last executing test programs: 9m40.428809402s ago: executing program 0 (id=1574): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/pppol2tp\x00', 0x200, 0x8be06d29ce8b452e) read(r0, &(0x7f0000000100)=""/202, 0xca) lseek(r0, 0x1, 0x0) 9m40.293609109s ago: executing program 0 (id=1576): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a948b5c9b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b510092e7dbe48014c2be7983a4e4e11a8906105f36f652d7135bda20b8a9abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff971", 0x49}, {&(0x7f0000000500)="648a6282c6e91b973836904a4a88affa0c371dd1b9c133c5e594714579d6bb3addfd43e78272aef64427ce5467d6994320cf139092452c7944ddab49e459f7e0c73f890e9e2463bd3390e20b1e472bd2aedb47094547a767a098a94a402e6aba65c0ef07eaa87f8663c763d9bb491243eb129eec434e5603956c8333a6ecdf4d3a601b9c8d3d63e3a4a57b38033e2b004f6c3e45f1645c3b7ca0d5ba5eea059b5aa4f0f80ac66904076cc60e47e1afc7d81ad937dee5efc0580e38d96cf0f53808f37d5a8811b07165e8b9aabceac06e4fa7f7668b8832877783a727a1fa8b972bfaeb232cf3e9b500965820f4adf64f1e5eddd65f5734fb43644347e98af7eb6abe95dcb6ed1acc22c8abdd5ea116242d5b7b2ecff3d9c635bce6a377112b4adbd75b71fcc8a6e3693c82ed7fd11ad63683cc89f0a35b", 0x137}, {&(0x7f00000007c0)="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", 0xde5}, {&(0x7f0000000000)="b6bfe5d12e5894a76921d2adc0f0f58aa1e55520876e89106f675fa786894a977f03a578cd0952", 0x27}, {&(0x7f00000000c0)="09fb05cd5b17f0896505a22ae7359cde7534ebd285eeffdcc16d17eb847d268f96dbef0cb2788f69128e5807cabf5febbea9f3af1728c43010321fe35ab1bd50b26531473ec12eeb24c15f6247c30b4ba41347fd2ecb64c7f2f254c5566f8dad74e53cad7bf18ef03acc9475cbecaca73d4f425247fb72e587a4df6f89a99da2f70b36cecaf4192de5b95d59528bf443cb2eea28def8c0e2afe6d20317e6018103ed06b2fd36f473043435594f7910a5b4810ee7", 0xb4}, {&(0x7f0000002600)="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", 0xf25}], 0x7}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000640)="fb", 0x1}], 0x1}}], 0x2, 0x4044805) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x8000000000025a5, 0x0) 9m39.795941148s ago: executing program 0 (id=1581): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="85f093138032", 0x6, 0x201, 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000400)) 9m39.464426758s ago: executing program 0 (id=1583): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0/../file0\x00') pivot_root(&(0x7f0000000640)='./file0/../file0\x00', 0x0) 9m39.327283219s ago: executing program 0 (id=1586): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 9m37.135803993s ago: executing program 0 (id=1600): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) fsopen(&(0x7f0000000000)='ceph\x00', 0x0) 9m36.70957231s ago: executing program 32 (id=1600): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) fsopen(&(0x7f0000000000)='ceph\x00', 0x0) 7m17.782142196s ago: executing program 1 (id=2406): r0 = landlock_create_ruleset(&(0x7f0000000180)={0x40, 0x1, 0x2}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x80000027) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 7m17.305011746s ago: executing program 1 (id=2410): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) setns(0xc9, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r1, &(0x7f0000000700)=[{&(0x7f0000000180)=""/165, 0xa5}], 0x1, 0x180, 0x9) 7m17.033494857s ago: executing program 1 (id=2413): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0xe0d, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x15}, 0x800) 7m16.672976526s ago: executing program 1 (id=2416): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1141099, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) 7m16.380611764s ago: executing program 1 (id=2420): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r0, 0x6000000) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file1\x00', 0x2000000) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0x4100, 0x9, 0x0) 7m13.404685061s ago: executing program 1 (id=2437): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f000000", 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 7m12.393942562s ago: executing program 33 (id=2437): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f000000", 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 6m54.10989822s ago: executing program 3 (id=2495): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x18, 0x3f, 0x107, 0x1, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x147}]}, 0x18}}, 0xc814) 6m52.947113283s ago: executing program 3 (id=2498): mkdirat(0xffffffffffffff9c, 0x0, 0x100) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="97eb01"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) 6m52.470369212s ago: executing program 3 (id=2501): r0 = memfd_secret(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futimesat(r0, 0x0, 0x0) 6m49.919147081s ago: executing program 3 (id=2504): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 6m49.679239028s ago: executing program 3 (id=2505): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x9, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x2, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe65f, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x7f, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x5], [0x10000007, 0x9, 0x80000130, 0x8, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0xb, 0x0, 0x5, 0x42f, 0x0, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x3, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x4000003, 0x3, 0x9, 0x400, 0x3, 0x3, 0xbc45, 0x48c93694, 0xa74, 0x9], [0x7, 0x8, 0x0, 0x5, 0xfbfffffc, 0x100, 0x9, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x200000, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x7, 0x2950bfaf, 0x2, 0x4, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x6d, 0x7, 0x0, 0x2, 0x2, 0x120000, 0x6, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0x2140738a, 0x1, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6m44.644937529s ago: executing program 3 (id=2514): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0) fcntl$setflags(r0, 0x2, 0x1) 6m43.63512402s ago: executing program 34 (id=2514): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0) fcntl$setflags(r0, 0x2, 0x1) 5m8.109730755s ago: executing program 5 (id=2857): openat$vimc2(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x3}, 0x4) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 5m7.395941691s ago: executing program 5 (id=2860): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) sendto$packet(r0, &(0x7f0000000300)="3f03fe7feee8140006001e0089e9", 0xe, 0x0, &(0x7f0000000140)={0xc9, 0x1, r2, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 5m7.037659289s ago: executing program 5 (id=2863): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0x8, 0x0, 0xfc, 0x0, 0xff, 0x0, 0x80, 0x0, 0x0, 0xff, 0x82, 0x0, 0x93}, 0xe) pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x0, 0x800010100000}, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 5m6.72406699s ago: executing program 5 (id=2864): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_clone(0x200c0411, 0x0, 0x0, 0x0, 0x0, 0x0) 5m6.030828112s ago: executing program 5 (id=2867): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m3.153085782s ago: executing program 5 (id=2879): r0 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x3cc0, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)="25daecdbdce723b7b21e8d5c32e71c33b09147ca", 0x14}], 0x1}, 0x40) 5m1.81731473s ago: executing program 35 (id=2879): r0 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x3cc0, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)="25daecdbdce723b7b21e8d5c32e71c33b09147ca", 0x14}], 0x1}, 0x40) 8.320039845s ago: executing program 8 (id=3700): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) io_setup(0x2, &(0x7f0000000000)=0x0) r2 = eventfd(0x0) io_submit(r1, 0x3, &(0x7f00000002c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f0000000040)="0000fd6000000000", 0x8, 0x3}, 0x0, 0x0]) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) 7.436904468s ago: executing program 8 (id=3706): r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, 0x0) rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) 6.773862609s ago: executing program 7 (id=3710): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x435, 0x1, 0x3, 0x2000}, 0x0, 0x1, 0x0, 0x0) syz_ublk_process_io(0x0, 0x0, 0x9, 0x0, 0x0) 6.309404752s ago: executing program 8 (id=3713): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write(r0, &(0x7f0000000280)="15a5ff", 0x3) 6.290925421s ago: executing program 2 (id=3714): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x440, 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r2, &(0x7f00000040c0)={0x2020}, 0x2020) 5.950430978s ago: executing program 8 (id=3716): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffd000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x700}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 5.897770419s ago: executing program 2 (id=3717): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@deltfilter={0x2d40, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x2d08, 0x2, [@TCA_CGROUP_ACT={0x2d04, 0x1, [@m_connmark={0xe0, 0x0, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x671, 0x7, 0x7, 0x3}, 0xe57}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x7, 0x9, 0x5ff}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x10000, 0xffffffffffffffff, 0xc, 0xa00}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0xffffffffffffffff, 0x5, 0x5854}, 0xfffc}}]}, {0x3d, 0x6, "8603f539b6a7af824d262bf654e2998b1ef3d2c0c3dcff5329f40e2a6613622a8e0c660697488dd9d3852466b5f92790cca8a42cadda0bea24"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x6c, 0x14, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0x10001, 0x3, 0x4, 0x800}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0x1cb8, 0x5, 0x0, 0x0, {{0xa}, {0x1c8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x400}, 0xb1, 0x3, [{0xf7b7, 0x5, 0x9, 0xd, 0xdd, 0x5}]}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x2, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cc, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x80000000, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0x5, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x9, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x6, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0x0, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43d, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x3c, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xffffffff, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x8, 0x9, 0x5, 0x8, 0x9}, 0x75, 0x6, [{0x1, 0x9, 0x0, 0x0, 0x1, 0x2}, {0x3, 0xe, 0x1, 0x1, 0x7, 0x51b}]}, [{0x0, 0x7, 0x8, 0x20000, 0x440, 0x60}, {0xb, 0x779, 0x6, 0x8, 0x7fff, 0xff}, {0x9, 0x1, 0x81, 0x7fff, 0x7}, {0x10001, 0xfd27, 0x10, 0x81, 0x80, 0x200}, {0x1ff, 0x8, 0x2c3, 0x4, 0x174, 0x2}, {0xfffffff9, 0x6, 0x563, 0x8, 0xc, 0x6}, {0x2, 0x0, 0x8, 0xb3, 0x5, 0x200}, {0x5, 0xffff, 0x2f, 0xc, 0x1, 0x6cb}, {0x61, 0x222, 0x7651, 0x80000001, 0x1, 0x80}, {0x5, 0x93, 0x1, 0x3165, 0x2, 0x4}, {0x9, 0x7, 0x5, 0x9, 0x2, 0x4}, {0x4, 0x6, 0x9, 0x3, 0xfffffff7, 0x2}, {0x2, 0x6, 0x0, 0x3, 0x4221, 0x7}, {0x455, 0x35, 0x2, 0x2, 0x2, 0xc265}, {0x0, 0x3, 0x1, 0x2, 0x6, 0xa}, {0x2, 0x9, 0xfffffe58, 0x7fffffff, 0x1, 0x56}, {0x6, 0x5, 0x8, 0x6, 0x9, 0x7}, {0x8, 0xf69e, 0xf79, 0x3, 0x6, 0x8}, {0x100, 0x0, 0x9, 0x74b3, 0x2, 0x10000}, {0x400, 0x0, 0x1ff, 0x2, 0xffffffe6, 0x6}, {0x1, 0x59ad8e51, 0x8, 0x7f, 0x4, 0x9}, {0x6, 0xef7, 0xe, 0x400, 0x4, 0xfffffffc}, {0x7a, 0x6, 0x3, 0x7, 0x1800, 0x51f4}, {0xfffe0000, 0x2, 0xfffffffd, 0x8, 0x7, 0x7}, {0xfffffff9, 0x8, 0x8, 0x6, 0x6, 0x5}, {0xa23, 0x6, 0x0, 0x7, 0x5, 0x40}, {0x5e6, 0x6, 0x6, 0x6, 0x3, 0x3}, {0x7fff, 0xb, 0x4, 0xb6, 0xe, 0xdb}, {0xfffffffa, 0xb11, 0x100, 0x9, 0x7ff, 0x1}, {0x4, 0x8, 0x200, 0x9, 0xfffffffb, 0x2}, {0x80000000, 0x1, 0x0, 0x5, 0x81}, {0x9, 0x8, 0x3, 0x2, 0x4, 0xe}, {0x80000001, 0x81, 0x8, 0x5, 0x6, 0xf609}, {0x8000, 0x1, 0x1ff, 0x5, 0xfff, 0x101}, {0x7, 0x3e2, 0x5a1, 0x7, 0x9, 0x5}, {0x5, 0x2, 0x80000000, 0x63674b04, 0x7, 0x923}, {0x8ade, 0x1, 0x4, 0x8, 0x2, 0xd9f5}, {0x5, 0x5, 0x1, 0x9, 0x14, 0x5}, {0x3ff, 0xb, 0x40, 0x2, 0x2, 0x401}, {0x9, 0x9, 0x9, 0x3, 0x0, 0x40}, {0x6, 0x8001, 0x6, 0x5, 0x8000000, 0x1000}, {0x7f, 0xffffac09, 0x3, 0x0, 0x8, 0x101}, {0x7b, 0x6, 0x371, 0x0, 0x6, 0x100}, {0x9f, 0x5, 0x3, 0xc, 0x7, 0x4}, {0x3, 0x1, 0x1d2, 0x2, 0x6db}, {0x1000, 0x51f, 0xe2c, 0x8, 0x206, 0x6}, {0x7, 0x69680000, 0x401, 0x45b, 0x10001, 0x80000000}, {0x0, 0x6, 0x1000, 0x7, 0x4, 0xa}, {0x4, 0x7, 0x4, 0xee, 0x0, 0x1}, {0x101, 0x0, 0x9, 0xb539, 0xd7, 0xe3e}, {0xe00c, 0x9, 0xd34, 0x4cc, 0x1ff, 0x6}, {0xa2, 0xbf9, 0x10001, 0xa77, 0x2, 0xfffffff9}, {0x87, 0x5, 0x5, 0x5c1, 0x2000000, 0x9}, {0x1ff, 0x200, 0xffffffff, 0xfffffffa, 0x4, 0xbc6a}, {0x40, 0xffffffff, 0x80000001, 0xc, 0xf91, 0x7fffffff}, {0xffffffff, 0x52, 0x6, 0x80000000, 0x8, 0xbf}, {0x1, 0x8001, 0x5, 0x3, 0xda0, 0x2}, {0x9, 0x5, 0x5, 0x0, 0x9, 0x5}, {0x7ff, 0x4cbf, 0xbdde, 0x7, 0x80, 0x8001}, {0x5, 0x4, 0xb, 0x7fff, 0x7}, {0x161, 0x8, 0xfffffffc, 0x5, 0x40, 0x2}, {0xb, 0x6, 0x3, 0x8, 0x6, 0x5}, {0x10, 0x9, 0x6, 0x3, 0x8, 0x3f8}, {0x9, 0xe, 0x7, 0x3, 0x4, 0x2}, {0xffff, 0x2, 0x919c, 0x1000, 0x4, 0x7}, {0x35, 0xfffffff9, 0x117, 0x2, 0x6, 0x8}, {0x42d, 0x57, 0x80000000, 0x30000000, 0x3, 0x400e}, {0x3, 0x7bf, 0xff, 0x6, 0xd, 0x2}, {0x3, 0x3, 0x8000, 0x5, 0x2972a4da, 0x2}, {0x101, 0x40, 0x4, 0x6, 0x0, 0x3f47}, {0x4, 0x4, 0x60dc, 0x6, 0x0, 0x9}, {0x0, 0x0, 0x5, 0x5, 0x401, 0x10001}, {0x8, 0x1, 0xd, 0xfffffff7, 0xc08}, {0x8, 0x0, 0x8000, 0x589, 0xfffffffd, 0x4}, {0xcb83, 0x3, 0x491, 0x4, 0x4, 0xb6e2}, {0x3, 0x2, 0xfff, 0xd48, 0x3, 0x8}, {0x3, 0x2, 0x8, 0x3, 0x3}, {0xb, 0x8, 0x5, 0x69, 0x0, 0x9}, {0x7ff, 0x2, 0x4, 0x5, 0x9, 0x6}, {0x5, 0xfffffffb, 0x6, 0xff, 0x3, 0xb1c}, {0x7, 0x9, 0xfffffffa, 0x4, 0x7, 0x2}, {0x28, 0x3, 0x46, 0x7, 0xffffffff, 0x8}, {0xf, 0xffffffe6, 0x1, 0x100, 0x100, 0x1}, {0x4, 0xfe, 0x46, 0x6, 0x9, 0x5}, {0x4, 0x10, 0x9, 0xfee1, 0x2cc, 0x9}, {0x279b, 0x8f, 0x4, 0x0, 0x3, 0x10001}, {0x7, 0x2, 0x5d, 0x80, 0x10, 0x8d}, {0x2, 0xa6, 0xe4f, 0x400, 0x3de, 0x4}, {0xf, 0x10000, 0x800, 0x0, 0x7, 0xf59}, {0x10, 0x10, 0x7fffffff, 0x2, 0x4e34, 0xd6}, {0x9, 0xfffffffa, 0x9, 0x926, 0x5a2b, 0x7}, {0x3, 0xe7c8, 0x5, 0x9, 0x4, 0x1000}, {0x5, 0x1, 0x5, 0x4, 0x8, 0x6}, {0xfe3, 0x0, 0x9, 0x4, 0x2f8, 0x80000000}, {0x0, 0x9, 0x8, 0x5, 0x7de9, 0x1}, {0x2, 0x0, 0x16000000, 0x8, 0xd5, 0x4c3c}, {0x847c, 0x6, 0xaa5, 0x594ac942, 0xfb7, 0x3}, {0x0, 0x1, 0x2, 0x4, 0x8a, 0xfff}, {0x3, 0xa, 0x9, 0x1, 0x9, 0x80}, {0x5, 0xffff, 0xfffff801, 0xc, 0x6, 0x5}, {0x6e0, 0x5, 0x1, 0x7, 0x9, 0x7}, {0x8, 0x0, 0xffffe1ce, 0x9, 0x800}, {0x6, 0xf, 0x8, 0x2f, 0xfffffff7, 0xc9}, {0xa843, 0x0, 0x5, 0x8eb8, 0x3, 0xfffffffd}, {0x8000, 0x6, 0x7, 0x7, 0x7, 0x1}, {0x4, 0x900, 0x4, 0x3, 0x6, 0xf216}, {0x4, 0xffff, 0x0, 0x9, 0xeb, 0x2}, {0x22c77d2a, 0x200, 0x0, 0x4, 0x8, 0x2e03666f}, {0xf529, 0x800, 0x3, 0x5, 0xe9, 0x1}, {0x5, 0x1, 0x4, 0xc, 0x3, 0xf}, {0xc23ff6c, 0xfffffffc, 0x1, 0x0, 0x0, 0x7}, {0xff, 0x5, 0x800, 0x3, 0x2, 0x7fffffff}, {0x7, 0x6, 0x2, 0x60, 0xd, 0x70}, {0x0, 0xe, 0x200, 0x7, 0x1, 0x7}, {0x7, 0xde27, 0x8, 0x7f, 0xb09, 0x4}, {0xff, 0xac, 0xffffffff, 0x9c07, 0x84f4, 0x7ae3f5e2}, {0x80000001, 0x0, 0x1c00000, 0x1, 0x9, 0x1}, {0x8, 0x5, 0x9, 0xfffffffe, 0x5, 0x62f}, {0x8001, 0x3, 0x0, 0xb, 0x1, 0x9e3b}, {0x40, 0xfffffffc, 0xc, 0x4, 0x9cad, 0x101}, {0xfffffffc, 0xa388a14b, 0x1, 0x6, 0x5, 0x3ff}, {0xffffffff, 0x1, 0x6, 0xc913, 0x401, 0x2}, {0x7ff, 0x3, 0xabf, 0x3cb, 0x9d, 0x3}, {0x7, 0x0, 0x10001, 0x80000000, 0x800, 0x400}, {0xaf1, 0x7f, 0x2, 0x9, 0x80000000, 0x3}, {0x8, 0x0, 0x2, 0x200, 0x80000001, 0xe32}, {0x2, 0x8, 0xce0, 0x71, 0x9, 0x9}, {0x0, 0x2, 0x101, 0x6, 0xfffffbff, 0x1}], [{0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {0x4, 0x1}, {0x4, 0x1}, {}, {}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x4}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x2}, {}, {0xf64cd08961e131e7}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x14750f306444a36}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x39ee92b2e05c055b}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x4}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x460300743d89969c, 0x1}, {0x3}, {0x4}, {0x3}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x2d7ee143859a3e1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x1, 0xc196dd3e82dc6dcc}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x7, 0x1}, {}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0xefc, 0xb, 0x0, 0x0, {{0xa}, {0xed0, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x7, 0x456, 0x4, 0x6, 0x1}, 0xb9, 0xf3, [{0x3, 0x5, 0xd, 0x1, 0x5, 0x10}, {0x7fff, 0x4, 0x1, 0x3, 0xb, 0xf}, {0x8, 0xfffffffa, 0x8001, 0x10, 0x0, 0x7fff}, {0xbe, 0x5, 0x6, 0xfffffffa, 0x7, 0x2}, {0x1, 0x1, 0x10, 0x7fffffff, 0xfffffff7, 0x4}, {0x401, 0x7, 0x0, 0x6, 0x4, 0xc8}, {0x22, 0x5, 0x6, 0x5, 0x3, 0x4}]}, [{0x8bc, 0x1, 0x6, 0x4, 0x100, 0xfffffffd}, {0x0, 0x68, 0xfffffff8, 0x6, 0x5, 0x4}, {0xbb05, 0x97af, 0x3, 0x2, 0x4, 0x6}, {0x6, 0x1, 0x3, 0x2c27f2d1, 0x0, 0x559a}, {0x0, 0x8, 0x2, 0x1, 0x2, 0x5}, {0x10000, 0x1000, 0x7f, 0x8, 0x3, 0x6}, {0x4, 0x2c4, 0x7ab, 0x4, 0x7}, {0xa92, 0x3, 0xb, 0x0, 0x1, 0x5}, {0x7fff, 0xe, 0xa524, 0x40, 0x5, 0x101}, {0xb, 0x8, 0xfffffff8, 0x1000, 0xd72, 0x4}, {0x9, 0x8000000, 0x0, 0x2, 0x2, 0x3ff}, {0x7, 0x3, 0x6, 0xcea, 0xff, 0x80000001}, {0x1800000, 0x9, 0x3, 0x7ff, 0x1, 0x4}, {0xfffffffd, 0xfffffffd, 0x9, 0x0, 0xd1, 0x61b}, {0xfffffff1, 0x80, 0x7, 0x1, 0x4, 0x1000}, {0xdab4, 0x3b6, 0x8000, 0x9, 0x1}, {0x2, 0x400, 0x0, 0x9, 0x7, 0x2}, {0xffffffff, 0x245, 0x63, 0x80000001, 0xc00000, 0xa}, {0xfffffffc, 0x10000, 0x80000001, 0x8, 0x8, 0x5}, {0x80000001, 0x1, 0x5e67, 0x0, 0xff, 0x9}, {0x6, 0x5, 0x1a, 0x618, 0x2, 0x1}, {0x9, 0x9, 0x5, 0x6, 0x4, 0x8}, {0x1, 0x7, 0xf, 0x1, 0x2, 0x1}, {0x9, 0xa, 0x3, 0x2, 0x6, 0x9}, {0x495f, 0xfe, 0x9bb3, 0x2, 0xfffffffa, 0x7}, {0x9, 0x10001, 0xc, 0x76, 0x6, 0x4}, {0x8c, 0x4, 0x8f29, 0x0, 0xffff8001, 0x7}, {0xfff, 0xffff, 0xc, 0xe4, 0x6, 0x7}, {0x7, 0x8, 0xffff8001, 0x100, 0x7}, {0x4, 0xbe8b, 0x4, 0x6, 0x1, 0x3}, {0x5, 0xad4, 0x2, 0x9, 0xb1a8, 0x5}, {0x9, 0x3, 0xb6e, 0xfff, 0x200, 0x9}, {0x4, 0x8000, 0x8, 0x5, 0x6}, {0x4, 0x2, 0x6, 0x3, 0x3, 0x1}, {0x7, 0x3e, 0x6, 0x8, 0x7, 0x7}, {0x6, 0x401, 0x4, 0x9, 0x3}, {0xa, 0x40, 0x9, 0xf, 0x5, 0xf}, {0x12b8c98e, 0xfff, 0x7fffffff, 0x3, 0xe, 0x7fff}, {0x6, 0x8, 0x118, 0xe6c6, 0x6, 0x9738}, {0x3, 0x9, 0x7ff, 0x3, 0xffffffff, 0x9}, {0x8, 0x6, 0x7, 0x7, 0x2, 0x8}, {0x80000000, 0x5ce23415, 0x24, 0xfff, 0xff, 0x2}, {0x100, 0x1000, 0xca6, 0x0, 0xfffffff7, 0xa1}, {0x1, 0x8, 0x7, 0x5, 0xfffffff7, 0x3a}, {0x84c, 0x81, 0x7, 0x1, 0x1, 0x7f}, {0x9, 0x200, 0x700000, 0x1, 0x3, 0x5}, {0x6, 0x2, 0x7, 0x6, 0xfffffffb, 0x7}, {0x0, 0x6, 0xf, 