_xmit+0x1b73/0x22b0 [ 3379.002821][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 3379.007921][ C1] __tcp_transmit_skb+0x3347/0x4b50 [ 3379.013102][ C1] ? __lock_acquire+0x4a5/0x2630 [ 3379.018041][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 3379.023590][ C1] ? find_held_lock+0x2b/0x80 [ 3379.028281][ C1] tcp_connect+0x2956/0x5630 [ 3379.032884][ C1] ? __pfx_tcp_connect+0x10/0x10 [ 3379.037815][ C1] ? get_random_u16+0x583/0x7d0 [ 3379.042662][ C1] ? tcp_fastopen_cookie_check+0x44a/0x450 [ 3379.048480][ C1] tcp_v4_connect+0x158b/0x1bf0 [ 3379.053329][ C1] ? __pfx_tcp_v4_connect+0x10/0x10 [ 3379.058513][ C1] __inet_stream_connect+0x208/0xfa0 [ 3379.063784][ C1] ? __pfx___inet_stream_connect+0x10/0x10 [ 3379.069601][ C1] tcp_sendmsg_fastopen+0x3ed/0x750 [ 3379.074806][ C1] tcp_sendmsg_locked+0x279a/0x45f0 [ 3379.080007][ C1] ? __lock_acquire+0x4a5/0x2630 [ 3379.084959][ C1] ? __lock_acquire+0x4a5/0x2630 [ 3379.089902][ C1] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 3379.095446][ C1] ? do_raw_spin_lock+0x128/0x260 [ 3379.100460][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 3379.105821][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 3379.111085][ C1] tcp_sendmsg+0x2e/0x50 [ 3379.115323][ C1] ? __pfx_tcp_sendmsg+0x10/0x10 [ 3379.120253][ C1] inet_sendmsg+0xb9/0x140 [ 3379.124672][ C1] __sys_sendto+0x467/0x520 [ 3379.129176][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 3379.134204][ C1] ? __sys_bind+0x1c7/0x260 [ 3379.138713][ C1] ? xfd_validate_state+0x129/0x190 [ 3379.143916][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 3379.148680][ C1] ? do_syscall_64+0x95/0xf80 [ 3379.153344][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 3379.158512][ C1] do_syscall_64+0x106/0xf80 [ 3379.163075][ C1] ? clear_bhb_loop+0x40/0x90 [ 3379.167746][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3379.173632][ C1] RIP: 0033:0x7f4b26b9c799 [ 3379.178044][ C1] RSP: 002b:00007f4b24df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 3379.186446][ C1] RAX: ffffffffffffffda RBX: 00007f4b26e15fa0 RCX: 00007f4b26b9c799 [ 3379.194432][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3379.202398][ C1] RBP: 00007f4b26c32bd9 R08: 0000200000e68000 R09: 0000000000000010 [ 3379.210349][ C1] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000000 [ 3379.218324][ C1] R13: 00007f4b26e16038 R14: 00007f4b26e15fa0 R15: 00007ffcfc365548 [ 3379.226318][ C1] [ 3379.229331][ C1] rcu: rcu_preempt kthread starved for 5429 jiffies! g412309 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 3379.240518][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 3379.250480][ C1] rcu: RCU grace-period kthread stack dump: [ 3379.256367][ C1] task:rcu_preempt state:R running task stack:28680 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 3379.269819][ C1] Call Trace: [ 3379.273098][ C1] [ 3379.276024][ C1] __schedule+0xfee/0x60e0 [ 3379.280449][ C1] ? __lock_acquire+0x4a5/0x2630 [ 3379.285402][ C1] ? __pfx___schedule+0x10/0x10 [ 3379.290259][ C1] ? find_held_lock+0x2b/0x80 [ 3379.294944][ C1] ? schedule+0x2bf/0x390 [ 3379.299282][ C1] schedule+0xdd/0x390 [ 3379.303347][ C1] schedule_timeout+0x127/0x280 [ 3379.308182][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 3379.313546][ C1] ? __pfx_process_timeout+0x10/0x10 [ 3379.318849][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 3379.324667][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 3379.330145][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 3379.334917][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 3379.340213][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 3379.345155][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 3379.350353][ C1] ? rcu_is_watching+0x12/0xc0 [ 3379.355108][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 3379.360899][ C1] rcu_gp_kthread+0x179/0x230 [ 3379.365577][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 