last executing test programs: 8m43.378841292s ago: executing program 32 (id=841): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "1c"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}, 0x1, 0x0, 0x0, 0x6040850}, 0x40) 8m20.621535522s ago: executing program 5 (id=1163): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040880}, 0x40050) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/4108, 0x100c}, {&(0x7f0000003500)=""/4097, 0x1001}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/21, 0x15}, {&(0x7f0000003400)=""/243, 0xf3}, {&(0x7f00000032c0)=""/100, 0x64}, {&(0x7f0000003340)=""/48, 0x30}], 0x7}, 0x20002062) 8m20.585106522s ago: executing program 5 (id=1164): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9ZR\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\x00\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='\x00\xe5\xff\xff\xff\xff\xff\xff\xff2', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, &(0x7f0000000200)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\x1c@\\X', &(0x7f0000000880)='R\x8d\xe9\x1a\xe0\x04\x00\x00\x00\x00\x00\x00\x00s\x03l\x8c\x11kSg\x03\x14 \'_\v/\xe0\xb0A\rx\x19\xe8\xf6sU\xfe<\xef\xc9\x12\xc25\xf8A\t\xdb\xb7\x88\xeeT\x80\x00\x00\x00=-\xe0\xf9\xff\xd2/x\x86i9\xcb@\xfa-\x19Q\x00\x90\x04\'J\xf8\xdfs\xad\xe6dS\x98\xeb\x89p\xd6)\xe8\x94d\x9dv.3\x9b\x81\x8e\x10\xca\xbc\x888', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000580)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', &(0x7f0000000640)='y', 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000680)='P\xfc#N\x1d\x04\x00\x01\x00\x00\x00\x00\x00\x00\x04\x00\xbe\xd8\x83M\x1a\x06mEy\xcf\xb7\xb1\xd0N\x01\x03}\v\xcc\xaaca$|U\xdd\x1fhM\xa6\xa4-\x84Y\x0f\xdd\"\xf0\xf8\x1e\x84H\x7f\xf5*\x88\x8c\x0fF#-)\xa1|\xc2\x17\x1e\xedq*n\xaeT\xbc\xc7fJL\xa3Jq\xd8\xc5S\xed\xb3\fH\xe7kC\xcf', &(0x7f0000000900)="0e", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='(\xed\xef(.(\\-]\x00', &(0x7f00000000c0)='f\xf0p\xce\x97\xbb\xd2dH\xdf\xbd\x18\x9baE\xef\x90\x90\x057g\x85\xf4\xf0\xba\xb0\xb1\x06\xa6q\xef\x03H\xda\"`\xd6', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='^](*\r\\!\x00', &(0x7f0000000100)='\b\x00\x00\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000980)='\x00'/10, &(0x7f0000000300)='\x1c@\\X', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000380)='\xff\xff', &(0x7f0000000440)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda\x8d-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\xff\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r0) read(r0, 0x0, 0xfffffea1) close(r0) 8m20.500223771s ago: executing program 5 (id=1167): socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000e40)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000e80)=ANY=[@ANYBLOB="180000000000000029000000040000003a00000000000000120000000000000029000000", @ANYRES32=r0], 0x30}, 0x4004000) 8m20.384322653s ago: executing program 5 (id=1169): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 8m20.319206779s ago: executing program 5 (id=1171): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x12, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xee6b2803}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004080}, 0x405c0c4) 8m19.38676016s ago: executing program 5 (id=1194): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001200050104000000ffdbdf2505001900fff9ffff27001a"], 0x40}, 0x1, 0x0, 0x0, 0x44914}, 0x20040840) 8m19.141748756s ago: executing program 33 (id=1194): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001200050104000000ffdbdf2505001900fff9ffff27001a"], 0x40}, 0x1, 0x0, 0x0, 0x44914}, 0x20040840) 8m13.480049852s ago: executing program 4 (id=1288): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)={0xd4, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0x9f, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d715f2d2d285f2c2dde2c286f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f926"}]}]}, 0xd4}], 0x1}, 0x40040) 8m13.425073462s ago: executing program 4 (id=1289): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/63, 0x3f}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/4111, 0x100f}, {&(0x7f00000018c0)=""/8, 0x8}], 0x4, 0x0, 0x5e}, 0x24) 8m12.520268521s ago: executing program 4 (id=1293): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x53}}, 0x10, 0x0}, 0x300068c1) sendmsg$sock(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="f1", 0x1}], 0x1}, 0x41) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)}, 0x21) 8m12.27149541s ago: executing program 4 (id=1295): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 8m12.153225579s ago: executing program 4 (id=1297): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000b030000850000000700000085000000a0"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0xc000000, 0xe, 0x0, &(0x7f0000000580)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) 8m11.691843481s ago: executing program 3 (id=1301): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, 0x0}, 0x3000c085) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x13, &(0x7f0000000340)=r3, 0x4) close(0x3) 8m11.288473399s ago: executing program 3 (id=1302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000248000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e61740014000480080002400000000008000140000000002c000000020a01010000000000000000000000060c00044000000000000000030c000440000000000000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8m11.047847826s ago: executing program 3 (id=1305): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000004100)={0x44, 0x10, 0x1, 0x70bd2b, 0x25dfdbf8, "", [@nested={0x4, 0x4f}, @typed={0x8, 0xab, 0x0, 0x0, @uid}, @nested={0x25, 0x125, 0x0, 0x1, [@typed={0xa, 0x13, 0x0, 0x0, @str='wlan1\x00'}, @typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="1b"]}]}, 0x44}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) 8m10.975168406s ago: executing program 3 (id=1306): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 8m10.854525673s ago: executing program 3 (id=1308): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)={0xd8, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa4, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d715f2d2d285f2c2dde2c286f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f33363"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f926"}]}]}, 0xd8}], 0x1}, 0x40040) 8m10.640543575s ago: executing program 4 (id=1312): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0x17, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m10.002302476s ago: executing program 34 (id=1312): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0x17, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m7.618982499s ago: executing program 3 (id=1325): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x12, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xee6b2803}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004080}, 0x405c0c4) 8m7.229798393s ago: executing program 35 (id=1325): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x12, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xee6b2803}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004080}, 0x405c0c4) 8m6.187740401s ago: executing program 1 (id=1335): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x8880) 8m6.071167742s ago: executing program 1 (id=1336): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)=ANY=[@ANYBLOB="4c000000120001"], 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) 8m6.046769612s ago: executing program 1 (id=1337): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x11, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xce, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x2d}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x200000}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2d}, 0x94) 8m5.962589289s ago: executing program 1 (id=1338): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 8m5.930300226s ago: executing program 1 (id=1339): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000b030000850000000700000085000000a00000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0xc000000, 0xe, 0x0, &(0x7f0000000580)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) 8m5.190738312s ago: executing program 1 (id=1341): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)={0xdc, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa7, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d715f2d2d285f2c2dde2c286f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f926"}]}]}, 0xdc}], 0x1}, 0x40040) 8m4.53921714s ago: executing program 36 (id=1341): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)={0xdc, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa7, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d715f2d2d285f2c2dde2c286f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f926"}]}]}, 0xdc}], 0x1}, 0x40040) 6m35.523065716s ago: executing program 9 (id=1746): set_mempolicy(0x3, &(0x7f0000000440)=0x83e3, 0x1e37) r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000004c0)={0x5, 0x6576, 0x109}) mmap(&(0x7f00003e9000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) 6m32.950632418s ago: executing program 9 (id=1766): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x18, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYBLOB="6049b8c60e168d0c4c9b0174aac05a1a25b18cb4ebf72214eb570d81207c09950c4aa7c31c582d7bd50777b836fa0f627f04e3f487daf3c9c21ada4681a8ebb56998c7ace1e3d810d82e703c519357625365e7e9108771f4c31b68ba8d"], &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m32.839203995s ago: executing program 9 (id=1768): syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r2, 0x4048aecb, &(0x7f00000002c0)) 6m31.397331095s ago: executing program 9 (id=1772): r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) 6m31.245439356s ago: executing program 9 (id=1777): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, 0x0, 0x4884) 6m31.027059106s ago: executing program 9 (id=1781): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x42000000) 6m14.438767011s ago: executing program 37 (id=1781): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x42000000) 17.051003618s ago: executing program 6 (id=2898): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000480)='\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000580), 0x318, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt(r4, 0x0, 0x482, &(0x7f0000000580)="060000007f00000100500000000000006d6800"/44, 0x2c) setsockopt(r4, 0x0, 0x487, &(0x7f0000000880)="060000007f00000100500000000000006d6800000000000000000000000000000000000000000000000000007f00000100500000000000000100"/68, 0x44) 12.017457914s ago: executing program 7 (id=2914): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x890}, 0x800) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x2000000) 10.489210244s ago: executing program 7 (id=2918): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x8, 0x2bb}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000440)) clock_adjtime(0x0, &(0x7f0000000000)={0xfffffffffffffff9, 0x7, 0x0, 0xd, 0x7bffffff, 0xfffffffffffffffe, 0x7, 0x200000000000000, 0xbd, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x5988, 0x8100000000005a, 0x3, 0x4}) 10.327362621s ago: executing program 6 (id=2920): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x8, 0x2bb}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000440)) clock_adjtime(0x0, &(0x7f0000000000)={0xfffffffffffffff9, 0x7, 0x0, 0xd, 0x7bffffff, 0xfffffffffffffffe, 0x7, 0x200000000000000, 0xbd, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x5988, 0x8100000000005a, 0x3, 0x4}) 9.363156216s ago: executing program 7 (id=2923): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r6) r7 = socket$packet(0x11, 0x2, 0x300) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 8.259982921s ago: executing program 6 (id=2924): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x3f6a, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)="10", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)='i', 0x1}], 0x1}}], 0x2, 0x40) sendto$inet(r0, &(0x7f0000000400)="01a4acc7cf28ab9f", 0x8, 0x88c1, 0x0, 0x0) 7.658329084s ago: executing program 2 (id=2925): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000001340)='./debug\x00', &(0x7f0000001380)='debugfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000013c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001400)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000001480)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001580), 0x318, 0x0) recvmmsg(r1, &(0x7f00000015c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001600)=0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001700)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x1, 0x0, 0x0, 0x8a, 0x3}, 0x9c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000017c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004) fchmodat(0xffffffffffffff9c, &(0x7f0000001a40)='.\x00', 0xfffffffb) mount(&(0x7f0000001b00)=@nullb, &(0x7f0000001b40)='./cgroup\x00', &(0x7f0000001b80)='qnx4\x00', 0x200000, 0x0) 7.538907171s ago: executing program 7 (id=2926): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000200)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f0000000340)={0x0, 0x2, 0x0, 0x5ff5, 0x800, 0x0, 0x800010100000}, 0x0, &(0x7f0000000380)={0x1c, 0x40002, 0x0, 0x0, 0x0, 0x200000000, 0x6a9}, 0x0, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010000, 0x0) 6.926651884s ago: executing program 8 (id=2928): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="01fc010002"], 0xa) 6.48810724s ago: executing program 7 (id=2930): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000480)='\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000580), 0x318, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt(r4, 0x0, 0x482, &(0x7f0000000580)="060000007f00000100500000000000006d6800"/44, 0x2c) setsockopt(r4, 0x0, 0x487, &(0x7f0000000880)="060000007f00000100500000000000006d6800000000000000000000000000000000000000000000000000007f00000100500000000000000100"/68, 0x44) 6.478256373s ago: executing program 6 (id=2931): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 6.299875166s ago: executing program 0 (id=2932): socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x4, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mount(0x0, 0x0, &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000980)=""/152, &(0x7f0000000000)=0x98) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_sec\x00', 0x16e) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r1, &(0x7f0000000100)=""/9, 0xfffffd87) 5.635316097s ago: executing program 8 (id=2933): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x8, 0x2bb}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000440)) clock_adjtime(0x0, &(0x7f0000000000)={0xfffffffffffffff9, 0x7, 0x0, 0xd, 0x7bffffff, 0xfffffffffffffffe, 0x7, 0x200000000000000, 0xbd, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x5988, 0x8100000000005a, 0x3, 0x4}) 5.225254159s ago: executing program 0 (id=2934): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x8, 0x2bb}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000440)) clock_adjtime(0x0, &(0x7f0000000000)={0xfffffffffffffff9, 0x7, 0x0, 0xd, 0x7bffffff, 0xfffffffffffffffe, 0x7, 0x200000000000000, 0xbd, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x5988, 0x8100000000005a, 0x3, 0x4}) 4.465602696s ago: executing program 8 (id=2935): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x40) r10 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=0x0) r13 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r10, 0x2) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001500010000000000000000000f00000008000100010000000800030000000000"], 0x24}}, 0x0) close(r14) syz_ublk_setup_queues(r13, r12, &(0x7f0000000540)={0x0, 0x3e0e, 0x1, 0x1, 0x1a1, 0x0, r5}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8391, 0x1000, 0x2, 0x23f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42d3, 0x8000, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x118d, 0x20, 0x3fc, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r13, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r11, '\x00', {0x3, 0xee5, 0x100104, 0x0}}, &(0x7f0000000280)) 4.145130759s ago: executing program 0 (id=2936): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000002d00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8], 0x0) r0 = syz_open_dev$audion(&(0x7f0000002d40), 0x3, 0x1) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) 3.73495707s ago: executing program 8 (id=2937): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x5) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000480)='\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000580), 0x318, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt(r4, 0x0, 0x482, &(0x7f0000000580)="060000007f00000100500000000000006d6800"/44, 0x2c) setsockopt(r4, 0x0, 0x487, &(0x7f0000000880)="060000007f00000100500000000000006d6800000000000000000000000000000000000000000000000000007f00000100500000000000000100"/68, 0x44) setsockopt(r4, 0x0, 0x487, &(0x7f0000000900)="060000007f00000100500000000000006d6800000000000000000000000000000000000000000000000000007f0000010051000000000000010000060000000000000000", 0x44) 2.755453262s ago: executing program 