0x9, 0x5, 0xd5a}, {0xfffffff7, 0x7, 0xffffff7f, 0x5, 0x8, 0x2}, {0x5, 0x8, 0x3, 0x26, 0x3, 0x400}, {0x0, 0x6, 0x6, 0x7, 0x101, 0x222}, {0x1f, 0x800, 0x3, 0xe6b, 0x0, 0xfffffff7}, {0x8, 0x4, 0x6, 0x0, 0x2, 0x5}, {0x0, 0x2, 0x2, 0x7, 0x400, 0x7}, {0x200, 0x3, 0x8000, 0x65, 0x1000, 0x40}, {0x10, 0xa, 0x4, 0x10, 0x1, 0x5}, {0x9, 0x9, 0xe95, 0x4, 0xd}, {0xe0, 0x2, 0x80000001, 0x4, 0x1a49, 0x6}, {0x2, 0x4, 0x4, 0x10, 0xfffff0ac, 0x3}, {0xbb, 0x4, 0x4, 0x1, 0x7fffffff, 0x6}, {0xffffffff, 0xffff, 0x6, 0xe4, 0x0, 0x6}, {0xfffffff9, 0x2, 0x1, 0xc, 0x8, 0x800}, {0x6, 0x4, 0x5, 0x1, 0x1, 0x4}, {0xe, 0x6, 0x1, 0x8, 0x9, 0x9}, {0x7, 0xc6, 0x3ff, 0xe7e3, 0x5, 0x9}, {0xea48, 0xfffffffd, 0x10000, 0x6, 0x3, 0x5}, {0x4, 0xffff, 0x1ff, 0x8, 0x4, 0xfffffff0}, {0xb, 0x3b3, 0x1, 0x101, 0xe11, 0x5}, {0x3, 0x4, 0x6, 0xff, 0xff, 0x7}, {0x0, 0x2, 0x8, 0x4, 0x7, 0x4}, {0x7, 0xb, 0x44df, 0x9, 0x6, 0x5d5ab339}, {0x6, 0x6, 0x40, 0x2, 0x9, 0x1ff}, {0x7, 0xffffffff, 0x4, 0x10001, 0xffffffff, 0x7}, {0x81, 0xa, 0x3, 0x8, 0xd33, 0x6}, {0x2, 0x4, 0x9ab, 0xb4, 0x5, 0xb577}, {0x0, 0xffff, 0x6, 0x7fff, 0x0, 0x5}, {0xd, 0x6, 0xaa10, 0xfffff477, 0x0, 0xff}, {0x2, 0xfffffffa, 0x4, 0x90, 0x9, 0x3e}, {0x2, 0x80000000, 0x4, 0x4, 0x90, 0x2}, {0x4, 0x1, 0x6, 0x4, 0x4, 0x7}, {0x5, 0x6, 0x4, 0xb80c, 0x5, 0x4cf1}, {0x8001, 0x4, 0x8, 0x9, 0x0, 0x6}, {0x40, 0x9, 0x18c, 0x100, 0x2, 0x9}, {0x3, 0x4, 0x9, 0x7f, 0x7, 0x179}, {0x0, 0x7, 0x2, 0x80, 0x401, 0x8}, {0x7, 0x0, 0x10001, 0xf6, 0x64f57d4f, 0x10f00000}, {0x7, 0x200, 0x200, 0x9, 0x5, 0x4512}, {0xd3, 0x0, 0x8, 0x2, 0x8, 0x101}, {0x6b0c, 0x9, 0x7, 0x3ff, 0x4}, {0x5f, 0x4, 0xffffffff, 0x0, 0x0, 0x7}, {0x4, 0x4, 0x1200000, 0x7, 0x800, 0x6}, {0x1, 0x6, 0x80, 0xef8, 0x0, 0x5}, {0x40000, 0x6, 0x1, 0x1, 0x2, 0xd09}, {0x8000, 0x9, 0xfffffffd, 0x100, 0x6, 0xfffffff7}, {0x9, 0x2, 0x9, 0x1, 0x3, 0xbe2}, {0x4, 0xa, 0x0, 0x0, 0x6, 0x6}, {0x3ff, 0x5, 0x1, 0x7000, 0x4e, 0x8}, {0xd6, 0x9, 0x10000, 0x8, 0xff, 0x2}, {0xb, 0x1, 0x1f36, 0x8ff4, 0xfff, 0x6}, {0x0, 0x516607, 0x2, 0x3, 0x3, 0xffffffff}, {0xffff4b03, 0x5, 0x10, 0x1, 0x3, 0x6}, {0x7, 0x0, 0x6, 0x8000, 0x10, 0xa}, {0x2, 0x6c, 0xffffffff, 0x2, 0x94, 0x9}, {0x3, 0x40, 0xfffffffa, 0x6, 0x0, 0xef0}, {0x8, 0x8, 0x64, 0x10, 0x49, 0x80}, {0x9, 0xc, 0x8000, 0x7, 0x3, 0x140}, {0x7, 0x7, 0xf16, 0x7ff, 0x3, 0x7}, {0x1ff, 0x9, 0x1, 0x9, 0x4e, 0xffffffff}, {0x4, 0x2, 0xffffffff, 0xe559, 0xc16, 0x4}, {0xfffff801, 0x1, 0x4, 0x1, 0x6}, {0x2, 0xf, 0x10, 0x3, 0xafae, 0x3}, {0x10000, 0x4, 0x6, 0x2, 0x6, 0xa4}, {0x0, 0x4, 0x0, 0x4, 0x1000, 0x6f17}, {0x2, 0x4, 0xd9, 0x7fffffff, 0x3, 0x805}, {0xf17, 0x4, 0x40, 0x5, 0x1, 0xff}, {0x0, 0x80000001, 0xb44f, 0xfffffffa, 0x0, 0x8a5}, {0x8000, 0x7ff, 0x5, 0x3, 0x4, 0x600}, {0x4b, 0xad, 0x8, 0x669, 0x1ff, 0x3}, {0x2, 0xa45, 0x1000, 0x0, 0xa, 0x1}, {0x4, 0x1, 0x8, 0x2, 0xe0, 0x4}, {0x4, 0xffd, 0x5, 0x3, 0x7fffffff, 0xfffffffb}, {0x8, 0x4, 0x4, 0x6, 0x1, 0x5}, {0x6, 0x0, 0xffffdbdc, 0x2, 0x9, 0x140000}, {0x2, 0x1, 0xdc, 0x8, 0x80000000, 0x569}, {0x0, 0x8, 0xffffffff, 0xa, 0x80000001, 0xa}, {0xfffffbff, 0x10, 0x8, 0x101, 0xfffffffa, 0x8000}, {0xa9c, 0x6, 0x1ff, 0x8, 0x1d, 0x3}, {0x2, 0xfffff16c, 0x5, 0x3, 0x5, 0x7ff}], [{0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2d451479be6868cc, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0xa02f5fe57b5d7768}, {0x3}, {0x2}, {0x0, 0x1}, {}, {0x4}, {0x2}, {0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x6, 0x1}, {0x4}, {0x7}, {0x1}, {0x3}, {0x2}, {}, {0x2}, {}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x2220886d9e210a2}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x3}, {0x5}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5}}}}]}]}}]}, 0x2d40}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.445716533s ago: executing program 6 (id=3719): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) unshare(0x22020600) 5.274178688s ago: executing program 2 (id=3720): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 5.254321832s ago: executing program 7 (id=3721): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) fcntl$setsig(r1, 0xa, 0x1c) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) 5.176945112s ago: executing program 6 (id=3723): socket$kcm(0x2, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x5c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000000000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LOG\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4050) 4.841295604s ago: executing program 7 (id=3724): r0 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb7, 0x800, 0x1, 0x87}) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/118, 0x76}, {0x0}, {0x0}], &(0x7f0000001540)=[0xfffffffffffffffc]}, 0x20) read$eventfd(r1, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) 4.033140089s ago: executing program 7 (id=3727): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {0x401, 0x6, 0x7, 0x3}, 0x35, [0x4, 0x1, 0x8, 0x80000000, 0x9, 0xfffffff5, 0xfffffff7, 0xff, 0x7, 0x0, 0x1, 0x6, 0x1000, 0x8000, 0x0, 0x30c, 0x1, 0xc, 0xc6e, 0x7, 0xf69, 0x5, 0x0, 0x6, 0x7, 0x5, 0x1, 0x5, 0x7, 0x0, 0xf, 0x0, 0x1, 0xc, 0x3, 0x1, 0x1, 0x1800, 0x10000, 0xe, 0x7, 0x0, 0x5c8c, 0x80000000, 0x2, 0x81, 0x5, 0x5, 0x8, 0x8, 0x7, 0x3, 0x6, 0x4, 0xa, 0x2500, 0x6, 0x1, 0x6, 0x9, 0x7b, 0x401, 0x0, 0x7], [0x9, 0x3, 0x7, 0xffff, 0xec20, 0x7ff, 0x5, 0x1ff, 0x300, 0x4, 0x9, 0xbd6d, 0x6, 0x5, 0x3, 0x1, 0x1, 0x5f0c, 0x6, 0xffffffff, 0xaf5, 0x41b, 0x10, 0x9, 0x0, 0x2, 0x2, 0x10001, 0xce9f, 0x1, 0x8, 0x100, 0xffff, 0x8, 0xfffffffc, 0x159, 0x80000000, 0x40, 0x6, 0x3, 0x0, 0x4695, 0xc, 0x9, 0xf420, 0x9, 0x3, 0xf2b2, 0x1, 0x8, 0x4, 0x8, 0x9df, 0x9557, 0x0, 0x6, 0x0, 0x8, 0x7fffffff, 0x7, 0x2, 0xd, 0xf, 0x4], [0x3, 0xfffffff8, 0x7, 0x74d, 0x8, 0x80, 0x9, 0x2, 0x4, 0x452, 0x80, 0x4, 0x2, 0x8eef, 0x7, 0x6, 0x9, 0x4800, 0x3, 0x9, 0xfff, 0x1, 0x7fffffff, 0xfffff800, 0xff, 0xad, 0x4997cf7a, 0x2, 0x381, 0x2, 0x4, 0x2, 0x8, 0x91, 0x6, 0x3, 0x9, 0x5, 0x1, 0x6, 0x8003, 0x1ff, 0x3, 0x0, 0x3e1e, 0x1, 0x7, 0x4, 0x0, 0xffffffff, 0x78f, 0x9, 0x6, 0x7, 0x7f, 0xfffff0ed, 0x0, 0x1, 0x4, 0x10000, 0x9, 0x7, 0x3ff, 0x26], [0x9, 0x0, 0x1000, 0x101, 0xffff, 0x200, 0x3, 0xffff8000, 0x7, 0x4, 0x9, 0x7fff, 0x1, 0x400, 0x1d0, 0xfffffc00, 0x3, 0x1, 0xe, 0x2, 0x7, 0x6, 0x6, 0x0, 0x46, 0x0, 0x8, 0xfa, 0x0, 0x100, 0x6, 0x6, 0x4, 0x8, 0x401, 0x4, 0x0, 0x2, 0x4, 0x0, 0x9, 0x4, 0x9, 0x10001, 0x23b, 0x3, 0x4, 0x9, 0xc, 0x3, 0xfffffffa, 0xc6c7, 0x3, 0x6, 0x1, 0x3, 0x6, 0x3, 0x4, 0x9, 0x4, 0x9, 0x1, 0x9]}, 0x45c) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc, 0x4}, 0x0, [0xffffffff, 0x4, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4, 0xfeffffff, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x10000006, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x8000, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x401, 0x0, 0xfdffffff, 0xdc, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1000, 0x10, 0xf, 0xc559, 0x2000002, 0x0, 0x8000, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x1, 0x8, 0xd77, 0x0, 0x5, 0xfffff37a, 0x0, 0x0, 0x9bd, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2], [0x8, 0xa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffff7, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0xbfff, 0x0, 0x0, 0xffffff7f, 0x9, 0x0, 0x0, 0x10000000, 0x9, 0x0, 0x2, 0xf, 0x0, 0xd12, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x8000000, 0x403, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x7, 0xca, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xcf, 0x0, 0x7e, 0x0, 0x3, 0xf, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x8c, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x7, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x7fd, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x401, 0x100000, 0x4, 0x10000, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x80000001, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.936821909s ago: executing program 8 (id=3729): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0x40, 0x22, 0x0, 0x40a}) read$midi(r0, 0x0, 0x3b) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) 3.366126223s ago: executing program 2 (id=3731): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000140)='.\x00', 0x200) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c4620040000000000000000000002003e00070000007c0000000000000040000000000000000200000000000000000000000600380043"], 0x78) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 3.241602474s ago: executing program 6 (id=3733): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff3}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 3.081904894s ago: executing program 7 (id=3734): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0xf, 0x0) getdents64(r1, 0x0, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) 2.883410724s ago: executing program 2 (id=3735): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/240, 0x302000, 0x1000, 0x5, 0x3}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_clone(0x2048000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.882489598s ago: executing program 4 (id=3736): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000001ad00)={0x0, 0x0, &(0x7f000001acc0)={&(0x7f000000e0c0)=@newchain={0x5a0, 0x64, 0x8, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffed}, {0x10, 0x4}, {0xffff, 0xc}}, [@f_rsvp6={{0xa}, {0x570, 0x2, [@TCA_RSVP_ACT={0x56c, 0x6, [@m_vlan={0x12c, 0x1e, 0x0, 0x0, {{0x9}, {0x8c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x3, 0x4, 0x1, 0x10000}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0xffffffff, 0x6, 0x8, 0xae}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x3, 0x7, 0xa, 0x1}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xf, 0xfffffffe, 0x10000000, 0x40, 0x8001}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x3bf}]}, {0x75, 0x6, "f442025c27cdbd4c9f666e513289b1e0ebcf94d5d114a5e25229d4d9b78eb7d0370b9e764d05300e6de2b237e9b7f634e6e295bb8c7a41c4966d4304070d0a288845e8aa445b142c639a97fe9b0293a13cca8cf4e7ecb695c7eff378e29c0e70a5e833a1e88312a6f68dadea5fe31a8fb8"}, {0xc}, {0xc}}}, @m_police={0x43c, 0x1f, 0x0, 0x0, {{0xb}, {0x410, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff9, 0x6, 0xc17, 0xffffffff, 0x0, 0x7fff, 0x9c, 0xc, 0x5, 0xfd5, 0x800, 0x8, 0xfffffffb, 0xbd, 0x9, 0x8, 0x5, 0x800, 0x81, 0x1d80000, 0x1, 0x88, 0x5, 0x5, 0x1, 0x7330, 0x7, 0x8, 0x1, 0x6, 0x0, 0xd, 0xb, 0x7, 0x200, 0x38, 0x2, 0x8, 0xa, 0x637, 0x1, 0x1, 0xc0000, 0x4a8b6d65, 0x2, 0x7ff, 0x6, 0x80000000, 0x1, 0x0, 0xffff08a2, 0x3d, 0xc00000, 0xfffffffb, 0x6, 0x7, 0xd5, 0xfffffff7, 0x800, 0x6, 0x100, 0xeb78, 0x28, 0x6, 0x2, 0x1000, 0xffff, 0x4, 0x1, 0x7fff, 0x1, 0x5, 0x4, 0x199c, 0x0, 0x6, 0x7, 0x3531, 0x10, 0x11fc, 0x8, 0x7fff, 0x5, 0x8001, 0x0, 0xe92d, 0x6, 0x1, 0x6, 0x8, 0x1, 0x9, 0x5, 0x4507, 0x9, 0x2df2, 0x9, 0x400, 0x100, 0x4884, 0x8000, 0x200, 0x6, 0x9, 0x81, 0x76, 0x8, 0x8, 0x0, 0x0, 0x4, 0x99e, 0x4, 0x4, 0x1ff, 0x6, 0x7, 0x7, 0x0, 0x9bc, 0x9, 0x5, 0xa48d, 0x6, 0x3f4c, 0x1, 0x7, 0x3d57, 0x8, 0x0, 0x5e8, 0x7, 0x219, 0x9, 0x80000001, 0xfe28, 0x1, 0x7f, 0x7, 0xffffffff, 0x0, 0x4, 0x400, 0x2, 0x5, 0x7, 0x10, 0x8, 0x2, 0xd59e, 0x9, 0x6, 0x0, 0x5, 0x3, 0x1, 0x3, 0x3ff, 0x3, 0x8, 0xf9, 0x101, 0x2, 0x4, 0x5, 0xfffffff7, 0x5, 0xb, 0x7, 0x1, 0x2, 0x0, 0x30, 0x3, 0x4, 0x1000, 0x8000, 0xa18, 0x80000000, 0xfffffff7, 0x9, 0x3, 0x9, 0x8, 0xffff4bbe, 0x981a, 0x9, 0x6, 0x4, 0x7998, 0x2, 0x64c5, 0x1ff, 0x3, 0x3e5, 0x4, 0x2, 0xe5, 0x7, 0xca, 0x1, 0x8, 0x7, 0x0, 0x9, 0x9, 0x8, 0x1800, 0x96, 0x6, 0x5433, 0x9, 0xc61e, 0x31dd3c68, 0x7, 0x8000, 0x5, 0xfffffdd3, 0xbe8, 0xb4c, 0x20991dc9, 0x0, 0x9, 0xc, 0x0, 0x4, 0x2, 0xd5, 0xb, 0xfffffffb, 0x6, 0x7, 0x5, 0x3, 0x80000000, 0x0, 0x0, 0x200, 0x1, 0x7fff, 0x4, 0x3, 0x5, 0x6, 0x1000, 0x12, 0x8, 0x4, 0x2, 0x3, 0x3ff, 0x9, 0x2, 0x5, 0xeb95, 0xa]}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x5a0}, 0x1, 0x0, 0x0, 0x8000}, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.672520085s ago: executing program 6 (id=3737): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003}, 0x18) 2.560483087s ago: executing program 7 (id=3738): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 2.224843477s ago: executing program 6 (id=3739): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) r0 = io_uring_setup(0x3bc, &(0x7f0000000100)={0x0, 0xa8a0, 0x2, 0x3, 0x345}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) io_uring_enter(r0, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) 2.215368656s ago: executing program 4 (id=3740): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.207539736s ago: executing program 8 (id=3741): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x40106184, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) 1.818804774s ago: executing program 2 (id=3742): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 1.768909154s ago: executing program 6 (id=3743): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 1.567546641s ago: executing program 4 (id=3744): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) listen(r0, 0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) shutdown(r1, 0x0) 1.092001377s ago: executing program 4 (id=3745): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)={0x28, 0x4, 0x0, {0x0, 0x3}}, 0x28) 633.380586ms ago: executing program 4 (id=3746): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000001000300000000000400000000000000100004000000000020"], 0x24, 0x0) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) 0s ago: executing program 4 (id=3747): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r1], 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) kernel console output (not intermixed with test programs): 58][T13426] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.506691][T13426] bridge_slave_1: entered allmulticast mode [ 619.521998][T13426] bridge_slave_1: entered promiscuous mode [ 619.870116][ T5327] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 620.034749][T13687] syz_tun: entered allmulticast mode [ 620.147045][ T5327] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 620.148930][ T5327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 620.148970][ T5327] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 620.149017][ T5327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.155233][T13688] pimreg: entered allmulticast mode [ 620.216724][ T5327] usb 3-1: config 0 descriptor?? [ 620.744833][ T5327] kovaplus 0003:1E7D:2D50.0010: unknown main item tag 0x0 [ 620.744877][ T5327] kovaplus 0003:1E7D:2D50.0010: unknown main item tag 0x0 [ 620.744906][ T5327] kovaplus 0003:1E7D:2D50.0010: unknown main item tag 0x0 [ 620.744934][ T5327] kovaplus 0003:1E7D:2D50.0010: unknown main item tag 0x0 [ 620.744962][ T5327] kovaplus 0003:1E7D:2D50.0010: unknown main item tag 0x0 [ 620.744989][ T5327] kovaplus 0003:1E7D:2D50.0010: unknown main item tag 0x0 [ 620.745017][ T5327] kovaplus 0003:1E7D:2D50.0010: unknown main item tag 0x0 [ 620.745044][ T5327] kovaplus 0003:1E7D:2D50.0010: unknown main item tag 0x0 [ 620.745072][ T5327] kovaplus 0003:1E7D:2D50.0010: unknown main item tag 0x0 [ 620.745099][ T5327] kovaplus 0003:1E7D:2D50.0010: unknown main item tag 0x0 [ 620.787410][T13426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.855459][ T5327] kovaplus 0003:1E7D:2D50.0010: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 621.453311][ T5327] kovaplus 0003:1E7D:2D50.0010: couldn't init struct kovaplus_device [ 621.453379][ T5327] kovaplus 0003:1E7D:2D50.0010: couldn't install mouse [ 621.474819][ T5327] kovaplus 0003:1E7D:2D50.0010: probe with driver kovaplus failed with error -71 [ 621.580958][ T5327] usb 3-1: USB disconnect, device number 31 [ 621.595984][T13426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.841553][T13426] team0: Port device team_slave_0 added [ 621.853626][T13426] team0: Port device team_slave_1 added [ 622.454478][T13426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.454502][T13426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.454533][T13426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.948139][ T66] hsr_slave_0: left promiscuous mode [ 622.988434][ T66] hsr_slave_1: left promiscuous mode [ 622.999899][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.999943][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.037728][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.037762][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.468905][ T66] hsr_slave_0: left promiscuous mode [ 623.526158][ T66] hsr_slave_1: left promiscuous mode [ 623.527513][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.569152][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.100846][ T66] veth1_macvtap: left promiscuous mode [ 624.100924][ T66] veth0_macvtap: left promiscuous mode [ 624.101120][ T66] veth1_vlan: left promiscuous mode [ 624.101264][ T66] veth0_vlan: left promiscuous mode [ 624.919384][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.919480][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.852458][ T5609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 625.885324][ T5327] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 625.924683][ T5609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 625.954780][ T5609] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 625.960462][ T5609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 626.031012][ T5609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 626.142256][ T5327] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 626.156191][ T5327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.156225][ T5327] usb 3-1: Product: syz [ 626.156242][ T5327] usb 3-1: Manufacturer: syz [ 626.156258][ T5327] usb 3-1: SerialNumber: syz [ 626.411992][ T5327] ums_eneub6250 3-1:1.0: USB Mass Storage device detected [ 626.435777][ T5327] scsi host1: usb-storage 3-1:1.0 [ 626.905045][ T5327] ums_eneub6250: This driver only supports SD/MS cards. It does not support SM cards. [ 627.225550][ T5327] usb 3-1: USB disconnect, device number 32 [ 628.409500][ T5609] Bluetooth: hci2: command tx timeout [ 628.594464][ T5327] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 628.787850][ T5327] usb 3-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 628.789529][ T5327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.859732][ T5327] usb 3-1: config 0 descriptor?? [ 628.891416][ T5327] pwc: Creative Labs Webcam 5 detected. [ 629.557502][ T5327] pwc: recv_control_msg error -32 req 02 val 2b00 [ 629.597699][T13774] netlink: 'syz.4.3012': attribute type 5 has an invalid length. [ 629.597729][T13774] netlink: 'syz.4.3012': attribute type 9 has an invalid length. [ 629.597745][T13774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3012'. [ 629.760957][ T5327] pwc: recv_control_msg error -71 req 04 val 1600 [ 629.761485][ T5327] pwc: recv_control_msg error -71 req 02 