3379.370777][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 3379.376588][ C1] ? __kthread_parkme+0x18c/0x230 [ 3379.381620][ C1] ? kthread+0x13a/0x450 [ 3379.385860][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 3379.391061][ C1] kthread+0x370/0x450 [ 3379.395146][ C1] ? __pfx_kthread+0x10/0x10 [ 3379.399727][ C1] ret_from_fork+0x754/0xd80 [ 3379.404307][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 3379.409388][ C1] ? __switch_to+0x7b4/0x1120 [ 3379.414041][ C1] ? __pfx_kthread+0x10/0x10 [ 3379.418626][ C1] ret_from_fork_asm+0x1a/0x30 [ 3379.423405][ C1] [ 3379.426415][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 3379.432722][ C1] Sending NMI from CPU 1 to CPUs 0: [ 3379.437916][ C0] NMI backtrace for cpu 0 [ 3379.437930][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 3379.437949][ C0] Tainted: [L]=SOFTLOCKUP [ 3379.437954][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3379.437962][ C0] RIP: 0010:unwind_next_frame+0x15b4/0x1ea0 [ 3379.437981][ C0] Code: b4 06 00 00 49 8b 45 10 48 39 dd 0f 87 c4 f8 ff ff 48 39 d8 0f 86 bb f8 ff ff 48 8d 53 08 48 39 d5 0f 92 c1 48 39 d0 0f 93 c0 <84> c1 0f 84 a3 f8 ff ff 48 39 5c 24 10 0f 82 98 f8 ff ff 48 b8 00 [ 3379.437994][ C0] RSP: 0018:ffffc90000006ea8 EFLAGS: 00000206 [ 3379.438006][ C0] RAX: ffffc90000008001 RBX: ffffc90000007008 RCX: ffffffff91770301 [ 3379.438016][ C0] RDX: ffffc90000007010 RSI: ffffc90000006ff8 RDI: ffffc90000006f78 [ 3379.438025][ C0] RBP: ffffc90000000000 R08: 0000000000000001 R09: 0000000000000007 [ 3379.438034][ C0] R10: 0000000000000200 R11: 000000000000af0b R12: ffffc90000006fb8 [ 3379.438043][ C0] R13: ffffc90000006f68 R14: ffffc90000007008 R15: ffffc90000006f9c [ 3379.438052][ C0] FS: 0000000000000000(0000) GS:ffff888124347000(0000) knlGS:0000000000000000 [ 3379.438067][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3379.438076][ C0] CR2: 00007ffd1e19dfc8 CR3: 00000000afd30000 CR4: 00000000003526f0 [ 3379.438085][ C0] Call Trace: [ 3379.438090][ C0] [ 3379.438095][ C0] ? arch_stack_walk+0x73/0xf0 [ 3379.438113][ C0] __unwind_start+0x3d1/0x7f0 [ 3379.438127][ C0] ? trace_netif_rx_exit+0x6d/0x240 [ 3379.438143][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3379.438162][ C0] arch_stack_walk+0x73/0xf0 [ 3379.438177][ C0] ? stack_trace_save+0x8e/0xc0 [ 3379.438194][ C0] stack_trace_save+0x8e/0xc0 [ 3379.438210][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 3379.438228][ C0] ? __lock_acquire+0x4a5/0x2630 [ 3379.438246][ C0] kasan_save_stack+0x30/0x50 [ 3379.438278][ C0] kasan_save_track+0x14/0x30 [ 3379.438294][ C0] __kasan_slab_alloc+0x89/0x90 [ 3379.438313][ C0] kmem_cache_alloc_noprof+0x241/0x6e0 [ 3379.438330][ C0] ? kmem_alloc_batch+0x49/0x170 [ 3379.438344][ C0] ? lock_acquire+0x100/0x380 [ 3379.438364][ C0] kmem_alloc_batch+0x49/0x170 [ 3379.438378][ C0] debug_objects_fill_pool+0x40e/0x670 [ 3379.438393][ C0] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 3379.438408][ C0] ? kmem_cache_alloc_node_noprof+0x2a9/0x6f0 [ 3379.438426][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 3379.438445][ C0] debug_object_activate+0x103/0x490 [ 3379.438461][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 3379.438476][ C0] ? ip_local_out+0xd5/0x4a0 [ 3379.438491][ C0] ? synproxy_send_tcp.isra.0+0x486/0x680 [ 3379.438508][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 3379.438526][ C0] __call_rcu_common.constprop.0+0x35/0x9b0 [ 3379.438549][ C0] dst_release+0x259/0x330 [ 3379.438566][ C0] skb_release_head_state+0x293/0x400 [ 3379.438579][ C0] consume_skb+0x8a/0x110 [ 3379.438593][ C0] nft_synproxy_do_eval+0xa7b/0xd50 [ 3379.438612][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 3379.438630][ C0] ? kasan_save_track+0x14/0x30 [ 3379.438647][ C0] ? kasan_save_free_info+0x3b/0x70 [ 3379.438662][ C0] ? sk_skb_reason_drop+0x10f/0x1b0 [ 3379.438675][ C0] ? __netif_receive_skb_core.constprop.0+0x571/0x3550 [ 3379.438693][ C0] ? __netif_receive_skb_one_core+0xb0/0x1e0 [ 3379.438710][ C0] ? __netif_receive_skb+0x1f/0x120 [ 3379.438728][ C0] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 3379.438745][ C0] nft_do_chain+0x2e8/0x1930 [ 3379.438761][ C0] ? x86_64_start_reservations+0x24/0x30 [ 3379.438779][ C0] ? x86_64_start_kernel+0x12b/0x130 [ 3379.438797][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 3379.438812][ C0] ? ipt_do_table+0xd4f/0x1b00 [ 3379.438828][ C0] ? rcu_is_watching+0x12/0xc0 [ 3379.438843][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 3379.438861][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 3379.438876][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 3379.438901][ C0] nft_do_chain_inet+0xee/0x340 [ 3379.438916][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 3379.438931][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 3379.438948][ C0] ? nf_nat_ipv4_local_in+0x181/0x730 [ 3379.438968][ C0] nf_hook_slow+0xbf/0x220 [ 3379.438983][ C0] nf_hook.constprop.0+0x2a6/0x750 [ 3379.439001][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 3379.439020][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 3379.439038][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 3379.439057][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 3379.439077][ C0] ? ip_rcv_finish_core+0x80a/0x2220 [ 3379.439096][ C0] ip_local_deliver+0x163/0x1f0 [ 3379.439115][ C0] ip_rcv+0x2d9/0x5d0 [ 3379.439133][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 3379.439150][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 3379.439168][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 3379.439186][ C0] ? lock_acquire+0x1cf/0x380 [ 3379.439206][ C0] ? process_backlog+0x32a/0x1580 [ 3379.439223][ C0] ? process_backlog+0x32a/0x1580 [ 3379.439240][ C0] __netif_receive_skb+0x1f/0x120 [ 3379.439257][ C0] process_backlog+0x37a/0x1580 [ 3379.439277][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 3379.439295][ C0] net_rx_action+0xa40/0xf20 [ 3379.439316][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 3379.439335][ C0] ? sched_balance_domains+0x26c/0xd20 [ 3379.439356][ C0] ? run_timer_base+0x121/0x190 [ 3379.439374][ C0] ? rcu_is_watching+0x12/0xc0 [ 3379.439390][ C0] handle_softirqs+0x1eb/0x9e0 [ 3379.439407][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 3379.439424][ C0] __irq_exit_rcu+0xef/0x150 [ 3379.439439][ C0] irq_exit_rcu+0x9/0x30 [ 3379.439453][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 3379.439473][ C0] [ 3379.439478][ C0] [ 3379.439483][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3379.439499][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 3379.439512][ C0] Code: b8 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 dc 1b 00 fb f4 bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 3379.439524][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 3379.439534][ C0] RAX: 0000000008c52cfd RBX: ffffffff8e4975c0 RCX: ffffffff8b8fac75 [ 3379.439543][ C0] RDX: 0000000000000000 RSI: ffffffff8de72aee RDI: ffffffff8c1af220 [ 3379.439552][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 3379.439560][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 3379.439569][ C0] R13: 0000000000000000 R14: ffffffff90d97a10 R15: 0000000000000000 [ 3379.439580][ C0] ? ct_kernel_exit+0x125/0x180 [ 3379.439595][ C0] default_idle+0x9/0x10 [ 3379.439609][ C0] default_idle_call+0x6c/0xb0 [ 3379.439623][ C0] do_idle+0x35b/0x4b0 [ 3379.439639][ C0] ? __pfx_do_idle+0x10/0x10 [ 3379.439655][ C0] ? do_idle+0x13/0x4b0 [ 3379.439671][ C0] cpu_startup_entry+0x4f/0x60 [ 3379.439687][ C0] rest_init+0x251/0x260 [ 3379.439702][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 3379.439720][ C0] start_kernel+0x47f/0x480 [ 3379.439736][ C0] x86_64_start_reservations+0x24/0x30 [ 3379.439753][ C0] x86_64_start_kernel+0x12b/0x130 [ 3379.439769][ C0] common_startup_64+0x13e/0x148 [ 3379.439790][ C0]