last executing test programs: 19m41.868949893s ago: executing program 2 (id=3): mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x64000600) fchdir(0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) accept$nfc_llcp(r0, 0x0, 0x0) 19m25.911573436s ago: executing program 32 (id=3): mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x64000600) fchdir(0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) accept$nfc_llcp(r0, 0x0, 0x0) 17m2.731605392s ago: executing program 1 (id=361): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0xc4, &(0x7f00000002c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @tipc={{0x27, 0x4, 0x3, 0x4, 0xb6, 0x67, 0x0, 0x6, 0x6, 0x0, @loopback, @multicast1, {[@timestamp_addr={0x44, 0x54, 0x81, 0x1, 0x2, [{@broadcast, 0x8}, {@empty, 0x5}, {@local, 0xd1c7}, {@multicast1, 0x1}, {@multicast2, 0x10078b}, {@private=0xa010101, 0x7}, {@broadcast, 0x6}, {@multicast1, 0xffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff357c}, {@dev={0xac, 0x14, 0x14, 0x1}, 0x7}]}, @end, @ssrr={0x89, 0x17, 0xc0, [@local, @rand_addr=0x64010100, @loopback, @multicast1, @broadcast]}, @timestamp_addr={0x44, 0x1c, 0xfc, 0x1, 0x2, [{@rand_addr=0x64010101, 0x3}, {@empty, 0x4}, {@empty, 0x58}]}]}}, @payload_conn={{{0x1a, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, 0x2, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x4, 0x4e20, 0x4e23}}, [0x0, 0x0]}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000006feffff7b0af0ff0000000079a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f61141c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x260400, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r5, 0x3b70, &(0x7f00000003c0)={0xa0, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)={0x30, r6, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x4}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001940)={0x4c, r2, 0x21, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x881}, 0x14008000) pipe(&(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) write$cgroup_pid(r10, &(0x7f0000000000), 0xffffff98) splice(r8, 0x0, r10, 0x0, 0x80, 0xe) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x4000, 0x4}) sendmsg$inet(r0, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000100)="b6", 0x1}], 0x1}, 0x40000) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, 0x0, 0x0) 16m59.313568495s ago: executing program 1 (id=372): r0 = inotify_init() r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {0x0, 0x1}, 0x136e6b59, 0xe1, &(0x7f00000004c0)={0x20, 0x1, 0x16, 0x2}, 0x8, 0x200, 0x6, 0x0, 0x0, 0xfffffffb, 0x0}) mknod$loop(&(0x7f0000000240)='./file0\x00', 0x800, 0x0) inotify_add_watch(r0, &(0x7f0000000300)='./file0\x00', 0x6000189) r2 = userfaultfd(0x80801) mmap(&(0x7f00003f4000/0x4000)=nil, 0x4000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000800000/0x1000)=nil, 0x1000}) r3 = fanotify_init(0x20, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0xffffffffffffffff) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) unlink(&(0x7f0000000000)='./file0\x00') ioprio_set$pid(0x1, 0xffffffffffffffff, 0x4004) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x22040, 0x0) read$FUSE(r7, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000080)=0x7, 0x2, 0x1) ptrace(0x4208, r8) fcntl$setlease(r3, 0x400, 0x1) 16m58.175863861s ago: executing program 1 (id=376): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x6, 0x0, 0x1, 0x7}, 0x14) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) bind$inet6(r5, 0x0, 0x0) listen(r5, 0x10040) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x69, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @remote}, {{0x0, 0x4e1e, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0xef, 0x10b, 0x0, 0x0, {[@sack={0x5, 0x6, [0x4]}]}}}}}}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x30}, 0x1, 0x900}, 0x0) r8 = dup(0xffffffffffffffff) preadv2(r8, 0x0, 0x0, 0x1fffe0, 0x0, 0x5) 16m55.899972793s ago: executing program 1 (id=383): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f00000004c0)={0x1f, @none}, 0x14) listen(r0, 0x3ff) listen(r1, 0xc) 16m55.579991536s ago: executing program 1 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x10) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x0) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000000)=0x1000000010) ioctl$BLKRRPART(r5, 0x125f, 0x0) r6 = semget$private(0x0, 0x6, 0x3b1) semop(r6, 0x0, 0x0) semctl$GETZCNT(r6, 0x0, 0xf, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000206010b00000000000000000300000a0500040001000000000001ee06000000"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4000001) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040), 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 16m54.427602208s ago: executing program 1 (id=389): mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x64000600) fchdir(0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) accept$nfc_llcp(r0, 0x0, 0x0) 16m39.288228613s ago: executing program 33 (id=389): mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x64000600) fchdir(0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) accept$nfc_llcp(r0, 0x0, 0x0) 5m44.651109241s ago: executing program 6 (id=4414): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/platform/devices/pcspkr/uevent\x00', 0x1, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) write$9p(r0, 0x0, 0x0) 5m44.471025442s ago: executing program 6 (id=4417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000000100)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="400a26000000262350a6c4364b7ed0cc63fb5661d427498ea77a4dc9568d64c6c27a19a8175dfa4c14b5a8b7"], 0x0}, &(0x7f0000000400)={0x34, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1c}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x1, 0x8}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x4}}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000300)={0x14, &(0x7f00000001c0)={0x0, 0x0, 0x5a, {0x5a, 0x6, "f19ae395e6589428736d30fe878d95203fdfd2c3bd01e8100b9ea5cd146db478b3df3179ae0f6a57715927df41b8823aab6cb001b80e73eddccad8bb2aa3b06b306941ff5a2ef450b82f80b362df8d0802b828a1acf49cd4"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="2012030010002c01efe201a5115beb2a57"], 0x0, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x80, 0x1c, {0x4, 0x9, 0xed, 0xf000, 0x8, 0x200, 0xfff9, 0xfffffff5, 0xff00, 0xe, 0x5, 0x5}}, &(0x7f0000000500)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000540)={0x20, 0x83, 0x2}, &(0x7f0000000580)={0x20, 0x87, 0x2, 0xff80}, &(0x7f00000005c0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)={0x158, 0x1, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFQA_PAYLOAD={0xf9, 0xa, "eeef83d9b91ce528ff1307bed76d24506d3a9b2893eebfe50239d832e4b2a6f1ccac0bd2f00710466faee8927bf50a935e79a08774761996b27f3c18aca53379c70d7798b3b80a17bc114daffb3f3fb0930470bd94d3ae0b6227ef37255e5bd9233bb187a85fb376a213c7ebe5ff7db28f384a9e15d679c9c16a2edf7928c08ad7a5131a07132f9bd33236ad2a2eec5112049482b3cc018c4e94091946fd61c814eb846827f656735ff80120f94cb2a536345ecf5fd7545255c596551aecaafb48faef306cb993924c492e11616f13f6be7706864a532393c0348fe24466a20ac8031a4b9da1d0b850791d908a657deaff3185ecef"}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xf}]}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0xd0}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20018814}, 0x44850) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606010004030c2f43657274696669636174652076657269666963617428a2e0861e1ae90d412073656c6611c6657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a80008ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04020912b177000000000f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d79691c7ad75d", 0x1d8, 0xfffffffffffffffd) clock_gettime(0x0, &(0x7f0000000500)) shutdown(0xffffffffffffffff, 0x0) 19.210184579s ago: executing program 4 (id=5187): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net\x00') getdents(r0, &(0x7f0000000f40)=""/243, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x8, &(0x7f0000001080)=ANY=[]) 16.10781385s ago: executing program 4 (id=5198): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x0, 0x1a, 0x0, 0x1, 0x2, 0x10000}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) fanotify_init(0x40, 0x101000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x50, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r7 = fcntl$getown(r0, 0x9) geteuid() sendmsg$nl_generic(r0, &(0x7f0000001780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001740)={&(0x7f0000004000)=ANY=[@ANYBLOB="2c1400003d00000128bd7000fcdbdf25110000000c00dc800800c500", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="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"], 0x142c}, 0x1, 0x0, 0x0, 0x4}, 0x22050806) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000400)=""/4117, 0x1015}], 0x1) 13.27808943s ago: executing program 4 (id=5201): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000}, 0x94) r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) unshare(0x40400) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r4, r3, 0x26}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000000121401000000000000000000080015000100000008004b001300000008000100000000005496463a1b700a3872a43800e37bd5792aa914679cb1eebe24"], 0x28}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x7c, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x5b21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x57c, 0x9, 0x8100}}, {0x14, 0x1, {0x5, 0x140, 0x1, 0x8100}}]}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'wlan1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc1}, 0x8000) getsockopt$bt_hci(r6, 0x84, 0xd, &(0x7f0000003140)=""/4096, &(0x7f00000000c0)=0x1000) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fff, 0x1}, 0xe) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={0x80, 0x20, 0x5}, 0x18) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f00000004c0)={r4, &(0x7f00000002c0)='^-#\x00', 0x2084c0, &(0x7f0000000300)={@align=0x9, {0x1, 0x5, 0x1, 0x8}}, 0xf1, &(0x7f0000000340), &(0x7f0000000480)=0x400}) getdents64(r9, &(0x7f0000000500)=""/57, 0x19c229ca720c78f3) getdents64(r8, &(0x7f0000001940)=""/4113, 0x1011) r10 = fcntl$dupfd(r1, 0x0, r0) epoll_create1(0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r11, &(0x7f00000059c0)=[{{&(0x7f0000000380)={0x2, 0x4e28, @multicast1}, 0x10, &(0x7f0000003680)=[{&(0x7f00000003c0)="a38ba845ec4efadcef", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000005900)=[{&(0x7f0000000680)="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", 0xd01}], 0x1}}], 0x2, 0x2000c044) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x101180, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000040)={0xb0002001}) 11.355502186s ago: executing program 5 (id=5209): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x13, 0x200, &(0x7f00000003c0)="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"}) socket(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000005feffff720a00fef8ffffff71a401fe000000002d030000000000001d400500000000004704000001ed00007203feff000000001d44000000000000db0a08fee10000007303000000000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) listen(0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="20002cbd7000fddbdf250e0000000c000600020000000000000008000e000e0000000c00060003000000000000000800010002000000080001000000000008000300", @ANYRES32=r6, @ANYBLOB="0c000600b36f5199ea25b5f52cc414817f216ecfaa66f5c85800000340000008000e"], 0x60}, 0x1, 0x0, 0x0, 0x20000840}, 0xc804) syz_usbip_server_init(0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x3000004, 0x4010, r1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc0189436, 0x1ffffffe) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000005c0)=0xd) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="680000003b0002002cbd7000fbdbdf250a000000262ad272cbe564653eb05cc1608fa3887e69449329fe625f2a555078093a7d6a13c939701bb4118da061aa0f2999ae83bc80b369bcb568f9ffffffffffffffe5616e28a52e374f62fc53571139213a7ccb58c6006bd89f93e58555cdfbf5c22f2396ea427632cac496c4e46e"], 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) 10.842565739s ago: executing program 4 (id=5210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000000c0)="b5fce574ad", 0x5}, {&(0x7f0000000180)="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", 0x801}], 0x2}}], 0x1, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10.641998602s ago: executing program 4 (id=5211): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x8, 0x101000) fanotify_mark(r2, 0x1, 0x8100000, r1, 0x0) r3 = socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x1c000, 0x440) fdatasync(r4) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x9, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0xc1, 0x1}}}}}]}}]}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x7, 0x7fffffff}]}) msync(&(0x7f0000e87000/0x1000)=nil, 0x1000, 0x6) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000040)={0x2c, &(0x7f0000000540)={0x20, 0x1, 0x28, {0x28, 0xb, "c26313852642792c3cbdeace918d0fb74237cc4b44b72fb06888815544000000000000000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff8}, {0x6, 0xc}, {0x1, 0x5}}}, 0x24}}, 0x20040000) 9.611078335s ago: executing program 0 (id=5213): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100f314f8264693568d180000001800eeff06000000020000000000000c02000000000000000000000d0000000000002e2e2e00"], 0x0, 0x36}, 0x28) syz_usb_control_io$lan78xx(r0, &(0x7f0000000400)={0x14, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], &(0x7f0000000780)=ANY=[@ANYBLOB="0003e9000000e903fb29967947f594ba2a8bfe5aebe4056491dec8bd8e3ea8ad3f105e101235def3475147e648b2a3e49b295aca4a0cf17359350946b6907bc1e908573f7f4c915581a3ffb1699e6e37f9b24746f07620cc2545e7474c2b4e2abf6f1f1b831770d635c7002e3101f087d3ab34611c60613b2add2dae63bcc9619f1d57b79000e43275083e9a469c955b641dee0c9c15526c2876f3ec3b9b0b0e39c6784b5a68b8ddf792b173876d87287bd9bc86f0462bdbc55b8bfa82bad7cdbb10e0f41cd4fec420d8d81bae6e25080b8f3f651069f8a02cf5bab211116002564338aaad985c8a7a3eef4d747a7df9"]}, &(0x7f0000000680)={0x34, &(0x7f0000000440)={0x20, 0x14, 0xae, "cc96c31fa873f8ee3af83f1fa0d9e143c2abdd967417613a2f1933c9d804db9751ddbfe9f28271636b78f94d3e0507f0d01e83ef292c5bc5011f1f9892e40ee6dcb0cdff3677d769a96558c30a2fc7f11e351f426c4d9fb37addcf46a7186ff7566fb1145093cd587215cbc87c47c01a2ecb3e72b52b0403e8946d199ae18936bb3920b39aac5feef2cb40d056507b9f97f11afee24fc04e8e0690e9e91294146eeb5ee05a7f0a7945fe65ef17ff"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000580)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f00000005c0)={0x40, 0xa0, 0x4, 0x3}, &(0x7f0000000600)={0xc0, 0xa2, 0x2f, "c6acf50a45a5eb58723daf9c48c1691680be3f95c1b2f0402fcbbd03105d0c9ab0f768db5901e8c66a1f6ca31559a7"}}) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) syz_usb_control_io$printer(r0, &(0x7f0000000a40)={0x14, &(0x7f0000000d80)=ANY=[@ANYBLOB="40099100000091248da97c36edd7330618b96b83edc4f73f21974ea6bf05d54dc1fe842cc4b668e9bee69f6f969cc5b25e35cbd4b0920f1b2a75d080fb8f32fbc3a8b244d66577a5216dc583fb08c518227bda7954c0afbd7eacb58a15dd6746dd3c9e2c59e669d79b25adebda843ca9c973e775cc5cfc5fa9c25edad959c3d28eb45549be4a5de4c63ac857ddee1732eead34dfd49af7151e59f5d78cc088c5102f4fc9aa"], &(0x7f0000000940)={0x0, 0x3, 0xbf, @string={0xbf, 0x3, "7142506ce4d8550da9545cd5411166cfd5039c7903aefe46d1fad36694bccd07ef29d7efe87a53ef374a9a4342e05b0c5930ff52b68facc2667861b2d158de6d3a66037c98f98f4bfc7baaddef1b2b2fcccdc83d9746e43f9eae4b859764dd9b7c36223fc00e0b57997f3c33f59ee8d63a5b5aa03ebf685e6cb0d7400010c957c3a077747d749e095884176d1e55faea9a500d8e0cbe5b3b399e961c888f16113118caeed2488b932274a4144bb511a3701944933ac41162fae8528f38"}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000a80)={0x20, 0xf, 0x91, "10193cf60c93da8643c07bca930c6975301afc8e4410be8d9afe7610c94a3177d10b99a7cab445e476fb9cc56a5ac0f53480a38195e50ae469d6f56f33a1c9988d1d9629fc33613c1bc2d68362164b695f0d1566f1dd15e245faeafef3bfda2ade6d798c5e567b148f1447f556ed149d76a190732ae9398a1585ddfc3b735f79706832ecaddb7459ce86e0bd2a5c3639d9"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0xb5}, &(0x7f0000000bc0)={0x20, 0x0, 0xde, {0xdc, "71cfc8031de70839e2cc53335b8b7947f6e4061820e397c348e5dd6245936e3bc548e1b7847f4455b8a9dbe36cd8f6bc2a06bbe2863c16f9af44dd6eb6c671188931842a33b15dff5171b6e507db63f509c312662884b53613e27665bfdedf39b5983e745229aad629f159dce6da32b18a9dcb99afd4f8bf00f657c2d15eef009cfddaacba1dcdfa39b87c8e08dc48b1bb158f3840ec3c13be4145d415b5e33d222e4b701fc1d01dd2abd1cd237ff6f4314faa1e3cc0586ba0f7498c17c55c6dbf2950b7ee3b08cd78b2480998743b5240c626ae5903a74736a38acc"}}, &(0x7f0000000cc0)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000d00)={0x20, 0x0, 0x1}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x0) mkdirat(r2, &(0x7f0000000240)='./debug/dynamic_debug/control\x00', 0x160) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) setuid(0xee01) write(r3, &(0x7f0000000540)="48696c060a2f686c64bf8fcc6b881b5fa6802c012f6869642d636f72652e63206c696e65cb57e017fcb309130850af815ecccc4d204e993838202bb97263e20d133f29281464f37f2afb75a76a8e2f56368df24600c4220485506210c0554b0ee4a7f2f8dc0f4644cca3b91d5532d062", 0xfffffeea) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) sendmmsg$unix(r5, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) 9.590183103s ago: executing program 5 (id=5214): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100f314f8264693568d180000001800eeff06000000020000000000000c02000000000000000000000d0000000000002e2e2e00"], 0x0, 0x36}, 