val 2c00 [ 629.761988][ T5327] pwc: recv_control_msg error -71 req 04 val 1000 [ 629.762482][ T5327] pwc: recv_control_msg error -71 req 04 val 1300 [ 629.763019][ T5327] pwc: recv_control_msg error -71 req 04 val 1400 [ 629.763536][ T5327] pwc: recv_control_msg error -71 req 02 val 2000 [ 629.764052][ T5327] pwc: recv_control_msg error -71 req 02 val 2100 [ 629.764831][ T5327] pwc: recv_control_msg error -71 req 06 val 0600 [ 629.765290][ T5327] pwc: recv_control_msg error -71 req 04 val 1500 [ 629.765750][ T5327] pwc: recv_control_msg error -71 req 02 val 2500 [ 629.766213][ T5327] pwc: recv_control_msg error -71 req 02 val 2400 [ 629.766670][ T5327] pwc: recv_control_msg error -71 req 02 val 2600 [ 629.767124][ T5327] pwc: recv_control_msg error -71 req 02 val 2900 [ 629.767585][ T5327] pwc: recv_control_msg error -71 req 02 val 2800 [ 629.769700][ T5327] pwc: recv_control_msg error -71 req 04 val 1100 [ 629.770176][ T5327] pwc: recv_control_msg error -71 req 04 val 1200 [ 629.770650][ T5327] pwc: Failed to power off camera (-71) [ 629.946203][ T5327] pwc: Registered as video103. [ 629.961848][ T5327] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input25 [ 629.988025][ T66] team0 (unregistering): Port device team_slave_1 removed [ 630.263797][ T5327] usb 3-1: USB disconnect, device number 33 [ 630.495141][ T5609] Bluetooth: hci2: command tx timeout [ 630.616860][ T66] team0 (unregistering): Port device team_slave_0 removed [ 631.980542][T13782] netlink: 'syz.2.3015': attribute type 6 has an invalid length. [ 632.574820][ T5609] Bluetooth: hci2: command tx timeout [ 633.186833][ T66] team0 (unregistering): Port device team_slave_1 removed [ 633.265166][ T66] team0 (unregistering): Port device team_slave_0 removed [ 633.711437][T13426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.711458][T13426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.711489][T13426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.801554][ T5256] 8021q: adding VLAN 0 to HW filter on device eth5 [ 634.310093][T13426] hsr_slave_0: entered promiscuous mode [ 634.313761][T13426] hsr_slave_1: entered promiscuous mode [ 634.670901][ T5609] Bluetooth: hci2: command tx timeout [ 636.512770][ T5611] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 636.579873][ T5611] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 636.605701][ T5611] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 636.634003][ T5611] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 636.742339][ T5611] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 637.965813][ T37] audit: type=1326 audit(1789083336.541:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13817 comm="syz.4.3022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df0aae159 code=0x7ffc0000 [ 637.965887][ T37] audit: type=1326 audit(1789083336.541:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13817 comm="syz.4.3022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df0aae159 code=0x7ffc0000 [ 638.042201][ T37] audit: type=1326 audit(1789083336.621:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13817 comm="syz.4.3022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5df0aae159 code=0x7ffc0000 [ 638.042260][ T37] audit: type=1326 audit(1789083336.621:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13817 comm="syz.4.3022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df0aae159 code=0x7ffc0000 [ 638.103557][ T37] audit: type=1326 audit(1789083336.621:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13817 comm="syz.4.3022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df0aae159 code=0x7ffc0000 [ 638.103625][ T37] audit: type=1326 audit(1789083336.621:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13817 comm="syz.4.3022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5df0aae159 code=0x7ffc0000 [ 638.103671][ T37] audit: type=1326 audit(1789083336.621:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13817 comm="syz.4.3022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df0aae159 code=0x7ffc0000 [ 638.103717][ T37] audit: type=1326 audit(1789083336.621:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13817 comm="syz.4.3022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df0aae159 code=0x7ffc0000 [ 638.208833][ T37] audit: type=1326 audit(1789083336.791:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13817 comm="syz.4.3022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5df0aae159 code=0x7ffc0000 [ 638.210663][ T37] audit: type=1326 audit(1789083336.791:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13817 comm="syz.4.3022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df0aae159 code=0x7ffc0000 [ 639.204456][ T5609] Bluetooth: hci6: command tx timeout [ 639.729786][ T5256] 8021q: adding VLAN 0 to HW filter on device eth6 [ 641.293686][ T5609] Bluetooth: hci6: command tx timeout [ 642.503784][T13879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3037'. [ 643.364438][ T5609] Bluetooth: hci6: command tx timeout [ 644.415561][T13879] team0: Port device team_slave_0 removed [ 644.556679][ T5256] 8021q: adding VLAN 0 to HW filter on device eth7 [ 645.335932][ T66] IPVS: stop unused estimator thread 0... [ 645.445461][ T5609] Bluetooth: hci6: command tx timeout [ 646.557516][T13927] jffs2: notice: (13927) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 646.676787][T13928] ref_ctr_offset mismatch. inode: 0x1017 offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x0 [ 647.698445][T13277] netdevsim netdevsim8: probe with driver netdevsim failed with error -12 [ 647.826103][T13743] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.826337][T13743] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.826575][T13743] bridge_slave_0: entered allmulticast mode [ 647.829785][T13743] bridge_slave_0: entered promiscuous mode [ 647.936327][T13743] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.936469][T13743] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.936704][T13743] bridge_slave_1: entered allmulticast mode [ 647.941605][T13743] bridge_slave_1: entered promiscuous mode [ 648.226993][T13952] GUP no longer grows the stack in syz.2.3059 (13952): 200000006000-200000008000 (200000004000) [ 648.227042][T13952] CPU: 0 UID: 0 PID: 13952 Comm: syz.2.3059 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 648.227075][T13952] Tainted: [L]=SOFTLOCKUP [ 648.227084][T13952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 648.227098][T13952] Call Trace: [ 648.227108][T13952] [ 648.227120][T13952] dump_stack_lvl+0xe8/0x150 [ 648.227163][T13952] fixup_user_fault+0x637/0x6f0 [ 648.227199][T13952] fault_in_user_writeable+0x71/0xd0 [ 648.227235][T13952] futex_lock_pi+0x7b5/0xab0 [ 648.227259][T13952] ? futex_unqueue+0x211/0x240 [ 648.227308][T13952] ? __pfx_futex_lock_pi+0x10/0x10 [ 648.227372][T13952] ? __pfx_futex_wake_mark+0x10/0x10 [ 648.227416][T13952] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 648.227441][T13952] ? mas_walk+0x381/0x490 [ 648.227482][T13952] do_futex+0x330/0x4e0 [ 648.227512][T13952] ? __pfx_do_futex+0x10/0x10 [ 648.227535][T13952] ? __vm_munmap+0x2fe/0x3e0 [ 648.227571][T13952] __se_sys_futex+0x3a8/0x450 [ 648.227602][T13952] ? __pfx___se_sys_futex+0x10/0x10 [ 648.227625][T13952] ? rcu_is_watching+0x16/0xb0 [ 648.227669][T13952] ? __x64_sys_futex+0x21/0xf0 [ 648.227694][T13952] do_syscall_64+0x166/0x520 [ 648.227735][T13952] ? trace_irq_disable+0x3b/0x140 [ 648.227764][T13952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.227789][T13952] ? clear_bhb_loop+0x70/0xc0 [ 648.227818][T13952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.227841][T13952] RIP: 0033:0x7f5f79d5e159 [ 648.227863][T13952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.227884][T13952] RSP: 002b:00007f5f77fb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 648.227911][T13952] RAX: ffffffffffffffda RBX: 00007f5f79fe5fa0 RCX: 00007f5f79d5e159 [ 648.227928][T13952] RDX: 0000000000000000 RSI: 000000000000008d RDI: 0000200000004000 [ 648.227943][T13952] RBP: 00007f5f79df503b R08: 0000000000000000 R09: 0000000000000002 [ 648.227957][T13952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.227972][T13952] R13: 00007f5f79fe6038 R14: 00007f5f79fe5fa0 R15: 00007ffd5209da48 [ 648.228010][T13952] [ 648.697880][T13743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.833036][T13963] FAULT_INJECTION: forcing a failure. [ 648.833036][T13963] name failslab, interval 1, probability 0, space 0, times 0 [ 648.833082][T13963] CPU: 1 UID: 0 PID: 13963 Comm: syz.2.3062 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 648.833114][T13963] Tainted: [L]=SOFTLOCKUP [ 648.833122][T13963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 648.833135][T13963] Call Trace: [ 648.833144][T13963] [ 648.833154][T13963] dump_stack_lvl+0xe8/0x150 [ 648.833191][T13963] should_fail_ex+0x46b/0x600 [ 648.833223][T13963] should_failslab+0xa8/0x100 [ 648.833255][T13963] __kmalloc_noprof+0xfb/0x790 [ 648.833281][T13963] ? prepare_creds+0x30/0x820 [ 648.833318][T13963] ? security_prepare_creds+0x52/0x360 [ 648.833346][T13963] ? security_prepare_creds+0x52/0x360 [ 648.833378][T13963] security_prepare_creds+0x52/0x360 [ 648.833406][T13963] prepare_creds+0x57d/0x820 [ 648.833431][T13963] lookup_user_key+0x316/0x1150 [ 648.833519][T13963] ? __pfx_lookup_user_key+0x10/0x10 [ 648.833549][T13963] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 648.833596][T13963] __se_sys_add_key+0x315/0x420 [ 648.833622][T13963] ? __pfx___se_sys_add_key+0x10/0x10 [ 648.833657][T13963] ? __x64_sys_add_key+0x20/0xc0 [ 648.833683][T13963] do_syscall_64+0x166/0x520 [ 648.833711][T13963] ? trace_irq_disable+0x3b/0x140 [ 648.833738][T13963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.833762][T13963] ? clear_bhb_loop+0x70/0xc0 [ 648.833788][T13963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.833807][T13963] RIP: 0033:0x7f5f79d5e159 [ 648.833827][T13963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.833845][T13963] RSP: 002b:00007f5f77fb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 648.833870][T13963] RAX: ffffffffffffffda RBX: 00007f5f79fe5fa0 RCX: 00007f5f79d5e159 [ 648.833886][T13963] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 648.833901][T13963] RBP: 00007f5f79df503b R08: fffffffffffffffe R09: 0000000000000000 [ 648.833915][T13963] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 648.833928][T13963] R13: 00007f5f79fe6038 R14: 00007f5f79fe5fa0 R15: 00007ffd5209da48 [ 648.833963][T13963] [ 648.863158][T13964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3061'. [ 649.485593][T13743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.613225][T13743] team0: Port device team_slave_0 added [ 650.715461][T13743] team0: Port device team_slave_1 added [ 651.016541][T13743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.016563][T13743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.016594][T13743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.096188][T13743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.096209][T13743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.096239][T13743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.502171][T13802] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.502328][T13802] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.502979][T13802] bridge_slave_0: entered allmulticast mode [ 651.528404][T13802] bridge_slave_0: entered promiscuous mode [ 651.542202][T13802] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.542350][T13802] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.542583][T13802] bridge_slave_1: entered allmulticast mode [ 651.575516][T13802] bridge_slave_1: entered promiscuous mode [ 651.704557][T13743] hsr_slave_0: entered promiscuous mode [ 651.706086][T13743] hsr_slave_1: entered promiscuous mode [ 651.707109][T13743] debugfs: 'hsr0' already exists in 'hsr' [ 651.707138][T13743] Cannot create hsr debugfs directory [ 651.745688][T13802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.778999][T13802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.592853][T13802] team0: Port device team_slave_0 added [ 652.831915][T13802] team0: Port device team_slave_1 added [ 654.064319][T13802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.064341][T13802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.064372][T13802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.222314][T13802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.222335][T13802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.222366][T13802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.960603][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 654.972041][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 654.984892][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 654.998430][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 655.005109][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 656.512381][T14068] Invalid ELF header len 9 [ 656.772977][T14073] FAULT_INJECTION: forcing a failure. [ 656.772977][T14073] name failslab, interval 1, probability 0, space 0, times 0 [ 656.773027][T14073] CPU: 0 UID: 0 PID: 14073 Comm: syz.2.3096 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 656.773062][T14073] Tainted: [L]=SOFTLOCKUP [ 656.773070][T14073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 656.773085][T14073] Call Trace: [ 656.773095][T14073] [ 656.773106][T14073] dump_stack_lvl+0xe8/0x150 [ 656.773148][T14073] should_fail_ex+0x46b/0x600 [ 656.773185][T14073] should_failslab+0xa8/0x100 [ 656.773222][T14073] __kvmalloc_node_noprof+0x176/0x890 [ 656.773257][T14073] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 656.773291][T14073] ? io_alloc_cache_init+0x42/0x140 [ 656.773366][T14073] ? io_alloc_cache_init+0x42/0x140 [ 656.773405][T14073] io_alloc_cache_init+0x42/0x140 [ 656.773441][T14073] io_ring_ctx_alloc+0x518/0xba0 [ 656.773484][T14073] io_uring_create+0x50/0x990 [ 656.773512][T14073] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 656.773557][T14073] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 656.773585][T14073] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 656.773648][T14073] ? rcu_is_watching+0x16/0xb0 [ 656.773698][T14073] do_syscall_64+0x166/0x520 [ 656.773730][T14073] ? trace_irq_disable+0x3b/0x140 [ 656.773760][T14073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.773784][T14073] ? clear_bhb_loop+0x70/0xc0 [ 656.773815][T14073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.773839][T14073] RIP: 0033:0x7f5f79d5e159 [ 656.773862][T14073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.773883][T14073] RSP: 002b:00007f5f77fb5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 656.773909][T14073] RAX: ffffffffffffffda RBX: 0000200000000180 RCX: 00007f5f79d5e159 [ 656.773926][T14073] RDX: 0000200000000240 RSI: 0000200000000180 RDI: 00000000000046cc [ 656.773942][T14073] RBP: 00007f5f79df503b R08: 0000000000000000 R09: 0000000000000000 [ 656.773958][T14073] R10: 0000200000000280 R11: 0000000000000206 R12: 0000200000000240 [ 656.773974][T14073] R13: 0000200000000280 R14: 0000200000000200 R15: 00007ffd5209da48 [ 656.774011][T14073] [ 657.035316][T13802] hsr_slave_0: entered promiscuous mode [ 657.036880][T13802] hsr_slave_1: entered promiscuous mode [ 657.037914][T13802] debugfs: 'hsr0' already exists in 'hsr' [ 657.037942][T13802] Cannot create hsr debugfs directory [ 657.368670][ T5609] Bluetooth: hci0: command tx timeout [ 657.389090][ T1487] bridge_slave_1: left allmulticast mode [ 657.389134][ T1487] bridge_slave_1: left promiscuous mode [ 657.389462][ T1487] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.550231][T14082] kAFS: unable to lookup cell '(G' [ 657.561847][ T1487] bridge_slave_0: left allmulticast mode [ 657.561891][ T1487] bridge_slave_0: left promiscuous mode [ 657.562246][ T1487] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.626176][T14083] kAFS: unable to lookup cell '(G' [ 657.944624][ T1487] bridge_slave_1: left allmulticast mode [ 657.944666][ T1487] bridge_slave_1: left promiscuous mode [ 657.944943][ T1487] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.126101][ T1487] bridge_slave_0: left allmulticast mode [ 658.126143][ T1487] bridge_slave_0: left promiscuous mode [ 658.126389][ T1487] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.314244][ T5871] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 658.467524][ T5871] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 658.469241][ T5871] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.469314][ T5871] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 658.472885][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.472918][ T5871] usb 3-1: Product: syz [ 658.472934][ T5871] usb 3-1: Manufacturer: syz [ 658.472957][ T5871] usb 3-1: SerialNumber: syz [ 658.595288][ T5871] usb 3-1: selecting invalid altsetting 1 [ 659.256835][ T1487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.355229][ T1487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.422324][ T1487] bond0 (unregistering): Released all slaves [ 659.444740][ T5609] Bluetooth: hci0: command tx timeout [ 659.451302][ T5871] usb 3-1: selecting invalid altsetting 1 [ 659.451410][ T5871] cdc_ncm 3-1:1.0: bind() failure [ 659.864473][ T1236] usb 3-1: USB disconnect, device number 34 [ 660.305481][ T1487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.386058][ T1487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.468243][ T1487] bond0 (unregistering): Released all slaves [ 660.488829][T14124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3114'. [ 661.524252][ T5609] Bluetooth: hci0: command tx timeout [ 662.652908][ T1487] hsr_slave_0: left promiscuous mode [ 662.700197][ T1487] hsr_slave_1: left promiscuous mode [ 662.701776][ T1487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.775250][ T1487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.115772][ T1487] hsr_slave_0: left promiscuous mode [ 663.154884][ T1487] hsr_slave_1: left promiscuous mode [ 663.157511][ T1487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.208571][ T1487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.604311][ T5609] Bluetooth: hci0: command tx timeout [ 663.906653][ T1487] team0 (unregistering): Port device team_slave_1 removed [ 663.985843][ T1487] team0 (unregistering): Port device team_slave_0 removed [ 665.007472][ T1487] team0 (unregistering): Port device team_slave_1 removed [ 665.064940][ T1487] team0 (unregistering): Port device team_slave_0 removed [ 670.330855][T14041] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.331011][T14041] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.331249][T14041] bridge_slave_0: entered allmulticast mode [ 