6 (id=2938): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xfffe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4048090) sendmsg$kcm(r4, &(0x7f0000000680)={&(0x7f00000006c0)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000780)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.451292391s ago: executing program 2 (id=2939): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000001840)=0x80000001, 0x4) 2.344393452s ago: executing program 8 (id=2940): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0xa, 0xfffffffffffffff7, 0xfffffffc, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000009c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x2000000, 0x2449, 0xfffffffffffffffd}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, &(0x7f0000000440)="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", 0x1d8, r2) openat$binderfs_log(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder_logs/transactions_hashed\x00', 0x0, 0x0) 2.306769855s ago: executing program 2 (id=2941): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) creat(0x0, 0x175) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, &(0x7f0000000500)='casefold,strict_encoding\x00') 2.033464476s ago: executing program 0 (id=2942): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x890}, 0x800) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x2000000) 1.890872694s ago: executing program 2 (id=2943): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="01fc010002"], 0xa) 1.60685491s ago: executing program 0 (id=2944): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="180000000000000029000000040000008200000000000000180000000000000069000000370000006400000000000000280000000000000029000000050000000002020100000000fe8000000000000000000000000000bb24"], 0x80}, 0x40080) 1.55156405s ago: executing program 7 (id=2945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x6, 0x52ca0542}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) 1.493472079s ago: executing program 2 (id=2946): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x8, 0x2bb}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000440)) clock_adjtime(0x0, &(0x7f0000000000)={0xfffffffffffffff9, 0x7, 0x0, 0xd, 0x7bffffff, 0xfffffffffffffffe, 0x7, 0x200000000000000, 0xbd, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x5988, 0x8100000000005a, 0x3, 0x4}) 1.339938679s ago: executing program 0 (id=2947): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x21400, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80) sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x4c7ac37826251993, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@cache={0x0, 0x800, 0x0, 0x80, 'cache\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, '1024', 0x20, '0', 0x20, 'default 0'}}]}) setrlimit(0x5, &(0x7f0000000540)={0x7, 0x8001}) 390.230615ms ago: executing program 2 (id=2948): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a0705810220000007050202"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x2, 0x4, 0x1, 0xaf, 0xf8, "93400c1edebf74aa1a152f7a70b605655319e9", 0x7, 0x72}) 284.805347ms ago: executing program 8 (id=2949): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xfffe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4048090) 0s ago: executing program 6 (id=2950): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x5) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000480)='\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000580), 0x318, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt(r4, 0x0, 0x482, &(0x7f0000000580)="060000007f00000100500000000000006d6800"/44, 0x2c) setsockopt(r4, 0x0, 0x487, &(0x7f0000000880)="060000007f00000100500000000000006d6800000000000000000000000000000000000000000000000000007f00000100500000000000000100"/68, 0x44) setsockopt(r4, 0x0, 0x487, &(0x7f0000000900)="060000007f00000100500000000000006d6800000000000000000000000000000000000000000000000000007f0000010051000000000000010000060000000000000000", 0x44) kernel console output (not intermixed with test programs): erface [ 348.740289][ T3424] bond0 (unregistering): Released all slaves [ 348.804997][T11178] FAULT_INJECTION: forcing a failure. [ 348.804997][T11178] name failslab, interval 1, probability 0, space 0, times 0 [ 348.805042][T11178] CPU: 0 UID: 0 PID: 11178 Comm: syz.6.1953 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 348.805076][T11178] Tainted: [L]=SOFTLOCKUP [ 348.805084][T11178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 348.805111][T11178] Call Trace: [ 348.805120][T11178] [ 348.805129][T11178] dump_stack_lvl+0xe8/0x150 [ 348.805169][T11178] should_fail_ex+0x46b/0x600 [ 348.805204][T11178] should_failslab+0xa8/0x100 [ 348.805238][T11178] __kmalloc_node_track_caller_noprof+0xf6/0x7b0 [ 348.805268][T11178] ? mptcp_net_init+0x1c5/0x520 [ 348.805297][T11178] ? mptcp_net_init+0x1c5/0x520 [ 348.805326][T11178] kmemdup_noprof+0x2b/0x70 [ 348.805359][T11178] mptcp_net_init+0x1c5/0x520 [ 348.805384][T11178] ops_init+0x35d/0x5d0 [ 348.805424][T11178] setup_net+0x118/0x350 [ 348.805454][T11178] ? __pfx_setup_net+0x10/0x10 [ 348.805486][T11178] ? __ns_common_init+0x384/0x590 [ 348.805511][T11178] copy_net_ns+0x536/0x770 [ 348.805542][T11178] create_new_namespaces+0x3f0/0x6b0 [ 348.805575][T11178] ? security_capable+0x7e/0x2c0 [ 348.805608][T11178] unshare_nsproxy_namespaces+0x144/0x190 [ 348.805642][T11178] ksys_unshare+0x532/0x890 [ 348.805675][T11178] ? __pfx_ksys_unshare+0x10/0x10 [ 348.805708][T11178] ? rcu_is_watching+0x16/0xb0 [ 348.805741][T11178] __x64_sys_unshare+0x38/0x50 [ 348.805771][T11178] do_syscall_64+0x166/0x520 [ 348.805790][T11178] ? trace_irq_disable+0x3b/0x140 [ 348.805809][T11178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.805830][T11178] ? clear_bhb_loop+0x70/0xc0 [ 348.805854][T11178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.805874][T11178] RIP: 0033:0x7fa429c6f559 [ 348.805894][T11178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.805911][T11178] RSP: 002b:00007fa427ebe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 348.805933][T11178] RAX: ffffffffffffffda RBX: 00007fa429ef5fa0 RCX: 00007fa429c6f559 [ 348.805948][T11178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 348.805961][T11178] RBP: 00007fa429d06b20 R08: 0000000000000000 R09: 0000000000000000 [ 348.805974][T11178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.805987][T11178] R13: 00007fa429ef6038 R14: 00007fa429ef5fa0 R15: 00007fff364bf148 [ 348.806022][T11178] [ 350.216538][T10795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.216556][T10795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.216581][T10795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.233484][T10795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.233504][T10795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.233528][T10795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.615461][ T4936] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 350.750826][T11245] netlink: 'syz.2.1973': attribute type 29 has an invalid length. [ 350.783938][ T4936] usb 9-1: Using ep0 maxpacket: 32 [ 350.784903][ T4936] usb 9-1: New USB device found, idVendor=1199, idProduct=68ab, bcdDevice=10.61 [ 350.786437][ T4936] usb 9-1: config 8 has an invalid interface number: 97 but max is 0 [ 350.786462][ T4936] usb 9-1: config 8 has no interface number 0 [ 350.786494][ T4936] usb 9-1: config 8 interface 97 has no altsetting 0 [ 350.789168][ T4936] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.789191][ T4936] usb 9-1: Product: syz [ 350.789206][ T4936] usb 9-1: Manufacturer: syz [ 350.789220][ T4936] usb 9-1: SerialNumber: syz [ 351.051882][T10795] hsr_slave_0: entered promiscuous mode [ 351.092386][T10795] hsr_slave_1: entered promiscuous mode [ 351.112774][T11247] netlink: 'syz.2.1973': attribute type 29 has an invalid length. [ 351.134881][ T4936] hub 9-1:8.97: bad descriptor, ignoring hub [ 351.134918][ T4936] hub 9-1:8.97: probe with driver hub failed with error -5 [ 351.177772][ T4936] sierra 9-1:8.97: Sierra USB modem converter detected [ 351.269378][ T4936] usb 9-1: Sierra USB modem converter now attached to ttyUSB0 [ 351.398684][ T4936] usb 9-1: USB disconnect, device number 8 [ 351.441140][ T4936] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 351.441981][ T4936] sierra 9-1:8.97: device disconnected [ 353.774176][T11296] netlink: 'syz.6.1988': attribute type 29 has an invalid length. [ 353.829797][ T3396] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.830397][ T3396] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.830496][ T3396] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.830532][ T3396] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.830718][T11296] netlink: 'syz.6.1988': attribute type 29 has an invalid length. [ 355.354463][T11309] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 355.857630][T11347] netlink: 'syz.6.2000': attribute type 29 has an invalid length. [ 355.985973][T11348] netlink: 'syz.6.2000': attribute type 29 has an invalid length. [ 356.189083][ T3424] hsr_slave_0: left promiscuous mode [ 356.232400][ T3424] hsr_slave_1: left promiscuous mode [ 356.233800][ T3424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.233826][ T3424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.278653][ T3424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.278681][ T3424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.451397][ T3424] veth1_macvtap: left promiscuous mode [ 356.451473][ T3424] veth0_macvtap: left promiscuous mode [ 356.451696][ T3424] veth1_vlan: left promiscuous mode [ 357.329264][ T3424] veth0_vlan: left promiscuous mode [ 359.300189][T11393] tmpfs: Using encoding : utf8-12.1.0 [ 360.555615][ T3424] team0 (unregistering): Port device team_slave_1 removed [ 360.598803][ T3424] team0 (unregistering): Port device team_slave_0 removed [ 362.223621][T11423] netlink: 'syz.2.2028': attribute type 29 has an invalid length. [ 362.582730][T11426] netlink: 'syz.2.2028': attribute type 29 has an invalid length. [ 365.201532][T11467] netlink: 'syz.2.2040': attribute type 29 has an invalid length. [ 365.204625][T11467] netlink: 'syz.2.2040': attribute type 29 has an invalid length. [ 366.134959][ T5269] 8021q: adding VLAN 0 to HW filter on device eth21 [ 366.291298][T11502] netlink: 'syz.8.2053': attribute type 29 has an invalid length. [ 366.593251][T11504] netlink: 'syz.8.2053': attribute type 29 has an invalid length. [ 366.651909][ T3424] IPVS: stop unused estimator thread 0... [ 368.755479][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 369.380736][T11556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2067'. [ 369.488065][ T1002] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 369.660812][ T1002] usb 9-1: unable to get BOS descriptor or descriptor too short [ 369.660887][ T1002] usb 9-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 369.665262][ T1002] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.665288][ T1002] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 369.665336][ T1002] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 369.667693][ T1002] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 369.667719][ T1002] usb 9-1: Product: syz [ 369.667733][ T1002] usb 9-1: Manufacturer: syz [ 369.822326][ T1002] uvcvideo 9-1:1.0: Found Unit with invalid ID 0 [ 369.822363][ T1002] uvcvideo 9-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 369.822432][ T1002] uvcvideo 9-1:1.0: No streaming interface found for terminal 32770. [ 371.050907][T10795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 371.254553][T10795] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 371.259606][T10795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 372.260216][T10795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 372.272440][ T5269] 8021q: adding VLAN 0 to HW filter on device eth22 [ 372.277763][T10795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 372.407090][T10795] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 372.419885][T10795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 372.468823][T10795] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 372.621963][T11586] input: syz1 as /devices/virtual/input/input7 [ 373.577791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 373.640907][ T10] usb 9-1: USB disconnect, device number 9 [ 373.805133][T10795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.904869][T10795] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.960740][ T3332] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.960868][ T3332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.091367][ T3424] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.101106][ T3424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.273576][T11621] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2079'. [ 374.561904][T11627] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2078'. [ 377.428815][T11650] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.499469][T11670] tmpfs: Using encoding : utf8-12.1.0 [ 377.559230][T11650] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.105548][T11650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.140737][T11650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.133977][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 382.173403][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 382.181107][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 382.219676][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 382.229426][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 382.329450][T11676] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 382.408999][T11726] tmpfs: Using encoding : utf8-12.1.0 [ 382.468205][T11676] usb 7-1: device descriptor read/64, error -71 [ 382.829519][T11676] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 382.984060][T11739] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2111'. [ 382.985172][T11676] usb 7-1: device descriptor read/64, error -71 [ 383.096437][T11676] usb usb7-port1: attempt power cycle [ 383.658924][T11676] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 383.705786][T11676] usb 7-1: device descriptor read/8, error -71 [ 383.965352][T11676] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 384.050530][ T92] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.056618][T11748] usb usb5: usbfs: interface 0 claimed by hub while 'syz.8.2113' sets config #0 [ 384.078014][T11676] usb 7-1: device descriptor read/8, error -71 [ 384.079466][T11748] usb usb5: usbfs: interface 0 claimed by hub while 'syz.8.2113' sets config #1 [ 384.098011][ T1127] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.098379][ T1127] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.218282][T11676] usb usb7-port1: unable to enumerate USB device [ 384.461915][ T94] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.547124][ T5619] Bluetooth: hci1: command tx timeout [ 386.304192][T11720] rxe_eth0 speed is unknown, defaulting to 1000 [ 386.800051][ T5619] Bluetooth: hci1: command tx timeout [ 386.893994][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.894038][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.053005][ T5613] Bluetooth: hci1: command tx timeout [ 389.254542][T11789] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.255020][T11789] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.486354][ T5619] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 390.396042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 391.306351][ T5619] Bluetooth: hci1: command tx timeout [ 393.351606][T11789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.445236][T11789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.343379][T11861] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 396.343379][T11861] [ 396.344078][T11861] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 396.344165][T11861] CIFS: Attempting to mount //172.20.20.170/share [ 396.456742][T11864] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 397.572242][T11861] CIFS: VFS: Error connecting to socket. Aborting operation. [ 397.572295][T11861] CIFS: VFS: cifs_mount failed w/return code = -4 [ 397.743551][ T5269] 8021q: adding VLAN 0 to HW filter on device eth23 [ 398.648008][T11887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2153'. [ 399.311240][ T1190] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.312724][ T3358] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.313383][ T3358] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.313855][ T1178] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.026565][ T42] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 400.199809][ T42] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 400.207368][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.207396][ T42] usb 8-1: Product: syz [ 400.207411][ T42] usb 8-1: Manufacturer: syz [ 400.207425][ T42] usb 8-1: SerialNumber: syz [ 400.735102][ T42] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 400.735166][ T42] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 400.883604][T11952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2174'. [ 401.058487][ T5269] 8021q: adding VLAN 0 to HW filter on device eth24 [ 402.182275][ T42] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): timeout