0x28) syz_usb_control_io$lan78xx(r0, &(0x7f0000000400)={0x14, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], &(0x7f0000000780)=ANY=[@ANYBLOB="0003e9000000e903fb29967947f594ba2a8bfe5aebe4056491dec8bd8e3ea8ad3f105e101235def3475147e648b2a3e49b295aca4a0cf17359350946b6907bc1e908573f7f4c915581a3ffb1699e6e37f9b24746f07620cc2545e7474c2b4e2abf6f1f1b831770d635c7002e3101f087d3ab34611c60613b2add2dae63bcc9619f1d57b79000e43275083e9a469c955b641dee0c9c15526c2876f3ec3b9b0b0e39c6784b5a68b8ddf792b173876d87287bd9bc86f0462bdbc55b8bfa82bad7cdbb10e0f41cd4fec420d8d81bae6e25080b8f3f651069f8a02cf5bab211116002564338aaad985c8a7a3eef4d747a7df9"]}, &(0x7f0000000680)={0x34, &(0x7f0000000440)={0x20, 0x14, 0xae, "cc96c31fa873f8ee3af83f1fa0d9e143c2abdd967417613a2f1933c9d804db9751ddbfe9f28271636b78f94d3e0507f0d01e83ef292c5bc5011f1f9892e40ee6dcb0cdff3677d769a96558c30a2fc7f11e351f426c4d9fb37addcf46a7186ff7566fb1145093cd587215cbc87c47c01a2ecb3e72b52b0403e8946d199ae18936bb3920b39aac5feef2cb40d056507b9f97f11afee24fc04e8e0690e9e91294146eeb5ee05a7f0a7945fe65ef17ff"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000580)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f00000005c0)={0x40, 0xa0, 0x4, 0x3}, &(0x7f0000000600)={0xc0, 0xa2, 0x2f, "c6acf50a45a5eb58723daf9c48c1691680be3f95c1b2f0402fcbbd03105d0c9ab0f768db5901e8c66a1f6ca31559a7"}}) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) syz_usb_control_io$printer(r0, &(0x7f0000000a40)={0x14, &(0x7f0000000d80)=ANY=[@ANYBLOB="40099100000091248da97c36edd7330618b96b83edc4f73f21974ea6bf05d54dc1fe842cc4b668e9bee69f6f969cc5b25e35cbd4b0920f1b2a75d080fb8f32fbc3a8b244d66577a5216dc583fb08c518227bda7954c0afbd7eacb58a15dd6746dd3c9e2c59e669d79b25adebda843ca9c973e775cc5cfc5fa9c25edad959c3d28eb45549be4a5de4c63ac857ddee1732eead34dfd49af7151e59f5d78cc088c5102f4fc9aa"], &(0x7f0000000940)={0x0, 0x3, 0xbf, @string={0xbf, 0x3, "7142506ce4d8550da9545cd5411166cfd5039c7903aefe46d1fad36694bccd07ef29d7efe87a53ef374a9a4342e05b0c5930ff52b68facc2667861b2d158de6d3a66037c98f98f4bfc7baaddef1b2b2fcccdc83d9746e43f9eae4b859764dd9b7c36223fc00e0b57997f3c33f59ee8d63a5b5aa03ebf685e6cb0d7400010c957c3a077747d749e095884176d1e55faea9a500d8e0cbe5b3b399e961c888f16113118caeed2488b932274a4144bb511a3701944933ac41162fae8528f38"}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000a80)={0x20, 0xf, 0x91, "10193cf60c93da8643c07bca930c6975301afc8e4410be8d9afe7610c94a3177d10b99a7cab445e476fb9cc56a5ac0f53480a38195e50ae469d6f56f33a1c9988d1d9629fc33613c1bc2d68362164b695f0d1566f1dd15e245faeafef3bfda2ade6d798c5e567b148f1447f556ed149d76a190732ae9398a1585ddfc3b735f79706832ecaddb7459ce86e0bd2a5c3639d9"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0xb5}, &(0x7f0000000bc0)={0x20, 0x0, 0xde, {0xdc, "71cfc8031de70839e2cc53335b8b7947f6e4061820e397c348e5dd6245936e3bc548e1b7847f4455b8a9dbe36cd8f6bc2a06bbe2863c16f9af44dd6eb6c671188931842a33b15dff5171b6e507db63f509c312662884b53613e27665bfdedf39b5983e745229aad629f159dce6da32b18a9dcb99afd4f8bf00f657c2d15eef009cfddaacba1dcdfa39b87c8e08dc48b1bb158f3840ec3c13be4145d415b5e33d222e4b701fc1d01dd2abd1cd237ff6f4314faa1e3cc0586ba0f7498c17c55c6dbf2950b7ee3b08cd78b2480998743b5240c626ae5903a74736a38acc"}}, &(0x7f0000000cc0)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000d00)={0x20, 0x0, 0x1}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x0) mkdirat(r2, &(0x7f0000000240)='./debug/dynamic_debug/control\x00', 0x160) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) sendmmsg$unix(r4, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) 9.167798674s ago: executing program 3 (id=5215): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000"], 0x34}}, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) (fail_nth: 2) 8.833057626s ago: executing program 3 (id=5216): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000200001003fee0512baf1d1823d1c9e40d8000000000900000000130005000000"], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40400c4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x90402, 0x0) umount2(&(0x7f00000001c0)='./debug\x00', 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}, @NL80211_ATTR_PMKID={0x14, 0x55, "ec54d1b0b362895d04a76a6ffdbd3b9b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x4004001) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r6, 0x2219, 0x7722, 0x16, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000006c00010029bd700000c53b661000018008000b00ac14140d04000c8024c99570aeda8a18020f3326c8d32e3cca49deb2fc0b11a24d6494c90cfe257000f37f7d294f73047e5fb2df58239202d945dd9e5ea1ee4fb16183adb60672b912ad8977b4032636cb117fda9ccc5107c80d6697ef315ca156d9891f34f53034dbafe9c2251aeb974bbe71a97d598d546d00724a840333d5630fa65bc840cd90c44b12aa6754394b2ef8adcad9aad77ad63e7f85b6bd"], 0x20}], 0x1, 0x0, 0x0, 0x20004880}, 0xc000) r7 = syz_open_dev$vcsu(&(0x7f0000000100), 0xffffffffffffffff, 0x100) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r8, 0x84, 0x7d, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x18, 0x18, 0x200, 0x1070bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4085}, 0x20040844) bind$tipc(r7, &(0x7f0000000140)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x3}}, 0x10) 7.288260509s ago: executing program 4 (id=5217): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@llx}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000005c0)="e0b900000000da50b9155257d7ad", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (fail_nth: 2) 7.212835714s ago: executing program 6 (id=4422): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmsg$inet(r0, &(0x7f0000000cc0)={&(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x30}, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x184, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x5, 0x0, 0x9, 0xff, 0x5}, 0x1a6, &(0x7f0000000200)={0x5, 0xf, 0x1a6, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "5759d57fb61e87f462c7891ef8e71f14"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "702cb4661f34407d056c5e536d0f6b14"}, @ssp_cap={0x18, 0x10, 0xa, 0xff, 0x3, 0x401, 0xff00, 0x400, [0xff, 0x0, 0xff0030]}, @generic={0xe3, 0x10, 0xb, "caa4ec3ed1316452599d513c3a37fc5786fa60ad2c4c05f24a17dafff1cda9067cd27e6ff7947b3b522cda8c1d003d2e17b861710de0424f186284e1cb1906f622e78de58b0f0c70a196a2b18bdd95234b4d1b7f547ea9666f671f9040a1c182532a06377e56afe17a971f1367194fa4ce1f439766e3b6499f76e3def684e58953563ac43b7d67caf40362ab1af1c8204e62b42892124fb7c01150fd8dc75086edf7785c2a5017452f142fb0a64377187b1fed8d28de0e868a269178bd7ab9e58365c3759cd8693f44a7261f341bad3e66944f494004cb21c127316ff4ef3b3a"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x7, 0x6, 0x100, 0x3}, @generic={0x73, 0x10, 0xa, "3b49eec8e68aa66d1bf4c997bb698d645535c2c61e140c39ac508461104e640e5e862420b93c3d0da21e23fd68e6e28ed86233d7cac2fce1671673eba42131195f145f89a7dc8f37d6cfb3bd2f96eef391c41ea7a555471b0704c29c28197fd82425136e9cbe5d3b8b4d8cc44a510222"}]}, 0x1, [{0x35, &(0x7f00000003c0)=@string={0x35, 0x3, "fa31ee10c7d19f500e27cf5e9e19d88cd440815ada10c3eb84e601636fd767f85207b81cae196374bd93ed2945eae964108172"}}]}) 7.090885119s ago: executing program 5 (id=5218): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (fail_nth: 2) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 6.391767947s ago: executing program 0 (id=5219): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000}, 0x94) r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) unshare(0x40400) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r4, r3, 0x26}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000000121401000000000000000000080015000100000008004b001300000008000100000000005496463a1b700a3872a43800e37bd5792aa914679cb1eebe24"], 0x28}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x7c, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x5b21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x57c, 0x9, 0x8100}}, {0x14, 0x1, {0x5, 0x140, 0x1, 0x8100}}]}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'wlan1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc1}, 0x8000) getsockopt$bt_hci(r6, 0x84, 0xd, &(0x7f0000003140)=""/4096, &(0x7f00000000c0)=0x1000) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fff, 0x1}, 0xe) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={0x80, 0x20, 0x5}, 0x18) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f00000004c0)={r4, &(0x7f00000002c0)='^-#\x00', 0x2084c0, &(0x7f0000000300)={@align=0x9, {0x1, 0x5, 0x1, 0x8}}, 0xf1, &(0x7f0000000340), &(0x7f0000000480)=0x400}) getdents64(r9, &(0x7f0000000500)=""/57, 0x19c229ca720c78f3) getdents64(r8, &(0x7f0000001940)=""/4113, 0x1011) r10 = fcntl$dupfd(r1, 0x0, r0) epoll_create1(0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r11, &(0x7f00000059c0)=[{{&(0x7f0000000380)={0x2, 0x4e28, @multicast1}, 0x10, &(0x7f0000003680)=[{&(0x7f00000003c0)="a38ba845ec4efadcef", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000005900)=[{&(0x7f0000000680)="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", 0xd01}], 0x1}}], 0x2, 0x2000c044) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x101180, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000040)={0xb0002001}) 6.069101898s ago: executing program 5 (id=5221): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000009600)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xfffffffffffffeb4) r2 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa"], 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000540)=0x189d, 0x1a) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 5.35582889s ago: executing program 0 (id=5222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r1) 5.162366429s ago: executing program 5 (id=5223): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x20000) syz_usb_connect(0x6, 0x5c3, &(0x7f0000000c40)={{0x12, 0x1, 0x201, 0x3f, 0xcf, 0x3d, 0xff, 0x2dc8, 0xbf67, 0xc28c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b1, 0x1, 0xb, 0xa, 0x40, 0x5, "", [{{0x9, 0x4, 0xff, 0x7, 0x10, 0xff, 0x47, 0xd0, 0x9, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "88"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xe, 0x7, 0x3}, {0x6, 0x24, 0x1a, 0x96d2, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x98, 0x8, 0xd}, @obex={0x5, 0x24, 0x15, 0x2}, @country_functional={0xc, 0x24, 0x7, 0x3, 0x6, [0x8d0, 0x7b, 0x2]}, @mdlm_detail={0xbb, 0x24, 0x13, 0x9, "6022604fae330bce7b62f0de231c87806c386ecfa05da9b7db1ae52e8defaee14087a8972f72a5f41c0aa6381050597eba3034023e5dcf0d81dc30a01874bab0decd182861e9ea3a4209b79c8d080e8c0a4fe56e16c9c9e2971d7423f418356e8f74053470c83a2de0b49ffb202b66896e36b439d133053ca063eddf6096aef6acef97c1c64f7bbdbb2677d7483a98ca381567b9f1c7af63119b5263f2ffa7d5e20772132df5808e330626cf9c52f7f4e71502d1a386d2"}]}], [{{0x9, 0x5, 0xe, 0x0, 0x400, 0x9, 0x8, 0x23, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x401}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x82, 0xfa}]}}, {{0x9, 0x5, 0xf, 0x8, 0x3ff, 0x0, 0x9, 0x6}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x2, 0x3, 0x59, [@generic={0xf5, 0x8, "4d9015178eff78db497c190bb9979d076ff71989710d7f5dab3fd9ba1900df090f3f958baa7a39b598a278f99a539115cd0457c188ff0639d261f5dbbfa57bb88f5d4220b65f459d9e56f97d16882b17f1989f942ab5982ff0497ca9b7e2c399152f433b11bf2cc2dd948d7b3227969a5a3c550297cdc928fd4d1a7980f4674b5b593ebe0dfd1b43de6363d1991e6767d68bd85ad2643d47f6353c1f0de81724fb89fda65b9791d9b93b18e1309e2315e079992251376ba2ddb34a81ab8534e43923db3a4f7a322829162e994bdc7cc8e47246151a4e4cdf4d8cd643e6da97229f6b24d4dc4041451dd7e8de3e90aefd4061d5"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x9, 0x3, 0x3, [@generic={0xac, 0x23, "d10825d0126e02b1b9d05ba5e28fbbd405e1201323fe9ffc1b69af1214ddbaf77c889e563d180fb16869f3eebf85df72a7b68df5e7b4a17c8356d5ee5e847a4dc7ee6f95f71d1129b118c688e7ff1a7bc5cbce0de9a12749c2e044ad8350724df2ae4d34d0699fdc61a03d60633dd37277bac1e15e6bdc8f7eb5642f86883af25d091d47a967d19986d3f09a6d122c3b48b2c4d4f5ede22cb6ceaf679fb944231e32dfcc7184742d48ea"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x0, 0x6d, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x70, 0xac}, @generic={0x2, 0x11}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x1, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0xbb}, @generic={0xc1, 0x6, "b60b64baff5b717df3944354479b35fa6ef38dc9a9f052a3a6bb9ea3e5e821b1eae2330da756f1e0e2b51e72969a0f7a67c496e3f456e34bf5bd60ff00a654de84ea261a4622013fdd27b8642c16465a0a0f84a38665de7c62f6e783f097630384558e735c4f11918dc2b3ad42ad7a942714db3e07bd2715a386700397d3c0cde13efbe06d114a1402d0ca676564e0bdce3829b5f834502902e93fe376ed90c30474b61e01f07b94e3bdc8d2a7e4155336aee142ddb397ae26a9c734388539"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x400, 0x7, 0x7f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0xffff}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x9, 0xd9, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x4}, @generic={0x9a, 0x24, "eecb5645bb587a5327eb140831e604307fc62600dc6146913fe727fa8cbddcc3203c9394f4aaccaa8a9097be96e46efcc40c5db91d766a539ef268bbafa501d66683af95d9f87c29fbc7cd1f6225ef07e1150ae430e0bd50b7a7828615e2c6757f4c8360b9592394e833008097595367ad22083d28120a0fc79f7632cb5436471253e0686423e82ea4770e42d3627d65e2115f6956e25297"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0xae, 0x81, 0x3}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x9, 0x81, 0x1}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x9, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x4}]}}, {{0x9, 0x5, 0x4, 0x8, 0x3af, 0x6, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x6}, @generic={0x2, 0x3}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x7, 0x2, 0x3}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x0, 0x4, 0x9, [@generic={0xd1, 0x1, "a55a44a93ebf3a2a6d6b537299c3bb4fc46e3fdfb481cd11c27883b34b47b95cda1b9208b2d60f9f193bef035936f63646d8fa6768db58df5ca1e1d3c9cf9d193e5cd1ef49938c121d0274a5df3709f55e1f877a5a57cb822071086c14a71edf420bf39376a467b5294ccc8fd2a701ca30c19865261dcb37f35a3a9335d465023aed4f0efd0b2a82363fa7958ff3b4073b9dfb15d727c81c8fd1f1a383cdc7caafefdac13cee307f88e9683e57b13d72bc3dc2a0e38dfb71b285fdd68a32392aa23b9b63c167978b0d96cfca85e8f0"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf8, 0x6}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x2, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x1e5c}]}}, {{0x9, 0x5, 0x1, 0x1, 0x400, 0x3, 0x80, 0xa}}]}}]}}]}}, &(0x7f00000014c0)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x250, 0x6, 0xa6, 0x6, 0x20, 0x9}, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="050f1400010f100b03dfb06a9ee22b01a7bb40668b5351a5bdacee5968b0964eaf9a9092"]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)=0xa) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write(r1, &(0x7f0000000400)='transport=loop,nqn=testsubsys,disable_sqflow', 0x2c) 4.667018894s ago: executing program 6 (id=5224): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) r1 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f00009c3000/0x4000)=nil, 0x4000, 0x1000001) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) io_getevents(r2, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r5, {}, {0xafabc05531515610, 0x415034f1892c1116}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) read(r4, &(0x7f0000000100)=""/5, 0x5) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/196, 0xc4}], 0x1, 0xa, 0x805) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB='-\x00\x00\x00\b\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="03a0e91ea8e71f6e16ed82b30012daa4e9", @ANYRES64=0x0], 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80040, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14ffffff7f000000000000003e0000000500000000000000"], 0x18}, 0xc4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00') getdents(r6, 0xfffffffffffffffd, 0x3b) socket$packet(0x11, 0x2, 0x300) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 4.218404477s ago: executing program 0 (id=5225): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000"], 0x34}}, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) 3.902077312s ago: executing program 0 (id=5226): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x8, 0x101000) fanotify_mark(r2, 0x1, 0x8100000, r1, 0x0) r3 = socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x1c000, 0x440) fdatasync(r4) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x9, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0xc1, 0x1}}}}}]}}]}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x7, 0x7fffffff}]}) msync(&(0x7f0000e87000/0x1000)=nil, 0x1000, 0x6) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000040)={0x2c, &(0x7f0000000540)={0x20, 0x1, 0x28, {0x28, 0xb, "c26313852642792c3cbdeace918d0fb74237cc4b44b72fb06888815544000000000000000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff8}, {0x6, 0xc}, {0x1, 0x5}}}, 0x24}}, 0x20040000) 3.683162196s ago: executing program 3 (id=5227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="791048000000000079000c000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x8, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x10, @multicast2}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x2) 3.680009397s ago: executing program 5 (id=5228): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000240)={&(0x7f0000ff9000/0x3000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open(&(0x7f0000000380)='./bus\x00', 0x109240, 0x145) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000010900010073797a30000000002c000000030a01010000000000000000050000080900010073797a30000000000900030073797a300000000058000000060a010400000000000000000500000008000b4000000000300004802c0001800b00010074756e6e656c00001c00028008000340000000020800014000000000080002400000000f0900010073797a30"], 0xcc}}, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x48) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000240)=ANY=[], 0x2b) sendfile(r4, r1, 0x0, 0x4000000053d2) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r5) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10) ioctl$FE_DISEQC_SEND_MASTER_CMD(r1, 0x40076f3f, &(0x7f0000000140)={"a98adb888b08", 