670.365096][T14041] bridge_slave_0: entered promiscuous mode [ 670.583134][T14041] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.588311][T14041] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.588580][T14041] bridge_slave_1: entered allmulticast mode [ 670.595844][T14041] bridge_slave_1: entered promiscuous mode [ 670.950629][T14229] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3139'. [ 671.727628][ T1487] bridge_slave_1: left allmulticast mode [ 671.727671][ T1487] bridge_slave_1: left promiscuous mode [ 671.727971][ T1487] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.779904][T14231] fuse: fd is not a fuse device [ 671.941069][ T1487] bridge_slave_0: left allmulticast mode [ 671.941116][ T1487] bridge_slave_0: left promiscuous mode [ 671.941407][ T1487] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.794904][ T1487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.896639][ T1487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.956144][ T1487] bond0 (unregistering): Released all slaves [ 673.719348][T14041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.914348][T14041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.575996][ T1487] hsr_slave_0: left promiscuous mode [ 675.637534][ T1487] hsr_slave_1: left promiscuous mode [ 675.638918][ T1487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.699033][ T1487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.813818][T14259] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3151'. [ 676.716675][ T1487] team0 (unregistering): Port device team_slave_1 removed [ 676.810001][ T1487] team0 (unregistering): Port device team_slave_0 removed [ 677.454672][T14286] tipc: Started in network mode [ 677.454700][T14286] tipc: Node identity 1000001, cluster identity 4711 [ 677.454715][T14286] tipc: Node number set to 16777217 [ 677.495268][T14041] team0: Port device team_slave_0 added [ 677.523098][T14041] team0: Port device team_slave_1 added [ 677.570960][T14289] tipc: Enabling of bearer rejected, failed to enable media [ 678.045788][T13743] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 678.236845][T13743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 678.238987][T14041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.239006][T14041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.239035][T14041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.374654][T13743] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 678.555518][T13743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 678.621490][T14041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.621515][T14041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.621558][T14041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.801163][T13743] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 678.918549][T14302] netlink: 'syz.2.3167': attribute type 2 has an invalid length. [ 679.117217][T13743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 679.158917][T13743] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 679.387480][T13743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 681.007093][T14041] hsr_slave_0: entered promiscuous mode [ 681.012326][T14041] hsr_slave_1: entered promiscuous mode [ 681.013387][T14041] debugfs: 'hsr0' already exists in 'hsr' [ 681.013427][T14041] Cannot create hsr debugfs directory [ 682.037570][ T1487] bridge_slave_1: left allmulticast mode [ 682.037617][ T1487] bridge_slave_1: left promiscuous mode [ 682.037917][ T1487] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.047622][T14337] block2mtd: error: cannot open device [ 682.217487][ T1487] bridge_slave_0: left allmulticast mode [ 682.217529][ T1487] bridge_slave_0: left promiscuous mode [ 682.217824][ T1487] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.175091][ T1487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.255091][ T1487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.320335][ T1487] bond0 (unregistering): Released all slaves [ 683.395458][T13802] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 683.565848][T13802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 683.794241][T13802] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 683.839997][T13802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 683.878180][T13802] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 684.054903][T13802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 684.349175][T13802] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 684.389058][T13802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 684.824237][ T1487] hsr_slave_0: left promiscuous mode [ 684.896811][ T1487] hsr_slave_1: left promiscuous mode [ 684.900715][ T1487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 685.035429][ T1487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 685.896607][ T1487] team0 (unregistering): Port device team_slave_1 removed [ 685.987884][ T1487] team0 (unregistering): Port device team_slave_0 removed [ 686.137913][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 686.168165][ T5611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 686.192224][ T5611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 686.204358][ T5611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 686.207669][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 686.352752][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.352924][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.484491][ T5609] Bluetooth: hci1: command tx timeout [ 688.867500][T13802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.544239][ T36] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 690.568688][ T5609] Bluetooth: hci1: command tx timeout [ 690.764213][ T36] usb 3-1: Using ep0 maxpacket: 16 [ 690.766206][ T36] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 690.769504][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.769538][ T36] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 690.769593][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.822270][ T36] usb 3-1: config 0 descriptor?? [ 691.133627][T13802] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.293671][ T36] microsoft 0003:045E:07DA.0011: ignoring exceeding usage max [ 691.320919][ T36] hid_parser_main: 222 callbacks suppressed [ 691.320952][ T36] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 691.320983][ T36] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 691.321010][ T36] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 691.321036][ T36] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 691.321063][ T36] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 691.321089][ T36] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 691.321115][ T36] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 691.321142][ T36] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 691.321168][ T36] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 691.321193][ T36] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 691.484019][ T36] HID 045e:07da: Invalid code 65791 type 1 [ 691.485972][ T36] HID 045e:07da: Invalid code 768 type 1 [ 691.486000][ T36] HID 045e:07da: Invalid code 769 type 1 [ 691.486015][ T36] HID 045e:07da: Invalid code 770 type 1 [ 691.486030][ T36] HID 045e:07da: Invalid code 771 type 1 [ 691.486045][ T36] HID 045e:07da: Invalid code 772 type 1 [ 691.486059][ T36] HID 045e:07da: Invalid code 773 type 1 [ 691.486073][ T36] HID 045e:07da: Invalid code 774 type 1 [ 691.486087][ T36] HID 045e:07da: Invalid code 775 type 1 [ 691.486102][ T36] HID 045e:07da: Invalid code 776 type 1 [ 691.576059][ T36] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0011/input/input26 [ 692.145840][ T36] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 692.182083][ T36] usb 3-1: USB disconnect, device number 35 [ 692.411776][T13148] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.411922][T13148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.651324][ T5609] Bluetooth: hci1: command tx timeout [ 693.454001][T14450] binder: 14449:14450 ioctl c0306201 0 returned -14 [ 694.724339][ T5609] Bluetooth: hci1: command tx timeout [ 695.299064][ T1674] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.299212][ T1674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.303113][T14041] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 695.417133][T14041] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 695.498614][T14041] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 695.862277][T14041] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 696.136138][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 696.150225][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 696.202712][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 696.257158][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 696.262812][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 697.460288][T14041] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 697.495791][T14041] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 698.097139][T14041] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 698.213207][T14041] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 698.653789][ T5611] Bluetooth: hci2: command tx timeout [ 698.785140][T14516] FAULT_INJECTION: forcing a failure. [ 698.785140][T14516] name failslab, interval 1, probability 0, space 0, times 0 [ 698.785183][T14516] CPU: 0 UID: 0 PID: 14516 Comm: syz.2.3217 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 698.785213][T14516] Tainted: [L]=SOFTLOCKUP [ 698.785220][T14516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 698.785233][T14516] Call Trace: [ 698.785241][T14516] [ 698.785250][T14516] dump_stack_lvl+0xe8/0x150 [ 698.785293][T14516] should_fail_ex+0x46b/0x600 [ 698.785329][T14516] should_failslab+0xa8/0x100 [ 698.785365][T14516] __kmalloc_noprof+0xfb/0x790 [ 698.785393][T14516] ? prepare_creds+0x30/0x820 [ 698.785417][T14516] ? security_prepare_creds+0x52/0x360 [ 698.785449][T14516] ? security_prepare_creds+0x52/0x360 [ 698.785484][T14516] security_prepare_creds+0x52/0x360 [ 698.785514][T14516] prepare_creds+0x57d/0x820 [ 698.785540][T14516] cap_task_prctl+0x87d/0xaa0 [ 698.785570][T14516] security_task_prctl+0xf6/0x190 [ 698.785607][T14516] __se_sys_prctl+0xbf/0x1910 [ 698.785646][T14516] ? __pfx___se_sys_prctl+0x10/0x10 [ 698.785674][T14516] ? __x64_sys_prctl+0x20/0xc0 [ 698.785700][T14516] do_syscall_64+0x166/0x520 [ 698.785731][T14516] ? trace_irq_disable+0x3b/0x140 [ 698.785759][T14516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.785783][T14516] ? clear_bhb_loop+0x70/0xc0 [ 698.785809][T14516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.785830][T14516] RIP: 0033:0x7f5f79d5e159 [ 698.785851][T14516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.785870][T14516] RSP: 002b:00007f5f77fb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 698.785895][T14516] RAX: ffffffffffffffda RBX: 00007f5f79fe5fa0 RCX: 00007f5f79d5e159 [ 698.785913][T14516] RDX: 0000000000000000 RSI: 000000000000001d RDI: 000000000000001c [ 698.785928][T14516] RBP: 00007f5f79df503b R08: 0000000000000000 R09: 0000000000000000 [ 698.785943][T14516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.785958][T14516] R13: 00007f5f79fe6038 R14: 00007f5f79fe5fa0 R15: 00007ffd5209da48 [ 698.785996][T14516] [ 700.706433][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3229'. [ 700.706465][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3229'. [ 700.734865][ T5611] Bluetooth: hci2: command tx timeout [ 702.829695][ T5611] Bluetooth: hci2: command tx timeout [ 703.660030][ T5733] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 703.865881][ T5733] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 703.874301][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.874331][ T5733] usb 3-1: Product: syz [ 703.874345][ T5733] usb 3-1: Manufacturer: syz [ 703.874360][ T5733] usb 3-1: SerialNumber: syz [ 704.306088][ T5733] rtl8150 3-1:1.0: couldn't reset the device [ 704.306474][ T5733] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 704.398197][ T5733] usb 3-1: USB disconnect, device number 36 [ 704.884321][ T5611] Bluetooth: hci2: command tx timeout [ 705.395157][T14386] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.395292][T14386] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.395520][T14386] bridge_slave_0: entered allmulticast mode [ 705.408968][T14386] bridge_slave_0: entered promiscuous mode [ 705.539161][T14386] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.539323][T14386] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.539560][T14386] bridge_slave_1: entered allmulticast mode [ 705.549739][T14386] bridge_slave_1: entered promiscuous mode [ 706.282895][T14625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3241'. [ 706.414288][T14386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.431968][T14386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.742375][T14639] FAULT_INJECTION: forcing a failure. [ 706.742375][T14639] name failslab, interval 1, probability 0, space 0, times 0 [ 706.742421][T14639] CPU: 0 UID: 0 PID: 14639 Comm: syz.2.3245 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 706.742454][T14639] Tainted: [L]=SOFTLOCKUP [ 706.742462][T14639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 706.742476][T14639] Call Trace: [ 706.742486][T14639] [ 706.742496][T14639] dump_stack_lvl+0xe8/0x150 [ 706.742609][T14639] should_fail_ex+0x46b/0x600 [ 706.742686][T14639] should_failslab+0xa8/0x100 [ 706.742750][T14639] ? do_getname+0x2e/0x250 [ 706.742794][T14639] kmem_cache_alloc_noprof+0x9e/0x690 [ 706.742834][T14639] ? do_getname+0x2e/0x250 [ 706.742877][T14639] do_getname+0x2e/0x250 [ 706.742909][T14639] ? user_path_at+0x1e/0x160 [ 706.742938][T14639] user_path_at+0x2a/0x160 [ 706.742968][T14639] __se_sys_mount+0x2dc/0x420 [ 706.743006][T14639] ? __pfx___se_sys_mount+0x10/0x10 [ 706.743039][T14639] ? __x64_sys_mount+0x20/0xc0 [ 706.743066][T14639] do_syscall_64+0x166/0x520 [ 706.743138][T14639] ? trace_irq_disable+0x3b/0x140 [ 706.743191][T14639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.743238][T14639] ? clear_bhb_loop+0x70/0xc0 [ 706.743266][T14639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.743290][T14639] RIP: 0033:0x7f5f79d5e159 [ 706.743313][T14639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.743334][T14639] RSP: 002b:00007f5f77fb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 706.743360][T14639] RAX: ffffffffffffffda RBX: 00007f5f79fe5fa0 RCX: 00007f5f79d5e159 [ 706.743377][T14639] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 706.743392][T14639] RBP: 00007f5f79df503b R08: 0000000000000000 R09: 0000000000000000 [ 706.743407][T14639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.743420][T14639] R13: 00007f5f79fe6038 R14: 00007f5f79fe5fa0 R15: 00007ffd5209da48 [ 706.743458][T14639] [ 706.905814][ T1487] bridge_slave_1: left allmulticast mode [ 706.905854][ T1487] bridge_slave_1: left promiscuous mode [ 706.906168][ T1487] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.143299][ T1487] bridge_slave_0: left allmulticast mode [ 707.143343][ T1487] bridge_slave_0: left promiscuous mode [ 707.143671][ T1487] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.220458][ T1487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.326541][ T1487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.389855][ T1487] bond0 (unregistering): Released all slaves [ 708.613328][T14386] team0: Port device team_slave_0 added [ 708.622492][T14386] team0: Port device team_slave_1 added [ 708.778562][T14041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.012213][T14386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.012236][T14386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.012266][T14386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.132922][T14386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.132943][T14386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.132971][T14386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.184468][ T1487] hsr_slave_0: left promiscuous mode [ 710.224389][ T1487] hsr_slave_1: left promiscuous mode [ 710.225194][ T1487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.265313][ T1487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.123132][T14688] overlayfs: failed to clone upperpath [ 711.147479][T14689] jffs2: notice: (14689) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 711.222054][T14688] overlayfs: failed to clone upperpath [ 711.362519][ T1487] team0 (unregistering): Port device team_slave_1 removed [ 711.482185][ T1487] team0 (unregistering): Port device team_slave_0 removed [ 712.599797][T14041] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.773388][T14386] hsr_slave_0: entered promiscuous mode [ 712.784013][T14386] hsr_slave_1: entered promiscuous mode [ 713.035970][T14480] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.036127][T14480] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.036352][T14480] bridge_slave_0: entered allmulticast mode [ 713.048804][T14480] bridge_slave_0: entered promiscuous mode [ 713.406336][T13138] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.406473][T13138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.407696][T14480] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.407918][T14480] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.408138][T14480] bridge_slave_1: entered allmulticast mode [ 713.411371][T14480] bridge_slave_1: entered promiscuous mode [ 713.478892][T14724] lo: entered allmulticast mode [ 713.589381][T14720] lo: left allmulticast mode [ 713.982046][T13134] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.982201][T13134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.307174][T14480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.481017][T14480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.964829][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9 [ 715.210858][T14480] team0: Port device team_slave_0 added [ 715.444232][T14480] team0: Port device team_slave_1 added [ 715.778859][ T5609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 715.820366][ T5609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 715.876760][ T5609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 715.899928][ T5609] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 715.906509][ T5609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 717.986465][T14480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.986488][T14480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.986519][T14480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.084339][ T5611] Bluetooth: hci5: command tx timeout [ 