on completion of LiteReset [ 402.182304][ T42] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 402.460393][ T42] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 402.549355][ T42] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -110 [ 404.541078][ T42] usb 8-1: USB disconnect, device number 3 [ 404.681194][T11720] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.681292][T11720] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.681667][T11720] bridge_slave_0: entered allmulticast mode [ 404.715434][T11720] bridge_slave_0: entered promiscuous mode [ 404.744021][T11720] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.744129][T11720] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.744295][T11720] bridge_slave_1: entered allmulticast mode [ 404.756650][T11720] bridge_slave_1: entered promiscuous mode [ 404.917025][ T5619] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 404.945337][T11720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.980056][T11720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.066367][ T5756] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 405.209240][T11720] team0: Port device team_slave_0 added [ 405.228809][T11720] team0: Port device team_slave_1 added [ 405.263193][ T5756] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 405.275791][ T5756] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 405.275827][ T5756] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 405.275849][ T5756] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 405.283615][ T5756] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.283642][ T5756] usb 9-1: Product: syz [ 405.283656][ T5756] usb 9-1: Manufacturer: syz [ 405.283670][ T5756] usb 9-1: SerialNumber: syz [ 405.341839][ T5756] usb 9-1: config 0 descriptor?? [ 405.601817][ T3314] bridge_slave_1: left allmulticast mode [ 405.601853][ T3314] bridge_slave_1: left promiscuous mode [ 405.602173][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.641200][ T5756] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 405.670998][T12037] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2193'. [ 405.768612][ T3314] bridge_slave_0: left allmulticast mode [ 405.768660][ T3314] bridge_slave_0: left promiscuous mode [ 405.768945][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.980656][T11676] usb 9-1: USB disconnect, device number 10 [ 407.317702][ T3314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.358775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 408.313253][ T3314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.335681][ T3314] bond0 (unregistering): Released all slaves [ 408.574607][T12075] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2199'. [ 408.592539][T11720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.592551][T11720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.592569][T11720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.650511][T11720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.650523][T11720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.650538][T11720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.776174][T11720] hsr_slave_0: entered promiscuous mode [ 408.777386][T11720] hsr_slave_1: entered promiscuous mode [ 408.790077][T11720] debugfs: 'hsr0' already exists in 'hsr' [ 408.790105][T11720] Cannot create hsr debugfs directory [ 410.546204][T12110] batman_adv: batadv0: Adding interface: veth0 [ 410.546224][T12110] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.546258][T12110] batman_adv: batadv0: Interface activated: veth0 [ 410.549697][T12111] batman_adv: batadv0: Interface deactivated: veth0 [ 410.683624][T12111] batman_adv: batadv0: Removing interface: veth0 [ 411.024808][T12145] qnx4: no qnx4 filesystem (no root dir). [ 412.379764][ T3314] hsr_slave_0: left promiscuous mode [ 412.417452][ T3314] hsr_slave_1: left promiscuous mode [ 412.418668][ T3314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.469374][ T3314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.844933][T12186] input: syz0 as /devices/virtual/input/input8 [ 412.967249][T12198] qnx4: no qnx4 filesystem (no root dir). [ 415.658494][ T3314] team0 (unregistering): Port device team_slave_1 removed [ 415.743807][ T3314] team0 (unregistering): Port device team_slave_0 removed [ 415.954840][T12223] bridge_slave_0: left allmulticast mode [ 415.954877][T12223] bridge_slave_0: left promiscuous mode [ 415.957444][T12223] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.068756][T12226] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 416.068787][T12226] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 416.114944][T12229] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 416.120616][T12229] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 416.128688][T12229] vhci_hcd vhci_hcd.0: Device attached [ 416.158274][T12226] vhci_hcd vhci_hcd.0: Device attached [ 416.163027][T12230] vhci_hcd: connection closed [ 416.170212][T12227] vhci_hcd: connection closed [ 416.201199][T12223] bridge_slave_1: left allmulticast mode [ 416.201222][T12223] bridge_slave_1: left promiscuous mode [ 416.201526][ T92] vhci_hcd vhci_hcd.2: stop threads [ 416.204617][ T92] vhci_hcd vhci_hcd.2: release socket [ 416.210276][T12223] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.259463][ T92] vhci_hcd vhci_hcd.2: disconnect device [ 416.260121][ T92] vhci_hcd vhci_hcd.2: stop threads [ 416.260141][ T92] vhci_hcd vhci_hcd.2: release socket [ 416.260178][ T92] vhci_hcd vhci_hcd.2: disconnect device [ 416.459295][T12223] bond0: (slave bond_slave_0): Releasing backup interface [ 416.524466][T12223] bond0: (slave bond_slave_1): Releasing backup interface [ 416.579036][T12223] team0: Port device team_slave_0 removed [ 416.600306][T12223] team0: Port device team_slave_1 removed [ 416.600568][T12223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.656932][T12223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.675084][T12223] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 418.299408][T12271] qnx4: no qnx4 filesystem (no root dir). [ 419.105340][T11677] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 419.276861][T11677] usb 7-1: Using ep0 maxpacket: 32 [ 419.277559][T11677] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 419.278752][T11677] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.278775][T11677] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 419.278808][T11677] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.319223][T11677] usb 7-1: config 0 descriptor?? [ 421.098135][T11677] usb 7-1: USB disconnect, device number 11 [ 422.030247][T12326] netlink: 'syz.6.2261': attribute type 12 has an invalid length. [ 422.030271][T12326] netlink: 'syz.6.2261': attribute type 29 has an invalid length. [ 422.030285][T12326] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2261'. [ 422.030318][T12326] netlink: 'syz.6.2261': attribute type 1 has an invalid length. [ 422.030332][T12326] netlink: 'syz.6.2261': attribute type 2 has an invalid length. [ 422.165081][T12336] qnx4: no qnx4 filesystem (no root dir). [ 423.556120][T12359] Bluetooth: MGMT ver 1.23 [ 424.404656][ T5756] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 424.583220][ T5756] usb 8-1: Using ep0 maxpacket: 32 [ 424.584983][ T5756] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 424.586559][ T5756] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.586608][ T5756] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 424.586646][ T5756] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.659514][ T5756] usb 8-1: config 0 descriptor?? [ 424.677804][ T5756] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 425.801626][T12387] qnx4: no qnx4 filesystem (no root dir). [ 427.714905][T11677] usb 8-1: USB disconnect, device number 4 [ 428.868206][T11720] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 428.986634][T11720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 429.006612][T11720] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 429.141597][T12443] qnx4: no qnx4 filesystem (no root dir). [ 430.506818][ T42] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 431.299786][T11720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.711253][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 431.718322][ T42] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 431.822254][T11720] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 432.342829][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.342985][ T42] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 432.343183][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.880023][ T42] usb 3-1: config 0 descriptor?? [ 432.886334][T11720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 432.913816][T11720] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 432.944287][ T42] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 433.027759][T11720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 435.630018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 435.804016][ T42] usb 3-1: USB disconnect, device number 10 [ 436.610778][T12488] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 436.610793][T12488] ALSA: mixer_oss: invalid OSS volume 'SPE' [ 436.761759][T11720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.149272][T12499] qnx4: no qnx4 filesystem (no root dir). [ 437.577839][T11720] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.659729][ T1190] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.660344][ T1190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.858139][ T1190] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.858223][ T1190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.060376][ T4936] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 440.267215][ T4936] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 440.268578][ T4936] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.268615][ T4936] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.304950][ T4936] usb 9-1: config 0 descriptor?? [ 440.326556][ T4936] pwc: Askey VC010 type 2 USB webcam detected. [ 440.814500][ T4936] pwc: recv_control_msg error -32 req 02 val 2b00 [ 440.816227][ T4936] pwc: recv_control_msg error -32 req 02 val 2700 [ 440.817802][ T4936] pwc: recv_control_msg error -32 req 02 val 2c00 [ 440.850582][ T4936] pwc: recv_control_msg error -32 req 04 val 1000 [ 440.866643][ T4936] pwc: recv_control_msg error -32 req 04 val 1300 [ 440.867731][ T4936] pwc: recv_control_msg error -32 req 04 val 1400 [ 440.871215][ T4936] pwc: recv_control_msg error -32 req 02 val 2000 [ 440.883805][ T4936] pwc: recv_control_msg error -32 req 02 val 2100 [ 440.901613][ T4936] pwc: recv_control_msg error -32 req 04 val 1500 [ 440.910731][ T4936] pwc: recv_control_msg error -32 req 02 val 2500 [ 440.913534][ T4936] pwc: recv_control_msg error -32 req 02 val 2400 [ 441.041623][ T4936] pwc: recv_control_msg error -32 req 02 val 2600 [ 441.044791][ T4936] pwc: recv_control_msg error -32 req 02 val 2900 [ 441.049334][ T4936] pwc: recv_control_msg error -32 req 02 val 2800 [ 441.310418][ T4936] pwc: recv_control_msg error -71 req 04 val 1200 [ 441.666368][ T4936] pwc: Registered as video103. [ 441.694111][ T4936] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input9 [ 441.723878][ T4936] usb 9-1: USB disconnect, device number 11 [ 442.334238][T11720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.121744][T11720] veth0_vlan: entered promiscuous mode [ 444.306352][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 445.074013][T11720] veth1_vlan: entered promiscuous mode [ 445.450852][T11720] veth0_macvtap: entered promiscuous mode [ 445.475690][T11720] veth1_macvtap: entered promiscuous mode [ 445.487147][ T42] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 445.551548][T12575] netlink: 'syz.2.2313': attribute type 29 has an invalid length. [ 445.620476][T12575] netlink: 'syz.2.2313': attribute type 29 has an invalid length. [ 445.661358][ T42] usb 7-1: Using ep0 maxpacket: 32 [ 445.662216][ T42] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 445.705271][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.705301][ T42] usb 7-1: Product: syz [ 445.705324][ T42] usb 7-1: Manufacturer: syz [ 445.705337][ T42] usb 7-1: SerialNumber: syz [ 445.751062][ T42] usb 7-1: config 0 descriptor?? [ 445.786630][ T42] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 446.113081][T11720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.730249][T11720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.534514][ T1178] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.558210][ T42] gspca_stk1135: reg_w 0x200 err -71 [ 447.559261][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 447.559273][ T42] gspca_stk1135: Sensor write failed [ 447.559289][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 447.559294][ T42] gspca_stk1135: Sensor write failed [ 447.559311][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 447.559316][ T42] gspca_stk1135: Sensor read failed [ 447.559329][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 447.559334][ T42] gspca_stk1135: Sensor read failed [ 447.559338][ T42] gspca_stk1135: Detected sensor type unknown (0x0) [ 447.559354][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 447.559359][ T42] gspca_stk1135: Sensor read failed [ 447.559372][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 447.559377][ T42] gspca_stk1135: Sensor read failed [ 447.559390][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 447.559394][ T42] gspca_stk1135: Sensor write failed [ 447.559408][ T42] gspca_stk1135: serial bus timeout: status=0x00 [ 447.559412][ T42] gspca_stk1135: Sensor write failed [ 447.559467][ T42] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71 [ 447.597542][ T3332] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.597966][ T3332] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.598259][ T3332] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.715970][ T42] usb 7-1: USB disconnect, device number 12 [ 448.554007][T12594] jffs2: notice: (12594) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 453.451226][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 453.451273][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 453.916821][T12615] qnx4: no qnx4 filesystem (no root dir). [ 454.920865][T12619] netlink: 'syz.2.2323': attribute type 29 has an invalid length. [ 454.937875][T12619] netlink: 'syz.2.2323': attribute type 29 has an invalid length. [ 454.945862][ T5613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 454.989682][ T5613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 454.994100][ T5613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 454.995468][ T5613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 454.998834][ T5613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 455.818787][T12639] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2327'. [ 457.344050][ T5613] Bluetooth: hci5: command tx timeout [ 459.595731][ T5613] Bluetooth: hci5: command tx timeout [ 459.800710][T12661] qnx4: no qnx4 filesystem (no root dir). [ 460.013945][T12666] netlink: 'syz.6.2334': attribute type 29 has an invalid length. [ 460.409301][T12669] netlink: 'syz.6.2334': attribute type 29 has an invalid length. [ 461.843367][ T5613] Bluetooth: hci5: command tx timeout [ 462.888767][ T1190] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.043789][ T4936] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 464.096478][ T5613] Bluetooth: hci5: command tx timeout [ 464.215587][ T4936] usb 3-1: Using ep0 maxpacket: 8 [ 464.216284][ T4936] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 464.218121][ T4936] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 464.255443][ T4936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.255470][ T4936] usb 3-1: Product: syz [ 464.255484][ T4936] usb 3-1: Manufacturer: syz [ 464.255498][ T4936] usb 3-1: SerialNumber: syz [ 464.299705][ T4936] usb 3-1: config 0 descriptor?? [ 465.426508][ T1190] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.737469][ T4936] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 465.763879][ T4936] usb 3-1: USB disconnect, device number 11 [ 466.153953][T12613] rxe_eth0 speed is unknown, defaulting to 1000 [ 466.246902][T12730] netlink: 'syz.8.2345': attribute type 29 has an invalid length. [ 466.964041][ T1190] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.757132][T12756] qnx4: no qnx4 filesystem (no root dir). [ 472.344943][ T1190] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.382808][T11674] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 472.547890][T12787] qnx4: no qnx4 filesystem (no root dir). [ 473.382500][T11674] usb 3-1: Using ep0 maxpacket: 8 [ 473.383090][T11674] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 473.384102][T11674] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 473.387388][T11674] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.387402][T11674] usb 3-1: Product: syz [ 473.387409][T11674] usb 3-1: Manufacturer: syz [ 473.387417][T11674] usb 3-1: SerialNumber: syz [ 473.446236][T11674] usb 3-1: config 0 descriptor?? [ 473.465348][T11674] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 473.711029][T11674] usb 