0x6}) pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') syz_usb_connect(0x2, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000ffd26f10cb0606000600000003010902240001000000000904"], 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 3.564513779s ago: executing program 6 (id=5229): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x0, 0x1a, 0x0, 0x1, 0x2, 0x10000}, 0x28) socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) fanotify_init(0x40, 0x101000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x50, &(0x7f0000000100), 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) geteuid() readv(r0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.416275166s ago: executing program 3 (id=5230): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@llx}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000005c0)="e0b900000000da50b9155257d7ad", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.582293337s ago: executing program 6 (id=5231): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000}, 0x94) r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) unshare(0x40400) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r4, r3, 0x26}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000000121401000000000000000000080015000100000008004b001300000008000100000000005496463a1b700a3872a43800e37bd5792aa914679cb1eebe24"], 0x28}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x7c, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x5b21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x57c, 0x9, 0x8100}}, {0x14, 0x1, {0x5, 0x140, 0x1, 0x8100}}]}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'wlan1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc1}, 0x8000) getsockopt$bt_hci(r6, 0x84, 0xd, &(0x7f0000003140)=""/4096, &(0x7f00000000c0)=0x1000) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fff, 0x1}, 0xe) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={0x80, 0x20, 0x5}, 0x18) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f00000004c0)={r4, &(0x7f00000002c0)='^-#\x00', 0x2084c0, &(0x7f0000000300)={@align=0x9, {0x1, 0x5, 0x1, 0x8}}, 0xf1, &(0x7f0000000340), &(0x7f0000000480)=0x400}) getdents64(r9, &(0x7f0000000500)=""/57, 0x19c229ca720c78f3) getdents64(r8, &(0x7f0000001940)=""/4113, 0x1011) r10 = fcntl$dupfd(r1, 0x0, r0) epoll_create1(0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r11, &(0x7f00000059c0)=[{{&(0x7f0000000380)={0x2, 0x4e28, @multicast1}, 0x10, &(0x7f0000003680)=[{&(0x7f00000003c0)="a38ba845ec4efadcef", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000005900)=[{0x0}], 0x1}}], 0x2, 0x2000c044) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x101180, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000040)={0xb0002001}) 1.15675695s ago: executing program 3 (id=5232): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 881.678307ms ago: executing program 0 (id=5233): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) syz_usb_connect$cdc_ncm(0x2, 0x184, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x5, 0x0, 0x9, 0xff, 0x5}, 0x1a6, &(0x7f0000000200)={0x5, 0xf, 0x1a6, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "5759d57fb61e87f462c7891ef8e71f14"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "702cb4661f34407d056c5e536d0f6b14"}, @ssp_cap={0x18, 0x10, 0xa, 0xff, 0x3, 0x401, 0xff00, 0x400, [0xff, 0x0, 0xff0030]}, @generic={0xe3, 0x10, 0xb, "caa4ec3ed1316452599d513c3a37fc5786fa60ad2c4c05f24a17dafff1cda9067cd27e6ff7947b3b522cda8c1d003d2e17b861710de0424f186284e1cb1906f622e78de58b0f0c70a196a2b18bdd95234b4d1b7f547ea9666f671f9040a1c182532a06377e56afe17a971f1367194fa4ce1f439766e3b6499f76e3def684e58953563ac43b7d67caf40362ab1af1c8204e62b42892124fb7c01150fd8dc75086edf7785c2a5017452f142fb0a64377187b1fed8d28de0e868a269178bd7ab9e58365c3759cd8693f44a7261f341bad3e66944f494004cb21c127316ff4ef3b3a"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x7, 0x6, 0x100, 0x3}, @generic={0x73, 0x10, 0xa, "3b49eec8e68aa66d1bf4c997bb698d645535c2c61e140c39ac508461104e640e5e862420b93c3d0da21e23fd68e6e28ed86233d7cac2fce1671673eba42131195f145f89a7dc8f37d6cfb3bd2f96eef391c41ea7a555471b0704c29c28197fd82425136e9cbe5d3b8b4d8cc44a510222"}]}, 0x1, [{0x35, &(0x7f00000003c0)=@string={0x35, 0x3, "fa31ee10c7d19f500e27cf5e9e19d88cd440815ada10c3eb84e601636fd767f85207b81cae196374bd93ed2945eae964108172"}}]}) 0s ago: executing program 3 (id=5234): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4e23, 0x2, @empty, 0x6b}, 0x1b) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) kernel console output (not intermixed with test programs): should_failslab+0xa8/0x100 [ 1139.129751][T20365] __kmalloc_noprof+0xfe/0x780 [ 1139.129769][T20365] ? bpf_test_init+0x9f/0x150 [ 1139.129785][T20365] ? bpf_test_init+0x9f/0x150 [ 1139.129807][T20365] bpf_test_init+0x9f/0x150 [ 1139.129827][T20365] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 1139.129859][T20365] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1139.129881][T20365] ? __fget_files+0x2a/0x420 [ 1139.129907][T20365] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1139.129926][T20365] bpf_prog_test_run+0x2cb/0x340 [ 1139.129950][T20365] __sys_bpf+0xa22/0xd90 [ 1139.129976][T20365] ? __pfx___sys_bpf+0x10/0x10 [ 1139.129999][T20365] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1139.130029][T20365] ? rt_mutex_slowunlock+0x219/0x460 [ 1139.130060][T20365] ? ksys_write+0x248/0x270 [ 1139.130085][T20365] ? __pfx_ksys_write+0x10/0x10 [ 1139.130112][T20365] __x64_sys_bpf+0xba/0xd0 [ 1139.130131][T20365] do_syscall_64+0x166/0x520 [ 1139.130151][T20365] ? trace_irq_disable+0x3b/0x140 [ 1139.130168][T20365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.130185][T20365] ? clear_bhb_loop+0x70/0xc0 [ 1139.130206][T20365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.130223][T20365] RIP: 0033:0x7f5c8322e0d9 [ 1139.130239][T20365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1139.130253][T20365] RSP: 002b:00007f5c81486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1139.130271][T20365] RAX: ffffffffffffffda RBX: 00007f5c834b5fa0 RCX: 00007f5c8322e0d9 [ 1139.130284][T20365] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1139.130295][T20365] RBP: 00007f5c81486090 R08: 0000000000000000 R09: 0000000000000000 [ 1139.130305][T20365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1139.130315][T20365] R13: 00007f5c834b6038 R14: 00007f5c834b5fa0 R15: 00007ffd46f79d48 [ 1139.130341][T20365] [ 1139.282643][ T5718] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 1139.447658][ T5718] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1139.449365][ T5718] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1139.449406][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.493294][ T5718] usb 6-1: config 0 descriptor?? [ 1139.586095][T20368] FAULT_INJECTION: forcing a failure. [ 1139.586095][T20368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1139.586136][T20368] CPU: 1 UID: 0 PID: 20368 Comm: syz.4.4879 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 1139.586172][T20368] Tainted: [L]=SOFTLOCKUP [ 1139.586181][T20368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1139.586194][T20368] Call Trace: [ 1139.586203][T20368] [ 1139.586213][T20368] dump_stack_lvl+0xe8/0x150 [ 1139.586251][T20368] should_fail_ex+0x46b/0x600 [ 1139.586283][T20368] _copy_to_user+0x31/0xb0 [ 1139.586315][T20368] simple_read_from_buffer+0xe1/0x170 [ 1139.586351][T20368] proc_fail_nth_read+0x1be/0x230 [ 1139.586389][T20368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1139.586428][T20368] ? rw_verify_area+0x250/0x4d0 [ 1139.586461][T20368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1139.586495][T20368] vfs_read+0x219/0xa90 [ 1139.586542][T20368] ? __pfx_vfs_read+0x10/0x10 [ 1139.586585][T20368] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1139.586618][T20368] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1139.586647][T20368] ? mutex_lock_nested+0x152/0x1d0 [ 1139.586681][T20368] ? fdget_pos+0x252/0x320 [ 1139.586720][T20368] ksys_read+0x156/0x270 [ 1139.586755][T20368] ? __pfx_ksys_read+0x10/0x10 [ 1139.586800][T20368] do_syscall_64+0x166/0x520 [ 1139.586828][T20368] ? trace_irq_disable+0x3b/0x140 [ 1139.586852][T20368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.586876][T20368] ? clear_bhb_loop+0x70/0xc0 [ 1139.586904][T20368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.586928][T20368] RIP: 0033:0x7f50b7c2e90e [ 1139.586949][T20368] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1139.586969][T20368] RSP: 002b:00007f50b5ec5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1139.586993][T20368] RAX: ffffffffffffffda RBX: 00007f50b5ec66c0 RCX: 00007f50b7c2e90e [ 1139.587010][T20368] RDX: 000000000000000f RSI: 00007f50b5ec60a0 RDI: 0000000000000004 [ 1139.587025][T20368] RBP: 00007f50b5ec6090 R08: 0000000000000000 R09: 0000000000000000 [ 1139.587040][T20368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1139.587054][T20368] R13: 00007f50b7ef6038 R14: 00007f50b7ef5fa0 R15: 00007ffdedc16938 [ 1139.587092][T20368] [ 1139.947877][T17157] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.095119][ T61] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1140.184640][ T5718] kye 0003:0458:5013.0014: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1140.204902][ T5718] kye 0003:0458:5013.0014: unknown main item tag 0x0 [ 1140.204938][ T5718] kye 0003:0458:5013.0014: unknown main item tag 0x0 [ 1140.204966][ T5718] kye 0003:0458:5013.0014: unknown main item tag 0x0 [ 1140.204993][ T5718] kye 0003:0458:5013.0014: unknown main item tag 0x0 [ 1140.205019][ T5718] kye 0003:0458:5013.0014: unknown main item tag 0x0 [ 1140.205045][ T5718] kye 0003:0458:5013.0014: unknown main item tag 0x0 [ 1140.205071][ T5718] kye 0003:0458:5013.0014: unknown main item tag 0x0 [ 1140.205097][ T5718] kye 0003:0458:5013.0014: unknown main item tag 0x0 [ 1140.205123][ T5718] kye 0003:0458:5013.0014: unknown main item tag 0x0 [ 1140.306601][ T5718] kye 0003:0458:5013.0014: hidraw0: USB HID v0.81 Device [HID 0458:5013] on usb-dummy_hcd.5-1/input0 [ 1140.306639][ T5718] kye 0003:0458:5013.0014: tablet-enabling feature report not found [ 1140.306657][ T5718] kye 0003:0458:5013.0014: tablet enabling failed [ 1140.709011][ T7783] usb 6-1: USB disconnect, device number 78 [ 1140.752120][T20379] fido_id[20379]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1140.906480][T20228] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.909813][T20228] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.910003][T20228] bridge_slave_0: entered allmulticast mode [ 1140.952564][T20228] bridge_slave_0: entered promiscuous mode [ 1140.969525][T20228] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.969663][T20228] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.969865][T20228] bridge_slave_1: entered allmulticast mode [ 1140.972775][T20228] bridge_slave_1: entered promiscuous mode [ 1141.073052][T20228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1141.093756][T20228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1141.159758][T20228] team0: Port device team_slave_0 added [ 1141.166818][T20228] team0: Port device team_slave_1 added [ 1141.244486][T20228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1141.244504][T20228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.244535][T20228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1141.301042][T20228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1141.301056][T20228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.301077][T20228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.446390][ T37] kauditd_printk_skb: 692 callbacks suppressed [ 1141.446409][ T37] audit: type=1326 audit(1787359263.318:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20386 comm="syz.0.4885" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8322e0d9 code=0x7ffc0000 [ 1141.449467][ T37] audit: type=1326 audit(1787359263.318:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20386 comm="syz.0.4885" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8322e0d9 code=0x7ffc0000 [ 1141.452187][ T37] audit: type=1326 audit(1787359263.318:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20386 comm="syz.0.4885" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f5c8322e0d9 code=0x7ffc0000 [ 1141.452240][ T37] audit: type=1326 audit(1787359263.318:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20386 comm="syz.0.4885" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8322e0d9 code=0x7ffc0000 [ 1141.452287][ T37] audit: type=1326 audit(1787359263.318:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20386 comm="syz.0.4885" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8322e0d9 code=0x7ffc0000 [ 1141.452982][ T37] audit: type=1326 audit(1787359263.318:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20386 comm="syz.0.4885" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c8322e0d9 code=0x7ffc0000 [ 1141.523990][ T37] audit: type=1326 audit(1787359263.391:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20386 comm="syz.0.4885" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8322e0d9 code=0x7ffc0000 [ 1141.524690][ T37] audit: type=1326 audit(1787359263.391:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20386 comm="syz.0.4885" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8322e0d9 code=0x7ffc0000 [ 1141.547062][ T37] audit: type=1326 audit(1787359263.412:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20386 comm="syz.0.4885" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c8322e0d9 code=0x7ffc0000 [ 1141.547206][ T37] audit: type=1326 audit(1787359263.412:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20386 comm="syz.0.4885" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8322e0d9 code=0x7ffc0000 [ 1142.457110][T20228] hsr_slave_0: entered promiscuous mode [ 1142.460098][T20228] hsr_slave_1: entered promiscuous mode [ 1142.484496][T20228] debugfs: 'hsr0' already exists in 'hsr' [ 1142.484515][T20228] Cannot create hsr debugfs directory [ 1142.863614][T20413] FAULT_INJECTION: forcing a failure. [ 1142.863614][T20413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1142.863656][T20413] CPU: 1 UID: 0 PID: 20413 Comm: syz.3.4893 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 1142.863685][T20413] Tainted: [L]=SOFTLOCKUP [ 1142.863693][T20413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1142.863706][T20413] Call Trace: [ 1142.863715][T20413] [ 1142.863724][T20413] dump_stack_lvl+0xe8/0x150 [ 1142.863777][T20413] should_fail_ex+0x46b/0x600 [ 1142.863808][T20413] _copy_to_user+0x31/0xb0 [ 1142.863852][T20413] copy_siginfo_to_user+0x22/0xc0 [ 1142.863879][T20413] x64_setup_rt_frame+0x765/0xc50 [ 1142.863907][T20413] ? rt_spin_unlock+0x159/0x200 [ 1142.863949][T20413] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1142.863987][T20413] arch_do_signal_or_restart+0x45b/0x860 [ 1142.864020][T20413] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1142.864055][T20413] ? ksys_write+0x248/0x270 [ 1142.864101][T20413] exit_to_user_mode_loop+0x10e/0x770 [ 1142.864124][T20413] ? rcu_is_watching+0x16/0xb0 [ 1142.864156][T20413] do_syscall_64+0x328/0x520 [ 1142.864180][T20413] ? trace_irq_disable+0x3b/0x140 [ 1142.864201][T20413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.864222][T20413] ? clear_bhb_loop+0x70/0xc0 [ 1142.864249][T20413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.864270][T20413] RIP: 0033:0x7fd4da27e90e [ 1142.864289][T20413] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1142.864307][T20413] RSP: 002b:00007fd4d84f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1142.864329][T20413] RAX: 0000000000000001 RBX: 00007fd4d84f56c0 RCX: 00007fd4da27e90e [ 1142.864343][T20413] RDX: 0000000000000001 RSI: 00007fd4d84f5090 RDI: 0000000000000004 [ 1142.864356][T20413] RBP: 00007fd4d84f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1142.864369][T20413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1142.864382][T20413] R13: 00007fd4da546128 R14: 00007fd4da546090 R15: 00007ffe79ad3f98 [ 1142.864415][T20413] [ 1143.263906][ T5690] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1143.383311][T20421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4896'. [ 1143.406810][ T5690] usb 6-1: Using ep0 maxpacket: 32 [ 1143.442444][ T5690] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1143.442487][ T5690] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1143.446027][ T5690] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.446085][ T5690] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1143.485521][ T5690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.485547][ T5690] usb 6-1: Product: syz [ 1143.485578][ T5690] usb 6-1: Manufacturer: syz [ 1143.485589][ T5690] usb 6-1: SerialNumber: syz [ 1143.647153][ T5690] usb 6-1: selecting invalid altsetting 1 [ 1144.099507][T20432] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4899'. [ 1144.131721][T20432] overlayfs: overlapping lowerdir path [ 1144.134391][T19521] udevd[19521]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1144.598824][T17157] bridge_slave_1: left allmulticast mode [ 1144.598851][T17157] bridge_slave_1: left promiscuous mode [ 1144.599090][T17157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.668002][T20437] overlayfs: overlapping lowerdir path [ 1144.810765][T17157] bridge_slave_0: left allmulticast mode [ 1144.810800][T17157] bridge_slave_0: left promiscuous mode [ 1144.811060][T17157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.779471][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1146.251210][ T5718] usb 6-1: USB disconnect, device number 79 [ 1147.106583][ T61] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1147.296110][ T7051] libceph: connect (1)[c::]:6789 error -101 [ 1147.550708][ T7051] libceph: mon0 (1)[c::]:6789 connect error [ 1147.807572][ T5718] libceph: connect (1)[c::]:6789 error -101 [ 1147.807788][ T5718] libceph: mon0 (1)[c::]:6789 connect error [ 1148.059401][T20449] ceph: No mds server is up or the cluster is laggy [ 1152.654911][T17157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1152.840479][T17157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1152.905431][T17157] bond0 (unregistering): Released all slaves [ 1153.861326][T20488] netlink: 'syz.3.4915': attribute type 2 has an invalid length. [ 1153.861349][T20488] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4915'. [ 1154.366810][T20488] input: syz0 as /devices/virtual/input/input26 [ 1154.542757][T20497] device-mapper: ioctl: only supply one of name or uuid, cmd(6) [ 1155.007937][T17739] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 1155.223817][T17739] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1155.225114][T17739] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.225152][T17739] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1155.225172][T17739] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1155.225198][T17739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.273831][T17739] usb 5-1: config 0 descriptor?? [ 1155.486372][T17739] hid-picolcd 0003:04D8:F002.0015: report_id 0 is invalid [ 1155.486414][T17739] hid-picolcd 0003:04D8:F002.0015: item 0 2 1 8 parsing failed [ 1155.487273][T17739] hid-picolcd 0003:04D8:F002.0015: device report parse failed [ 1155.487353][T17739] hid-picolcd 0003:04D8:F002.0015: probe with driver hid-picolcd failed with error -22 [ 1155.690436][ T7051] usb 5-1: USB disconnect, device number 117 [ 1156.391889][T20519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4919'. [ 1156.456189][T20519] overlayfs: overlapping lowerdir path [ 1156.962612][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1157.074794][ T5690] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1157.217724][ T5690] usb 5-1: Using ep0 maxpacket: 32 [ 1157.221026][ T5690] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1157.221083][ T5690] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1157.288869][ T5690] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 1157.321822][ T5690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.321853][ T5690] usb 5-1: Product: syz [ 1157.321882][ T5690] usb 5-1: Manufacturer: syz [ 1157.321899][ T5690] usb 5-1: SerialNumber: syz [ 1157.553116][ T5690] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 1157.606871][T20521] overlayfs: overlapping lowerdir path [ 1157.914357][ T5690] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1157.914936][ T5690] usb 5-1: disable ehci-hcd to run US-144 [ 1157.952024][ T5690] usb 5-1: disable ehci-hcd to run US-144 [ 1157.985486][ T5690] usb 5-1: disable ehci-hcd to run US-144 [ 1158.028150][T17157] hsr_slave_0: left promiscuous mode [ 1158.054163][ T5690] usb 5-1: USB disconnect, device number 118 [ 1158.065823][T17157] hsr_slave_1: left promiscuous mode [ 1158.067134][T17157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1158.067162][T17157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1158.193116][T17157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1158.193146][T17157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1158.222706][T19521] udevd[19521]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1160.432919][T17157] veth1_macvtap: left promiscuous mode [ 1160.433034][T17157] veth0_macvtap: left promiscuous mode [ 1160.433333][T17157] veth1_vlan: left promiscuous mode [ 1160.668827][T17157] veth0_vlan: left promiscuous mode [ 1162.785528][T20571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4930'. [ 1162.785552][T20571] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4930'. [ 1165.748698][T17157] team0 (unregistering): Port device team_slave_1 removed [ 1165.849968][T17157] team0 (unregistering): Port device team_slave_0 removed [ 1168.092496][T20568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4929'. [ 1168.967871][T20601] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4937'. [ 1169.052366][T20602] overlayfs: overlapping lowerdir path [ 1169.701357][T20610] overlayfs: overlapping lowerdir path [ 1170.095075][T20624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4941'. [ 1171.133752][ T5690] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 1171.238272][ T1247] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1171.277933][ T5690] usb 6-1: not running at top speed; connect to a high speed hub [ 1171.278009][ T5690] usb 6-1: New USB device found, idVendor=0000, idProduct=d970, bcdDevice= 1.00 [ 1171.279536][ T5690] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.279581][ T5690] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1171.279640][ T5690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.377795][ T5690] uvcvideo 6-1:1.0: Found UVC 1.00 device (0000:d970) [ 1171.399933][ T1247] usb 5-1: Using ep0 maxpacket: 32 [ 1171.400789][ T1247] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1171.405253][ T1247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.405278][ T1247] usb 5-1: Product: syz [ 1171.405294][ T1247] usb 5-1: Manufacturer: syz [ 1171.405310][ T1247] usb 5-1: SerialNumber: syz [ 1171.458608][ T1247] usb 5-1: config 0 descriptor?? [ 1171.476063][ T1247] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1171.561193][ T5690] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 15 on unit 1: 0 (exp. 1). [ 1171.561257][ T5690] uvcvideo 6-1:1.0: No streaming interface found for terminal 32770. [ 1171.741755][T20637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.742367][T20637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.936938][T20642] FAULT_INJECTION: forcing a failure. [ 1171.936938][T20642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1171.936979][T20642] CPU: 0 UID: 0 PID: 20642 Comm: syz.3.4945 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 1171.937012][T20642] Tainted: [L]=SOFTLOCKUP [ 1171.937021][T20642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1171.937036][T20642] Call Trace: [ 1171.937045][T20642] [ 1171.937055][T20642] dump_stack_lvl+0xe8/0x150 [ 1171.937095][T20642] should_fail_ex+0x46b/0x600 [ 1171.937126][T20642] _copy_from_user+0x2d/0xb0 [ 1171.937154][T20642] __se_sys_capset+0x23e/0x440 [ 1171.937186][T20642] ? __pfx___se_sys_capset+0x10/0x10 [ 1171.937218][T20642] ? ksys_write+0x248/0x270 [ 1171.937258][T20642] ? __pfx_ksys_write+0x10/0x10 [ 1171.937304][T20642] do_syscall_64+0x166/0x520 [ 1171.937334][T20642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.937358][T20642] ? clear_bhb_loop+0x70/0xc0 [ 1171.937386][T20642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.937420][T20642] RIP: 0033:0x7fd4da2be0d9 [ 1171.937442][T20642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1171.937463][T20642] RSP: 002b:00007fd4d8516028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 1171.937487][T20642] RAX: ffffffffffffffda RBX: 00007fd4da545fa0 RCX: 00007fd4da2be0d9 [ 1171.937504][T20642] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000000 [ 1171.937520][T20642] RBP: 00007fd4d8516090 R08: 0000000000000000 R09: 0000000000000000 [ 1171.937535][T20642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1171.937549][T20642] R13: 00007fd4da546038 R14: 00007fd4da545fa0 R15: 00007ffe79ad3f98 [ 1171.937585][T20642] [ 1174.191037][ T1247] gspca_ov534_9: reg_r err -110 [ 1174.473399][T20637] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4944'. [ 1174.495497][ T1247] gspca_ov534_9: Unknown sensor 0000 [ 1174.495752][ T1247] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1174.928178][ T5690] usb 6-1: USB disconnect, device number 80 [ 1175.309110][ T1247] usb 5-1: USB disconnect, device number 119 [ 1175.484518][T20228] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1175.587343][T20228] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1175.592029][T20228] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1175.706828][T20228] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1175.713908][T20228] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1175.817093][T20228] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1175.827580][T20665] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1175.828109][T20665] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1175.866432][T20665] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1176.004815][T20228] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1176.465599][T20228] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1176.466661][T20673] netlink: 'syz.5.4951': attribute type 1 has an invalid length. [ 1176.862274][T20686] : entered promiscuous mode [ 1177.086332][ T1247] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1177.133365][T20228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1177.184433][T20228] 8021q: adding VLAN 0 to HW filter on device team0 [ 1177.230311][ T1247] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1177.232326][ T1247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.234378][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.234509][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1177.277710][ T1247] usb 5-1: config 0 descriptor?? [ 1177.295432][ T1247] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1177.623541][T17175] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.623682][T17175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1177.728412][ T1247] gspca_sunplus: reg_w_riv err -71 [ 1177.728523][ T1247] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1177.797134][ T1247] usb 5-1: USB disconnect, device number 120 [ 1177.943675][ T5718] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1178.086987][ T5718] usb 6-1: New USB device found, idVendor=2001, idProduct=3a04, bcdDevice=b0.f1 [ 1178.089155][ T5718] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.100647][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.100670][ T5718] usb 6-1: Product: syz [ 1178.100684][ T5718] usb 6-1: Manufacturer: syz [ 1178.100699][ T5718] usb 6-1: SerialNumber: syz [ 1179.550293][ T5718] usb 6-1: Could not find all expected endpoints [ 1181.010108][ T5718] usb 6-1: USB disconnect, device number 81 [ 1181.537972][ T61] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 1181.973446][T20228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1182.925310][ T4901] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1183.004013][ T4901] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1183.043690][ T4901] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1183.053943][ T4901] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1183.068765][ T4901] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1185.211111][ T4901] Bluetooth: hci2: command tx timeout [ 1187.196451][ T4901] Bluetooth: hci2: command tx timeout [ 1188.939977][T20836] FAULT_INJECTION: forcing a failure. [ 1188.939977][T20836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1188.940015][T20836] CPU: 1 UID: 0 PID: 20836 Comm: syz.0.4991 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 1188.940047][T20836] Tainted: [L]=SOFTLOCKUP [ 1188.940056][T20836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1188.940071][T20836] Call Trace: [ 1188.940080][T20836] [ 1188.940090][T20836] dump_stack_lvl+0xe8/0x150 [ 1188.940129][T20836] should_fail_ex+0x46b/0x600 [ 1188.940163][T20836] _copy_to_user+0x31/0xb0 [ 1188.940194][T20836] bpf_prog_test_run_syscall+0x343/0x4c0 [ 1188.940226][T20836] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1188.940262][T20836] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1188.940291][T20836] bpf_prog_test_run+0x2cb/0x340 [ 1188.940324][T20836] __sys_bpf+0xa22/0xd90 [ 1188.940359][T20836] ? __pfx___sys_bpf+0x10/0x10 [ 1188.940388][T20836] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1188.940423][T20836] ? rt_mutex_slowunlock+0x219/0x460 [ 1188.940466][T20836] ? ksys_write+0x248/0x270 [ 1188.940500][T20836] ? __pfx_ksys_write+0x10/0x10 [ 1188.940537][T20836] __x64_sys_bpf+0xba/0xd0 [ 1188.940571][T20836] do_syscall_64+0x166/0x520 [ 1188.940599][T20836] ? trace_irq_disable+0x3b/0x140 [ 1188.940622][T20836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.940645][T20836] ? clear_bhb_loop+0x70/0xc0 [ 1188.940672][T20836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.940695][T20836] RIP: 0033:0x7f5c8322e0d9 [ 1188.940726][T20836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1188.940744][T20836] RSP: 002b:00007f5c81486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1188.940767][T20836] RAX: ffffffffffffffda RBX: 00007f5c834b5fa0 RCX: 00007f5c8322e0d9 [ 1188.940783][T20836] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a [ 1188.940797][T20836] RBP: 00007f5c81486090 R08: 0000000000000000 R09: 0000000000000000 [ 1188.940811][T20836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1188.940824][T20836] R13: 00007f5c834b6038 R14: 00007f5c834b5fa0 R15: 00007ffd46f79d48 [ 1188.940857][T20836] [ 1189.173418][ T4901] Bluetooth: hci2: command tx timeout [ 1190.218667][T20846] FAULT_INJECTION: forcing a failure. [ 1190.218667][T20846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1190.218701][T20846] CPU: 1 UID: 0 PID: 20846 Comm: syz.3.4994 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 1190.218727][T20846] Tainted: [L]=SOFTLOCKUP [ 1190.218733][T20846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1190.218744][T20846] Call Trace: [ 1190.218753][T20846] [ 1190.218761][T20846] dump_stack_lvl+0xe8/0x150 [ 1190.218793][T20846] should_fail_ex+0x46b/0x600 [ 1190.218821][T20846] _copy_from_user+0x2d/0xb0 [ 1190.218847][T20846] do_ipv6_getsockopt+0x2c3/0x2510 [ 1190.218871][T20846] ? is_bpf_text_address+0x292/0x2b0 [ 1190.218900][T20846] ? kernel_text_address+0xa5/0xe0 [ 1190.218939][T20846] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 1190.218968][T20846] ? __lock_acquire+0x683/0x2ce0 [ 1190.218996][T20846] ? _parse_integer_limit+0x192/0x1e0 [ 1190.219036][T20846] ? __lock_acquire+0x683/0x2ce0 [ 1190.219062][T20846] ? kstrtouint+0x6e/0xe0 [ 1190.219094][T20846] ? get_pid_task+0x20/0x1f0 [ 1190.219128][T20846] ? __lock_acquire+0x683/0x2ce0 [ 1190.219161][T20846] ? __might_fault+0xaf/0x130 [ 1190.219190][T20846] ipv6_getsockopt+0xbd/0x2c0 [ 1190.219221][T20846] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 1190.219251][T20846] ? sock_common_getsockopt+0x2d/0xb0 [ 1190.219282][T20846] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1190.219312][T20846] do_sock_getsockopt+0x51d/0x7e0 [ 1190.219341][T20846] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1190.219377][T20846] ? __fget_files+0x3a8/0x420 [ 1190.219403][T20846] ? __fget_files+0x2a/0x420 [ 1190.219435][T20846] __x64_sys_getsockopt+0x1aa/0x250 [ 1190.219475][T20846] do_syscall_64+0x166/0x520 [ 1190.219501][T20846] ? trace_irq_disable+0x3b/0x140 [ 1190.219516][T20846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.219533][T20846] ? clear_bhb_loop+0x70/0xc0 [ 1190.219551][T20846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.219567][T20846] RIP: 0033:0x7fd4da2be0d9 [ 1190.219582][T20846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1190.219596][T20846] RSP: 002b:00007fd4d8516028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1190.219613][T20846] RAX: ffffffffffffffda RBX: 00007fd4da545fa0 RCX: 00007fd4da2be0d9 [ 1190.219625][T20846] RDX: 0000000000000006 RSI: 0000000000000029 RDI: 0000000000000003 [ 1190.219634][T20846] RBP: 00007fd4d8516090 R08: 0000200000000280 R09: 0000000000000000 [ 1190.219645][T20846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1190.219654][T20846] R13: 00007fd4da546038 R14: 00007fd4da545fa0 R15: 00007ffe79ad3f98 [ 1190.219678][T20846] [ 1191.065541][T20856] loop8: detected capacity change from 0 to 8 [ 1191.081580][T20856] Dev loop8: unable to read RDB block 8 [ 1191.081633][T20856] loop8: unable to read partition table [ 1191.081866][T20856] loop8: partition table beyond EOD, truncated [ 1191.081900][T20856] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1191.154182][ T4901] Bluetooth: hci2: command tx timeout [ 1194.635183][T20884] FAULT_INJECTION: forcing a failure. [ 1194.635183][T20884] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.635222][T20884] CPU: 1 UID: 0 PID: 20884 Comm: syz.5.5004 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 1194.635256][T20884] Tainted: [L]=SOFTLOCKUP [ 1194.635265][T20884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1194.635278][T20884] Call Trace: [ 1194.635287][T20884] [ 1194.635297][T20884] dump_stack_lvl+0xe8/0x150 [ 1194.635335][T20884] should_fail_ex+0x46b/0x600 [ 1194.635366][T20884] should_failslab+0xa8/0x100 [ 1194.635393][T20884] __kmalloc_noprof+0xfe/0x780 [ 1194.635418][T20884] ? bpf_test_init+0x9f/0x150 [ 1194.635441][T20884] ? bpf_test_init+0x9f/0x150 [ 1194.635490][T20884] bpf_test_init+0x9f/0x150 [ 1194.635519][T20884] bpf_prog_test_run_skb+0x31e/0x2230 [ 1194.635565][T20884] ? __fget_files+0x3a8/0x420 [ 1194.635594][T20884] ? __fget_files+0x2a/0x420 [ 1194.635628][T20884] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1194.635655][T20884] bpf_prog_test_run+0x2cb/0x340 [ 1194.635693][T20884] __sys_bpf+0xa22/0xd90 [ 1194.635729][T20884] ? __pfx___sys_bpf+0x10/0x10 [ 1194.635758][T20884] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1194.635793][T20884] ? rt_mutex_slowunlock+0x219/0x460 [ 1194.635836][T20884] ? ksys_write+0x248/0x270 [ 1194.635870][T20884] ? __pfx_ksys_write+0x10/0x10 [ 1194.635908][T20884] __x64_sys_bpf+0xba/0xd0 [ 1194.635936][T20884] do_syscall_64+0x166/0x520 [ 1194.635965][T20884] ? trace_irq_disable+0x3b/0x140 [ 1194.635988][T20884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.636013][T20884] ? clear_bhb_loop+0x70/0xc0 [ 