718.795058][T14480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.795079][T14480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.795107][T14480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.475608][ T36] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 720.167056][ T5611] Bluetooth: hci5: command tx timeout [ 720.277369][ T36] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 722.245687][ T5611] Bluetooth: hci5: command tx timeout [ 723.159780][T14480] hsr_slave_0: entered promiscuous mode [ 723.161165][T14480] hsr_slave_1: entered promiscuous mode [ 723.162092][T14480] debugfs: 'hsr0' already exists in 'hsr' [ 723.162121][T14480] Cannot create hsr debugfs directory [ 723.632378][ T5893] Process accounting resumed [ 724.324411][ T5611] Bluetooth: hci5: command tx timeout [ 724.442104][T14810] FAULT_INJECTION: forcing a failure. [ 724.442104][T14810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.442152][T14810] CPU: 0 UID: 0 PID: 14810 Comm: syz.2.3293 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 724.442187][T14810] Tainted: [L]=SOFTLOCKUP [ 724.442196][T14810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 724.442210][T14810] Call Trace: [ 724.442233][T14810] [ 724.442244][T14810] dump_stack_lvl+0xe8/0x150 [ 724.442287][T14810] should_fail_ex+0x46b/0x600 [ 724.442323][T14810] strncpy_from_user+0x36/0x2c0 [ 724.442355][T14810] __se_sys_request_key+0xb8/0x350 [ 724.442406][T14810] ? __pfx___se_sys_request_key+0x10/0x10 [ 724.442449][T14810] do_syscall_64+0x166/0x520 [ 724.442483][T14810] ? trace_irq_disable+0x3b/0x140 [ 724.442513][T14810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.442538][T14810] ? clear_bhb_loop+0x70/0xc0 [ 724.442567][T14810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.442590][T14810] RIP: 0033:0x7f5f79d5e159 [ 724.442613][T14810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.442634][T14810] RSP: 002b:00007f5f77fb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 724.442662][T14810] RAX: ffffffffffffffda RBX: 00007f5f79fe5fa0 RCX: 00007f5f79d5e159 [ 724.442680][T14810] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 724.442695][T14810] RBP: 00007f5f79df503b R08: 0000000000000000 R09: 0000000000000000 [ 724.442710][T14810] R10: fffffffffffffff9 R11: 0000000000000246 R12: 0000000000000000 [ 724.442724][T14810] R13: 00007f5f79fe6038 R14: 00007f5f79fe5fa0 R15: 00007ffd5209da48 [ 724.442762][T14810] [ 724.850711][ T5256] 8021q: adding VLAN 0 to HW filter on device eth10 [ 729.439513][T14847] netlink: 'syz.2.3306': attribute type 1 has an invalid length. [ 729.847746][T14852] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3308'. [ 730.234409][ T1487] bridge_slave_1: left allmulticast mode [ 730.234453][ T1487] bridge_slave_1: left promiscuous mode [ 730.234966][ T1487] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.375726][ T1487] bridge_slave_0: left allmulticast mode [ 730.380535][ T1487] bridge_slave_0: left promiscuous mode [ 730.380911][ T1487] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.061886][ T1453] rpcbind: RPC call returned error 22 [ 731.812138][ T3604] libceph: connect (1)[c::]:6789 error -101 [ 731.813204][ T3604] libceph: mon0 (1)[c::]:6789 connect error [ 731.847607][ T3604] libceph: connect (1)[c::]:6789 error -101 [ 731.847856][ T3604] libceph: mon0 (1)[c::]:6789 connect error [ 731.903003][T14868] ceph: No mds server is up or the cluster is laggy [ 732.107641][ T3604] libceph: connect (1)[c::]:6789 error -101 [ 732.107885][ T3604] libceph: mon0 (1)[c::]:6789 connect error [ 732.455491][ T5716] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 732.548480][ T1487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.706853][ T5716] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 732.708227][ T5716] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 732.708245][ T5716] usb 3-1: config 1 has no interface number 0 [ 732.708279][ T5716] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.708296][ T5716] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 732.708328][ T5716] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 6803, setting to 1024 [ 732.708344][ T5716] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 732.710548][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.710573][ T5716] usb 3-1: Product: syz [ 732.710584][ T5716] usb 3-1: Manufacturer: syz [ 732.710592][ T5716] usb 3-1: SerialNumber: syz [ 732.835545][ T1487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.085562][T14876] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 733.137303][ T1487] bond0 (unregistering): Released all slaves [ 733.730106][T14876] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 733.813450][ T5716] cdc_ncm 3-1:1.1: bind() failure [ 734.057989][ T5716] usb 3-1: USB disconnect, device number 37 [ 734.766378][ T1487] hsr_slave_0: left promiscuous mode [ 734.836463][ T1487] hsr_slave_1: left promiscuous mode [ 734.837942][ T1487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.912066][ T1487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.084432][ T5893] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 737.235662][ T5893] usb 3-1: not running at top speed; connect to a high speed hub [ 737.235708][ T5893] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice=ba.a3 [ 737.236657][ T5893] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 737.238055][ T5893] usb 3-1: New USB device strings: Mfr=226, Product=216, SerialNumber=0 [ 737.238078][ T5893] usb 3-1: Product: syz [ 737.238087][ T5893] usb 3-1: Manufacturer: syz [ 737.382745][ T5893] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (046d:0825) [ 737.691728][ T5893] uvcvideo 3-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 737.705532][ T5893] uvcvideo 3-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 737.705634][ T5893] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 737.706566][ T5893] uvcvideo 3-1:1.0: probe with driver uvcvideo failed with error -71 [ 737.779984][ T5893] usb 3-1: USB disconnect, device number 38 [ 737.987916][ T1487] team0 (unregistering): Port device team_slave_1 removed [ 738.155061][ T1487] team0 (unregistering): Port device team_slave_0 removed [ 738.485640][T14933] netlink: 'syz.4.3331': attribute type 39 has an invalid length. [ 738.728987][ T5256] 8021q: adding VLAN 0 to HW filter on device eth11 [ 738.880186][ T5871] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 739.070571][ T5871] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 739.087431][ T5871] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 739.087486][ T5871] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 739.087503][ T5871] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 739.087526][ T5871] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 739.087571][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.952804][ T5871] gud 3-1:1.0: Failed to get connectors (error=-5) [ 739.952855][ T5871] gud 3-1:1.0: probe with driver gud failed with error -5 [ 740.070788][T14751] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.070937][T14751] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.071170][T14751] bridge_slave_0: entered allmulticast mode [ 740.100348][T14751] bridge_slave_0: entered promiscuous mode [ 740.124998][T14751] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.125124][T14751] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.125346][T14751] bridge_slave_1: entered allmulticast mode [ 740.129934][T14751] bridge_slave_1: entered promiscuous mode [ 740.212990][ T5871] usb 3-1: USB disconnect, device number 39 [ 741.072049][T14751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.077521][T14751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.722231][T14751] team0: Port device team_slave_0 added [ 741.728685][T14751] team0: Port device team_slave_1 added [ 741.859976][T14751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.859999][T14751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.860029][T14751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.863052][T14751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.863072][T14751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.863102][T14751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.157595][T14963] vlan0: entered promiscuous mode [ 743.438819][T14963] team0: Port device vlan0 added [ 743.732982][T14751] hsr_slave_0: entered promiscuous mode [ 743.740193][T14751] hsr_slave_1: entered promiscuous mode [ 743.751747][T14751] debugfs: 'hsr0' already exists in 'hsr' [ 743.751773][T14751] Cannot create hsr debugfs directory [ 744.505053][T14977] Process accounting resumed [ 745.466337][T15000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3348'. [ 747.776436][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.776509][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.792145][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 747.971318][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 747.984993][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 748.001871][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 748.024339][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 749.034275][T15047] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3356'. [ 749.116118][T15048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3356'. [ 749.933981][T15058] FAULT_INJECTION: forcing a failure. [ 749.933981][T15058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.938909][T15058] CPU: 0 UID: 0 PID: 15058 Comm: syz.2.3358 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 749.938952][T15058] Tainted: [L]=SOFTLOCKUP [ 749.938960][T15058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 749.938975][T15058] Call Trace: [ 749.938986][T15058] [ 749.938996][T15058] dump_stack_lvl+0xe8/0x150 [ 749.939049][T15058] should_fail_ex+0x46b/0x600 [ 749.939085][T15058] strncpy_from_user+0x36/0x2c0 [ 749.939117][T15058] path_removexattrat+0x130/0x760 [ 749.939154][T15058] ? __pfx_path_removexattrat+0x10/0x10 [ 749.939182][T15058] ? do_futex+0x3e7/0x4e0 [ 749.939252][T15058] ? rcu_is_watching+0x16/0xb0 [ 749.939317][T15058] __x64_sys_lremovexattr+0x65/0x80 [ 749.939348][T15058] do_syscall_64+0x166/0x520 [ 749.939381][T15058] ? trace_irq_disable+0x3b/0x140 [ 749.939410][T15058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.939433][T15058] ? clear_bhb_loop+0x70/0xc0 [ 749.939462][T15058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.939486][T15058] RIP: 0033:0x7f5f79d5e159 [ 749.939507][T15058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.939525][T15058] RSP: 002b:00007f5f77fb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6 [ 749.939547][T15058] RAX: ffffffffffffffda RBX: 00007f5f79fe5fa0 RCX: 00007f5f79d5e159 [ 749.939563][T15058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 749.939583][T15058] RBP: 00007f5f79df503b R08: 0000000000000000 R09: 0000000000000000 [ 749.939602][T15058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 749.939616][T15058] R13: 00007f5f79fe6038 R14: 00007f5f79fe5fa0 R15: 00007ffd5209da48 [ 749.939655][T15058] [ 750.244208][ T5611] Bluetooth: hci0: command tx timeout [ 751.670793][ T5716] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 751.859744][ T5716] usb 3-1: Using ep0 maxpacket: 32 [ 751.863617][ T5716] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 751.877337][ T5716] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.877372][ T5716] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.877413][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.890209][ T5716] hub 3-1:4.0: USB hub found [ 752.113823][ T5716] hub 3-1:4.0: 2 ports detected [ 752.113897][ T5716] usb 3-1: selecting invalid altsetting 1 [ 752.113936][ T5716] hub 3-1:4.0: Using single TT (err -22) [ 752.311874][ T5716] hub 3-1:4.0: config failed, can't get hub status (err -5) [ 752.325095][ T5611] Bluetooth: hci0: command tx timeout [ 752.675964][ T5871] usb 3-1: USB disconnect, device number 40 [ 754.408400][ T5611] Bluetooth: hci0: command tx timeout [ 754.657136][T14480] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 754.790497][T14480] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 755.175092][T14480] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 755.282168][T14480] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 755.307647][T14480] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 755.487661][T14480] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 756.484184][ T5611] Bluetooth: hci0: command tx timeout [ 756.572823][ T5609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 756.717443][ T5609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 756.777876][ T5609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 756.789036][ T5609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 756.795373][ T5609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 758.722690][T15142] netlink: 428 bytes leftover after parsing attributes in process `syz.2.3391'. [ 758.916811][T15142] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3391'. [ 759.204257][ T5611] Bluetooth: hci1: command tx timeout [ 759.238694][ T1535] bridge_slave_1: left allmulticast mode [ 759.238734][ T1535] bridge_slave_1: left promiscuous mode [ 759.239011][ T1535] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.568213][ T1535] bridge_slave_0: left allmulticast mode [ 759.568255][ T1535] bridge_slave_0: left promiscuous mode [ 759.568553][ T1535] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.909866][T15159] Invalid option length (1047580) for dns_resolver key [ 761.285065][ T5611] Bluetooth: hci1: command tx timeout [ 761.498454][ T1535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.647097][ T1535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.730940][ T1535] bond0 (unregistering): Released all slaves [ 761.995482][T15025] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.995632][T15025] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.995877][T15025] bridge_slave_0: entered allmulticast mode [ 762.000676][T15025] bridge_slave_0: entered promiscuous mode [ 762.032846][T15025] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.032983][T15025] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.033206][T15025] bridge_slave_1: entered allmulticast mode [ 762.057598][T15025] bridge_slave_1: entered promiscuous mode [ 762.502884][T15195] FAULT_INJECTION: forcing a failure. [ 762.502884][T15195] name failslab, interval 1, probability 0, space 0, times 0 [ 762.502930][T15195] CPU: 0 UID: 0 PID: 15195 Comm: syz.2.3413 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 762.502963][T15195] Tainted: [L]=SOFTLOCKUP [ 762.502972][T15195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 762.502986][T15195] Call Trace: [ 762.502996][T15195] [ 762.503008][T15195] dump_stack_lvl+0xe8/0x150 [ 762.503050][T15195] should_fail_ex+0x46b/0x600 [ 762.503087][T15195] should_failslab+0xa8/0x100 [ 762.503122][T15195] ? do_timer_create+0x247/0x1100 [ 762.503151][T15195] kmem_cache_alloc_noprof+0x9e/0x690 [ 762.503182][T15195] ? do_timer_create+0x247/0x1100 [ 762.503217][T15195] do_timer_create+0x247/0x1100 [ 762.503254][T15195] ? __pfx_do_timer_create+0x10/0x10 [ 762.503281][T15195] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 762.503313][T15195] __x64_sys_timer_create+0x14c/0x1c0 [ 762.503345][T15195] ? __UNIQUE_ID_modinfo_13418+0x653fd894/0xffffffffffed1874 [ 762.503510][T15195] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 762.503549][T15195] ? rcu_is_watching+0x16/0xb0 [ 762.503595][T15195] do_syscall_64+0x166/0x520 [ 762.503623][T15195] ? trace_irq_disable+0x3b/0x140 [ 762.503650][T15195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.503676][T15195] ? clear_bhb_loop+0x70/0xc0 [ 762.503702][T15195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.503723][T15195] RIP: 0033:0x7f5f79d5e159 [ 762.503744][T15195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.503763][T15195] RSP: 002b:00007f5f77fb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 762.503788][T15195] RAX: ffffffffffffffda RBX: 00007f5f79fe5fa0 RCX: 00007f5f79d5e159 [ 762.503806][T15195] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffff600020 [ 762.503821][T15195] RBP: 00007f5f79df503b R08: 0000000000000000 R09: 0000000000000000 [ 762.503845][T15195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.503858][T15195] R13: 00007f5f79fe6038 R14: 00007f5f79fe5fa0 R15: 00007ffd5209da48 [ 762.503886][T15195] ? __UNIQUE_ID_modinfo_13418+0x653fd894/0xffffffffffed1874 [ 762.503922][T15195] [ 763.396996][ T5611] Bluetooth: hci1: command tx timeout [ 763.681736][T15193] netlink: 'syz.4.3412': attribute type 2 has an invalid length. [ 764.245805][ T1535] hsr_slave_0: left promiscuous mode [ 764.286401][ T1535] hsr_slave_1: left promiscuous mode [ 764.288663][ T1535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.335254][ T1535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.154202][T14970] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 765.319114][T14970] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 765.321894][T14970] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 765.321926][T14970] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 765.354283][T14970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.354317][T14970] usb 3-1: Product: syz [ 765.354341][T14970] usb 3-1: Manufacturer: syz [ 765.354358][T14970] usb 3-1: SerialNumber: syz [ 765.444185][ T5611] Bluetooth: hci1: command tx timeout [ 765.597180][ T1535] team0 (unregistering): Port device team_slave_1 removed [ 765.737918][T14970] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 765.741185][ T1535] team0 (unregistering): Port device team_slave_0 removed [ 766.688550][T15025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 766.693486][T15025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.783342][ T1236] usb 3-1: USB disconnect, device number 41 [ 766.838326][ T1236] usblp0: removed [ 766.952480][T15025] team0: Port device team_slave_0 added [ 767.032906][T15025] team0: Port device team_slave_1 added [ 767.193970][T15025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.193992][T15025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.232630][T15025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.748274][T15025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.748297][T15025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.748336][T15025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.346901][T15025] hsr_slave_0: entered promiscuous mode [ 769.350490][T15025] hsr_slave_1: entered promiscuous mode [ 769.353251][T15025] debugfs: 'hsr0' already exists in 'hsr' [ 769.353281][T15025] Cannot create hsr debugfs directory [ 