3-1: USB disconnect, device number 12 [ 476.272716][ T5955] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 476.443082][ T5955] usb 7-1: unable to get BOS descriptor or descriptor too short [ 476.443126][ T5955] usb 7-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 476.444050][ T5955] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.444064][ T5955] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 476.444090][ T5955] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 476.495999][ T5955] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 476.496017][ T5955] usb 7-1: Product: syz [ 476.496025][ T5955] usb 7-1: Manufacturer: syz [ 476.616613][ T5955] uvcvideo 7-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 476.616636][ T5955] uvcvideo 7-1:1.0: No valid video chain found. [ 477.749516][ T1190] bridge_slave_1: left allmulticast mode [ 477.749543][ T1190] bridge_slave_1: left promiscuous mode [ 477.749989][ T1190] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.904464][ T1190] bridge_slave_0: left allmulticast mode [ 477.904499][ T1190] bridge_slave_0: left promiscuous mode [ 477.906989][ T5955] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 477.934193][ T1190] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.069491][ T5955] usb 9-1: Using ep0 maxpacket: 32 [ 478.071700][ T5955] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 478.078956][ T5955] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.078973][ T5955] usb 9-1: Product: syz [ 478.078980][ T5955] usb 9-1: Manufacturer: syz [ 478.078987][ T5955] usb 9-1: SerialNumber: syz [ 478.121505][ T5955] usb 9-1: config 0 descriptor?? [ 478.140260][ T5955] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 478.806656][ T30] usb 7-1: USB disconnect, device number 13 [ 478.892888][T12877] netlink: 'syz.7.2380': attribute type 10 has an invalid length. [ 479.916667][ T5955] gspca_stk1135: reg_w 0xf err -71 [ 479.918009][ T5955] gspca_stk1135: serial bus timeout: status=0x00 [ 479.918023][ T5955] gspca_stk1135: Sensor write failed [ 479.918048][ T5955] gspca_stk1135: serial bus timeout: status=0x00 [ 479.918058][ T5955] gspca_stk1135: Sensor write failed [ 479.918083][ T5955] gspca_stk1135: serial bus timeout: status=0x00 [ 479.918093][ T5955] gspca_stk1135: Sensor read failed [ 479.918207][ T5955] gspca_stk1135: serial bus timeout: status=0x00 [ 479.918259][ T5955] gspca_stk1135: Sensor read failed [ 479.918310][ T5955] gspca_stk1135: Detected sensor type unknown (0x0) [ 479.918467][ T5955] gspca_stk1135: serial bus timeout: status=0x00 [ 479.918520][ T5955] gspca_stk1135: Sensor read failed [ 479.918672][ T5955] gspca_stk1135: serial bus timeout: status=0x00 [ 479.918769][ T5955] gspca_stk1135: Sensor read failed [ 479.918792][ T5955] gspca_stk1135: serial bus timeout: status=0x00 [ 479.918802][ T5955] gspca_stk1135: Sensor write failed [ 479.918828][ T5955] gspca_stk1135: serial bus timeout: status=0x00 [ 479.918837][ T5955] gspca_stk1135: Sensor write failed [ 479.919218][ T5955] stk1135 9-1:0.0: probe with driver stk1135 failed with error -71 [ 482.001181][ T5955] usb 9-1: USB disconnect, device number 12 [ 485.242312][ T1190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.319585][ T1190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.340805][ T1190] bond0 (unregistering): Released all slaves [ 485.415095][T12857] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 485.495790][T12877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.499641][T12877] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 485.645236][T12878] bond0: (slave batadv0): Releasing backup interface [ 485.704882][T12878] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 486.650496][T12613] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.656945][T12613] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.657087][T12613] bridge_slave_0: entered allmulticast mode [ 486.659286][T11674] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 486.696228][T12613] bridge_slave_0: entered promiscuous mode [ 486.714698][T12613] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.716708][T12613] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.717637][T12613] bridge_slave_1: entered allmulticast mode [ 486.795692][T12613] bridge_slave_1: entered promiscuous mode [ 486.854299][T11674] usb 7-1: Using ep0 maxpacket: 32 [ 486.864002][T11674] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 486.881005][T11674] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 486.881055][T11674] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.011517][T11674] usb 7-1: config 0 descriptor?? [ 487.074592][T11674] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 487.103689][ T6135] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 487.271954][ T6135] usb 3-1: Using ep0 maxpacket: 32 [ 487.273970][ T6135] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 487.308792][ T6135] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.308821][ T6135] usb 3-1: Product: syz [ 487.308835][ T6135] usb 3-1: Manufacturer: syz [ 487.308849][ T6135] usb 3-1: SerialNumber: syz [ 487.552677][ T6135] usb 3-1: config 0 descriptor?? [ 487.640745][ T6135] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 488.083815][T12940] md: invalid raid superblock magic on ram15 [ 488.083835][T12940] md: ram15 does not have a valid v0.0 superblock, not importing! [ 488.085512][T12940] md: md_import_device returned -22 [ 488.086982][T12935] md: invalid raid superblock magic on ram14 [ 488.086998][T12935] md: ram14 does not have a valid v0.0 superblock, not importing! [ 488.087068][T12935] md: md_import_device returned -22 [ 488.219051][ T1190] hsr_slave_0: left promiscuous mode [ 488.262370][ T1190] hsr_slave_1: left promiscuous mode [ 488.264266][ T1190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.264293][ T1190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.318635][ T1190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.318662][ T1190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.483598][ T1190] veth1_macvtap: left promiscuous mode [ 488.483777][ T1190] veth0_macvtap: left promiscuous mode [ 488.486932][ T1190] veth1_vlan: left promiscuous mode [ 488.487316][ T1190] veth0_vlan: left promiscuous mode [ 489.141673][ T6135] gspca_stk1135: reg_w 0xf err -71 [ 489.142716][ T6135] gspca_stk1135: serial bus timeout: status=0x00 [ 489.142732][ T6135] gspca_stk1135: Sensor write failed [ 489.142756][ T6135] gspca_stk1135: serial bus timeout: status=0x00 [ 489.142765][ T6135] gspca_stk1135: Sensor write failed [ 489.142788][ T6135] gspca_stk1135: serial bus timeout: status=0x00 [ 489.142798][ T6135] gspca_stk1135: Sensor read failed [ 489.142822][ T6135] gspca_stk1135: serial bus timeout: status=0x00 [ 489.142831][ T6135] gspca_stk1135: Sensor read failed [ 489.142839][ T6135] gspca_stk1135: Detected sensor type unknown (0x0) [ 489.142868][ T6135] gspca_stk1135: serial bus timeout: status=0x00 [ 489.142877][ T6135] gspca_stk1135: Sensor read failed [ 489.142900][ T6135] gspca_stk1135: serial bus timeout: status=0x00 [ 489.142910][ T6135] gspca_stk1135: Sensor read failed [ 489.142935][ T6135] gspca_stk1135: serial bus timeout: status=0x00 [ 489.142943][ T6135] gspca_stk1135: Sensor write failed [ 489.142967][ T6135] gspca_stk1135: serial bus timeout: status=0x00 [ 489.142975][ T6135] gspca_stk1135: Sensor write failed [ 489.143062][ T6135] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 489.167913][ T6135] usb 3-1: USB disconnect, device number 13 [ 489.562113][ T5955] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 490.032291][T11674] usb 7-1: USB disconnect, device number 14 [ 490.482919][ T5955] usb 9-1: Using ep0 maxpacket: 8 [ 490.504162][ T5955] usb 9-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 490.505662][ T5955] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 490.600677][ T5955] usb 9-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 490.600709][ T5955] usb 9-1: Product: syz [ 490.600723][ T5955] usb 9-1: Manufacturer: syz [ 490.600738][ T5955] usb 9-1: SerialNumber: syz [ 490.933572][ T5955] usb 9-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 490.933600][ T5955] usb 9-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 490.933618][ T5955] usb 9-1: Handspring Visor / Palm OS: Number of ports: 2 [ 491.159497][ T5955] usb 9-1: palm_os_3_probe - error -71 getting bytes available request [ 491.159548][ T5955] visor 9-1:1.0: Handspring Visor / Palm OS converter detected [ 491.191501][ T1190] team0 (unregistering): Port device team_slave_1 removed [ 491.309857][ T5955] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 491.334516][ T5955] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 491.341622][ T5955] usb 9-1: USB disconnect, device number 13 [ 491.372476][ T1190] team0 (unregistering): Port device team_slave_0 removed [ 491.574192][ T5955] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 491.732929][ T5955] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 491.801523][ T5955] visor 9-1:1.0: device disconnected [ 492.523330][T12613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.524675][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 492.594602][T12613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.741080][T12613] team0: Port device team_slave_0 added [ 492.760202][T12613] team0: Port device team_slave_1 added [ 492.880294][T12613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.880307][T12613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.880325][T12613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.966921][T12613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.966936][T12613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.966959][T12613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.492354][T12613] hsr_slave_0: entered promiscuous mode [ 493.502170][T12613] hsr_slave_1: entered promiscuous mode [ 494.683830][ T5955] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 494.882690][ T5955] usb 8-1: Using ep0 maxpacket: 32 [ 494.883813][ T5955] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 494.888546][ T5955] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.888573][ T5955] usb 8-1: Product: syz [ 494.888586][ T5955] usb 8-1: Manufacturer: syz [ 494.888601][ T5955] usb 8-1: SerialNumber: syz [ 494.947026][ T5955] usb 8-1: config 0 descriptor?? [ 495.004868][ T5955] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 496.513833][ T5955] gspca_stk1135: reg_w 0xf err -71 [ 496.514859][ T5955] gspca_stk1135: serial bus timeout: status=0x00 [ 496.514867][ T5955] gspca_stk1135: Sensor write failed [ 496.514881][ T5955] gspca_stk1135: serial bus timeout: status=0x00 [ 496.514886][ T5955] gspca_stk1135: Sensor write failed [ 496.514900][ T5955] gspca_stk1135: serial bus timeout: status=0x00 [ 496.514905][ T5955] gspca_stk1135: Sensor read failed [ 496.514918][ T5955] gspca_stk1135: serial bus timeout: status=0x00 [ 496.514923][ T5955] gspca_stk1135: Sensor read failed [ 496.514926][ T5955] gspca_stk1135: Detected sensor type unknown (0x0) [ 496.514942][ T5955] gspca_stk1135: serial bus timeout: status=0x00 [ 496.514947][ T5955] gspca_stk1135: Sensor read failed [ 496.514959][ T5955] gspca_stk1135: serial bus timeout: status=0x00 [ 496.514964][ T5955] gspca_stk1135: Sensor read failed [ 496.514976][ T5955] gspca_stk1135: serial bus timeout: status=0x00 [ 496.514981][ T5955] gspca_stk1135: Sensor write failed [ 496.514994][ T5955] gspca_stk1135: serial bus timeout: status=0x00 [ 496.514999][ T5955] gspca_stk1135: Sensor write failed [ 496.515049][ T5955] stk1135 8-1:0.0: probe with driver stk1135 failed with error -71 [ 496.752550][ T5955] usb 8-1: USB disconnect, device number 5 [ 497.019909][T13015] veth3: entered allmulticast mode [ 497.549447][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 502.119047][T13024] rxe_eth0 speed is unknown, defaulting to 1000 [ 504.734572][T13078] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2423'. [ 508.787938][T13116] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2428'. [ 510.184221][T13135] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2433'. [ 510.505527][T12613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 510.648315][T12613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 510.661229][T12613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 511.240362][T12613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 511.242766][T12613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 513.678053][T12613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 513.720140][T12613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 513.848832][T12613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 514.247602][T13159] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2442'. [ 514.670545][ T5955] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 514.876069][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 514.922005][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 514.925458][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 514.953569][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 514.969424][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 515.063857][ T5955] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 515.068558][ T5955] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.068614][ T5955] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 515.068640][ T5955] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 515.068685][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.680687][T13188] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2445'. [ 516.040528][ T5955] cxacru 3-1:1.0: receive of cm 0x91 failed (-71) [ 516.040655][ T5955] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 516.040669][ T5955] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 516.111948][ T5955] cxacru 3-1:1.0: probe with driver cxacru failed with error -71 [ 516.132324][ T5955] usb 3-1: USB disconnect, device number 14 [ 517.223517][ T5613] Bluetooth: hci1: command tx timeout [ 519.486059][ T5613] Bluetooth: hci1: command tx timeout [ 519.545921][T13232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2453'. [ 519.994269][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 519.994337][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 521.024065][T13167] rxe_eth0 speed is unknown, defaulting to 1000 [ 521.048738][T13247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2457'. [ 521.549121][T13254] input: syz0 as /devices/virtual/input/input10 [ 521.721999][ T5613] Bluetooth: hci1: command tx timeout [ 521.859208][T13261] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2463'. [ 522.079203][T13262] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2463'. [ 522.079241][T13262] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2463'. [ 522.912705][T13262] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2463'. [ 523.975282][ T5613] Bluetooth: hci1: command tx timeout [ 524.359625][T13277] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2466'. [ 524.564323][T13292] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2469'. [ 526.155026][T13313] loop7: detected capacity change from 0 to 16384 [ 526.375295][T13314] loop7: detected capacity change from 16384 to 0 [ 527.832196][ T5955] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 528.018032][ T5955] usb 3-1: Using ep0 maxpacket: 16 [ 528.019923][ T5955] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 528.043154][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.043189][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 528.043213][ T5955] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 528.043255][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.130480][ T5955] usb 3-1: config 0 descriptor?? [ 528.165211][T13336] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2481'. [ 528.264786][ T3314] bridge_slave_1: left allmulticast mode [ 528.264829][ T3314] bridge_slave_1: left promiscuous mode [ 528.265639][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.503960][ T3314] bridge_slave_0: left allmulticast mode [ 528.504010][ T3314] bridge_slave_0: left promiscuous mode [ 528.516952][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.697384][ T5955] nintendo 0003:057E:2019.0005: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 529.099581][ T3314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.170855][ T3314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.209012][ T3314] bond0 (unregistering): Released all slaves [ 529.264768][ T5955] nintendo 0003:057E:2019.0005: Failed to get joycon info; ret=-71 [ 529.264811][ T5955] nintendo 0003:057E:2019.0005: Failed to retrieve controller info; ret=-71 [ 529.264831][ T5955] nintendo 0003:057E:2019.0005: Failed to initialize controller; ret=-71 [ 529.338580][ T5955] nintendo 0003:057E:2019.0005: probe - fail = -71 [ 529.338870][ T5955] nintendo 0003:057E:2019.0005: probe with driver nintendo failed with error -71 [ 529.402448][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 529.481672][ T5955] usb 3-1: USB disconnect, device number 15 [ 529.824288][T11674] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 