1194.636042][T20884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.636066][T20884] RIP: 0033:0x7f9562e9e0d9 [ 1194.636088][T20884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1194.636107][T20884] RSP: 002b:00007f95610f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1194.636131][T20884] RAX: ffffffffffffffda RBX: 00007f9563125fa0 RCX: 00007f9562e9e0d9 [ 1194.636149][T20884] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 1194.636164][T20884] RBP: 00007f95610f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1194.636179][T20884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1194.636192][T20884] R13: 00007f9563126038 R14: 00007f9563125fa0 R15: 00007ffe58297d38 [ 1194.636229][T20884] [ 1195.256455][T20886] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1200.226400][T20913] netlink: 'syz.3.5010': attribute type 11 has an invalid length. [ 1200.324761][T20760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.324896][T20760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.325102][T20760] bridge_slave_0: entered allmulticast mode [ 1200.346905][T20760] bridge_slave_0: entered promiscuous mode [ 1200.406919][T20760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.407055][T20760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.407273][T20760] bridge_slave_1: entered allmulticast mode [ 1200.438388][T20760] bridge_slave_1: entered promiscuous mode [ 1200.574269][T17166] bridge_slave_1: left allmulticast mode [ 1200.574307][T17166] bridge_slave_1: left promiscuous mode [ 1200.574564][T17166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.747916][T17166] bridge_slave_0: left allmulticast mode [ 1200.747953][T17166] bridge_slave_0: left promiscuous mode [ 1200.748207][T17166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.405787][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1204.560300][T20948] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1205.536457][ T1247] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1205.542075][T17166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1205.623138][T17166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1205.665377][T17166] bond0 (unregistering): Released all slaves [ 1205.679381][ T1247] usb 5-1: Using ep0 maxpacket: 16 [ 1205.680242][ T1247] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 1205.681793][ T1247] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1205.681817][ T1247] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1205.681844][ T1247] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1205.681875][ T1247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.730418][ T1247] usb 5-1: config 0 descriptor?? [ 1205.962143][T20760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1205.985062][T20760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1206.062781][T20760] team0: Port device team_slave_0 added [ 1206.066582][T20760] team0: Port device team_slave_1 added [ 1206.222378][ T1247] usbhid 5-1:0.0: can't add hid device: -71 [ 1206.222510][ T1247] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1206.227572][ T1247] usb 5-1: USB disconnect, device number 121 [ 1206.293347][T20760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1206.293363][T20760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1206.293388][T20760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1206.374077][T20760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1206.374095][T20760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1206.374126][T20760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1206.774174][T20760] hsr_slave_0: entered promiscuous mode [ 1206.795169][T20760] hsr_slave_1: entered promiscuous mode [ 1206.796180][T20760] debugfs: 'hsr0' already exists in 'hsr' [ 1206.796203][T20760] Cannot create hsr debugfs directory [ 1206.841323][ T5690] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1206.984208][ T5690] usb 6-1: Using ep0 maxpacket: 8 [ 1206.985266][ T5690] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 1206.990300][ T5690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.990321][ T5690] usb 6-1: Product: syz [ 1206.990334][ T5690] usb 6-1: Manufacturer: syz [ 1206.990346][ T5690] usb 6-1: SerialNumber: syz [ 1207.057975][ T5690] usb 6-1: config 0 descriptor?? [ 1207.277966][ T5690] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1207.301207][ T5690] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1207.320103][ T5690] usb 6-1: USB disconnect, device number 82 [ 1207.501584][T17166] hsr_slave_0: left promiscuous mode [ 1207.594295][T17166] hsr_slave_1: left promiscuous mode [ 1207.595489][T17166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1207.672204][T17166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1210.195342][ T5697] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1210.438918][ T5697] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1210.588943][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.788032][ T5697] usb 4-1: config 0 descriptor?? [ 1210.959744][ T5697] usb 4-1: can't set config #0, error -71 [ 1211.065141][ T5697] usb 4-1: USB disconnect, device number 9 [ 1211.361710][ T4901] Bluetooth: hci1: unexpected event for opcode 0x0c1c [ 1211.451646][ T5697] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1211.594552][ T5697] usb 4-1: Using ep0 maxpacket: 32 [ 1211.599120][ T5697] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1211.599180][ T5697] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1211.600876][ T5697] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.600902][ T5697] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1211.737667][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.737698][ T5697] usb 4-1: Product: syz [ 1211.737718][ T5697] usb 4-1: Manufacturer: syz [ 1211.737736][ T5697] usb 4-1: SerialNumber: syz [ 1211.835469][ T5697] usb 4-1: selecting invalid altsetting 1 [ 1212.121144][T19521] udevd[19521]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1212.445757][T17166] team0 (unregistering): Port device team_slave_1 removed [ 1212.530127][T17166] team0 (unregistering): Port device team_slave_0 removed [ 1212.920533][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1213.942006][ T5697] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1214.146644][ T5690] usb 4-1: USB disconnect, device number 10 [ 1214.147174][ T7051] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1214.152142][ T5697] usb 6-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1214.153547][ T5697] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.153577][ T5697] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1214.153614][ T5697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.290639][ T7051] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1214.292253][ T7051] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.327903][T21035] FAULT_INJECTION: forcing a failure. [ 1214.327903][T21035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1214.327940][T21035] CPU: 1 UID: 0 PID: 21035 Comm: syz.3.5041 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 1214.327970][T21035] Tainted: [L]=SOFTLOCKUP [ 1214.327977][T21035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1214.327991][T21035] Call Trace: [ 1214.327999][T21035] [ 1214.328008][T21035] dump_stack_lvl+0xe8/0x150 [ 1214.328043][T21035] should_fail_ex+0x46b/0x600 [ 1214.328070][T21035] _copy_to_user+0x31/0xb0 [ 1214.328098][T21035] bpf_prog_test_run_raw_tp+0x604/0x840 [ 1214.328126][T21035] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 1214.328151][T21035] ? __fget_files+0x2a/0x420 [ 1214.328182][T21035] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 1214.328205][T21035] bpf_prog_test_run+0x2cb/0x340 [ 1214.328237][T21035] __sys_bpf+0xa22/0xd90 [ 1214.328270][T21035] ? __pfx___sys_bpf+0x10/0x10 [ 1214.328296][T21035] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1214.328328][T21035] ? rt_mutex_slowunlock+0x219/0x460 [ 1214.328365][T21035] ? ksys_write+0x248/0x270 [ 1214.328397][T21035] ? __pfx_ksys_write+0x10/0x10 [ 1214.328434][T21035] __x64_sys_bpf+0xba/0xd0 [ 1214.328467][T21035] do_syscall_64+0x166/0x520 [ 1214.328493][T21035] ? trace_irq_disable+0x3b/0x140 [ 1214.328513][T21035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.328534][T21035] ? clear_bhb_loop+0x70/0xc0 [ 1214.328560][T21035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.328583][T21035] RIP: 0033:0x7fd4da2be0d9 [ 1214.328600][T21035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1214.328614][T21035] RSP: 002b:00007fd4d8516028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1214.328632][T21035] RAX: ffffffffffffffda RBX: 00007fd4da545fa0 RCX: 00007fd4da2be0d9 [ 1214.328646][T21035] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 1214.328659][T21035] RBP: 00007fd4d8516090 R08: 0000000000000000 R09: 0000000000000000 [ 1214.328672][T21035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1214.328685][T21035] R13: 00007fd4da546038 R14: 00007fd4da545fa0 R15: 00007ffe79ad3f98 [ 1214.328717][T21035] [ 1214.435877][ T7051] usb 5-1: config 0 descriptor?? [ 1214.504356][ T7051] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1214.635087][ T5697] hid-picolcd 0003:04D8:C002.0016: unknown main item tag 0x0 [ 1214.635124][ T5697] hid-picolcd 0003:04D8:C002.0016: unknown main item tag 0x0 [ 1214.635150][ T5697] hid-picolcd 0003:04D8:C002.0016: unknown main item tag 0x0 [ 1214.635176][ T5697] hid-picolcd 0003:04D8:C002.0016: unknown main item tag 0x0 [ 1214.635203][ T5697] hid-picolcd 0003:04D8:C002.0016: unknown main item tag 0x0 [ 1214.635229][ T5697] hid-picolcd 0003:04D8:C002.0016: unknown main item tag 0x0 [ 1214.635254][ T5697] hid-picolcd 0003:04D8:C002.0016: unknown main item tag 0x0 [ 1214.635289][ T5697] hid-picolcd 0003:04D8:C002.0016: unknown main item tag 0x0 [ 1214.635317][ T5697] hid-picolcd 0003:04D8:C002.0016: unknown main item tag 0x0 [ 1214.635342][ T5697] hid-picolcd 0003:04D8:C002.0016: unknown main item tag 0x0 [ 1214.724519][ T5697] hid-picolcd 0003:04D8:C002.0016: No report with id 0x11 found [ 1214.879045][T21024] 9pnet_fd: Insufficient options for proto=fd [ 1215.010894][ T7051] gspca_sunplus: reg_w_riv err -71 [ 1215.010987][ T7051] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1215.040033][ T7051] usb 5-1: USB disconnect, device number 122 [ 1215.132778][ T5247] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1215.247833][ T5697] usb 6-1: USB disconnect, device number 83 [ 1215.678959][T21049] FAULT_INJECTION: forcing a failure. [ 1215.678959][T21049] name failslab, interval 1, probability 0, space 0, times 0 [ 1215.678999][T21049] CPU: 1 UID: 0 PID: 21049 Comm: syz.3.5043 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 1215.679032][T21049] Tainted: [L]=SOFTLOCKUP [ 1215.679041][T21049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1215.679055][T21049] Call Trace: [ 1215.679065][T21049] [ 1215.679075][T21049] dump_stack_lvl+0xe8/0x150 [ 1215.679115][T21049] should_fail_ex+0x46b/0x600 [ 1215.679147][T21049] should_failslab+0xa8/0x100 [ 1215.679188][T21049] __kmalloc_cache_noprof+0xa0/0x6b0 [ 1215.679213][T21049] ? __might_fault+0xaf/0x130 [ 1215.679234][T21049] ? io_ring_ctx_alloc+0x54/0xba0 [ 1215.679255][T21049] ? io_ring_ctx_alloc+0x54/0xba0 [ 1215.679286][T21049] io_ring_ctx_alloc+0x54/0xba0 [ 1215.679310][T21049] ? io_prepare_config+0x8c8/0xc70 [ 1215.679347][T21049] io_uring_create+0x50/0x990 [ 1215.679375][T21049] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1215.679407][T21049] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1215.679432][T21049] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1215.679482][T21049] ? __pfx_ksys_write+0x10/0x10 [ 1215.679528][T21049] do_syscall_64+0x166/0x520 [ 1215.679558][T21049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.679582][T21049] ? clear_bhb_loop+0x70/0xc0 [ 1215.679612][T21049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.679635][T21049] RIP: 0033:0x7fd4da2be0d9 [ 1215.679676][T21049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1215.679696][T21049] RSP: 002b:00007fd4d84d3ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1215.679719][T21049] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007fd4da2be0d9 [ 1215.679735][T21049] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 1215.679749][T21049] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000101 [ 1215.679763][T21049] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 1215.679777][T21049] R13: 0000200000000b10 R14: 00007fd4d84d3fd8 R15: 0000000000000000 [ 1215.679809][T21049] [ 1216.970740][T21056] FAULT_INJECTION: forcing a failure. [ 1216.970740][T21056] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.970780][T21056] CPU: 1 UID: 0 PID: 21056 Comm: syz.4.5044 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 1216.970812][T21056] Tainted: [L]=SOFTLOCKUP [ 1216.970821][T21056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1216.970835][T21056] Call Trace: [ 1216.970844][T21056] [ 1216.970855][T21056] dump_stack_lvl+0xe8/0x150 [ 1216.970894][T21056] should_fail_ex+0x46b/0x600 [ 1216.970924][T21056] should_failslab+0xa8/0x100 [ 1216.970954][T21056] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1216.970992][T21056] ? __alloc_skb+0x1db/0x7a0 [ 1216.971034][T21056] ? __alloc_skb+0x1db/0x7a0 [ 1216.971072][T21056] __alloc_skb+0x1db/0x7a0 [ 1216.971107][T21056] netlink_sendmsg+0x5d4/0xb40 [ 1216.971143][T21056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1216.971174][T21056] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1216.971204][T21056] ? __kernel_text_address+0xd/0x30 [ 1216.971227][T21056] ? unwind_get_return_address+0x4d/0x90 [ 1216.971256][T21056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1216.971281][T21056] sock_sendmsg_nosec+0x13a/0x180 [ 1216.971313][T21056] ____sys_sendmsg+0x565/0x870 [ 1216.971338][T21056] ? __might_fault+0xaf/0x130 [ 1216.971368][T21056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1216.971402][T21056] ? import_iovec+0x73/0xa0 [ 1216.971432][T21056] ___sys_sendmsg+0x2a5/0x360 [ 1216.971454][T21056] ? __lock_acquire+0x683/0x2ce0 [ 1216.971483][T21056] ? __pfx____sys_sendmsg+0x10/0x10 [ 1216.971547][T21056] ? __fget_files+0x2a/0x420 [ 1216.971573][T21056] ? __fget_files+0x3a8/0x420 [ 1216.971611][T21056] __x64_sys_sendmsg+0x1b7/0x290 [ 1216.971637][T21056] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1216.971683][T21056] do_syscall_64+0x166/0x520 [ 1216.971710][T21056] ? trace_irq_disable+0x3b/0x140 [ 1216.971731][T21056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.971752][T21056] ? clear_bhb_loop+0x70/0xc0 [ 1216.971776][T21056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.971796][T21056] RIP: 0033:0x7f50b7c6e0d9 [ 1216.971814][T21056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1216.971831][T21056] RSP: 002b:00007f50b5ec6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1216.971852][T21056] RAX: ffffffffffffffda RBX: 00007f50b7ef5fa0 RCX: 00007f50b7c6e0d9 [ 1216.971867][T21056] RDX: 0000000004000040 RSI: 0000200000000440 RDI: 0000000000000004 [ 1216.971881][T21056] RBP: 00007f50b5ec6090 R08: 0000000000000000 R09: 0000000000000000 [ 1216.971894][T21056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1216.971906][T21056] R13: 00007f50b7ef6038 R14: 00007f50b7ef5fa0 R15: 00007ffdedc16938 [ 1216.971937][T21056] [ 1218.232883][ T5697] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 1218.405549][ T5697] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1218.412086][ T5697] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.412112][ T5697] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1218.447013][ T5697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.447042][ T5697] usb 6-1: Product: syz [ 1218.447059][ T5697] usb 6-1: Manufacturer: syz [ 1218.447075][ T5697] usb 6-1: SerialNumber: syz [ 1218.483278][ T5697] usb 6-1: config 0 descriptor?? [ 1218.999284][ T1247] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1219.148238][ T1247] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1219.149954][ T1247] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.156582][ T1247] usb 4-1: config 0 descriptor?? [ 1219.230728][ T1247] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1220.026211][ T1247] gspca_sunplus: reg_w_riv err -71 [ 1220.026308][ T1247] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1221.278023][ T1247] usb 4-1: USB disconnect, device number 11 [ 1222.336015][ T5697] usb 6-1: USB disconnect, device number 84 [ 1222.361234][T21119] FAULT_INJECTION: forcing a failure. [ 1222.361234][T21119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1222.361262][T21119] CPU: 0 UID: 0 PID: 21119 Comm: syz.3.5062 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 1222.361285][T21119] Tainted: [L]=SOFTLOCKUP [ 1222.361291][T21119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1222.361301][T21119] Call Trace: [ 1222.361307][T21119] [ 1222.361314][T21119] dump_stack_lvl+0xe8/0x150 [ 1222.361343][T21119] should_fail_ex+0x46b/0x600 [ 1222.361365][T21119] _copy_to_user+0x31/0xb0 [ 1222.361386][T21119] simple_read_from_buffer+0xe1/0x170 [ 1222.361412][T21119] proc_fail_nth_read+0x1be/0x230 [ 1222.361438][T21119] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1222.361466][T21119] ? rw_verify_area+0x250/0x4d0 [ 1222.361490][T21119] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1222.361525][T21119] vfs_read+0x219/0xa90 [ 1222.361552][T21119] ? __pfx_vfs_read+0x10/0x10 [ 1222.361575][T21119] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1222.361598][T21119] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1222.361617][T21119] ? mutex_lock_nested+0x152/0x1d0 [ 1222.361640][T21119] ? fdget_pos+0x252/0x320 [ 1222.361666][T21119] ksys_read+0x156/0x270 [ 1222.361689][T21119] ? __pfx_ksys_read+0x10/0x10 [ 1222.361719][T21119] do_syscall_64+0x166/0x520 [ 1222.361756][T21119] ? trace_irq_disable+0x3b/0x140 [ 1222.361773][T21119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.361789][T21119] ? clear_bhb_loop+0x70/0xc0 [ 1222.361808][T21119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.361823][T21119] RIP: 0033:0x7fd4da27e90e [ 1222.361838][T21119] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1222.361851][T21119] RSP: 002b:00007fd4d8515fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1222.361868][T21119] RAX: ffffffffffffffda RBX: 00007fd4d85166c0 RCX: 00007fd4da27e90e [ 1222.361879][T21119] RDX: 000000000000000f RSI: 00007fd4d85160a0 RDI: 0000000000000003 [ 1222.361889][T21119] RBP: 00007fd4d8516090 R08: 0000000000000000 R09: 0000000000000000 [ 1222.361899][T21119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1222.361908][T21119] R13: 00007fd4da546038 R14: 00007fd4da545fa0 R15: 00007ffe79ad3f98 [ 1222.361932][T21119] [ 1226.617781][ T9] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1226.760226][ T9] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1226.762138][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.929551][ T9] usb 5-1: config 0 descriptor?? [ 1227.033417][ T9] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1227.315433][T21181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5077'. [ 1227.343835][ T9] gspca_sunplus: reg_w_riv err -71 [ 1227.343943][ T9] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1227.459463][T20760] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1227.473281][ T9] usb 5-1: USB disconnect, device number 123 [ 1227.511591][T20760] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1227.516487][T20760] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1227.841566][T20760] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1227.855954][T20760] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1227.996656][T20760] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1228.004906][T20760] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1228.062481][ T1247] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1228.142137][T20760] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1228.224452][ T1247] usb 4-1: Using ep0 maxpacket: 32 [ 1228.227727][ T1247] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1228.227794][ T1247] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1228.230660][ T1247] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.230684][ T1247] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1228.294861][ T1247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.294891][ T1247] usb 4-1: Product: syz [ 1228.294908][ T1247] usb 4-1: Manufacturer: syz [ 1228.294924][ T1247] usb 4-1: SerialNumber: syz [ 1228.339038][ T1247] usb 4-1: selecting invalid altsetting 1 [ 1231.249922][T21154] udevd[21154]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1231.501626][T20760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1231.680726][T20760] 8021q: adding VLAN 0 to HW filter on device team0 [ 1231.717867][T17166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.718001][T17166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1231.783626][T17739] usb 4-1: USB disconnect, device number 12 [ 1231.816825][T17166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.816965][T17166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1234.610881][T21269] FAULT_INJECTION: forcing a failure. [ 1234.610881][T21269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1234.611955][T21269] CPU: 1 UID: 0 PID: 21269 Comm: syz.0.5094 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 1234.611987][T21269] Tainted: [L]=SOFTLOCKUP [ 1234.611995][T21269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1234.612008][T21269] Call Trace: [ 1234.612016][T21269] [ 1234.612025][T21269] dump_stack_lvl+0xe8/0x150 [ 1234.612061][T21269] should_fail_ex+0x46b/0x600 [ 1234.612091][T21269] _copy_to_user+0x31/0xb0 [ 1234.612127][T21269] simple_read_from_buffer+0xe1/0x170 [ 1234.612160][T21269] proc_fail_nth_read+0x1be/0x230 [ 1234.612194][T21269] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1234.612228][T21269] ? rw_verify_area+0x250/0x4d0 [ 1234.612259][T21269] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1234.612289][T21269] vfs_read+0x219/0xa90 [ 1234.612344][T21269] ? __pfx_vfs_read+0x10/0x10 [ 1234.612377][T21269] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1234.612413][T21269] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1234.612441][T21269] ? mutex_lock_nested+0x152/0x1d0 [ 1234.612476][T21269] ? fdget_pos+0x252/0x320 [ 1234.612515][T21269] ksys_read+0x156/0x270 [ 1234.612548][T21269] ? __pfx_ksys_read+0x10/0x10 [ 1234.612592][T21269] do_syscall_64+0x166/0x520 [ 1234.612620][T21269] ? trace_irq_disable+0x3b/0x140 [ 1234.612643][T21269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.612667][T21269] ? clear_bhb_loop+0x70/0xc0 [ 1234.612694][T21269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.612717][T21269] RIP: 0033:0x7f5c831ee90e [ 1234.612738][T21269] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1234.612757][T21269] RSP: 002b:00007f5c81464fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1234.612782][T21269] RAX: ffffffffffffffda RBX: 00007f5c814656c0 RCX: 00007f5c831ee90e [ 1234.612799][T21269] RDX: 000000000000000f RSI: 00007f5c814650a0 RDI: 0000000000000004 [ 1234.612814][T21269] RBP: 00007f5c81465090 R08: 0000000000000000 R09: 0000000000000000 [ 1234.612828][T21269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1234.612841][T21269] R13: 00007f5c834b6128 R14: 00007f5c834b6090 R15: 00007ffd46f79d48 [ 1234.612877][T21269] [ 1235.620691][T20760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1236.996599][T20760] veth0_vlan: entered promiscuous mode [ 1237.020903][T20760] veth1_vlan: entered promiscuous mode [ 1237.094578][T20760] veth0_macvtap: entered promiscuous mode [ 1237.735334][ T4901] Bluetooth: Unexpected start frame (len 10) [ 1238.356248][T21315] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1239.566320][T20760] veth1_macvtap: entered promiscuous mode [ 1241.893144][T21118] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1242.036462][T21118] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1242.038983][T21118] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1242.039027][T21118] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.068783][T21118] usb 6-1: config 0 descriptor?? [ 1243.818249][ T4901] Bluetooth: hci1: Invalid handle: 0x1c00 > 0x0eff [ 1244.291216][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1244.375535][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1244.378805][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1244.387787][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1244.392020][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1245.570074][ T7051] usb 6-1: USB disconnect, device number 85 [ 1246.626177][ T61] Bluetooth: hci4: command tx timeout [ 1247.873532][T21356] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1248.620597][ T61] Bluetooth: hci4: command tx timeout [ 1248.997275][ T61] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1249.225118][T21369] C: renamed from veth1_to_team (while UP) [ 1249.335303][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1249.352847][T21369] netlink: 'syz.5.5113': attribute type 8 has an invalid length. [ 1249.353996][T21369] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1249.474991][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1249.478338][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1249.478393][ T9] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1249.481405][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.481429][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1249.536603][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.536649][ T9] usb 4-1: Product: syz [ 1249.536665][ T9] usb 4-1: Manufacturer: syz [ 1249.536681][ T9] usb 4-1: SerialNumber: syz [ 1249.610251][ T9] usb 4-1: selecting invalid altsetting 1 [ 1249.967181][T21368] udevd[21368]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1249.967932][T21380] overlayfs: failed to resolve 'uuid=auto': -2 [ 1250.155678][T21384] Invalid ELF header magic: != ELF [ 1250.598236][ T61] Bluetooth: hci4: command tx timeout [ 1250.870365][ T61] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 1251.838054][ T61] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1252.019147][T17739] usb 4-1: USB disconnect, device number 13 [ 1252.572938][ T61] Bluetooth: hci4: command tx timeout [ 1252.807861][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 1253.187399][T21336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.187532][T21336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.187720][T21336] bridge_slave_0: entered allmulticast mode [ 1253.221500][T21336] bridge_slave_0: entered promiscuous mode [ 1253.224844][T21336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.224961][T21336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.225166][T21336] bridge_slave_1: entered allmulticast mode [ 1253.259587][T21336] bridge_slave_1: entered promiscuous mode [ 1253.332652][T21336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1253.336338][T21336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1253.476409][T21336] team0: Port device team_slave_0 added [ 1254.017310][T21336] team0: Port device team_slave_1 added [ 1254.530141][T21336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1254.530160][T21336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1254.530191][T21336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1254.575360][ T5697] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1254.723270][ T5697] usb 5-1: Using ep0 maxpacket: 32 [ 1254.739608][T21336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1254.739626][T21336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1254.739914][T21336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1254.756347][ T5697] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1254.756401][ T5697] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1254.769162][ T5697] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.769189][ T5697] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1254.843439][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.843465][ T5697] usb 5-1: Product: syz [ 1254.843479][ T5697] usb 5-1: Manufacturer: syz [ 1254.843494][ T5697] usb 5-1: SerialNumber: syz [ 1254.892245][ T5697] usb 5-1: selecting invalid altsetting 1 [ 1254.962156][T21439] syz.5.5130 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 1254.962199][T21439] CPU: 0 UID: 0 PID: 21439 Comm: syz.5.5130 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 1254.962230][T21439] Tainted: [L]=SOFTLOCKUP [ 1254.962238][T21439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1254.962252][T21439] Call Trace: [ 1254.962261][T21439] [ 1254.962271][T21439] dump_stack_lvl+0xe8/0x150 [ 1254.962309][T21439] dump_header+0xd3/0x4b0 [ 1254.962343][T21439] oom_kill_process+0x3ab/0x9e0 [ 1254.962377][T21439] out_of_memory+0x1064/0x1480 [ 1254.962420][T21439] ? __pfx_out_of_memory+0x10/0x10 [ 1254.962448][T21439] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1254.962479][T21439] ? _mutex_lock_killable+0x152/0x1d0 [ 1254.962514][T21439] ? try_charge_memcg+0xbbe/0x15c0 [ 1254.962543][T21439] try_charge_memcg+0xc7d/0x15c0 [ 1254.962587][T21439] ? __pfx_try_charge_memcg+0x10/0x10 [ 1254.962623][T21439] ? percpu_ref_tryget+0x15/0x180 [ 1254.962663][T21439] ? __memcg_kmem_charge_page+0x1ab/0x5a0 [ 1254.962704][T21439] __memcg_kmem_charge_page+0x36c/0x5a0 [ 1254.962740][T21439] ? __memcg_kmem_charge_page+0x1ab/0x5a0 [ 1254.962779][T21439] __alloc_frozen_pages_noprof+0x263/0x5c0 [ 1254.962809][T21439] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1254.962841][T21439] ? __pfx_policy_nodemask+0x10/0x10 [ 1254.962868][T21439] ? __lock_acquire+0x683/0x2ce0 [ 1254.962903][T21439] alloc_pages_mpol+0xd4/0x280 [ 1254.962942][T21439] alloc_pages_noprof+0xd2/0x2f0 [ 1254.962974][T21439] pte_alloc_one+0x22/0x380 [ 1254.963002][T21439] do_pte_missing+0x128d/0x28f0 [ 1254.963045][T21439] handle_mm_fault+0xe81/0x2690 [ 1254.963084][T21439] ? lock_vma_under_rcu+0x1d1/0x500 [ 1254.963109][T21439] ? handle_mm_fault+0xed/0x2690 [ 1254.963156][T21439] ? __pfx_handle_mm_fault+0x10/0x10 [ 1254.963188][T21439] ? lock_vma_under_rcu+0x45a/0x500 [ 1254.963243][T21439] do_user_addr_fault+0xa4f/0x1340 [ 1254.963288][T21439] ? trace_page_fault_user+0x84/0x1e0 [ 1254.963326][T21439] exc_page_fault+0x6a/0xc0 [ 1254.963356][T21439] asm_exc_page_fault+0x26/0x30 [ 1254.963379][T21439] RIP: 0033:0x7f9562d72900 [ 1254.963401][T21439] Code: ff 48 83 e8 01 48 89 de bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 d9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 40 40 00 00 0f 85 1f fe ff ff e9 d3 fd ff ff 0f 1f 44 [ 1254.963421][T21439] RSP: 002b:00007ffe58297d80 EFLAGS: 00010246 [ 1254.963442][T21439] RAX: 000000110c434000 RBX: ffffffff8b522643 RCX: 0000000000000000 [ 1254.963458][T21439] RDX: 0000000000000643 RSI: 0000000000000899 RDI: 0000000000000001 [ 1254.963472][T21439] RBP: 0000000000000000 R08: 00007f9563110000 R09: 00007f9563112000 [ 1254.963487][T21439] R10: 000000008b522647 R11: 0000000000000019 R12: 00007f9563126038 [ 1254.963503][T21439] R13: 000000000000009e R14: ffffffff8b522d2f R15: 00007f9563c55720 [ 1254.963520][T21439] ? schedule_timeout+0x8f/0x2c0 [ 1254.963547][T21439] ? do_nanosleep+0x363/0x720 [ 1254.963584][T21439] [ 1254.963610][T21439] memory: usage 0kB, limit 0kB, failcnt 19 [ 1254.963625][T21439] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1254.963654][T21439] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1254.963667][T21439] Memory cgroup stats for /syz5/test: [ 1254.963946][T21439] cache 0 [ 1254.963958][T21439] rss 0 [ 1254.963966][T21439] shmem 0 [ 1254.963973][T21439] mapped_file 0 [ 1254.963981][T21439] dirty 0 [ 1254.963988][T21439] writeback 0 [ 1254.963996][T21439] workingset_refault_anon 0 [ 1254.964005][T21439] workingset_refault_file 0 [ 1254.964014][T21439] swap 0 [ 1254.964022][T21439] swapcached 0 [ 1254.964030][T21439] pgpgin 0 [ 1254.964037][T21439] pgpgout 0 [ 1254.964045][T21439] pgfault 0 [ 1254.964053][T21439] pgmajfault 0 [ 1254.964066][T21439] inactive_anon 0 [ 1254.964074][T21439] active_anon 0 [ 1254.964082][T21439] inactive_file 0 [ 1254.964090][T21439] active_file 0 [ 1254.964099][T21439] unevictable 0 [ 1254.964107][T21439] hierarchical_memory_limit 0 [ 1254.964116][T21439] hierarchical_memsw_limit 9223372036854771712 [ 1254.964126][T21439] total_cache 0 [ 1254.964134][T21439] total_rss 0 [ 1254.964142][T21439] total_shmem 0 [ 1254.964152][T21439] total_mapped_file 0 [ 1254.964161][T21439] total_dirty 0 [ 1254.964169][T21439] total_writeback 0 [ 1254.964177][T21439] total_workingset_refault_anon 0 [ 1254.964187][T21439] total_workingset_refault_file 0 [ 1254.964196][T21439] total_swap 0 [ 1254.964204][T21439] total_swapcached 0 [ 1254.964213][T21439] total_pgpgin 0 [ 1254.964221][T21439] total_pgpgout 0 [ 1254.964233][T21439] total_pgfault 0 [ 1254.964240][T21439] total_pgmajfault 0 [ 1254.964249][T21439] total_inactive_anon 0 [ 1254.964257][T21439] total_active_anon 0 [ 1254.964265][T21439] total_inactive_file 0 [ 1254.964273][T21439] total_active_file 0 [ 1254.964282][T21439] total_unevictable 0 [ 1254.964290][T21439] anon_cost 0 [ 1254.964297][T21439] file_cost 0 [ 1254.964306][T21439] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.5130,pid=21439,uid=0 [ 1255.574717][T21439] Memory cgroup out of memory: Killed process 21439 (syz.5.5130) total-vm:107636kB, anon-rss:1456kB, file-rss:28016kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1256.090226][T21406] udevd[21406]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1256.358929][T21472] FAULT_INJECTION: forcing a failure. [ 1256.358929][T21472] name failslab, interval 1, probability 0, space 0, times 0 [ 1256.358958][T21472] CPU: 0 UID: 0 PID: 21472 Comm: syz.5.5135 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 1256.358980][T21472] Tainted: [L]=SOFTLOCKUP [ 1256.358986][T21472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1256.358996][T21472] Call Trace: [ 1256.359003][T21472] [ 1256.359010][T21472] dump_stack_lvl+0xe8/0x150 [ 1256.359040][T21472] should_fail_ex+0x46b/0x600 [ 1256.359062][T21472] should_failslab+0xa8/0x100 [ 1256.359082][T21472] __kmalloc_cache_node_noprof+0xa9/0x6b0 [ 1256.359101][T21472] ? __get_vm_area_node+0x155/0x2f0 [ 1256.359123][T21472] ? __get_vm_area_node+0x155/0x2f0 [ 1256.359152][T21472] __get_vm_area_node+0x155/0x2f0 [ 1256.359174][T21472] ? __lock_acquire+0x683/0x2ce0 [ 1256.359196][T21472] __vmalloc_node_range_noprof+0x34e/0x1560 [ 1256.359222][T21472] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1256.359255][T21472] ? __lock_acquire+0x683/0x2ce0 [ 1256.359279][T21472] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1256.359305][T21472] ? kernel_text_address+0xa5/0xe0 [ 1256.359326][T21472] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1256.359343][T21472] __vmalloc_noprof+0xd2/0x120 [ 1256.359368][T21472] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1256.359389][T21472] bpf_prog_alloc_no_stats+0x47/0x560 [ 1256.359407][T21472] ? bpf_prog_alloc+0x2a/0x1a0 [ 1256.359428][T21472] bpf_prog_alloc+0x3c/0x1a0 [ 1256.359448][T21472] bpf_prog_load+0x7f8/0x1c20 [ 1256.359486][T21472] ? __pfx_bpf_prog_load+0x10/0x10 [ 1256.359524][T21472] __sys_bpf+0xd0d/0xd90 [ 1256.359549][T21472] ? __pfx___sys_bpf+0x10/0x10 [ 1256.359569][T21472] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1256.359593][T21472] ? rt_mutex_slowunlock+0x219/0x460 [ 1256.359635][T21472] ? ksys_write+0x248/0x270 [ 1256.359659][T21472] ? __pfx_ksys_write+0x10/0x10 [ 1256.359678][T21472] ? fput+0xa0/0xd0 [ 1256.359697][T21472] __x64_sys_bpf+0xba/0xd0 [ 1256.359716][T21472] do_syscall_64+0x166/0x520 [ 1256.359736][T21472] ? trace_irq_disable+0x3b/0x140 [ 1256.359821][T21472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.359845][T21472] ? clear_bhb_loop+0x70/0xc0 [ 1256.359865][T21472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.359881][T21472] RIP: 0033:0x7f9562e9e0d9 [ 1256.359897][T21472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1256.359911][T21472] RSP: 002b:00007f95610f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1256.359927][T21472] RAX: ffffffffffffffda RBX: 00007f9563125fa0 RCX: 00007f9562e9e0d9 [ 1256.359938][T21472] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1256.359949][T21472] RBP: 00007f95610f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1256.359958][T21472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1256.359968][T21472] R13: 00007f9563126038 R14: 00007f9563125fa0 R15: 00007ffe58297d38 [ 1256.359991][T21472] [ 1256.360143][T21472] syz.5.5135: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1256.360547][T21472] CPU: 0 UID: 0 PID: 21472 Comm: syz.5.5135 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 1256.360578][T21472] Tainted: [L]=SOFTLOCKUP [ 1256.360586][T21472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1256.360598][T21472] Call Trace: [ 1256.360607][T21472] [ 1256.360617][T21472] dump_stack_lvl+0xe8/0x150 [ 1256.360663][T21472] warn_alloc+0x24d/0x270 [ 1256.360695][T21472] ? __kasan_kmalloc+0x22/0xb0 [ 1256.360720][T21472] ? __pfx_warn_alloc+0x10/0x10 [ 1256.360764][T21472] ? __get_vm_area_node+0x155/0x2f0 [ 1256.360796][T21472] ? __get_vm_area_node+0x2a9/0x2f0 [ 1256.360820][T21472] ? __lock_acquire+0x683/0x2ce0 [ 1256.360847][T21472] __vmalloc_node_range_noprof+0x376/0x1560 [ 1256.360892][T21472] ? __lock_acquire+0x683/0x2ce0 [ 1256.360921][T21472] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1256.360952][T21472] ? kernel_text_address+0xa5/0xe0 [ 1256.360978][T21472] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1256.361000][T21472] __vmalloc_noprof+0xd2/0x120 [ 1256.361048][T21472] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1256.361076][T21472] bpf_prog_alloc_no_stats+0x47/0x560 [ 1256.361100][T21472] ? bpf_prog_alloc+0x2a/0x1a0 [ 1256.361137][T21472] bpf_prog_alloc+0x3c/0x1a0 [ 1256.361162][T21472] bpf_prog_load+0x7f8/0x1c20 [ 1256.361196][T21472] ? __pfx_bpf_prog_load+0x10/0x10 [ 1256.361242][T21472] __sys_bpf+0xd0d/0xd90 [ 1256.361273][T21472] ? __pfx___sys_bpf+0x10/0x10 [ 1256.361298][T21472] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1256.361329][T21472] ? rt_mutex_slowunlock+0x219/0x460 [ 1256.361366][T21472] ? ksys_write+0x248/0x270 [ 1256.361396][T21472] ? __pfx_ksys_write+0x10/0x10 [ 1256.361438][T21472] ? fput+0xa0/0xd0 [ 1256.361466][T21472] __x64_sys_bpf+0xba/0xd0 [ 1256.361490][T21472] do_syscall_64+0x166/0x520 [ 1256.361515][T21472] ? trace_irq_disable+0x3b/0x140 [ 1256.361535][T21472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.361556][T21472] ? clear_bhb_loop+0x70/0xc0 [ 1256.361580][T21472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.361600][T21472] RIP: 0033:0x7f9562e9e0d9 [ 1256.361628][T21472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1256.361645][T21472] RSP: 002b:00007f95610f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1256.361682][T21472] RAX: ffffffffffffffda RBX: 00007f9563125fa0 RCX: 00007f9562e9e0d9 [ 1256.361698][T21472] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1256.361712][T21472] RBP: 00007f95610f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1256.361738][T21472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1256.361750][T21472] R13: 00007f9563126038 R14: 00007f9563125fa0 R15: 00007ffe58297d38 [ 1256.361783][T21472] [ 1256.361803][T21472] Mem-Info: [ 1256.361812][T21472] active_anon:203 inactive_anon:23299 isolated_anon:0 [ 1256.361812][T21472] active_file:26453 inactive_file:39782 isolated_file:0 [ 1256.361812][T21472] unevictable:0 dirty:195 writeback:0 [ 1256.361812][T21472] slab_reclaimable:12935 slab_unreclaimable:111735 [ 1256.361812][T21472] mapped:32730 shmem:16994 pagetables:1599 [ 1256.361812][T21472] sec_pagetables:0 bounce:0 [ 1256.361812][T21472] kernel_misc_reclaimable:0 [ 1256.361812][T21472] free:845105 free_pcp:6157 free_cma:0 [ 1256.361868][T21472] Node 0 active_anon:812kB inactive_anon:93196kB active_file:105608kB inactive_file:159128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130920kB dirty:776kB writeback:0kB shmem:67976kB kernel_stack:14652kB pagetables:6292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1256.361920][T21472] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1256.361996][T21472] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1256.362055][T21472] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 1256.362090][T21472] Node 0 DMA32 free:211972kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:812kB inactive_anon:93196kB active_file:105608kB inactive_file:159128kB unevictable:0kB writepending:776kB zspages:388kB present:3129332kB managed:2559548kB mlocked:0kB bounce:0kB free_pcp:24620kB local_pcp:18608kB free_cma:0kB [ 1256.362151][T21472] lowmem_reserve[]: 0 0 1 1 1 [ 1256.362191][T21472] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1840kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1256.362249][T21472] lowmem_reserve[]: 0 0 0 0 0 [ 1256.362283][T21472] Node 1 Normal free:3153088kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1256.362344][T21472] lowmem_reserve[]: 0 0 0 0 0 [ 1256.362377][T21472] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 1256.362498][T21472] Node 0 DMA32: 1599*4kB (UM) 1365*8kB (UME) 1104*16kB (UME) 543*32kB (UME) 434*64kB (UME) 56*128kB (UME) 61*256kB (UM) 27*512kB (UM) 21*1024kB (UME) 12*2048kB (ME) 12*4096kB (UM) = 211972kB [ 1256.362662][T21472] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1256.362764][T21472] Node 1 Normal: 0*4kB 4*8kB (UM) 2*16kB (UM) 4*32kB (UM) 10*64kB (UM) 5*128kB (UM) 3*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 768*4096kB (UM) = 3153088kB [ 1256.362907][T21472] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1256.362923][T21472] Node 0 hugepages_total=384 hugepages_free=384 hugepages_surp=0 hugepages_size=2048kB [ 1256.362940][T21472] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1256.362954][T21472] Node 1 hugepages_total=384 hugepages_free=384 hugepages_surp=0 hugepages_size=2048kB [ 1256.362970][T21472] 83225 total pagecache pages [ 1256.362978][T21472] 0 pages in swap cache [ 1256.362985][T21472] Free swap = 124872kB [ 1256.362992][T21472] Total swap = 124996kB [ 1256.363000][T21472] 2097051 pages RAM [ 1256.363007][T21472] 0 pages HighMem/MovableOnly [ 1256.363023][T21472] 425089 pages reserved [ 1256.363030][T21472] 0 pages cma reserved [ 1256.514559][T17157] bridge_slave_1: left allmulticast mode [ 1256.514597][T17157] bridge_slave_1: left promiscuous mode [ 1256.514887][T17157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.636942][ T7051] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1256.846514][ T7051] usb 4-1: Using ep0 maxpacket: 32 [ 1256.885988][T17157] bridge_slave_0: left allmulticast mode [ 1256.886074][T17157] bridge_slave_0: left promiscuous mode [ 1256.888741][T17157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.892874][ T7051] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1256.949006][ T7051] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.062211][T21474] FAULT_INJECTION: forcing a failure. [ 1257.062211][T21474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1257.063882][T21474] CPU: 0 UID: 0 PID: 21474 Comm: syz.5.5136 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 1257.063975][T21474] Tainted: [L]=SOFTLOCKUP [ 1257.063996][T21474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1257.064038][T21474] Call Trace: [ 1257.064060][T21474] [ 1257.064082][T21474] dump_stack_lvl+0xe8/0x150 [ 1257.064183][T21474] should_fail_ex+0x46b/0x600 [ 1257.064275][T21474] _copy_from_user+0x2d/0xb0 [ 1257.064348][T21474] ____sys_sendmsg+0x31b/0x870 [ 1257.064411][T21474] ? __might_fault+0xaf/0x130 [ 1257.064485][T21474] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1257.064569][T21474] ? import_iovec+0x73/0xa0 [ 1257.064600][T21474] ___sys_sendmsg+0x2a5/0x360 [ 1257.064622][T21474] ? __lock_acquire+0x683/0x2ce0 [ 1257.064651][T21474] ? __pfx____sys_sendmsg+0x10/0x10 [ 1257.064711][T21474] ? __fget_files+0x2a/0x420 [ 1257.064739][T21474] ? __fget_files+0x3a8/0x420 [ 1257.064779][T21474] __x64_sys_sendmsg+0x1b7/0x290 [ 1257.064816][T21474] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1257.064862][T21474] do_syscall_64+0x166/0x520 [ 1257.064889][T21474] ? trace_irq_disable+0x3b/0x140 [ 1257.064910][T21474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.064932][T21474] ? clear_bhb_loop+0x70/0xc0 [ 1257.064958][T21474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.064979][T21474] RIP: 0033:0x7f9562e9e0d9 [ 1257.064998][T21474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1257.065017][T21474] RSP: 002b:00007f95610f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1257.065038][T21474] RAX: ffffffffffffffda RBX: 00007f9563125fa0 RCX: 00007f9562e9e0d9 [ 1257.065053][T21474] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1257.065067][T21474] RBP: 00007f95610f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1257.065098][T21474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1257.065140][T21474] R13: 00007f9563126038 R14: 00007f9563125fa0 R15: 00007ffe58297d38 [ 1257.065251][T21474] [ 1257.446670][ T7051] usb 4-1: config 0 descriptor?? [ 1257.666576][ T7051] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1257.720302][ T5697] usb 5-1: USB disconnect, device number 124 [ 1257.885812][T21480] FAULT_INJECTION: forcing a failure. [ 1257.885812][T21480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1257.885854][T21480] CPU: 0 UID: 0 PID: 21480 Comm: syz.5.5138 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 1257.885883][T21480] Tainted: [L]=SOFTLOCKUP [ 1257.885891][T21480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1257.885904][T21480] Call Trace: [ 1257.885912][T21480] [ 1257.885921][T21480] dump_stack_lvl+0xe8/0x150 [ 1257.885956][T21480] should_fail_ex+0x46b/0x600 [ 1257.885985][T21480] _copy_from_user+0x2d/0xb0 [ 1257.886012][T21480] kstrtouint_from_user+0xd6/0x180 [ 1257.886057][T21480] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1257.886088][T21480] ? __lock_acquire+0x683/0x2ce0 [ 1257.886127][T21480] proc_fail_nth_write+0x8e/0x210 [ 1257.886159][T21480] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1257.886198][T21480] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1257.886228][T21480] vfs_write+0x29f/0xbb0 [ 1257.886266][T21480] ? __pfx_vfs_write+0x10/0x10 [ 1257.886298][T21480] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1257.886327][T21480] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1257.886353][T21480] ? mutex_lock_nested+0x152/0x1d0 [ 1257.886386][T21480] ? fdget_pos+0x252/0x320 [ 1257.886421][T21480] ksys_write+0x156/0x270 [ 1257.886453][T21480] ? __pfx_ksys_write+0x10/0x10 [ 1257.886493][T21480] do_syscall_64+0x166/0x520 [ 1257.886520][T21480] ? trace_irq_disable+0x3b/0x140 [ 1257.886541][T21480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.886577][T21480] ? clear_bhb_loop+0x70/0xc0 [ 1257.886609][T21480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.886630][T21480] RIP: 0033:0x7f9562e5e90e [ 1257.886669][T21480] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1257.886689][T21480] RSP: 002b:00007f95610f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1257.886714][T21480] RAX: ffffffffffffffda RBX: 00007f95610f66c0 RCX: 00007f9562e5e90e [ 1257.886733][T21480] RDX: 0000000000000001 RSI: 00007f95610f60a0 RDI: 0000000000000004 [ 1257.886749][T21480] RBP: 00007f95610f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1257.886764][T21480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1257.886777][T21480] R13: 00007f9563126038 R14: 00007f9563125fa0 R15: 00007ffe58297d38 [ 1257.886815][T21480] [ 1258.390903][ T7051] gspca_vc032x: reg_w err -71 [ 1258.390990][ T7051] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.391002][ T7051] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.391013][ T7051] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.391022][ T7051] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.391032][ T7051] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.391042][ T7051] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.391052][ T7051] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.391061][ T7051] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.391071][ T7051] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.391080][ T7051] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.391090][ T7051] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.391100][ T7051] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.391109][ T7051] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.391119][ T7051] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.391128][ T7051] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.391138][ T7051] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.391147][ T7051] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.391156][ T7051] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.391166][ T7051] gspca_vc032x: Unknown sensor... [ 1258.391248][ T7051] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1258.395652][ T7051] usb 4-1: USB disconnect, device number 14 [ 1260.810909][T17157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1260.866315][T17157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1260.906433][T17157] bond0 (unregistering): Released all slaves [ 1260.929963][T21336] hsr_slave_0: entered promiscuous mode [ 1260.930859][T21336] hsr_slave_1: entered promiscuous mode [ 1260.931569][T21336] debugfs: 'hsr0' already exists in 'hsr' [ 1260.931587][T21336] Cannot create hsr debugfs directory [ 1260.960428][T21500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5144'. [ 1260.960451][T21500] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5144'. [ 1261.637036][ T9] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1261.657231][T17157] hsr_slave_0: left promiscuous mode [ 1261.695482][T17157] hsr_slave_1: left promiscuous mode [ 1261.696801][T17157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1261.757614][T17157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1261.781831][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1261.784772][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1261.784830][ T9] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1261.786512][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.786538][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1261.810489][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.810561][ T9] usb 5-1: Product: syz [ 1261.810604][ T9] usb 5-1: Manufacturer: syz [ 1261.810646][ T9] usb 5-1: SerialNumber: syz [ 1261.925315][ T9] usb 5-1: selecting invalid altsetting 1 [ 1262.194073][T17157] veth1_macvtap: left promiscuous mode [ 1262.194174][T17157] veth0_macvtap: left promiscuous mode [ 1262.194458][T17157] veth1_vlan: left promiscuous mode [ 1262.194659][T17157] veth0_vlan: left promiscuous mode [ 1262.291544][T21406] udevd[21406]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1265.190149][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1265.348740][T17739] usb 5-1: USB disconnect, device number 125 [ 1269.372808][T17157] team0 (unregistering): Port device team_slave_1 removed [ 1269.458240][T17157] team0 (unregistering): Port device team_slave_0 removed [ 1269.756106][T21524] ip6gretap0: entered promiscuous mode [ 1269.799795][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1269.800531][T21553] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1269.845490][T21566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5159'. [ 1269.845513][T21566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5159'. [ 1273.097904][T17175] nvmet: connect request for invalid subsystem testsubsys! [ 1273.098106][T21583] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1273.452236][T21598] can: request_module (can-proto-0) failed. [ 1273.503254][T21600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5168'. [ 1273.503283][T21600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5168'. [ 1273.900583][T21609] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1274.207722][T21603] sock: sock_timestamping_bind_phc: sock not bind to device [ 1274.630265][ T5247] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1274.697783][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 1274.697801][ T37] audit: type=1326 audit(1787359403.217:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21620 comm="syz.3.5173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4da2be0d9 code=0x7ffc0000 [ 1274.697853][ T37] audit: type=1326 audit(1787359403.217:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21620 comm="syz.3.5173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fd4da2be0d9 code=0x7ffc0000 [ 1274.697902][ T37] audit: type=1326 audit(1787359403.217:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21620 comm="syz.3.5173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4da2be0d9 code=0x7ffc0000 [ 1274.698787][ T37] audit: type=1326 audit(1787359403.217:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21620 comm="syz.3.5173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4da2be0d9 