774.757630][T15114] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.757763][T15114] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.757986][T15114] bridge_slave_0: entered allmulticast mode [ 774.875097][T15114] bridge_slave_0: entered promiscuous mode [ 774.903077][T15114] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.903237][T15114] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.903478][T15114] bridge_slave_1: entered allmulticast mode [ 774.933402][T15114] bridge_slave_1: entered promiscuous mode [ 775.082016][T15114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.240585][T15114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.928919][ T5609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 776.102479][ T5609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 776.120268][ T5609] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 776.140561][ T5609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 776.145779][ T5609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 776.705885][T15114] team0: Port device team_slave_0 added [ 777.077438][T15114] team0: Port device team_slave_1 added [ 777.322010][T15114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.322031][T15114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.322056][T15114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.374765][T15114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.374784][T15114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.374811][T15114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.537735][T15114] hsr_slave_0: entered promiscuous mode [ 777.539292][T15114] hsr_slave_1: entered promiscuous mode [ 777.540199][T15114] debugfs: 'hsr0' already exists in 'hsr' [ 777.540223][T15114] Cannot create hsr debugfs directory [ 778.413187][ T5611] Bluetooth: hci2: command tx timeout [ 779.941084][T15280] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.941168][T15280] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.941322][T15280] bridge_slave_0: entered allmulticast mode [ 779.958879][T15280] bridge_slave_0: entered promiscuous mode [ 779.978940][T15280] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.979023][T15280] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.993386][T15280] bridge_slave_1: entered allmulticast mode [ 780.008766][T15280] bridge_slave_1: entered promiscuous mode [ 780.487452][ T993] bridge_slave_1: left allmulticast mode [ 780.487498][ T993] bridge_slave_1: left promiscuous mode [ 780.487789][ T993] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.500392][ T5611] Bluetooth: hci2: command tx timeout [ 780.665308][ T993] bridge_slave_0: left allmulticast mode [ 780.665338][ T993] bridge_slave_0: left promiscuous mode [ 780.665534][ T993] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.935743][ T993] bridge_slave_1: left allmulticast mode [ 780.935787][ T993] bridge_slave_1: left promiscuous mode [ 780.936062][ T993] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.086058][ T993] bridge_slave_0: left allmulticast mode [ 781.086089][ T993] bridge_slave_0: left promiscuous mode [ 781.086265][ T993] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.585726][ T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.716353][ T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 781.776738][ T993] bond0 (unregistering): Released all slaves [ 782.094975][ T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.215508][ T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.275876][ T993] bond0 (unregistering): Released all slaves [ 782.318506][T15280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.333129][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9 [ 782.402447][T15280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.594416][ T5611] Bluetooth: hci2: command tx timeout [ 783.851956][T15280] team0: Port device team_slave_0 added [ 783.984399][ T993] hsr_slave_0: left promiscuous mode [ 784.024343][ T993] hsr_slave_1: left promiscuous mode [ 784.025217][ T993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.045418][ T993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.276158][ T993] hsr_slave_0: left promiscuous mode [ 784.314709][ T993] hsr_slave_1: left promiscuous mode [ 784.315626][ T993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.335256][ T993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.654378][ T5611] Bluetooth: hci2: command tx timeout [ 784.858556][ T993] team0 (unregistering): Port device team_slave_1 removed [ 784.910916][ T993] team0 (unregistering): Port device team_slave_0 removed [ 785.785050][ T993] team0 (unregistering): Port device team_slave_1 removed [ 785.847859][ T993] team0 (unregistering): Port device team_slave_0 removed [ 786.130500][T15280] team0: Port device team_slave_1 added [ 786.338845][T15280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.338864][T15280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.338888][T15280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.341136][T15280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.341151][T15280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.341175][T15280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.681277][T15280] hsr_slave_0: entered promiscuous mode [ 786.687172][T15280] hsr_slave_1: entered promiscuous mode [ 790.553286][T15025] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 790.845886][T15025] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 791.004525][T15025] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 791.105213][T15025] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 791.842765][T15025] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 791.880751][T15025] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 791.931227][T15025] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 791.973487][T15025] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 792.332365][T15025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.436608][T15025] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.447043][ T1487] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.447184][ T1487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.472935][ T1487] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.473023][ T1487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.405233][ T993] bridge_slave_1: left allmulticast mode [ 793.405277][ T993] bridge_slave_1: left promiscuous mode [ 793.405594][ T993] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.575400][ T993] bridge_slave_0: left allmulticast mode [ 793.575433][ T993] bridge_slave_0: left promiscuous mode [ 793.575632][ T993] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.125335][ T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 794.206567][ T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 794.269232][ T993] bond0 (unregistering): Released all slaves [ 795.504189][ T993] hsr_slave_0: left promiscuous mode [ 795.545721][ T993] hsr_slave_1: left promiscuous mode [ 795.547926][ T993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 795.595302][ T993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 796.144957][ T993] team0 (unregistering): Port device team_slave_1 removed [ 796.215339][ T993] team0 (unregistering): Port device team_slave_0 removed [ 796.653043][T15025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.067378][T15114] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 797.153712][T15114] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 797.218165][T15114] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 797.318168][T15114] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 797.352503][T15114] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 797.477864][T15114] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 797.484693][T15114] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 797.519794][T15114] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 798.903273][T15025] veth0_vlan: entered promiscuous mode [ 798.923520][T15280] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 798.957248][T15280] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 798.962122][T15280] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 799.015023][T15280] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 799.037563][T15280] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 799.087296][T15280] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 799.090158][T15280] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 799.213092][T15280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 799.254744][T15025] veth1_vlan: entered promiscuous mode [ 799.399047][T15114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 799.476168][T15025] veth0_macvtap: entered promiscuous mode [ 799.510456][T15025] veth1_macvtap: entered promiscuous mode [ 799.561046][T15114] 8021q: adding VLAN 0 to HW filter on device team0 [ 799.602053][ T993] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.602223][ T993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 799.722730][ T1487] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.722890][ T1487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.744721][T15025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 799.778530][T15025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.458023][T15280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.945146][T15280] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.527731][ T1487] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.527883][ T1487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.609538][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.609696][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.112165][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.112192][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.537745][ T1673] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.629752][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.629780][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.878164][ T1673] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.880314][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.880760][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.312353][T15114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.652999][T15280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.654633][T15114] veth0_vlan: entered promiscuous mode [ 806.750832][T15114] veth1_vlan: entered promiscuous mode [ 807.511232][T15114] veth0_macvtap: entered promiscuous mode [ 807.680212][T15114] veth1_macvtap: entered promiscuous mode [ 808.180461][T15114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.236700][T15114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 808.474639][ T5327] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 808.714198][ T5327] usb 7-1: Using ep0 maxpacket: 16 [ 808.716963][ T5327] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 808.718542][ T5327] usb 7-1: too many endpoints for config 0 interface 0 altsetting 3: 255, using maximum allowed: 30 [ 808.718598][ T5327] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 808.718628][ T5327] usb 7-1: config 0 interface 0 has no altsetting 0 [ 808.718664][ T5327] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.741859][ T5327] usb 7-1: config 0 descriptor?? [ 808.953638][T15280] veth0_vlan: entered promiscuous mode [ 808.968679][T13136] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.969746][T13136] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.267676][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.304355][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.503625][ T5327] appleir 0003:05AC:8243.0013: item fetching failed at offset 21/24 [ 809.509187][ T5327] appleir 0003:05AC:8243.0013: parse failed [ 809.509312][ T5327] appleir 0003:05AC:8243.0013: probe with driver appleir failed with error -22 [ 809.721210][ T31] usb 7-1: USB disconnect, device number 2 [ 810.162314][T15280] veth1_vlan: entered promiscuous mode [ 811.440156][ T1674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.440183][ T1674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.788910][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 811.788930][ T37] audit: type=1326 audit(1789083510.371:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15492 comm="syz.4.3462" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df0aae159 code=0x7ffc0000 [ 811.788974][ T37] audit: type=1326 audit(1789083510.371:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15492 comm="syz.4.3462" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df0aae159 code=0x7ffc0000 [ 811.793408][ T37] audit: type=1326 audit(1789083510.371:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15492 comm="syz.4.3462" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df0aae159 code=0x7ffc0000 [ 811.887029][ T37] audit: type=1326 audit(1789083510.471:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15492 comm="syz.4.3462" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df0aae159 code=0x7ffc0000 [ 811.920666][ T37] audit: type=1326 audit(1789083510.481:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15492 comm="syz.4.3462" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5df0aae159 code=0x7ffc0000 [ 811.920722][ T37] audit: type=1326 audit(1789083510.481:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15492 comm="syz.4.3462" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df0aae159 code=0x7ffc0000 [ 811.920769][ T37] audit: type=1326 audit(1789083510.481:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15492 comm="syz.4.3462" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df0aae159 code=0x7ffc0000 [ 811.928064][ T37] audit: type=1326 audit(1789083510.511:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15492 comm="syz.4.3462" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df0aae159 code=0x7ffc0000 [ 811.928119][ T37] audit: type=1326 audit(1789083510.511:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15492 comm="syz.4.3462" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df0aae159 code=0x7ffc0000 [ 811.928751][ T37] audit: type=1326 audit(1789083510.511:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15492 comm="syz.4.3462" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5df0aae159 code=0x7ffc0000 [ 811.964906][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.976645][T13136] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.238024][T15280] veth0_macvtap: entered promiscuous mode [ 812.595450][T13148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.595474][T13148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.632565][T15280] veth1_macvtap: entered promiscuous mode [ 813.392885][T15280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.592923][T15280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.867863][ T3348] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.126459][T15505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3466'. [ 814.875323][T13138] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.875818][T13138] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.876654][T13138] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.311878][T15526] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3473'. [ 816.311921][T15526] netlink: 'syz.8.3473': attribute type 30 has an invalid length. [ 816.463388][T15527] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3473'. [ 816.463429][T15527] netlink: 'syz.8.3473': attribute type 30 has an invalid length. [ 816.580059][T15526] vxlan0: entered promiscuous mode [ 816.580091][T15526] vxlan0: entered allmulticast mode [ 816.868046][T15527] vxlan1: entered promiscuous mode [ 816.868082][T15527] vxlan1: entered allmulticast mode [ 817.098395][T15532] jffs2: notice: (15532) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 819.153355][T10218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.153380][T10218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.371792][ T3348] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.372329][ T3348] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.372952][ T3348] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.723338][T13138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.723364][T13138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.744412][ T1675] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.431102][T15562] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 825.699906][T15610] input: syz1 as /devices/virtual/input/input27 [ 825.699969][T15610] input: failed to attach handler leds to device input27, error: -6 [ 826.716074][ T31] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 826.895281][ T31] usb 7-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 826.913396][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 826.913437][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.913482][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.974799][ T31] usb 7-1: config 0 descriptor?? [ 827.577252][ T31] wacom 0003:056A:5012.0014: unknown main item tag 0x0 [ 827.577296][ T31] wacom 0003:056A:5012.0014: unknown main item tag 0x0 [ 827.577323][ T31] wacom 0003:056A:5012.0014: unknown main item tag 0x0 [ 827.577349][ T31] wacom 0003:056A:5012.0014: unknown main item tag 0x0 [ 827.577375][ T31] wacom 0003:056A:5012.0014: unknown main item tag 0x0 [ 827.577402][ T31] wacom 0003:056A:5012.0014: unknown main item tag 0x0 [ 827.577429][ T31] wacom 0003:056A:5012.0014: unknown main item tag 0x0 [ 827.577455][ T31] wacom 0003:056A:5012.0014: unknown main item tag 0x0 [ 827.577481][ T31] wacom 0003:056A:5012.0014: unknown main item tag 0x0 [ 827.577507][ T31] wacom 0003:056A:5012.0014: unknown main item tag 0x0 [ 827.651927][ T31] wacom 0003:056A:5012.0014: ignoring exceeding usage max [ 827.686856][ T31] wacom 0003:056A:5012.0014: reserved main item tag 0xd [ 827.718100][ T31] wacom 0003:056A:5012.0014: Unknown device_type for 'HID 056a:5012'. Ignoring. [ 827.783251][ T31] usb 7-1: USB disconnect, device number 3 [ 830.384984][T15662] netlink: 1355 bytes leftover after parsing attributes in process `syz.7.3523'. [ 831.306590][T15679] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3529'. [ 831.306634][T15679] netlink: 'syz.7.3529': attribute type 30 has an invalid length. [ 831.417641][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3529'. [ 831.417683][T15681] netlink: 'syz.7.3529': attribute type 30 has an invalid length. [ 831.451920][T15683] FAULT_INJECTION: forcing a failure. [ 831.451920][T15683] name failslab, interval 1, probability 0, space 0, times 0 [ 831.451966][T15683] CPU: 1 UID: 0 PID: 15683 Comm: syz.8.3531 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 