529.955978][T13167] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.956104][T13167] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.956291][T13167] bridge_slave_0: entered allmulticast mode [ 529.986715][T11674] usb 7-1: Using ep0 maxpacket: 32 [ 529.989913][T11674] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 529.991022][T11674] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.991052][T11674] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.991088][T11674] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.055384][T13167] bridge_slave_0: entered promiscuous mode [ 530.058496][T13167] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.058807][T13167] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.059064][T13167] bridge_slave_1: entered allmulticast mode [ 530.692545][T11674] usb 7-1: config 0 descriptor?? [ 530.750948][T13167] bridge_slave_1: entered promiscuous mode [ 531.217468][T13167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.238036][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 531.238217][T11674] usbhid 7-1:0.0: can't add hid device: -32 [ 531.238332][T11674] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 531.294708][T13167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.349837][T11674] usb 7-1: USB disconnect, device number 15 [ 531.815392][ T3314] hsr_slave_0: left promiscuous mode [ 531.866755][ T3314] hsr_slave_1: left promiscuous mode [ 531.870282][ T3314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.919283][ T3314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.449627][ T3314] team0 (unregistering): Port device team_slave_1 removed [ 533.529850][ T3314] team0 (unregistering): Port device team_slave_0 removed [ 533.879090][T13167] team0: Port device team_slave_0 added [ 534.064900][T13401] syzkaller0: entered promiscuous mode [ 534.064917][T13401] syzkaller0: entered allmulticast mode [ 534.099547][T13167] team0: Port device team_slave_1 added [ 535.837450][T13167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.837468][T13167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.837495][T13167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.879774][T13167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.879792][T13167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.879819][T13167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.140200][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 536.373037][T13167] hsr_slave_0: entered promiscuous mode [ 536.374772][T13167] hsr_slave_1: entered promiscuous mode [ 536.767453][ T5955] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 536.998859][ T5955] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 537.001932][ T5955] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.001990][ T5955] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 537.002018][ T5955] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 537.002058][ T5955] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.295565][ T5955] cxacru 8-1:1.0: send of cm 0x91 failed (-71) [ 539.295614][ T5955] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 539.295628][ T5955] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 540.710828][ T5955] cxacru 8-1:1.0: probe with driver cxacru failed with error -71 [ 540.890507][ T5955] usb 8-1: USB disconnect, device number 6 [ 542.681674][ T30] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 542.844204][ T30] usb 3-1: Using ep0 maxpacket: 8 [ 542.845952][ T30] usb 3-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 542.847137][ T30] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.847164][ T30] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.847183][ T30] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 542.847204][ T30] usb 3-1: config 0 interface 0 has no altsetting 0 [ 542.847242][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.970572][ T30] usb 3-1: config 0 descriptor?? [ 543.481295][ T30] logitech 0003:046D:C623.0006: unknown main item tag 0x0 [ 543.481333][ T30] logitech 0003:046D:C623.0006: unknown main item tag 0x0 [ 543.481362][ T30] logitech 0003:046D:C623.0006: unknown main item tag 0x0 [ 543.481390][ T30] logitech 0003:046D:C623.0006: unknown main item tag 0x0 [ 543.481417][ T30] logitech 0003:046D:C623.0006: unknown main item tag 0x0 [ 543.481444][ T30] logitech 0003:046D:C623.0006: unknown main item tag 0x0 [ 543.481485][ T30] logitech 0003:046D:C623.0006: unknown main item tag 0x0 [ 543.481513][ T30] logitech 0003:046D:C623.0006: unknown main item tag 0x0 [ 543.481540][ T30] logitech 0003:046D:C623.0006: unknown main item tag 0x0 [ 543.481568][ T30] logitech 0003:046D:C623.0006: unknown main item tag 0x0 [ 543.524843][ T30] logitech 0003:046D:C623.0006: unbalanced collection at end of report description [ 543.525649][ T30] logitech 0003:046D:C623.0006: parse failed [ 543.525759][ T30] logitech 0003:046D:C623.0006: probe with driver logitech failed with error -22 [ 543.715462][ T4936] usb 3-1: USB disconnect, device number 16 [ 547.047071][T13587] 9pnet_fd: Insufficient options for proto=fd [ 549.385608][T13167] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 549.516161][T13167] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 549.528698][T13167] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 549.888934][T13167] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 549.893754][T13167] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 550.024247][T13167] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 550.037772][T13167] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 550.113685][T13167] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 551.419934][T13167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.447660][T13167] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.469299][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.469447][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.492924][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.493122][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.628833][ T5955] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 551.793421][ T5955] usb 9-1: Using ep0 maxpacket: 16 [ 551.794446][ T5955] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 551.821325][ T5955] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.821354][ T5955] usb 9-1: Product: syz [ 551.821368][ T5955] usb 9-1: Manufacturer: syz [ 551.821381][ T5955] usb 9-1: SerialNumber: syz [ 551.857065][ T5955] usb 9-1: config 0 descriptor?? [ 551.866044][ T5955] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 551.893547][ T5955] usb 9-1: Detected FT-X [ 552.330072][ T5955] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 552.330613][ T5955] ftdi_sio 9-1:0.0: GPIO initialisation failed: -71 [ 552.358516][ T5955] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 552.384649][ T5955] usb 9-1: USB disconnect, device number 14 [ 552.436267][ T5955] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 552.438315][ T5955] ftdi_sio 9-1:0.0: device disconnected [ 553.264782][ T5955] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 553.334673][T13167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.426913][ T5955] usb 7-1: Using ep0 maxpacket: 8 [ 553.427776][ T5955] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 553.429305][ T5955] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 553.434403][ T5955] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 553.434429][ T5955] usb 7-1: Product: syz [ 553.434443][ T5955] usb 7-1: Manufacturer: syz [ 553.434465][ T5955] usb 7-1: SerialNumber: syz [ 553.758831][T13167] veth0_vlan: entered promiscuous mode [ 553.819638][T13167] veth1_vlan: entered promiscuous mode [ 553.911125][ T5955] usb 7-1: palm_os_3_probe - error -110 getting connection information [ 553.911233][ T5955] visor 7-1:1.0: probe with driver visor failed with error -110 [ 554.279808][T13167] veth0_macvtap: entered promiscuous mode [ 554.290846][T13167] veth1_macvtap: entered promiscuous mode [ 554.340933][T13167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.411455][T13167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.448435][ T94] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.448487][ T94] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.448611][ T94] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.448646][ T94] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.796067][T13691] 9pnet_fd: Insufficient options for proto=fd [ 556.363571][ T30] usb 7-1: USB disconnect, device number 16 [ 556.699313][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.699334][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.927590][ T30] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 556.985880][ T3314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.985902][ T3314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.089299][ T30] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 557.096189][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.096218][ T30] usb 7-1: Product: syz [ 557.096232][ T30] usb 7-1: Manufacturer: syz [ 557.096245][ T30] usb 7-1: SerialNumber: syz [ 557.595036][ T30] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 557.595099][ T30] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 557.595580][T13707] FAULT_INJECTION: forcing a failure. [ 557.595580][T13707] name failslab, interval 1, probability 0, space 0, times 0 [ 557.595696][T13707] CPU: 1 UID: 0 PID: 13707 Comm: syz.2.2553 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 557.595725][T13707] Tainted: [L]=SOFTLOCKUP [ 557.595732][T13707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 557.595748][T13707] Call Trace: [ 557.595756][T13707] [ 557.595765][T13707] dump_stack_lvl+0xe8/0x150 [ 557.595815][T13707] should_fail_ex+0x46b/0x600 [ 557.595849][T13707] should_failslab+0xa8/0x100 [ 557.595883][T13707] __kmalloc_noprof+0xf6/0x790 [ 557.595910][T13707] ? xfrm_state_init+0x190/0x540 [ 557.595935][T13707] ? xfrm_state_init+0x190/0x540 [ 557.595965][T13707] xfrm_state_init+0x190/0x540 [ 557.595991][T13707] ? proc_create_net_single+0x12f/0x1a0 [ 557.596013][T13707] ? __pfx_xfrm_state_init+0x10/0x10 [ 557.596036][T13707] ? __pfx_xfrm_statistics_seq_show+0x10/0x10 [ 557.596058][T13707] ? __pfx_proc_create_net_single+0x10/0x10 [ 557.596095][T13707] xfrm_net_init+0x21f/0xf40 [ 557.596125][T13707] ? __pfx_xfrm_net_init+0x10/0x10 [ 557.596152][T13707] ? proc_register+0x5d8/0x7f0 [ 557.596187][T13707] ops_init+0x35d/0x5d0 [ 557.596224][T13707] setup_net+0x118/0x350 [ 557.596253][T13707] ? __pfx_setup_net+0x10/0x10 [ 557.596284][T13707] ? __ns_common_init+0x384/0x590 [ 557.596307][T13707] copy_net_ns+0x536/0x770 [ 557.596338][T13707] create_new_namespaces+0x3f0/0x6b0 [ 557.596372][T13707] ? security_capable+0x7e/0x2c0 [ 557.596403][T13707] unshare_nsproxy_namespaces+0x144/0x190 [ 557.596435][T13707] ksys_unshare+0x532/0x890 [ 557.596468][T13707] ? __pfx_ksys_unshare+0x10/0x10 [ 557.596500][T13707] ? rcu_is_watching+0x16/0xb0 [ 557.596535][T13707] __x64_sys_unshare+0x38/0x50 [ 557.596563][T13707] do_syscall_64+0x166/0x520 [ 557.596585][T13707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.596605][T13707] ? clear_bhb_loop+0x70/0xc0 [ 557.596630][T13707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.596658][T13707] RIP: 0033:0x7f1e7db6f559 [ 557.596679][T13707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.596697][T13707] RSP: 002b:00007f1e7bdc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 557.596719][T13707] RAX: ffffffffffffffda RBX: 00007f1e7ddf5fa0 RCX: 00007f1e7db6f559 [ 557.596735][T13707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 557.596747][T13707] RBP: 00007f1e7dc06b20 R08: 0000000000000000 R09: 0000000000000000 [ 557.596760][T13707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.596772][T13707] R13: 00007f1e7ddf6038 R14: 00007f1e7ddf5fa0 R15: 00007ffde29cda48 [ 557.596815][T13707] [ 559.895615][ T30] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 559.895674][ T30] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 559.964813][ T30] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 560.046229][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 560.047314][ T30] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 560.103165][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 560.122184][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 560.127545][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 560.128515][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 560.299367][ T30] usb 7-1: USB disconnect, device number 17 [ 560.535931][ T3135] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 561.890439][ T3135] usb 1-1: Using ep0 maxpacket: 8 [ 561.892558][ T3135] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 561.895293][ T3135] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 561.936533][ T3135] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 561.936563][ T3135] usb 1-1: Product: syz [ 561.936577][ T3135] usb 1-1: Manufacturer: syz [ 561.936592][ T3135] usb 1-1: SerialNumber: syz [ 561.996601][T13757] 9pnet_fd: Insufficient options for proto=fd [ 562.244682][ T3135] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 562.244825][ T3135] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 562.244845][ T3135] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 562.466374][ T5613] Bluetooth: hci5: command tx timeout [ 562.489149][ T3135] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 562.489229][ T3135] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 562.569571][ T3135] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 562.650559][ T3135] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 562.748366][ T3135] usb 1-1: USB disconnect, device number 2 [ 562.799887][ T3135] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 562.827448][ T3135] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 562.843557][ T3135] visor 1-1:1.0: device disconnected [ 562.887820][ T6135] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 563.058437][ T6135] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 563.063266][ T6135] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.063295][ T6135] usb 8-1: Product: syz [ 563.063318][ T6135] usb 8-1: Manufacturer: syz [ 563.063333][ T6135] usb 8-1: SerialNumber: syz [ 563.561885][ T6135] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 563.562974][ T6135] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 564.235659][T13724] rxe_eth0 speed is unknown, defaulting to 1000 [ 565.502620][ T5613] Bluetooth: hci5: command tx timeout [ 565.733159][ T6135] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 565.733217][ T6135] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 565.783432][ T6135] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 565.833747][ T6135] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 566.848802][T13724] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.849514][T13724] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.849711][T13724] bridge_slave_0: entered allmulticast mode [ 566.855333][T13724] bridge_slave_0: entered promiscuous mode [ 566.934081][ T3135] usb 8-1: USB disconnect, device number 7 [ 568.051647][ T5613] Bluetooth: hci5: command tx timeout [ 568.084689][T13724] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.084904][T13724] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.085134][T13724] bridge_slave_1: entered allmulticast mode [ 568.088601][T13724] bridge_slave_1: entered promiscuous mode [ 568.259023][T13724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.262512][T13724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.324365][T13724] team0: Port device team_slave_0 added [ 568.343356][T13724] team0: Port device team_slave_1 added [ 568.436853][T13835] 9pnet_fd: Insufficient options for proto=fd [ 568.639683][T13724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.639701][T13724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.639727][T13724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.645075][T13724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.645089][T13724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.645108][T13724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.358084][T13724] hsr_slave_0: entered promiscuous mode [ 569.359313][T13724] hsr_slave_1: entered promiscuous mode [ 569.360155][T13724] debugfs: 'hsr0' already exists in 'hsr' [ 569.360179][T13724] Cannot create hsr debugfs directory [ 570.094683][T11674] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 570.248947][ T5613] Bluetooth: hci5: command tx timeout [ 570.369826][T11674] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 570.376844][T11674] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.376881][T11674] usb 7-1: Product: syz [ 570.376896][T11674] usb 7-1: Manufacturer: syz [ 570.376911][T11674] usb 7-1: SerialNumber: syz [ 570.936242][T11674] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 570.936312][T11674] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 572.336895][T11674] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): timeout on completion of LiteReset [ 572.336913][T11674] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 572.337405][T11674] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 572.403736][T11674] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -110 [ 573.640792][ T30] usb 7-1: USB disconnect, device number 18 [ 573.708163][ T58] bridge_slave_1: left allmulticast mode [ 573.708196][ T58] bridge_slave_1: left promiscuous mode [ 573.708420][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.391035][T13890] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 575.504193][ T58] bridge_slave_0: left allmulticast mode [ 575.504231][ T58] bridge_slave_0: left promiscuous mode [ 575.504491][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.354089][T13906] 9pnet_fd: Insufficient options for proto=fd [ 579.207027][ T6135] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 579.370173][ T6135] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 579.374692][ T6135] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.374720][ T6135] usb 9-1: Product: syz [ 579.374735][ T6135] usb 9-1: Manufacturer: syz [ 579.374750][ T6135] usb 9-1: SerialNumber: syz [ 580.310560][ T6135] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 580.310627][ T6135] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 580.615948][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.669144][T11674] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 580.691446][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.723975][ T58] bond0 (unregistering): (slave team0): Releasing backup interface [ 580.752143][ T58] bond0 (unregistering): Released all slaves [ 580.846663][T11674] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 580.848136][T11674] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.848188][T11674] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.881910][T11674] usb 1-1: config 0 descriptor?? [ 580.915622][T11674] pwc: Askey VC010 type 2 USB webcam detected. [ 580.941413][ T4936] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 581.178613][ T4936] usb 8-1: device descriptor read/64, error -71 [ 581.375597][T11674] pwc: recv_control_msg error -32 req 02 val 2b00 [ 581.377913][T11674] pwc: recv_control_msg error -32 req 02 val 2700 [ 581.378766][T11674] pwc: recv_control_msg error -32 req 02 val 2c00 [ 581.379439][T11674] pwc: recv_control_msg error -32 req 04 val 1000 [ 581.383850][T11674] pwc: recv_control_msg error -32 req 04 val 1300 [ 581.390417][T11674] pwc: recv_control_msg error -32 req 04 val 1400 [ 581.392663][T11674] pwc: recv_control_msg error -32 req 02 val 2000 [ 581.396817][T11674] pwc: recv_control_msg error -32 req 02 val 2100 [ 581.397511][T11674] pwc: recv_control_msg error -32 req 04 val 1500 [ 581.398568][T11674] pwc: recv_control_msg error -32 req 02 val 2500 [ 581.409527][T11674] pwc: recv_control_msg error -32 req 02 val 2400 [ 581.410411][T11674] pwc: recv_control_msg error -32 req 02 val 2600 [ 581.411802][T11674] pwc: recv_control_msg error -32 req 02 val 2900 [ 581.489027][ T6135] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 581.489097][ T6135] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 581.489968][ T6135] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 581.530377][ T6135] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 581.770102][ T4936] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 582.608749][T11674] pwc: recv_control_msg error -71 req 04 val 1100 [ 582.609430][T11674] pwc: recv_control_msg error -71 req 04 val 1200 [ 582.639351][T11674] pwc: Registered as video103. [ 582.705882][T11674] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 582.724498][ T5749] usb 9-1: USB disconnect, device number 15 [ 582.755866][T11674] usb 1-1: USB disconnect, device number 3 [ 582.759798][ T4936] usb 8-1: device descriptor read/64, error -71 [ 582.887802][ T4936] usb usb8-port1: attempt power cycle [ 583.137222][T13963] 9pnet_fd: Insufficient options for proto=fd [ 583.260046][ T4936] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 583.296842][ T4936] usb 8-1: device descriptor read/8, error -71 [ 583.583255][ T4936] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 583.626023][ T4936] usb 8-1: device descriptor read/8, error -71 [ 583.946579][ T4936] usb usb8-port1: unable to enumerate USB device [ 585.148067][T13988] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2622'. [ 585.944265][ T30] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 586.065140][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 586.107545][ T30] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 586.114763][ T30] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.114790][ T30] usb 9-1: Product: syz [ 586.114803][ T30] usb 9-1: Manufacturer: syz [ 586.114817][ T30] usb 9-1: SerialNumber: syz [ 586.732649][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 586.741589][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 587.244091][T11674] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 587.244246][ T5749] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 587.451109][ T5749] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 587.457414][T11674] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 587.474899][T11674] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.474954][T11674] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.506263][ T5749] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.506293][ T5749] usb 7-1: Product: syz [ 587.506306][ T5749] usb 7-1: Manufacturer: syz [ 587.506319][ T5749] usb 7-1: SerialNumber: syz [ 587.545108][T11674] usb 1-1: config 0 descriptor?? [ 587.558802][ T5749] usb 7-1: config 0 descriptor?? [ 587.567466][T11674] pwc: Askey VC010 type 2 USB webcam detected. [ 587.669122][ T30] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 587.669178][ T30] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 588.043991][T11674] pwc: recv_control_msg error -32 req 02 val 2b00 [ 588.050937][T11674] pwc: recv_control_msg error -32 req 02 val 2700 [ 588.056441][T11674] pwc: recv_control_msg error -32 req 02 val 2c00 [ 588.069269][T11674] pwc: recv_control_msg error -32 req 04 val 1000 [ 588.074515][T11674] pwc: recv_control_msg error -32 req 04 val 1300 [ 588.082105][T11674] pwc: recv_control_msg error -32 req 04 val 1400 [ 588.104238][T11674] pwc: recv_control_msg error -32 req 02 val 2000 [ 588.110397][T11674] pwc: recv_control_msg error -32 req 02 val 2100 [ 588.125455][T11674] pwc: recv_control_msg error -32 req 04 val 1500 [ 588.126431][T11674] pwc: recv_control_msg error -32 req 02 val 2500 [ 588.127137][T11674] pwc: recv_control_msg error -32 req 02 val 2400 [ 588.149778][T11674] pwc: recv_control_msg error -32 req 02 val 2600 [ 588.163784][T11674] pwc: recv_control_msg error -32 req 02 val 2900 [ 588.425474][T11674] pwc: recv_control_msg error -71 req 04 val 1100 [ 588.425972][T11674] pwc: recv_control_msg error -71 req 04 val 1200 [ 588.508760][T11674] pwc: Registered as video103. [ 588.581276][T11674] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 588.706496][ T4936] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 588.781047][ T5749] usb 7-1: USB disconnect, device number 19 [ 588.791594][T11674] usb 1-1: USB disconnect, device number 4 [ 588.816530][ T30] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 588.816587][ T30] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 588.858059][ T4936] usb 8-1: device descriptor read/64, error -71 [ 588.995859][ T30] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 589.240572][T14031] 9pnet_fd: Insufficient options for proto=fd [ 590.181113][ T4936] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 590.305196][ T30] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 590.341987][ T4936] usb 8-1: device descriptor read/64, error -71 [ 590.461666][ T4936] usb usb8-port1: attempt power cycle [ 590.759894][ T30] usb 9-1: USB disconnect, device number 16 [ 590.911459][ T4936] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 590.927647][ T4936] usb 8-1: device descriptor read/8, error -71 [ 591.015722][T14042] syzkaller0: entered promiscuous mode [ 591.015749][T14042] syzkaller0: entered allmulticast mode [ 591.712005][ T4936] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 591.734601][ T4936] usb 8-1: device descriptor read/8, error -71 [ 591.856226][ T4936] usb usb8-port1: unable to enumerate USB device [ 592.123520][ T35] audit: type=1326 audit(1792887345.070:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14069 comm="syz.7.2638" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f869f559 code=0x7ffc0000 [ 592.125415][ T35] audit: type=1326 audit(1792887345.070:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14069 comm="syz.7.2638" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f869f559 code=0x7ffc0000 [ 592.126733][ T35] audit: type=1326 audit(1792887345.070:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14069 comm="syz.7.2638" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f75f869f559 code=0x7ffc0000 [ 592.126993][ T35] audit: type=1326 audit(1792887345.070:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14069 comm="syz.7.2638" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f869f559 code=0x7ffc0000 [ 592.127273][ T35] audit: type=1326 audit(1792887345.070:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14069 comm="syz.7.2638" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f869f559 code=0x7ffc0000 [ 592.127814][ T35] audit: type=1326 audit(1792887345.070:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14069 comm="syz.7.2638" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f75f869f559 code=0x7ffc0000 [ 592.130192][ T35] audit: type=1326 audit(1792887345.079:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14069 comm="syz.7.2638" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f869f559 code=0x7ffc0000 [ 592.132134][ T35] audit: type=1326 audit(1792887345.079:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14069 comm="syz.7.2638" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f869f559 code=0x7ffc0000 [ 592.133085][ T35] audit: type=1326 audit(1792887345.079:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14069 comm="syz.7.2638" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75f865fd8e code=0x7ffc0000 [ 592.133969][ T35] audit: type=1326 audit(1792887345.079:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14069 comm="syz.7.2638" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f75f869f1eb code=0x7ffc0000 [ 593.472521][T11676] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 593.646725][T11676] usb 8-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 593.654894][T11676] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.654921][T11676] usb 8-1: Product: syz [ 593.654936][T11676] usb 8-1: Manufacturer: syz [ 593.654950][T11676] usb 8-1: SerialNumber: syz [ 593.686512][T11676] usb 8-1: USB2VGA dongle found at address 16 [ 593.690059][T11676] usb 8-1: Allocated 8 output buffers [ 594.117570][T11676] usb 8-1: Failed to early initialize device [ 594.142468][T11676] usb 8-1: USB disconnect, device number 16 [ 594.372696][T14079] syz_tun: entered allmulticast mode [ 594.392230][T14086] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2642'. [ 594.687803][T14095] 9pnet_fd: Insufficient options for proto=fd [ 594.948866][T14097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2642'. [ 594.948893][T14097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2642'. [ 595.328292][T14096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2642'. [ 595.703766][ T5749] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 595.867129][ T5749] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 595.879410][ T5749] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.879438][ T5749] usb 8-1: Product: syz [ 595.879452][ T5749] usb 8-1: Manufacturer: syz [ 595.879466][ T5749] usb 8-1: SerialNumber: syz [ 596.097684][ T6135] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 596.234592][ T6135] usb 9-1: device descriptor read/64, error -71 [ 596.382946][ T5749] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 596.383009][ T5749] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 596.494584][ T6135] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 596.635360][ T6135] usb 9-1: device descriptor read/64, error -71 [ 597.317957][ T6135] usb usb9-port1: attempt power cycle [ 597.815998][ T6135] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 597.838561][ T6135] usb 9-1: device descriptor read/8, error -71 [ 598.014431][ T5749] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 598.014483][ T5749] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 598.059475][ T5749] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 598.097593][ T6135] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 598.120087][ T6135] usb 9-1: device descriptor read/8, error -71 [ 598.239542][ T6135] usb usb9-port1: unable to enumerate USB device [ 598.405305][ T5749] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 598.410848][T14142] syzkaller0: entered promiscuous mode [ 598.410874][T14142] syzkaller0: entered allmulticast mode [ 598.524008][T13724] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 598.645295][T13724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 598.684907][T13724] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 599.747495][T13724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 599.793205][ T5749] usb 8-1: USB disconnect, device number 17 [ 599.960827][ T58] hsr_slave_0: left promiscuous mode [ 600.058271][ T58] hsr_slave_1: left promiscuous mode [ 600.059512][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.303319][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.085425][T14176] 9pnet_fd: Insufficient options for proto=fd [ 603.819997][ T58] team0 (unregistering): Port device team_slave_1 removed [ 603.904584][ T5749] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 603.906123][ T58] team0 (unregistering): Port device team_slave_0 removed [ 604.067716][ T5749] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 604.086507][ T5749] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.086534][ T5749] usb 7-1: Product: syz [ 604.086548][ T5749] usb 7-1: Manufacturer: syz [ 604.086563][ T5749] usb 7-1: SerialNumber: syz [ 604.571170][ T5749] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 604.571233][ T5749] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 604.572180][ T5749] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 604.572235][ T5749] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 604.573255][ T5749] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 604.641558][ T5749] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 606.039363][T13724] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 606.105742][T13724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 606.108754][T13724] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 606.154380][T13724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 606.277582][T13724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.464877][T14236] 9pnet_fd: Insufficient options for proto=fd [ 606.791717][T13724] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.966360][ T5749] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 607.059718][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.059861][ T3314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.068555][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.068680][ T3314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.186386][ T5749] usb 8-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice= 0.40 [ 607.191008][ T5749] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.191036][ T5749] usb 8-1: Product: syz [ 607.191049][ T5749] usb 8-1: Manufacturer: syz [ 607.191062][ T5749] usb 8-1: SerialNumber: syz [ 607.234259][ T4936] usb 7-1: USB disconnect, device number 20 [ 607.439976][T14242] rxe_eth0 speed is unknown, defaulting to 1000 [ 607.851921][ T5749] usb 8-1: Can't get UAC3 power state for id 10 [ 609.137267][ T5749] usb 8-1: BAAD HEADSET c_chmask mismatch [ 609.514908][ T58] IPVS: stop unused estimator thread 0... [ 611.027027][T14273] syzkaller0: entered promiscuous mode [ 611.027054][T14273] syzkaller0: entered allmulticast mode [ 611.520762][T14283] 9pnet_fd: Insufficient options for proto=fd [ 611.850662][T13724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.961557][ T5749] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 612.091634][ T5749] usb 8-1: USB disconnect, device number 18 [ 612.241571][T13724] veth0_vlan: entered promiscuous mode [ 612.370317][T13920] udevd[13920]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 612.387853][T13724] veth1_vlan: entered promiscuous mode [ 612.439096][ T4936] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 612.501311][T13724] veth0_macvtap: entered promiscuous mode [ 612.514186][T13724] veth1_macvtap: entered promiscuous mode [ 612.563978][T13724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.608868][ T4936] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 612.618786][ T4936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.618815][ T4936] usb 7-1: Product: syz [ 612.618829][ T4936] usb 7-1: Manufacturer: syz [ 612.618843][ T4936] usb 7-1: SerialNumber: syz [ 612.640802][T13724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.930068][ T1127] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.158420][ T4936] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 613.158479][ T4936] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 613.167949][ T4936] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 613.168004][ T4936] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 613.168876][ T4936] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 613.287112][ T4936] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 613.515558][ T1127] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.525763][ T1127] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.558797][ T1127] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.881240][T14308] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 615.101279][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.101296][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.147315][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.147336][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.352937][ T5955] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 615.383371][T14324] FAULT_INJECTION: forcing a failure. [ 615.383371][T14324] name failslab, interval 1, probability 0, space 0, times 0 [ 615.383412][T14324] CPU: 1 UID: 0 PID: 14324 Comm: syz.7.2693 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 615.383444][T14324] Tainted: [L]=SOFTLOCKUP [ 615.383452][T14324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 615.383465][T14324] Call Trace: [ 615.383472][T14324] [ 615.383481][T14324] dump_stack_lvl+0xe8/0x150 [ 615.383522][T14324] should_fail_ex+0x46b/0x600 [ 615.383558][T14324] should_failslab+0xa8/0x100 [ 615.383594][T14324] __kmalloc_node_track_caller_noprof+0xf6/0x7b0 [ 615.383626][T14324] ? fib_notifier_ops_register+0x2f/0x230 [ 615.383646][T14324] ? fib_notifier_ops_register+0x2f/0x230 [ 615.383676][T14324] kmemdup_noprof+0x2b/0x70 [ 615.383708][T14324] fib_notifier_ops_register+0x2f/0x230 [ 615.383735][T14324] ip6mr_net_init+0x12e/0x6b0 [ 615.383767][T14324] ? inet6_net_init+0x4ff/0x8c0 [ 615.383791][T14324] ? __pfx_ip6mr_net_init+0x10/0x10 [ 615.383823][T14324] ? ac6_proc_init+0x59/0x70 [ 615.383859][T14324] ops_init+0x35d/0x5d0 [ 615.383899][T14324] setup_net+0x118/0x350 [ 615.383929][T14324] ? __pfx_setup_net+0x10/0x10 [ 615.383959][T14324] ? __ns_common_init+0x384/0x590 [ 615.383981][T14324] copy_net_ns+0x536/0x770 [ 615.384011][T14324] create_new_namespaces+0x3f0/0x6b0 [ 615.384043][T14324] ? security_capable+0x7e/0x2c0 [ 615.384074][T14324] unshare_nsproxy_namespaces+0x144/0x190 [ 615.384107][T14324] ksys_unshare+0x532/0x890 [ 615.384149][T14324] ? __pfx_ksys_unshare+0x10/0x10 [ 615.384182][T14324] ? rcu_is_watching+0x16/0xb0 [ 615.384215][T14324] __x64_sys_unshare+0x38/0x50 [ 615.384243][T14324] do_syscall_64+0x166/0x520 [ 615.384263][T14324] ? trace_irq_disable+0x3b/0x140 [ 615.384282][T14324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.384300][T14324] ? clear_bhb_loop+0x70/0xc0 [ 615.384324][T14324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.384341][T14324] RIP: 0033:0x7f75f869f559 [ 615.384361][T14324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.384379][T14324] RSP: 002b:00007f75f68f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 615.384401][T14324] RAX: ffffffffffffffda RBX: 00007f75f8925fa0 RCX: 00007f75f869f559 [ 615.384414][T14324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 615.384425][T14324] RBP: 00007f75f8736b20 R08: 0000000000000000 R09: 0000000000000000 [ 615.384437][T14324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 615.384448][T14324] R13: 00007f75f8926038 R14: 00007f75f8925fa0 R15: 00007ffc0d71d938 [ 615.384481][T14324] [ 615.413636][T14323] syzkaller0: entered promiscuous mode [ 615.413661][T14323] syzkaller0: entered allmulticast mode [ 615.423831][T11676] usb 7-1: USB disconnect, device number 21 [ 615.716513][ T5955] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 615.720577][ T5955] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.720630][ T5955] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.744839][ T5955] usb 9-1: config 0 descriptor?? [ 615.768156][ T5955] pwc: Askey VC010 type 2 USB webcam detected. [ 616.250097][T14329] libceph: resolve 'c' (ret=-3): failed [ 616.415691][ T5955] pwc: recv_control_msg error -32 req 02 val 2b00 [ 616.416427][ T5955] pwc: recv_control_msg error -32 req 02 val 2700 [ 616.417132][ T5955] pwc: recv_control_msg error -32 req 02 val 2c00 [ 616.417845][ T5955] pwc: recv_control_msg error -32 req 04 val 1000 [ 616.418507][ T5955] pwc: recv_control_msg error -32 req 04 val 1300 [ 616.419211][ T5955] pwc: recv_control_msg error -32 req 04 val 1400 [ 616.419917][ T5955] pwc: recv_control_msg error -32 req 02 val 2000 [ 616.420574][ T5955] pwc: recv_control_msg error -32 req 02 val 2100 [ 616.421391][ T5955] pwc: recv_control_msg error -32 req 04 val 1500 [ 616.422087][ T5955] pwc: recv_control_msg error -32 req 02 val 2500 [ 616.422771][ T5955] pwc: recv_control_msg error -32 req 02 val 2400 [ 616.423474][ T5955] pwc: recv_control_msg error -32 req 02 val 2600 [ 616.424155][ T5955] pwc: recv_control_msg error -32 req 02 val 2900 [ 616.648198][ T5955] pwc: recv_control_msg error -71 req 04 val 1100 [ 616.648745][ T5955] pwc: recv_control_msg error -71 req 04 val 1200 [ 616.731360][ T5955] pwc: Registered as video103. [ 616.749157][ T5955] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input14 [ 616.794295][ T5955] usb 9-1: USB disconnect, device number 21 [ 617.073366][T14350] 9pnet_fd: Insufficient options for proto=fd [ 617.653705][T14360] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 618.781147][T11676] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 618.948979][T11676] usb 3-1: Using ep0 maxpacket: 16 [ 618.951432][T11676] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 618.954259][T11676] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32 [ 618.954289][T11676] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 618.954316][T11676] usb 3-1: config 1 interface 0 has no altsetting 0 [ 618.961592][T11676] usb 3-1: string descriptor 0 read error: -22 [ 618.961731][T11676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.982006][T14354] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 619.229873][T14368] device-mapper: table: 248:2: thin: Error opening pool device (-ENOENT) [ 619.229903][T14368] device-mapper: ioctl: error adding target to table [ 619.317439][T11676] usb 3-1: USB disconnect, device number 17 [ 619.397305][T14371] Invalid ELF header magic: != ELF [ 620.459515][T14373] syzkaller0: entered promiscuous mode [ 620.459539][T14373] syzkaller0: entered allmulticast mode [ 621.126215][T11674] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 621.254276][T14398] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 622.277944][T11674] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 622.281947][T11674] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.282006][T11674] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.318343][T11674] usb 3-1: config 0 descriptor?? [ 622.344303][T11674] pwc: Askey VC010 type 2 USB webcam detected. [ 622.538481][T14408] device-mapper: table: 248:1: integrity: Discard can be only used with internal hash (-EINVAL) [ 622.538508][T14408] device-mapper: ioctl: error adding target to table [ 622.801837][T11674] pwc: recv_control_msg error -32 req 02 val 2b00 [ 622.813453][T11674] pwc: recv_control_msg error -32 req 02 val 2700 [ 622.815042][T11674] pwc: recv_control_msg error -32 req 02 val 2c00 [ 622.829571][T11674] pwc: recv_control_msg error -32 req 04 val 1000 [ 622.830465][T11674] pwc: recv_control_msg error -32 req 04 val 1300 [ 622.832406][T11674] pwc: recv_control_msg error -32 req 04 val 1400 [ 622.834350][T11674] pwc: recv_control_msg error -32 req 02 val 2000 [ 622.836879][T11674] pwc: recv_control_msg error -32 req 02 val 2100 [ 622.873750][T11674] pwc: recv_control_msg error -32 req 04 val 1500 [ 622.877273][T11674] pwc: recv_control_msg error -32 req 02 val 2500 [ 622.878086][T11674] pwc: recv_control_msg error -32 req 02 val 2400 [ 622.879995][T11674] pwc: recv_control_msg error -32 req 02 val 2600 [ 622.880687][T11674] pwc: recv_control_msg error -32 req 02 val 2900 [ 623.136407][T11674] pwc: recv_control_msg error -71 req 04 val 1100 [ 623.136867][T11674] pwc: recv_control_msg error -71 req 04 val 1200 [ 623.197419][T11674] pwc: Registered as video103. [ 623.245455][T14440] 9pnet_fd: Insufficient options for proto=fd [ 623.266921][T11674] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 623.284213][T11674] usb 3-1: USB disconnect, device number 18 [ 623.534535][T14443] qnx4: no qnx4 filesystem (no root dir). [ 625.926472][T14463] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 626.996046][T14474] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 627.110283][T14474] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 627.693072][T14498] 9pnet_fd: Insufficient options for proto=fd [ 628.527857][T14499] qnx4: no qnx4 filesystem (no root dir). [ 629.261021][T14510] netlink: 'syz.7.2752': attribute type 10 has an invalid length. [ 629.290708][T14513] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2750'. [ 629.292359][T14510] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 630.239901][ T35] kauditd_printk_skb: 67 callbacks suppressed [ 630.239920][ T35] audit: type=1326 audit(1792887386.267:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14514 comm="syz.8.2751" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa069f7f559 code=0x0 [ 630.427016][T14510] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 630.601628][T14524] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 632.166880][T14535] syzkaller0: entered promiscuous mode [ 632.166909][T14535] syzkaller0: entered allmulticast mode [ 632.867960][T11674] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 632.873784][ T35] audit: type=1326 audit(1792887388.695:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14550 comm="syz.8.2765" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa069f7f559 code=0x0 [ 633.053282][T11674] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 633.058704][T11674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.058732][T11674] usb 1-1: Product: syz [ 633.058746][T11674] usb 1-1: Manufacturer: syz [ 633.058759][T11674] usb 1-1: SerialNumber: syz [ 634.775757][T14574] qnx4: no qnx4 filesystem (no root dir). [ 634.779025][T14577] 9pnet_fd: Insufficient options for proto=fd [ 634.902231][ T30] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 635.882863][ T30] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 635.901414][ T30] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 635.901444][ T30] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 635.901484][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.954271][ T3135] usb 1-1: USB disconnect, device number 5 [ 635.995231][ T30] spcp8x5 9-1:1.0: SPCP8x5 converter detected [ 636.050911][ T30] usb 9-1: SPCP8x5 converter now attached to ttyUSB0 [ 636.294433][T11674] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 636.298863][ T3135] usb 1-1: ath9k_htc: USB layer deinitialized [ 636.502493][T14591] syzkaller0: entered promiscuous mode [ 636.502519][T14591] syzkaller0: entered allmulticast mode [ 636.799584][T14568] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 636.856808][T14568] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 636.926576][T14568] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 637.134804][T14566] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 637.154675][ T5749] usb 9-1: USB disconnect, device number 22 [ 637.205690][ T5749] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 637.209506][ T5749] spcp8x5 9-1:1.0: device disconnected [ 637.400818][T14601] lo speed is unknown, defaulting to 1000 [ 637.400913][T14601] lo speed is unknown, defaulting to 1000 [ 637.405938][T14601] lo speed is unknown, defaulting to 1000 [ 637.429412][T14601] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 637.429450][T14601] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 637.429499][T14601] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 637.582444][T14601] lo speed is unknown, defaulting to 1000 [ 637.620240][T14601] lo speed is unknown, defaulting to 1000 [ 637.630070][T14601] lo speed is unknown, defaulting to 1000 [ 637.649542][T14601] lo speed is unknown, defaulting to 1000 [ 637.655460][T14601] lo speed is unknown, defaulting to 1000 [ 637.722415][T14607] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 638.293179][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2783'. [ 638.908917][T14621] 9pnet_fd: Insufficient options for proto=fd [ 640.920793][T14638] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2789'. [ 640.962208][T11674] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 641.016945][T14640] syzkaller0: entered promiscuous mode [ 641.016972][T14640] syzkaller0: entered allmulticast mode [ 641.080412][T14644] syzkaller0: entered promiscuous mode [ 641.080452][T14644] syzkaller0: entered allmulticast mode [ 641.156797][T11674] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 641.158013][T11674] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.158064][T11674] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.162280][T11674] usb 3-1: config 0 descriptor?? [ 641.172129][T11674] pwc: Askey VC010 type 2 USB webcam detected. [ 641.607312][T14653] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 641.640911][T11674] pwc: recv_control_msg error -32 req 02 val 2b00 [ 641.643657][T11674] pwc: recv_control_msg error -32 req 02 val 2700 [ 641.644623][T11674] pwc: recv_control_msg error -32 req 02 val 2c00 [ 641.645471][T11674] pwc: recv_control_msg error -32 req 04 val 1000 [ 641.647315][T11674] pwc: recv_control_msg error -32 req 04 val 1300 [ 641.648164][T11674] pwc: recv_control_msg error -32 req 04 val 1400 [ 641.648983][T11674] pwc: recv_control_msg error -32 req 02 val 2000 [ 641.649806][T11674] pwc: recv_control_msg error -32 req 02 val 2100 [ 641.650621][T11674] pwc: recv_control_msg error -32 req 04 val 1500 [ 641.651450][T11674] pwc: recv_control_msg error -32 req 02 val 2500 [ 641.653182][T11674] pwc: recv_control_msg error -32 req 02 val 2400 [ 641.683986][T11674] pwc: recv_control_msg error -32 req 02 val 2600 [ 641.684888][T11674] pwc: recv_control_msg error -32 req 02 val 2900 [ 641.905681][T11674] pwc: recv_control_msg error -71 req 04 val 1100 [ 641.906155][T11674] pwc: recv_control_msg error -71 req 04 val 1200 [ 642.031794][T11674] pwc: Registered as video103. [ 642.047471][T11674] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 642.111139][T11674] usb 3-1: USB disconnect, device number 19 [ 643.592139][T14664] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 645.235603][T14677] 9pnet_fd: Insufficient options for proto=fd [ 646.100019][T14675] FAULT_INJECTION: forcing a failure. [ 646.100019][T14675] name failslab, interval 1, probability 0, space 0, times 0 [ 646.100063][T14675] CPU: 0 UID: 0 PID: 14675 Comm: syz.2.2801 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 646.100095][T14675] Tainted: [L]=SOFTLOCKUP [ 646.100103][T14675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 646.100116][T14675] Call Trace: [ 646.100123][T14675] [ 646.100149][T14675] dump_stack_lvl+0xe8/0x150 [ 646.100187][T14675] should_fail_ex+0x46b/0x600 [ 646.100223][T14675] should_failslab+0xa8/0x100 [ 646.100258][T14675] __kmalloc_node_track_caller_noprof+0xf6/0x7b0 [ 646.100288][T14675] ? sysctl_route_net_init+0x3e/0x1c0 [ 646.100308][T14675] ? sysctl_route_net_init+0x3e/0x1c0 [ 646.100336][T14675] kmemdup_noprof+0x2b/0x70 [ 646.100376][T14675] sysctl_route_net_init+0x3e/0x1c0 [ 646.100400][T14675] ops_init+0x35d/0x5d0 [ 646.100441][T14675] setup_net+0x118/0x350 [ 646.100470][T14675] ? __pfx_setup_net+0x10/0x10 [ 646.100502][T14675] ? __ns_common_init+0x384/0x590 [ 646.100526][T14675] copy_net_ns+0x536/0x770 [ 646.100555][T14675] create_new_namespaces+0x3f0/0x6b0 [ 646.100581][T14675] ? security_capable+0x7e/0x2c0 [ 646.100605][T14675] unshare_nsproxy_namespaces+0x144/0x190 [ 646.100630][T14675] ksys_unshare+0x532/0x890 [ 646.100655][T14675] ? __pfx_ksys_unshare+0x10/0x10 [ 646.100679][T14675] ? rcu_is_watching+0x16/0xb0 [ 646.100705][T14675] __x64_sys_unshare+0x38/0x50 [ 646.100726][T14675] do_syscall_64+0x166/0x520 [ 646.100742][T14675] ? trace_irq_disable+0x3b/0x140 [ 646.100756][T14675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.100770][T14675] ? clear_bhb_loop+0x70/0xc0 [ 646.100789][T14675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.100804][T14675] RIP: 0033:0x7f57f0f7f559 [ 646.100820][T14675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.100833][T14675] RSP: 002b:00007f57ef1d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 646.100851][T14675] RAX: ffffffffffffffda RBX: 00007f57f1205fa0 RCX: 00007f57f0f7f559 [ 646.100862][T14675] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 646.100872][T14675] RBP: 00007f57f1016b20 R08: 0000000000000000 R09: 0000000000000000 [ 646.100882][T14675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.100891][T14675] R13: 00007f57f1206038 R14: 00007f57f1205fa0 R15: 00007ffe7d96a978 [ 646.100916][T14675] [ 646.565941][T14687] syzkaller0: entered promiscuous mode [ 646.565970][T14687] syzkaller0: entered allmulticast mode [ 646.690201][T14685] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2803'. [ 648.801215][ T12] IPVS: starting estimator thread 0... [ 648.890173][T14712] IPVS: using max 8 ests per chain, 19200 per kthread [ 649.206662][T14715] qnx4: no qnx4 filesystem (no root dir). [ 650.392081][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 651.215191][T14736] 9pnet_fd: Insufficient options for proto=fd [ 652.366080][ T30] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 652.931351][ T30] usb 3-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 1.00 [ 652.933122][ T30] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 652.933145][ T30] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 652.933180][ T30] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 652.933215][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.099124][ T30] usb 3-1: 0:1 : does not exist [ 653.122313][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 653.122384][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 653.180611][T14753] overlayfs: failed to clone lowerpath [ 653.225778][T14753] overlayfs: failed to clone lowerpath [ 653.388339][T14755] syzkaller0: entered promiscuous mode [ 653.388366][T14755] syzkaller0: entered allmulticast mode [ 653.782057][ T30] usb 3-1: USB disconnect, device number 20 [ 655.383294][T14783] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 656.432696][ T35] audit: type=1326 audit(1792887410.446:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14786 comm="syz.7.2831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f869f559 code=0x7ffc0000 [ 656.432745][ T35] audit: type=1326 audit(1792887410.446:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14786 comm="syz.7.2831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f869f559 code=0x7ffc0000 [ 656.450057][ T35] audit: type=1326 audit(1792887410.464:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14786 comm="syz.7.2831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f75f869f559 code=0x7ffc0000 [ 656.450106][ T35] audit: type=1326 audit(1792887410.464:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14786 comm="syz.7.2831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f869f559 code=0x7ffc0000 [ 656.450143][ T35] audit: type=1326 audit(1792887410.464:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14786 comm="syz.7.2831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f869f559 code=0x7ffc0000 [ 656.451753][ T35] audit: type=1326 audit(1792887410.464:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14786 comm="syz.7.2831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f75f869f559 code=0x7ffc0000 [ 656.453260][ T35] audit: type=1326 audit(1792887410.464:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14786 comm="syz.7.2831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f869f559 code=0x7ffc0000 [ 656.454239][ T35] audit: type=1326 audit(1792887410.464:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14786 comm="syz.7.2831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f75f869f559 code=0x7ffc0000 [ 656.454479][ T35] audit: type=1326 audit(1792887410.464:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14786 comm="syz.7.2831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f869f559 code=0x7ffc0000 [ 656.455423][ T35] audit: type=1326 audit(1792887410.464:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14786 comm="syz.7.2831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f869f559 code=0x7ffc0000 [ 656.624041][T14796] bridge0: port 1(vlan2) entered blocking state [ 656.624254][T14796] bridge0: port 1(vlan2) entered disabled state [ 656.624419][T14796] vlan2: entered allmulticast mode [ 656.624434][T14796] bridge_slave_0: entered allmulticast mode [ 656.627360][T14796] vlan2: entered promiscuous mode [ 656.627378][T14796] bridge_slave_0: entered promiscuous mode [ 656.658236][T14796] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 658.067877][T14825] qnx4: no qnx4 filesystem (no root dir). [ 658.563173][T11674] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 658.868051][T11674] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 658.870124][T11674] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.870178][T11674] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.895526][T11674] usb 3-1: config 0 descriptor?? [ 658.920816][T11674] pwc: Askey VC010 type 2 USB webcam detected. [ 659.098550][T14846] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 660.154063][T11674] pwc: recv_control_msg error -32 req 02 val 2b00 [ 660.156043][T11674] pwc: recv_control_msg error -32 req 02 val 2700 [ 660.159292][T11674] pwc: recv_control_msg error -32 req 02 val 2c00 [ 660.162468][T11674] pwc: recv_control_msg error -32 req 04 val 1000 [ 660.190776][T11674] pwc: recv_control_msg error -32 req 04 val 1300 [ 660.192730][T11674] pwc: recv_control_msg error -32 req 04 val 1400 [ 660.194074][T11674] pwc: recv_control_msg error -32 req 02 val 2000 [ 660.201760][T11674] pwc: recv_control_msg error -32 req 02 val 2100 [ 660.208463][T11674] pwc: recv_control_msg error -32 req 04 val 1500 [ 660.210012][T11674] pwc: recv_control_msg error -32 req 02 val 2500 [ 660.211007][T11674] pwc: recv_control_msg error -32 req 02 val 2400 [ 660.211709][T11674] pwc: recv_control_msg error -32 req 02 val 2600 [ 660.212730][T11674] pwc: recv_control_msg error -32 req 02 val 2900 [ 661.548640][T11674] pwc: recv_control_msg error -71 req 04 val 1100 [ 661.549153][T11674] pwc: recv_control_msg error -71 req 04 val 1200 [ 661.619968][T11674] pwc: Registered as video103. [ 661.628009][T11674] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 661.747865][ T58] IPVS: starting estimator thread 0... [ 662.649169][T11674] usb 3-1: USB disconnect, device number 21 [ 662.677490][T14868] IPVS: using max 9 ests per chain, 21600 per kthread [ 662.882712][T14885] syzkaller0: entered promiscuous mode [ 662.882739][T14885] syzkaller0: entered allmulticast mode [ 663.181410][T14900] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 665.213797][T14910] netlink: 'syz.2.2867': attribute type 1 has an invalid length. [ 665.217201][T14910] netlink: 'syz.2.2867': attribute type 1 has an invalid length. [ 666.381903][ T30] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 666.545184][ T30] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 666.547507][ T30] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.547563][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.585448][ T30] usb 7-1: config 0 descriptor?? [ 666.617198][ T30] pwc: Askey VC010 type 2 USB webcam detected. [ 666.764885][T14940] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 667.061894][ T30] pwc: recv_control_msg error -32 req 02 val 2b00 [ 667.063258][ T30] pwc: recv_control_msg error -32 req 02 val 2700 [ 667.078859][ T30] pwc: recv_control_msg error -32 req 02 val 2c00 [ 667.107306][ T30] pwc: recv_control_msg error -32 req 04 val 1000 [ 667.117608][ T30] pwc: recv_control_msg error -32 req 04 val 1300 [ 667.131620][ T30] pwc: recv_control_msg error -32 req 04 val 1400 [ 667.136208][ T30] pwc: recv_control_msg error -32 req 02 val 2000 [ 667.138805][ T30] pwc: recv_control_msg error -32 req 02 val 2100 [ 667.159687][ T30] pwc: recv_control_msg error -32 req 04 val 1500 [ 667.169095][ T30] pwc: recv_control_msg error -32 req 02 val 2500 [ 667.629174][ T30] pwc: recv_control_msg error -32 req 02 val 2400 [ 667.630256][ T30] pwc: recv_control_msg error -32 req 02 val 2600 [ 667.661924][ T30] pwc: recv_control_msg error -32 req 02 val 2900 [ 667.888123][ T30] pwc: recv_control_msg error -71 req 04 val 1100 [ 667.888572][ T30] pwc: recv_control_msg error -71 req 04 val 1200 [ 667.953248][ T30] pwc: Registered as video103. [ 668.001598][ T30] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input18 [ 668.284563][ T30] usb 7-1: USB disconnect, device number 22 [ 672.311780][T14995] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 675.059781][T15013] 9pnet_fd: Insufficient options for proto=fd [ 675.424320][T15031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2902'. [ 676.533146][T15048] ublk6: read batch cmd buffer failed [ 676.533273][T15048] ublk6: read batch cmd buffer failed [ 676.546691][T15048] ublk6: read batch cmd buffer failed [ 676.546765][T15048] ublk6: read batch cmd buffer failed [ 676.758825][T15055] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2910'. [ 676.928586][T15057] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2910'. [ 676.928604][T15057] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2910'. [ 677.348391][T15061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2910'. [ 677.751517][T15068] 9pnet_fd: Insufficient options for proto=fd [ 682.877124][T15104] 9pnet_fd: Insufficient options for proto=fd [ 683.757945][T15120] qnx4: no qnx4 filesystem (no root dir). [ 685.040331][ T5955] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 685.186462][ T5955] usb 7-1: device descriptor read/64, error -71 [ 685.738436][ T5955] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 685.879331][ T5955] usb 7-1: device descriptor read/64, error -71 [ 685.998863][ T5955] usb usb7-port1: attempt power cycle [ 686.408268][ T5955] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 686.437449][ T5955] usb 7-1: device descriptor read/8, error -71 [ 686.691716][ T5955] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 686.727558][ T5955] usb 7-1: device descriptor read/8, error -71 [ 686.922615][ T5955] usb usb7-port1: unable to enumerate USB device [ 687.209308][T15147] ublk8: read batch cmd buffer failed [ 687.209388][T15147] ublk8: read batch cmd buffer failed [ 687.218554][T15147] ublk8: read batch cmd buffer failed [ 687.218624][T15147] ublk8: read batch cmd buffer failed [ 687.775030][ T42] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 688.144891][ T42] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 688.146281][ T42] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 688.146300][ T42] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 688.146313][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 688.149132][ T42] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 688.149147][ T42] usb 1-1: Product: syz [ 688.149154][ T42] usb 1-1: Manufacturer: syz [ 688.149161][ T42] usb 1-1: SerialNumber: syz [ 688.160846][ T42] usb 1-1: config 0 descriptor?? [ 688.323284][ T42] usb 1-1: selecting invalid altsetting 0 [ 688.540514][T15157] syzkaller0: entered promiscuous mode [ 688.540532][T15157] syzkaller0: entered allmulticast mode [ 688.858074][T15164] tmpfs: Using encoding : utf8-12.1.0 [ 690.774898][ T42] usb 1-1: USB disconnect, device number 6 [ 691.737706][T15193] workqueue: Failed to create a rescuer kthread for wq "kcopyd": -EINTR [ 691.742542][T15193] ================================================================== [ 691.742562][T15193] BUG: KASAN: null-ptr-deref in dm_kcopyd_client_destroy+0xae/0x480 [ 691.742606][T15193] Read of size 4 at addr 0000000000000234 by task syz.0.2947/15193 [ 691.742625][T15193] [ 691.742640][T15193] CPU: 1 UID: 0 PID: 15193 Comm: syz.0.2947 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 691.742669][T15193] Tainted: [L]=SOFTLOCKUP [ 691.742677][T15193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 691.742690][T15193] Call Trace: [ 691.742698][T15193] [ 691.742707][T15193] dump_stack_lvl+0xe8/0x150 [ 691.742739][T15193] ? dm_kcopyd_client_destroy+0xae/0x480 [ 691.742768][T15193] kasan_report+0x117/0x150 [ 691.742788][T15193] ? dm_kcopyd_client_destroy+0xae/0x480 [ 691.742823][T15193] kasan_check_range+0x264/0x2c0 [ 691.742843][T15193] dm_kcopyd_client_destroy+0xae/0x480 [ 691.742875][T15193] ? __pfx_dm_kcopyd_client_destroy+0x10/0x10 [ 691.742905][T15193] ? kasan_quarantine_put+0xbb/0x1f0 [ 691.742931][T15193] ? lockdep_hardirqs_on+0x7b/0x110 [ 691.742953][T15193] ? kfree+0x1c5/0x6d0 [ 691.742976][T15193] ? __destroy+0x139/0x300 [ 691.743003][T15193] ? vfree+0x46d/0x4f0 [ 691.743028][T15193] __destroy+0x172/0x300 [ 691.743057][T15193] cache_ctr+0x168c/0x2ba0 [ 691.743097][T15193] ? __pfx_cache_ctr+0x10/0x10 [ 691.743124][T15193] ? skip_spaces+0x8a/0xa0 [ 691.743150][T15193] ? up_read+0x34/0x180 [ 691.743174][T15193] dm_table_add_target+0x58d/0xc70 [ 691.743210][T15193] table_load+0x325/0x8a0 [ 691.743240][T15193] ? __pfx_table_load+0x10/0x10 [ 691.743281][T15193] dm_ctl_ioctl+0x9ec/0xe10 [ 691.743310][T15193] ? __pfx_table_load+0x10/0x10 [ 691.743335][T15193] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 691.743376][T15193] ? __fget_files+0x2a/0x420 [ 691.743401][T15193] ? bpf_lsm_file_ioctl+0x9/0x20 [ 691.743421][T15193] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 691.743446][T15193] __se_sys_ioctl+0xff/0x170 [ 691.743475][T15193] do_syscall_64+0x166/0x520 [ 691.743495][T15193] ? trace_irq_disable+0x3b/0x140 [ 691.743513][T15193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.743532][T15193] ? clear_bhb_loop+0x70/0xc0 [ 691.743555][T15193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.743574][T15193] RIP: 0033:0x7f2952a3f559 [ 691.743592][T15193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.743610][T15193] RSP: 002b:00007f2950829028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 691.743632][T15193] RAX: ffffffffffffffda RBX: 00007f2952cc6270 RCX: 00007f2952a3f559 [ 691.743647][T15193] RDX: 0000200000000200 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 691.743662][T15193] RBP: 00007f2952ad6b20 R08: 0000000000000000 R09: 0000000000000000 [ 691.743675][T15193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.743687][T15193] R13: 00007f2952cc6308 R14: 00007f2952cc6270 R15: 00007fff725a1668 [ 691.743711][T15193] [ 691.743718][T15193] ================================================================== [ 691.743737][T15193] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 692.055733][T15193] CPU: 1 UID: 0 PID: 15193 Comm: syz.0.2947 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 692.067294][T15193] Tainted: [L]=SOFTLOCKUP [ 692.071612][T15193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 692.081651][T15193] Call Trace: [ 692.084938][T15193] [ 692.087851][T15193] vpanic+0x56d/0xa60 [ 692.091820][T15193] ? __pfx_vpanic+0x10/0x10 [ 692.096299][T15193] ? is_bpf_text_address+0x292/0x2b0 [ 692.101581][T15193] ? is_bpf_text_address+0x26/0x2b0 [ 692.106794][T15193] panic+0xc5/0xd0 [ 692.110510][T15193] ? __pfx_panic+0x10/0x10 [ 692.114906][T15193] ? dm_kcopyd_client_destroy+0xae/0x480 [ 692.120522][T15193] ? rcu_is_watching+0x16/0xb0 [ 692.125271][T15193] ? dm_kcopyd_client_destroy+0xae/0x480 [ 692.130914][T15193] check_panic_on_warn+0x89/0xb0 [ 692.135847][T15193] ? dm_kcopyd_client_destroy+0xae/0x480 [ 692.141503][T15193] end_report+0x73/0x170 [ 692.145746][T15193] ? dm_kcopyd_client_destroy+0xae/0x480 [ 692.151371][T15193] kasan_report+0x128/0x150 [ 692.155860][T15193] ? dm_kcopyd_client_destroy+0xae/0x480 [ 692.161488][T15193] kasan_check_range+0x264/0x2c0 [ 692.166431][T15193] dm_kcopyd_client_destroy+0xae/0x480 [ 692.171899][T15193] ? __pfx_dm_kcopyd_client_destroy+0x10/0x10 [ 692.177950][T15193] ? kasan_quarantine_put+0xbb/0x1f0 [ 692.183223][T15193] ? lockdep_hardirqs_on+0x7b/0x110 [ 692.188411][T15193] ? kfree+0x1c5/0x6d0 [ 692.192465][T15193] ? __destroy+0x139/0x300 [ 692.196884][T15193] ? vfree+0x46d/0x4f0 [ 692.200936][T15193] __destroy+0x172/0x300 [ 692.205161][T15193] cache_ctr+0x168c/0x2ba0 [ 692.209565][T15193] ? __pfx_cache_ctr+0x10/0x10 [ 692.214309][T15193] ? skip_spaces+0x8a/0xa0 [ 692.218702][T15193] ? up_read+0x34/0x180 [ 692.222853][T15193] dm_table_add_target+0x58d/0xc70 [ 692.227950][T15193] table_load+0x325/0x8a0 [ 692.232262][T15193] ? __pfx_table_load+0x10/0x10 [ 692.237096][T15193] dm_ctl_ioctl+0x9ec/0xe10 [ 692.241586][T15193] ? __pfx_table_load+0x10/0x10 [ 692.246422][T15193] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 692.251435][T15193] ? __fget_files+0x2a/0x420 [ 692.256005][T15193] ? bpf_lsm_file_ioctl+0x9/0x20 [ 692.260924][T15193] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 692.265929][T15193] __se_sys_ioctl+0xff/0x170 [ 692.270511][T15193] do_syscall_64+0x166/0x520 [ 692.275119][T15193] ? trace_irq_disable+0x3b/0x140 [ 692.280124][T15193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.286169][T15193] ? clear_bhb_loop+0x70/0xc0 [ 692.290828][T15193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.296700][T15193] RIP: 0033:0x7f2952a3f559 [ 692.301100][T15193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.320685][T15193] RSP: 002b:00007f2950829028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 692.329079][T15193] RAX: ffffffffffffffda RBX: 00007f2952cc6270 RCX: 00007f2952a3f559 [ 692.337039][T15193] RDX: 0000200000000200 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 692.345002][T15193] RBP: 00007f2952ad6b20 R08: 0000000000000000 R09: 0000000000000000 [ 692.352989][T15193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 692.360965][T15193] R13: 00007f2952cc6308 R14: 00007f2952cc6270 R15: 00007fff725a1668 [ 692.368949][T15193] [ 692.372130][T15193] Kernel Offset: disabled [ 692.376444][T15193] Rebooting in 86400 seconds..