831.451999][T15683] Tainted: [L]=SOFTLOCKUP [ 831.452007][T15683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 831.452023][T15683] Call Trace: [ 831.452032][T15683] [ 831.452042][T15683] dump_stack_lvl+0xe8/0x150 [ 831.452099][T15683] should_fail_ex+0x46b/0x600 [ 831.452136][T15683] ? __d_alloc+0x37/0x6f0 [ 831.452167][T15683] should_failslab+0xa8/0x100 [ 831.452207][T15683] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 831.452242][T15683] ? __d_alloc+0x37/0x6f0 [ 831.452276][T15683] __d_alloc+0x37/0x6f0 [ 831.452309][T15683] d_alloc_pseudo+0x21/0xc0 [ 831.452338][T15683] alloc_path_pseudo+0x107/0x220 [ 831.452379][T15683] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 831.452427][T15683] alloc_file_pseudo+0xa8/0x1e0 [ 831.452466][T15683] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 831.452500][T15683] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 831.452531][T15683] ? __se_sys_memfd_secret+0x14a/0x580 [ 831.452688][T15683] ? __se_sys_memfd_secret+0x14a/0x580 [ 831.452734][T15683] __se_sys_memfd_secret+0x254/0x580 [ 831.452772][T15683] do_syscall_64+0x166/0x520 [ 831.452812][T15683] ? trace_irq_disable+0x3b/0x140 [ 831.452842][T15683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.452868][T15683] ? clear_bhb_loop+0x70/0xc0 [ 831.452898][T15683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.452924][T15683] RIP: 0033:0x7ff20f66e159 [ 831.452956][T15683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.452983][T15683] RSP: 002b:00007ff20d8c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 831.453012][T15683] RAX: ffffffffffffffda RBX: 00007ff20f8f5fa0 RCX: 00007ff20f66e159 [ 831.453036][T15683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 831.453051][T15683] RBP: 00007ff20f70503b R08: 0000000000000000 R09: 0000000000000000 [ 831.453066][T15683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 831.453081][T15683] R13: 00007ff20f8f6038 R14: 00007ff20f8f5fa0 R15: 00007ffc61b8bdc8 [ 831.453121][T15683] [ 831.567724][T15679] vxlan0: entered promiscuous mode [ 831.567925][T15679] vxlan0: entered allmulticast mode [ 832.379601][T15681] vxlan1: entered promiscuous mode [ 832.379640][T15681] vxlan1: entered allmulticast mode [ 833.235623][T10218] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.235683][T10218] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.235724][T10218] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.235765][T10218] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.246539][T15694] FAULT_INJECTION: forcing a failure. [ 833.246539][T15694] name failslab, interval 1, probability 0, space 0, times 0 [ 833.246584][T15694] CPU: 0 UID: 0 PID: 15694 Comm: syz.2.3536 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 833.246617][T15694] Tainted: [L]=SOFTLOCKUP [ 833.246626][T15694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 833.246641][T15694] Call Trace: [ 833.246651][T15694] [ 833.246662][T15694] dump_stack_lvl+0xe8/0x150 [ 833.246704][T15694] should_fail_ex+0x46b/0x600 [ 833.246742][T15694] should_failslab+0xa8/0x100 [ 833.246778][T15694] __kvmalloc_node_noprof+0x176/0x890 [ 833.246815][T15694] ? bpf_check_cfg+0x13f/0x3840 [ 833.246868][T15694] ? bpf_check_cfg+0x13f/0x3840 [ 833.246906][T15694] bpf_check_cfg+0x13f/0x3840 [ 833.246960][T15694] ? kasan_quarantine_put+0xbb/0x1f0 [ 833.246991][T15694] ? lockdep_hardirqs_on+0x7b/0x110 [ 833.247034][T15694] ? __pfx_bpf_check_cfg+0x10/0x10 [ 833.247058][T15694] ? bpf_prog_calc_tag+0x310/0x370 [ 833.247085][T15694] ? vfree+0x472/0x500 [ 833.247115][T15694] ? bpf_prog_calc_tag+0x310/0x370 [ 833.247154][T15694] ? check_and_resolve_insns+0x1d54/0x21d0 [ 833.247198][T15694] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 833.247236][T15694] ? add_kfuncs+0x251/0x2e0 [ 833.247273][T15694] bpf_check+0x24bf/0x2e20 [ 833.247316][T15694] ? ktime_get_with_offset+0x93/0x2d0 [ 833.247352][T15694] ? __pfx_bpf_check+0x10/0x10 [ 833.247385][T15694] ? bpf_obj_name_cpy+0x194/0x1e0 [ 833.247413][T15694] bpf_prog_load+0x14d6/0x1c20 [ 833.247452][T15694] ? __pfx_bpf_prog_load+0x10/0x10 [ 833.247505][T15694] __sys_bpf+0xd0d/0xd90 [ 833.247550][T15694] ? __pfx___sys_bpf+0x10/0x10 [ 833.247584][T15694] ? do_futex+0x3e7/0x4e0 [ 833.247637][T15694] ? rcu_is_watching+0x16/0xb0 [ 833.247674][T15694] __x64_sys_bpf+0xba/0xd0 [ 833.247702][T15694] do_syscall_64+0x166/0x520 [ 833.247729][T15694] ? trace_irq_disable+0x3b/0x140 [ 833.247753][T15694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.247775][T15694] ? clear_bhb_loop+0x70/0xc0 [ 833.247801][T15694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.247820][T15694] RIP: 0033:0x7f5f79d5e159 [ 833.247842][T15694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.247860][T15694] RSP: 002b:00007f5f77fb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 833.247884][T15694] RAX: ffffffffffffffda RBX: 00007f5f79fe5fa0 RCX: 00007f5f79d5e159 [ 833.247898][T15694] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 833.247912][T15694] RBP: 00007f5f79df503b R08: 0000000000000000 R09: 0000000000000000 [ 833.247925][T15694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 833.247937][T15694] R13: 00007f5f79fe6038 R14: 00007f5f79fe5fa0 R15: 00007ffd5209da48 [ 833.247969][T15694] [ 835.734201][ T36] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 835.814457][ T5871] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 835.896880][ T36] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 835.898593][ T36] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.958346][ T36] usb 8-1: config 0 descriptor?? [ 835.986902][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 835.987904][ T5871] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 835.996121][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.068468][ T36] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 836.328407][ T5871] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 836.943135][ T36] gspca_stv06xx: I2C: Read error writing address: -71 [ 837.063585][ T36] usb 8-1: USB disconnect, device number 2 [ 837.353978][ T5871] usb 3-1: USB disconnect, device number 42 [ 837.704331][T15746] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3555'. [ 838.852734][T15761] bridge1: entered promiscuous mode [ 840.544189][ T36] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 840.725871][ T36] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 840.727577][ T36] usb 7-1: config 0 has no interfaces? [ 840.731217][ T36] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 840.731251][ T36] usb 7-1: Product: syz [ 840.731268][ T36] usb 7-1: Manufacturer: syz [ 840.731284][ T36] usb 7-1: SerialNumber: syz [ 840.783523][ T36] usb 7-1: config 0 descriptor?? [ 841.094285][ T5733] usb 7-1: USB disconnect, device number 4 [ 841.987172][T15810] pim6reg: entered allmulticast mode [ 842.024676][T15810] pim6reg: left allmulticast mode [ 843.288928][T15825] fuse: fd is not a fuse device [ 844.304125][ T5327] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 844.505566][ T5327] usb 9-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 844.541635][ T5327] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 844.541677][ T5327] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.541721][ T5327] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.611672][ T5327] usb 9-1: config 0 descriptor?? [ 845.233281][ T5327] hid_parser_main: 443 callbacks suppressed [ 845.233316][ T5327] wacom 0003:056A:5012.0015: unknown main item tag 0x0 [ 845.233352][ T5327] wacom 0003:056A:5012.0015: unknown main item tag 0x0 [ 845.233380][ T5327] wacom 0003:056A:5012.0015: unknown main item tag 0x0 [ 845.233407][ T5327] wacom 0003:056A:5012.0015: unknown main item tag 0x0 [ 845.233433][ T5327] wacom 0003:056A:5012.0015: unknown main item tag 0x0 [ 845.233458][ T5327] wacom 0003:056A:5012.0015: unknown main item tag 0x0 [ 845.233483][ T5327] wacom 0003:056A:5012.0015: unknown main item tag 0x0 [ 845.233508][ T5327] wacom 0003:056A:5012.0015: unknown main item tag 0x0 [ 845.233533][ T5327] wacom 0003:056A:5012.0015: unknown main item tag 0x0 [ 845.233558][ T5327] wacom 0003:056A:5012.0015: unknown main item tag 0x0 [ 845.234375][ T5327] wacom 0003:056A:5012.0015: ignoring exceeding usage max [ 845.252408][ T5327] wacom 0003:056A:5012.0015: reserved main item tag 0xd [ 845.277345][ T5327] wacom 0003:056A:5012.0015: Unknown device_type for 'HID 056a:5012'. Ignoring. [ 845.610685][T15863] FAULT_INJECTION: forcing a failure. [ 845.610685][T15863] name failslab, interval 1, probability 0, space 0, times 0 [ 845.610733][T15863] CPU: 1 UID: 0 PID: 15863 Comm: syz.7.3595 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 845.610767][T15863] Tainted: [L]=SOFTLOCKUP [ 845.610777][T15863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 845.610789][T15863] Call Trace: [ 845.610799][T15863] [ 845.610809][T15863] dump_stack_lvl+0xe8/0x150 [ 845.610849][T15863] should_fail_ex+0x46b/0x600 [ 845.610886][T15863] should_failslab+0xa8/0x100 [ 845.610921][T15863] ? prepare_creds+0x30/0x820 [ 845.610975][T15863] kmem_cache_alloc_noprof+0x9e/0x690 [ 845.611003][T15863] ? make_kuid+0x1e5/0x670 [ 845.611031][T15863] ? prepare_creds+0x30/0x820 [ 845.611057][T15863] ? __pfx_make_kuid+0x10/0x10 [ 845.611088][T15863] prepare_creds+0x30/0x820 [ 845.611119][T15863] do_faccessat+0x3aa/0xdc0 [ 845.611151][T15863] ? __pfx_do_faccessat+0x10/0x10 [ 845.611188][T15863] __x64_sys_faccessat2+0x9a/0xb0 [ 845.611222][T15863] do_syscall_64+0x166/0x520 [ 845.611284][T15863] ? trace_irq_disable+0x3b/0x140 [ 845.611314][T15863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.611339][T15863] ? clear_bhb_loop+0x70/0xc0 [ 845.611369][T15863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.611392][T15863] RIP: 0033:0x7fc9e047e159 [ 845.611415][T15863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.611444][T15863] RSP: 002b:00007fc9de6d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7 [ 845.611471][T15863] RAX: ffffffffffffffda RBX: 00007fc9e0705fa0 RCX: 00007fc9e047e159 [ 845.611489][T15863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 845.611504][T15863] RBP: 00007fc9e051503b R08: 0000000000000000 R09: 0000000000000000 [ 845.611519][T15863] R10: 0000000000001100 R11: 0000000000000246 R12: 0000000000000000 [ 845.611534][T15863] R13: 00007fc9e0706038 R14: 00007fc9e0705fa0 R15: 00007ffe26c27a38 [ 845.611572][T15863] [ 845.779942][ T5733] usb 9-1: USB disconnect, device number 2 [ 848.425065][T15911] FAULT_INJECTION: forcing a failure. [ 848.425065][T15911] name failslab, interval 1, probability 0, space 0, times 0 [ 848.425113][T15911] CPU: 0 UID: 0 PID: 15911 Comm: syz.2.3612 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 848.425146][T15911] Tainted: [L]=SOFTLOCKUP [ 848.425156][T15911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 848.425170][T15911] Call Trace: [ 848.425180][T15911] [ 848.425191][T15911] dump_stack_lvl+0xe8/0x150 [ 848.425233][T15911] should_fail_ex+0x46b/0x600 [ 848.425270][T15911] should_failslab+0xa8/0x100 [ 848.425309][T15911] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 848.425341][T15911] ? check_stack_access_within_bounds+0x899/0xb60 [ 848.425373][T15911] ? bpf_push_jmp_history+0x26c/0x6d0 [ 848.425403][T15911] ? bpf_push_jmp_history+0x26c/0x6d0 [ 848.425437][T15911] ? bpf_push_jmp_history+0x26c/0x6d0 [ 848.425470][T15911] krealloc_node_align_noprof+0x19a/0x390 [ 848.425512][T15911] bpf_push_jmp_history+0x26c/0x6d0 [ 848.425555][T15911] check_mem_access+0xf9e/0x2620 [ 848.425590][T15911] ? __pfx_check_mem_access+0x10/0x10 [ 848.425618][T15911] ? copy_array+0xab/0x100 [ 848.425646][T15911] ? __asan_memcpy+0x40/0x70 [ 848.425678][T15911] ? tnum_subreg+0x12/0x20 [ 848.425739][T15911] check_store_reg+0x664/0xe20 [ 848.425778][T15911] do_check_insn+0x9df/0x18e30 [ 848.425838][T15911] ? __pfx_do_check_insn+0x10/0x10 [ 848.425873][T15911] ? kfree+0x1c5/0x6d0 [ 848.425899][T15911] ? bpf_clear_jmp_history+0x42/0xa0 [ 848.425938][T15911] ? bpf_is_state_visited+0x4072/0x47d0 [ 848.425979][T15911] ? diag_append_history+0x136/0x520 [ 848.426031][T15911] ? bpf_diag_record_branch+0x58/0x90 [ 848.426074][T15911] do_check_common+0x3c19/0x5d30 [ 848.426149][T15911] ? __pfx_do_check_common+0x10/0x10 [ 848.426199][T15911] bpf_check+0x2642/0x2e20 [ 848.426243][T15911] ? ktime_get_with_offset+0x93/0x2d0 [ 848.426276][T15911] ? __pfx_bpf_check+0x10/0x10 [ 848.426308][T15911] ? bpf_obj_name_cpy+0x194/0x1e0 [ 848.426338][T15911] bpf_prog_load+0x14d6/0x1c20 [ 848.426383][T15911] ? __pfx_bpf_prog_load+0x10/0x10 [ 848.426442][T15911] __sys_bpf+0xd0d/0xd90 [ 848.426485][T15911] ? __pfx___sys_bpf+0x10/0x10 [ 848.426520][T15911] ? do_futex+0x3e7/0x4e0 [ 848.426573][T15911] ? rcu_is_watching+0x16/0xb0 [ 848.426615][T15911] __x64_sys_bpf+0xba/0xd0 [ 848.426647][T15911] do_syscall_64+0x166/0x520 [ 848.426678][T15911] ? trace_irq_disable+0x3b/0x140 [ 848.426707][T15911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.426731][T15911] ? clear_bhb_loop+0x70/0xc0 [ 848.426760][T15911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.426782][T15911] RIP: 0033:0x7f5f79d5e159 [ 848.426805][T15911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.426825][T15911] RSP: 002b:00007f5f77fb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 848.426862][T15911] RAX: ffffffffffffffda RBX: 00007f5f79fe5fa0 RCX: 00007f5f79d5e159 [ 848.426879][T15911] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 848.426895][T15911] RBP: 00007f5f79df503b R08: 0000000000000000 R09: 0000000000000000 [ 848.426911][T15911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 848.426926][T15911] R13: 00007f5f79fe6038 R14: 00007f5f79fe5fa0 R15: 00007ffd5209da48 [ 848.426963][T15911] [ 848.433643][T15905] syz.7.3609 (15905) used greatest stack depth: 18344 bytes left [ 848.504255][ T5729] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 848.671671][ T5729] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 848.713858][ T5729] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 848.729609][ T5729] usb 9-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 848.729641][ T5729] usb 9-1: Product: syz [ 848.729655][ T5729] usb 9-1: Manufacturer: syz [ 848.729668][ T5729] usb 9-1: SerialNumber: syz [ 848.818760][ T5729] usb 9-1: config 0 descriptor?? [ 848.856679][ T5729] keyspan 9-1:0.0: Keyspan 4 port adapter converter detected [ 848.857015][ T5729] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 81 [ 848.857065][ T5729] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 88 [ 848.904877][ T5729] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 1 [ 849.168918][ T5729] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 849.195736][ T5729] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 2 [ 849.207935][ T5729] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 849.213352][ T5729] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 4 [ 849.249721][ T5729] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 849.255687][ T5729] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 6 [ 849.262272][ T5729] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 849.307943][ T5729] usb 9-1: USB disconnect, device number 3 [ 849.406940][ T5729] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 849.536072][ T5729] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 849.597323][ T5729] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 849.627060][ T31] kernel write not supported for file /gssd/clntXX/gssd (pid: 31 comm: kworker/1:0) [ 849.635350][ T5729] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 849.642669][ T5729] keyspan 9-1:0.0: device disconnected [ 850.124147][ T5733] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 850.230227][T15936] FAULT_INJECTION: forcing a failure. [ 850.230227][T15936] name failslab, interval 1, probability 0, space 0, times 0 [ 850.230273][T15936] CPU: 0 UID: 0 PID: 15936 Comm: syz.8.3622 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 850.230307][T15936] Tainted: [L]=SOFTLOCKUP [ 850.230316][T15936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 850.230339][T15936] Call Trace: [ 850.230348][T15936] [ 850.230362][T15936] dump_stack_lvl+0xe8/0x150 [ 850.230405][T15936] should_fail_ex+0x46b/0x600 [ 850.230441][T15936] should_failslab+0xa8/0x100 [ 850.230475][T15936] __kmalloc_cache_noprof+0xa1/0x680 [ 850.230508][T15936] ? rfkill_fop_open+0x187/0x560 [ 850.230621][T15936] ? rfkill_fop_open+0x187/0x560 [ 850.230654][T15936] ? rfkill_fill_event+0x2a0/0x3f0 [ 850.230691][T15936] rfkill_fop_open+0x187/0x560 [ 850.230731][T15936] ? __pfx_rfkill_fop_open+0x10/0x10 [ 850.230762][T15936] misc_open+0x2de/0x350 [ 850.230894][T15936] chrdev_open+0x4dc/0x600 [ 850.230929][T15936] ? __pfx_chrdev_open+0x10/0x10 [ 850.230962][T15936] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 850.231005][T15936] ? __pfx_chrdev_open+0x10/0x10 [ 850.231033][T15936] do_dentry_open+0x849/0x1420 [ 850.231078][T15936] vfs_open+0x3b/0x350 [ 850.231103][T15936] ? path_openat+0x142d/0x1d60 [ 850.231131][T15936] path_openat+0x1448/0x1d60 [ 850.231178][T15936] do_file_open+0x23e/0x4a0 [ 850.231210][T15936] ? __pfx_do_file_open+0x10/0x10 [ 850.231264][T15936] ? alloc_fd+0x654/0x6d0 [ 850.231299][T15936] do_sys_openat2+0x115/0x200 [ 850.231341][T15936] ? __se_sys_futex+0x3a8/0x450 [ 850.231364][T15936] ? __pfx_do_sys_openat2+0x10/0x10 [ 850.231406][T15936] ? rcu_is_watching+0x16/0xb0 [ 850.231448][T15936] __x64_sys_openat+0x138/0x170 [ 850.231492][T15936] do_syscall_64+0x166/0x520 [ 850.231523][T15936] ? trace_irq_disable+0x3b/0x140 [ 850.231551][T15936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.231575][T15936] ? clear_bhb_loop+0x70/0xc0 [ 850.231605][T15936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.231629][T15936] RIP: 0033:0x7ff20f66e159 [ 850.231651][T15936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.231672][T15936] RSP: 002b:00007ff20d8c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 850.231699][T15936] RAX: ffffffffffffffda RBX: 00007ff20f8f5fa0 RCX: 00007ff20f66e159 [ 850.231717][T15936] RDX: 0000000000008100 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 850.231734][T15936] RBP: 00007ff20f70503b R08: 0000000000000000 R09: 0000000000000000 [ 850.231749][T15936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 850.231763][T15936] R13: 00007ff20f8f6038 R14: 00007ff20f8f5fa0 R15: 00007ffc61b8bdc8 [ 850.231803][T15936] [ 850.294141][ T5733] usb 8-1: Using ep0 maxpacket: 8 [ 850.299924][ T5733] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 850.312911][ T5733] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 850.312969][ T5733] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.568503][ T5733] usb 8-1: config 0 descriptor?? [ 850.917111][T15941] 9p: Bad value for 'rfdno' [ 850.969692][ T5733] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 851.367017][ C0] iowarrior 8-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 851.367819][ T5733] usb 8-1: USB disconnect, device number 3 [ 854.345979][ T31] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 854.641358][ T31] usb 9-1: Using ep0 maxpacket: 8 [ 854.642603][ T31] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 854.652613][ T31] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 854.652649][ T31] usb 9-1: config 0 has no interface number 0 [ 854.667189][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.667218][ T31] usb 9-1: Product: syz [ 854.667233][ T31] usb 9-1: Manufacturer: syz [ 854.667247][ T31] usb 9-1: SerialNumber: syz [ 854.696295][ T31] usb 9-1: config 0 descriptor?? [ 855.026857][ T31] uvcvideo 9-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 855.026968][ T31] uvcvideo 9-1:0.31: No valid video chain found. [ 855.215325][ T5733] usb 9-1: USB disconnect, device number 4 [ 855.856839][T15996] FAULT_INJECTION: forcing a failure. [ 855.856839][T15996] name failslab, interval 1, probability 0, space 0, times 0 [ 855.856898][T15996] CPU: 0 UID: 0 PID: 15996 Comm: syz.6.3641 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 855.856933][T15996] Tainted: [L]=SOFTLOCKUP [ 855.856942][T15996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 855.856956][T15996] Call Trace: [ 855.856967][T15996] [ 855.856977][T15996] dump_stack_lvl+0xe8/0x150 [ 855.857022][T15996] should_fail_ex+0x46b/0x600 [ 855.857058][T15996] should_failslab+0xa8/0x100 [ 855.857095][T15996] __kmalloc_noprof+0xfb/0x790 [ 855.857126][T15996] ? lock_acquire+0x115/0x350 [ 855.857180][T15996] ? tomoyo_encode+0x2ad/0x570 [ 855.857231][T15996] ? tomoyo_encode+0x2ad/0x570 [ 855.857272][T15996] tomoyo_encode+0x2ad/0x570 [ 855.857312][T15996] tomoyo_mount_permission+0x3a4/0x9e0 [ 855.857343][T15996] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 855.857383][T15996] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 855.857414][T15996] ? kasan_save_track+0x4f/0x80 [ 855.857504][T15996] ? kasan_quarantine_put+0xbb/0x1f0 [ 855.857536][T15996] security_sb_mount+0xe4/0x320 [ 855.857572][T15996] path_mount+0xbc/0x1050 [ 855.857600][T15996] ? user_path_at+0xd4/0x160 [ 855.857628][T15996] __se_sys_mount+0x31d/0x420 [ 855.857659][T15996] ? __pfx___se_sys_mount+0x10/0x10 [ 855.857688][T15996] ? __x64_sys_mount+0x20/0xc0 [ 855.857714][T15996] do_syscall_64+0x166/0x520 [ 855.857745][T15996] ? trace_irq_disable+0x3b/0x140 [ 855.857771][T15996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.857794][T15996] ? clear_bhb_loop+0x70/0xc0 [ 855.857831][T15996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.857859][T15996] RIP: 0033:0x7f87636ae159 [ 855.857878][T15996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.857896][T15996] RSP: 002b:00007f8761906028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 855.857922][T15996] RAX: ffffffffffffffda RBX: 00007f8763935fa0 RCX: 00007f87636ae159 [ 855.857940][T15996] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 855.857954][T15996] RBP: 00007f876374503b R08: 0000000000000000 R09: 0000000000000000 [ 855.857966][T15996] R10: 000000000002cc31 R11: 0000000000000246 R12: 0000000000000000 [ 855.857980][T15996] R13: 00007f8763936038 R14: 00007f8763935fa0 R15: 00007ffe427ef1f8 [ 855.858013][T15996] [ 856.574281][ T5871] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 857.457901][T16008] netlink: 'syz.4.3648': attribute type 12 has an invalid length. [ 857.457933][T16008] netlink: 'syz.4.3648': attribute type 29 has an invalid length. [ 857.457947][T16008] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3648'. [ 857.457967][T16008] netlink: 'syz.4.3648': attribute type 1 has an invalid length. [ 857.457981][T16008] netlink: 'syz.4.3648': attribute type 2 has an invalid length. [ 857.893061][T16016] bond0: invalid NS target :: specified for addition [ 857.893097][T16016] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 858.308029][ T5733] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 858.581759][T16018] netlink: 240 bytes leftover after parsing attributes in process `syz.6.3653'. [ 858.651205][ T5733] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 8.40 [ 858.666306][ T5733] usb 8-1: config 1 has an invalid descriptor of length 35, skipping remainder of the config [ 858.684809][ T5733] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 858.684841][ T5733] usb 8-1: SerialNumber: syz [ 859.005684][ T5733] cdc_ether 8-1:1.0: skipping garbage [ 859.005712][ T5733] cdc_ether 8-1:1.0: GUID doesn't match [ 859.514819][ T31] usb 8-1: USB disconnect, device number 4 [ 859.565604][ T5871] usb 9-1: unable to get BOS descriptor or descriptor too short [ 859.565672][ T5871] usb 9-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 859.566727][ T5871] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 859.566767][ T5871] usb 9-1: can't read configurations, error -71 [ 860.714056][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 860.714081][ T37] audit: type=1326 audit(1789083559.291:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16034 comm="syz.6.3660" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87636ae159 code=0x7ff00000 [ 860.985670][ T37] audit: type=1326 audit(1789083559.291:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16034 comm="syz.6.3660" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87636ae159 code=0x7ff00000 [ 860.985872][ T37] audit: type=1326 audit(1789083559.571:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16034 comm="syz.6.3660" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f87636ae159 code=0x7ff00000 [ 860.986145][ T37] audit: type=1326 audit(1789083559.571:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16034 comm="syz.6.3660" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87636ae159 code=0x7ff00000 [ 860.986211][ T37] audit: type=1326 audit(1789083559.571:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16034 comm="syz.6.3660" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87636ae159 code=0x7ff00000 [ 860.986957][ T37] audit: type=1326 audit(1789083559.571:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16034 comm="syz.6.3660" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87636ae159 code=0x7ff00000 [ 862.394192][ T5327] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 862.545251][ T5327] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 862.547100][ T5327] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 862.547133][ T5327] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 862.547154][ T5327] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 862.547208][ T5327] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.550966][ T5327] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 862.550994][ T5327] usb 8-1: Product: syz [ 862.551010][ T5327] usb 8-1: Manufacturer: syz [ 862.689120][ T5327] cdc_wdm 8-1:1.0: skipping garbage [ 862.689145][ T5327] cdc_wdm 8-1:1.0: skipping garbage [ 862.715155][ T5327] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 862.715250][ T5327] cdc_wdm 8-1:1.0: Unknown control protocol [ 862.897843][T16056] input: syz1 as /devices/virtual/input/input34 [ 862.951854][ T5327] usb 8-1: USB disconnect, device number 5 [ 863.825087][ T5327] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 863.985154][ T5327] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 863.987025][ T5327] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 863.987057][ T5327] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 863.987076][ T5327] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 863.987130][ T5327] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.991148][ T5327] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 863.991189][ T5327] usb 8-1: Product: syz [ 863.991205][ T5327] usb 8-1: Manufacturer: syz [ 864.087430][ T5327] cdc_wdm 8-1:1.0: skipping garbage [ 864.087455][ T5327] cdc_wdm 8-1:1.0: skipping garbage [ 864.090932][ T5327] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 864.090958][ T5327] cdc_wdm 8-1:1.0: Unknown control protocol [ 865.252094][ T36] usb 8-1: USB disconnect, device number 6 [ 865.284137][ T5733] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 865.465041][ T5733] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 865.471532][ T5733] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 865.471602][ T5733] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.533455][ T1671] kworker/u8:19 (1671) used greatest stack depth: 17536 bytes left [ 865.550704][ T5733] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 865.551025][ T5733] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 865.551123][ T5733] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 865.607240][ T5733] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 865.607354][ T5733] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 865.664958][ T5733] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 865.699157][ T1427] kworker/u8:12 (1427) used greatest stack depth: 17344 bytes left [ 865.987018][ T5733] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 865.987114][ T5733] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 866.063894][ T5733] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 866.093621][ T5733] usb 7-1: USB disconnect, device number 5 [ 866.160352][ T5733] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 866.303579][ T5733] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 866.315381][ T5733] keyspan 7-1:1.0: device disconnected [ 866.363581][T16098] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3683'. [ 866.374557][T16098] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3683'. [ 867.768425][T16126] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3697'. [ 870.651183][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.651269][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.428524][T16209] input: syz0 as /devices/virtual/input/input35 [ 872.443012][T16190] xt_LOG: level 115 >= 8 [ 874.084233][ T5733] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 874.263275][ T5733] usb 8-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 874.281100][ T5733] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 874.281186][ T5733] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.564167][ T5327] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 874.713901][ T5733] as10x_usb: device has been detected [ 874.726139][ T5327] usb 9-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 874.727250][ T5733] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 874.729863][ T5327] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 874.729928][ T5327] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 874.729957][ T5327] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 874.730004][ T5327] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.600870][ T5733] usb 8-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 875.996895][T16257] coredump: 2577(syz.4.3746): Core dump to core aborted: cannot preserve file permissions [ 876.276476][T16258] INFO: trying to register non-static key. [ 876.282369][T16258] The code is fine but needs lockdep annotation, or maybe [ 876.289781][T16258] you didn't initialize this object before use? [ 876.296104][T16258] turning off the locking correctness validator. [ 876.303052][T16258] CPU: 0 UID: 0 PID: 16258 Comm: syz.7.3738 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 876.314782][T16258] Tainted: [L]=SOFTLOCKUP [ 876.319223][T16258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 876.329399][T16258] Call Trace: [ 876.332884][T16258] [ 876.335844][T16258] dump_stack_lvl+0xe8/0x150 [ 876.340493][T16258] assign_lock_key+0x133/0x150 [ 876.345404][T16258] register_lock_class+0xcc/0x2e0 [ 876.350470][T16258] ? __lock_acquire+0x747/0x2de0 [ 876.355476][T16258] __lock_acquire+0x10c/0x2de0 [ 876.360538][T16258] ? __lock_acquire+0x747/0x2de0 [ 876.365590][T16258] ? __lock_acquire+0x747/0x2de0 [ 876.370763][T16258] lock_acquire+0x115/0x350 [ 876.375426][T16258] ? as102_stream_ctrl+0x27/0xc0 [ 876.380552][T16258] ? as102_stream_ctrl+0x27/0xc0 [ 876.385559][T16258] ? as102_stream_ctrl+0x27/0xc0 [ 876.390986][T16258] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 876.397709][T16258] ? as102_stream_ctrl+0x27/0xc0 [ 876.402715][T16258] as102_stream_ctrl+0x27/0xc0 [ 876.407520][T16258] __dvb_frontend_open+0x2ef/0xc40 [ 876.413017][T16258] ? mutex_lock_nested+0x152/0x1d0 [ 876.418174][T16258] ? __pfx_dvb_frontend_open+0x10/0x10 [ 876.423865][T16258] dvb_device_open+0x258/0x350 [ 876.428844][T16258] chrdev_open+0x4dc/0x600 [ 876.433399][T16258] ? __pfx_chrdev_open+0x10/0x10 [ 876.438370][T16258] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 876.444743][T16258] ? __pfx_chrdev_open+0x10/0x10 [ 876.450692][T16258] do_dentry_open+0x849/0x1420 [ 876.456675][T16258] vfs_open+0x3b/0x350 [ 876.465782][T16258] ? path_openat+0x142d/0x1d60 [ 876.473453][T16258] path_openat+0x1448/0x1d60 [ 876.481028][T16258] do_file_open+0x23e/0x4a0 [ 876.485717][T16258] ? __pfx_do_file_open+0x10/0x10 [ 876.490885][T16258] ? alloc_fd+0x654/0x6d0 [ 876.495244][T16258] do_sys_openat2+0x115/0x200 [ 876.500551][T16258] ? __pfx_do_sys_openat2+0x10/0x10 [ 876.506056][T16258] __x64_sys_openat+0x138/0x170 [ 876.511125][T16258] do_syscall_64+0x166/0x520 [ 876.515739][T16258] ? trace_irq_disable+0x3b/0x140 [ 876.521038][T16258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.527131][T16258] ? clear_bhb_loop+0x70/0xc0 [ 876.531945][T16258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.537884][T16258] RIP: 0033:0x7fc9e043e98e [ 876.542314][T16258] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 876.562456][T16258] RSP: 002b:00007fc9dde4db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 876.570920][T16258] RAX: ffffffffffffffda RBX: 00007fc9dde4e6c0 RCX: 00007fc9e043e98e [ 876.578998][T16258] RDX: 0000000000000802 RSI: 00007fc9dde4dc00 RDI: ffffffffffffff9c [ 876.587600][T16258] RBP: 00007fc9dde4dc00 R08: 0000000000000000 R09: 0000000000000000 [ 876.595846][T16258] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 876.604169][T16258] R13: 00007fc9e07063f8 R14: 00007fc9e0706360 R15: 00007ffe26c27a38 [ 876.612170][T16258] [ 876.638337][ T5733] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:5: No space for directory leaf checksum. Please run e2fsck -D. [ 876.638472][ T5733] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:5: checksumming directory block 0 [ 876.638839][ T5733] usb 8-1: loading /lib/firmware/updates/syzkaller/as102_data1_st.hex failed with error -74 [ 876.639084][ T5733] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:5: No space for directory leaf checksum. Please run e2fsck -D. [ 876.639113][ T5733] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:5: checksumming directory block 0 [ 876.639394][ T5733] usb 8-1: loading /lib/firmware/updates/as102_data1_st.hex failed with error -74 [ 876.639606][ T5733] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:5: No space for directory leaf checksum. Please run e2fsck -D. [ 876.639633][ T5733] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:5: checksumming directory block 0 [ 876.639903][ T5733] usb 8-1: loading /lib/firmware/syzkaller/as102_data1_st.hex failed with error -74 [ 876.641286][ T5733] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:5: No space for directory leaf checksum. Please run e2fsck -D. [ 876.641317][ T5733] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:5: checksumming directory block 0 [ 876.641579][ T5733] usb 8-1: loading /lib/firmware/as102_data1_st.hex failed with error -74 [ 876.641616][ T5733] usb 8-1: Direct firmware load for as102_data1_st.hex failed with error -74 [ 876.641634][ T5733] usb 8-1: Falling back to sysfs fallback for: as102_data1_st.hex [ 876.647193][ T5327] cxacru 9-1:1.0: send of cm 0x91 failed (-71) [ 876.647223][ T5327] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 876.647288][ T5327] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 876.655073][ T5327] cxacru 9-1:1.0: probe with driver cxacru failed with error -71 [ 876.663674][ T5327] usb 9-1: USB disconnect, device number 7 [ 878.645855][ T7606] syz_tun (unregistering): left allmulticast mode [ 879.165368][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.445929][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.636312][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.846211][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.264422][ T12] bridge_slave_1: left allmulticast mode [ 880.264468][ T12] bridge_slave_1: left promiscuous mode [ 880.264659][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.416548][ T12] bridge_slave_0: left allmulticast mode [ 880.416580][ T12] bridge_slave_0: left promiscuous mode [ 880.416848][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.047426][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.125367][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.145909][ T12] bond0 (unregistering): Released all slaves [ 881.186981][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9 [ 881.757470][ T5256] 8021q: adding VLAN 0 to HW filter on device eth10 [ 882.235778][ T5256] 8021q: adding VLAN 0 to HW filter on device eth11 [ 882.644246][ T12] hsr_slave_0: left promiscuous mode [ 882.664285][ T12] hsr_slave_1: left promiscuous mode [ 882.665492][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 882.665549][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.704678][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.704702][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.794725][ T12] veth1_macvtap: left promiscuous mode [ 882.794758][ T12] veth0_macvtap: left promiscuous mode [ 882.794822][ T12] veth1_vlan: left promiscuous mode [ 882.794860][ T12] veth0_vlan: left promiscuous mode [ 883.315533][ T12] team0 (unregistering): Port device team_slave_1 removed [ 883.334927][ T12] team0 (unregistering): Port device team_slave_0 removed [ 883.625961][ T5256] 8021q: adding VLAN 0 to HW filter on device eth12 [ 885.015140][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.015167][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.265918][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.265946][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.515437][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.515465][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.785379][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.785406][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.195624][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0