code=0x7ffc0000 [ 1274.698986][ T37] audit: type=1326 audit(1787359403.217:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21620 comm="syz.3.5173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd4da2be0d9 code=0x7ffc0000 [ 1274.699194][ T37] audit: type=1326 audit(1787359403.217:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21620 comm="syz.3.5173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4da2be0d9 code=0x7ffc0000 [ 1274.699800][ T37] audit: type=1326 audit(1787359403.217:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21620 comm="syz.3.5173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4da2be0d9 code=0x7ffc0000 [ 1274.700031][ T37] audit: type=1326 audit(1787359403.217:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21620 comm="syz.3.5173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4da2be0d9 code=0x7ffc0000 [ 1274.700681][ T37] audit: type=1326 audit(1787359403.217:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21620 comm="syz.3.5173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4da2be0d9 code=0x7ffc0000 [ 1274.700932][ T37] audit: type=1326 audit(1787359403.217:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21620 comm="syz.3.5173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4da2be0d9 code=0x7ffc0000 [ 1274.704391][T21621] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5173'. [ 1275.250844][T21631] EXT4-fs (loop6): unable to read superblock [ 1275.696008][T17739] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1275.848899][T17739] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1275.855944][T17739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.881502][T17739] usb 5-1: config 0 descriptor?? [ 1275.899796][T17739] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1276.063700][T21643] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1276.206282][T21646] FAULT_INJECTION: forcing a failure. [ 1276.206282][T21646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1276.206534][T21646] CPU: 1 UID: 0 PID: 21646 Comm: syz.3.5181 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 1276.206564][T21646] Tainted: [L]=SOFTLOCKUP [ 1276.206571][T21646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1276.206582][T21646] Call Trace: [ 1276.206590][T21646] [ 1276.206608][T21646] dump_stack_lvl+0xe8/0x150 [ 1276.206640][T21646] should_fail_ex+0x46b/0x600 [ 1276.206664][T21646] _copy_from_user+0x2d/0xb0 [ 1276.206687][T21646] __copy_msghdr+0x390/0x590 [ 1276.206712][T21646] ___sys_sendmsg+0x213/0x360 [ 1276.206729][T21646] ? __lock_acquire+0x683/0x2ce0 [ 1276.206754][T21646] ? __pfx____sys_sendmsg+0x10/0x10 [ 1276.206805][T21646] ? __fget_files+0x2a/0x420 [ 1276.206828][T21646] ? __fget_files+0x3a8/0x420 [ 1276.206864][T21646] __x64_sys_sendmsg+0x1b7/0x290 [ 1276.206886][T21646] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1276.206925][T21646] do_syscall_64+0x166/0x520 [ 1276.206948][T21646] ? trace_irq_disable+0x3b/0x140 [ 1276.206968][T21646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.206989][T21646] ? clear_bhb_loop+0x70/0xc0 [ 1276.207014][T21646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.207036][T21646] RIP: 0033:0x7fd4da2be0d9 [ 1276.207056][T21646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1276.207076][T21646] RSP: 002b:00007fd4d8516028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1276.207097][T21646] RAX: ffffffffffffffda RBX: 00007fd4da545fa0 RCX: 00007fd4da2be0d9 [ 1276.207112][T21646] RDX: 0000000000000004 RSI: 0000200000000380 RDI: 0000000000000004 [ 1276.207124][T21646] RBP: 00007fd4d8516090 R08: 0000000000000000 R09: 0000000000000000 [ 1276.207136][T21646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1276.207148][T21646] R13: 00007fd4da546038 R14: 00007fd4da545fa0 R15: 00007ffe79ad3f98 [ 1276.207179][T21646] [ 1276.290908][T21648] FAULT_INJECTION: forcing a failure. [ 1276.290908][T21648] name failslab, interval 1, probability 0, space 0, times 0 [ 1276.290960][T21648] CPU: 0 UID: 0 PID: 21648 Comm: syz.0.5182 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 1276.291019][T21648] Tainted: [L]=SOFTLOCKUP [ 1276.291039][T21648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1276.291063][T21648] Call Trace: [ 1276.291071][T21648] [ 1276.291080][T21648] dump_stack_lvl+0xe8/0x150 [ 1276.291124][T21648] should_fail_ex+0x46b/0x600 [ 1276.291194][T21648] should_failslab+0xa8/0x100 [ 1276.291251][T21648] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1276.291312][T21648] ? __alloc_skb+0x1db/0x7a0 [ 1276.291389][T21648] ? __alloc_skb+0x1db/0x7a0 [ 1276.291432][T21648] __alloc_skb+0x1db/0x7a0 [ 1276.291513][T21648] netlink_sendmsg+0x5d4/0xb40 [ 1276.291582][T21648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1276.291608][T21648] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1276.291651][T21648] ? __kernel_text_address+0xd/0x30 [ 1276.291692][T21648] ? unwind_get_return_address+0x4d/0x90 [ 1276.291738][T21648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1276.291760][T21648] sock_sendmsg_nosec+0x13a/0x180 [ 1276.291817][T21648] ____sys_sendmsg+0x565/0x870 [ 1276.291885][T21648] ? __might_fault+0xaf/0x130 [ 1276.291914][T21648] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1276.291970][T21648] ? import_iovec+0x73/0xa0 [ 1276.292039][T21648] ___sys_sendmsg+0x2a5/0x360 [ 1276.292060][T21648] ? __lock_acquire+0x683/0x2ce0 [ 1276.292107][T21648] ? __pfx____sys_sendmsg+0x10/0x10 [ 1276.292217][T21648] ? __fget_files+0x2a/0x420 [ 1276.292244][T21648] ? __fget_files+0x3a8/0x420 [ 1276.292334][T21648] __x64_sys_sendmsg+0x1b7/0x290 [ 1276.292378][T21648] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1276.292439][T21648] do_syscall_64+0x166/0x520 [ 1276.292516][T21648] ? trace_irq_disable+0x3b/0x140 [ 1276.292536][T21648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.292557][T21648] ? clear_bhb_loop+0x70/0xc0 [ 1276.292619][T21648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.292665][T21648] RIP: 0033:0x7f5c8322e0d9 [ 1276.292690][T21648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1276.292708][T21648] RSP: 002b:00007f5c81486028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1276.292740][T21648] RAX: ffffffffffffffda RBX: 00007f5c834b5fa0 RCX: 00007f5c8322e0d9 [ 1276.292777][T21648] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1276.292813][T21648] RBP: 00007f5c81486090 R08: 0000000000000000 R09: 0000000000000000 [ 1276.292837][T21648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1276.292850][T21648] R13: 00007f5c834b6038 R14: 00007f5c834b5fa0 R15: 00007ffd46f79d48 [ 1276.292929][T21648] [ 1276.700263][ T61] Bluetooth: hci3: Invalid handle: 0x1c00 > 0x0eff [ 1276.712992][T17739] gspca_sunplus: reg_w_riv err -71 [ 1276.713094][T17739] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1276.760914][T17739] usb 5-1: USB disconnect, device number 126 [ 1276.900449][T21656] random: crng reseeded on system resumption [ 1276.960600][T21659] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5184'. [ 1276.983742][T21659] netlink: 760 bytes leftover after parsing attributes in process `syz.3.5184'. [ 1277.693102][T21671] libceph: resolve '.' (ret=-3): failed [ 1277.695092][T21671] tmpfs: Bad value for 'mpol' [ 1277.706934][ T7783] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1277.849079][ T7783] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1277.853716][ T7783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.853742][ T7783] usb 5-1: Product: syz [ 1277.853757][ T7783] usb 5-1: Manufacturer: syz [ 1277.853772][ T7783] usb 5-1: SerialNumber: syz [ 1278.193241][T21118] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:2: No space for directory leaf checksum. Please run e2fsck -D. [ 1278.193287][T21118] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:2: checksumming directory block 0 [ 1278.194311][T21118] usb 5-1: loading /lib/firmware/updates/syzkaller/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 1278.335432][T21118] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:2: No space for directory leaf checksum. Please run e2fsck -D. [ 1278.335471][T21118] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:2: checksumming directory block 0 [ 1278.335711][T21118] usb 5-1: loading /lib/firmware/updates/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 1278.335890][T21118] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:2: No space for directory leaf checksum. Please run e2fsck -D. [ 1278.335919][T21118] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:2: checksumming directory block 0 [ 1278.438821][T21118] usb 5-1: loading /lib/firmware/syzkaller/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 1278.438997][T21118] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:2: No space for directory leaf checksum. Please run e2fsck -D. [ 1278.439028][T21118] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:2: checksumming directory block 0 [ 1278.439259][T21118] usb 5-1: loading /lib/firmware/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 1278.439291][T21118] usb 5-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 1278.439342][T21118] usb 5-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw [ 1278.827866][T21692] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1279.196296][T21336] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1279.255140][T21336] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1279.265504][T21336] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1279.366618][T21336] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1279.379237][T21336] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1279.419671][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1279.459249][T21336] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1279.460691][T21336] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1279.510740][T21336] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1279.562509][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1279.566607][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1279.566695][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=8201, bcdDevice=17.73 [ 1279.571455][ T9] usb 4-1: config 0 has no interfaces? [ 1279.604623][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.604670][ T9] usb 4-1: Product: syz [ 1279.604687][ T9] usb 4-1: Manufacturer: 萠䜔蛌－徍譴찳謅뾝䄚﫮㼊麑쌍挠仜Κ뫋햪鰊砅貜ꏍ﫠᪜嚹逖﹉⌵净ࣙזּ쑴蒼תּ퀩Ḓ毓鮼吴ꖚ굻馨딬匥㮓ꥒ눩觯㞗͝嫱뚟陡骢 [ 1279.604718][ T9] usb 4-1: SerialNumber: syz [ 1279.653539][ T9] usb 4-1: config 0 descriptor?? [ 1280.087598][ T9] usb 4-1: USB disconnect, device number 15 [ 1280.240275][T21336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1280.338711][ T9] usb 5-1: USB disconnect, device number 127 [ 1280.342064][T21336] 8021q: adding VLAN 0 to HW filter on device team0 [ 1280.381328][T17157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.387485][T17157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1280.404766][T21733] block nbd0: not configured, cannot reconfigure [ 1280.431849][T17739] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1280.493637][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.493784][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1280.596211][T17739] usb 6-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 1280.597745][T17739] usb 6-1: config 255 has an invalid interface number: 97 but max is 1 [ 1280.597772][T17739] usb 6-1: config 255 has an invalid interface descriptor of length 2, skipping [ 1280.597792][T17739] usb 6-1: config 255 has an invalid interface number: 227 but max is 1 [ 1280.597815][T17739] usb 6-1: config 255 has no interface number 0 [ 1280.597834][T17739] usb 6-1: config 255 has no interface number 1 [ 1280.597908][T17739] usb 6-1: config 255 interface 97 has no altsetting 0 [ 1280.597929][T17739] usb 6-1: config 255 interface 227 has no altsetting 0 [ 1280.615895][T14466] hid_parser_main: 43 callbacks suppressed [ 1280.615955][T14466] hid-generic 0000:0000:0001.0017: unknown main item tag 0x0 [ 1280.615993][T14466] hid-generic 0000:0000:0001.0017: unknown main item tag 0x0 [ 1280.616028][T14466] hid-generic 0000:0000:0001.0017: unknown main item tag 0x0 [ 1280.616099][T14466] hid-generic 0000:0000:0001.0017: unknown main item tag 0x0 [ 1280.616144][T14466] hid-generic 0000:0000:0001.0017: unknown main item tag 0x0 [ 1280.616181][T14466] hid-generic 0000:0000:0001.0017: unknown main item tag 0x0 [ 1280.616245][T14466] hid-generic 0000:0000:0001.0017: unknown main item tag 0x0 [ 1280.616302][T14466] hid-generic 0000:0000:0001.0017: unknown main item tag 0x0 [ 1280.734800][T17739] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.734826][T17739] usb 6-1: Product: syz [ 1280.734841][T17739] usb 6-1: Manufacturer: syz [ 1280.734855][T17739] usb 6-1: SerialNumber: syz [ 1282.623811][T21729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1282.626331][T21729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1282.736002][T14466] hid-generic 0000:0000:0001.0017: hidraw0: HID v0.10 Device [syz0] on syz1 [ 1282.957198][T17739] rndis_host 6-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1283.287002][T17739] usb 6-1: USB disconnect, device number 86 [ 1283.768941][T21756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5203'. [ 1283.873477][T21758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5203'. [ 1284.775925][ T4901] Bluetooth: Unexpected start frame (len 10) [ 1285.323021][T20990] nvmet: connect request for invalid subsystem testsubsys! [ 1285.323184][T21772] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1285.458355][T21781] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5209'. [ 1285.528711][T21783] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1286.062742][T17326] I/O error, dev loop8, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 1286.170863][T21778] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 1286.170884][T21778] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1286.198493][T21791] vhci_hcd: connection closed [ 1286.280658][T21778] vhci_hcd vhci_hcd.0: Device attached [ 1286.322122][T21336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1286.354681][T20990] vhci_hcd vhci_hcd.5: stop threads [ 1286.355868][T20990] vhci_hcd vhci_hcd.5: release socket [ 1286.356031][T20990] vhci_hcd vhci_hcd.5: disconnect device [ 1286.830378][T21336] veth0_vlan: entered promiscuous mode [ 1286.890486][T21336] veth1_vlan: entered promiscuous mode [ 1286.960078][T21336] veth0_macvtap: entered promiscuous mode [ 1286.989964][T21336] veth1_macvtap: entered promiscuous mode [ 1287.068769][T21336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1287.128000][T21336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1287.359196][T21808] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5215'. [ 1287.398873][T21808] FAULT_INJECTION: forcing a failure. [ 1287.398873][T21808] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.398930][T21808] CPU: 1 UID: 0 PID: 21808 Comm: syz.3.5215 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 1287.398957][T21808] Tainted: [L]=SOFTLOCKUP [ 1287.398965][T21808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1287.398976][T21808] Call Trace: [ 1287.398984][T21808] [ 1287.398992][T21808] dump_stack_lvl+0xe8/0x150 [ 1287.399026][T21808] should_fail_ex+0x46b/0x600 [ 1287.399054][T21808] should_failslab+0xa8/0x100 [ 1287.399079][T21808] __kmalloc_noprof+0xfe/0x780 [ 1287.399098][T21808] ? __might_fault+0xaf/0x130 [ 1287.399118][T21808] ? sock_kmalloc+0xd6/0x160 [ 1287.399137][T21808] ? sock_kmalloc+0xd6/0x160 [ 1287.399163][T21808] sock_kmalloc+0xd6/0x160 [ 1287.399187][T21808] __ip_mc_join_group+0x372/0x500 [ 1287.399238][T21808] do_ip_setsockopt+0x2013/0x2e30 [ 1287.399270][T21808] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1287.399299][T21808] ? __fget_files+0x2a/0x420 [ 1287.399337][T21808] ? __fget_files+0x2a/0x420 [ 1287.399368][T21808] ip_setsockopt+0x66/0x110 [ 1287.399391][T21808] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1287.399422][T21808] do_sock_setsockopt+0x17c/0x1b0 [ 1287.399461][T21808] __x64_sys_setsockopt+0x143/0x1b0 [ 1287.399499][T21808] do_syscall_64+0x166/0x520 [ 1287.399525][T21808] ? trace_irq_disable+0x3b/0x140 [ 1287.399546][T21808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.399568][T21808] ? clear_bhb_loop+0x70/0xc0 [ 1287.399604][T21808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.399624][T21808] RIP: 0033:0x7fd4da2be0d9 [ 1287.399642][T21808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1287.399660][T21808] RSP: 002b:00007fd4d8516028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1287.399682][T21808] RAX: ffffffffffffffda RBX: 00007fd4da545fa0 RCX: 00007fd4da2be0d9 [ 1287.399697][T21808] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000005 [ 1287.399710][T21808] RBP: 00007fd4d8516090 R08: 000000000000000c R09: 0000000000000000 [ 1287.399722][T21808] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1287.399735][T21808] R13: 00007fd4da546038 R14: 00007fd4da545fa0 R15: 00007ffe79ad3f98 [ 1287.399767][T21808] [ 1287.404213][T14466] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1287.630884][T14466] usb 6-1: Using ep0 maxpacket: 32 [ 1287.643246][T14466] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1287.677306][T14466] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.711153][T14466] usb 6-1: config 0 descriptor?? [ 1287.732824][T14466] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1287.760675][T20990] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.809145][T17176] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.841037][T20990] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.937487][T21810] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1287.992866][T10903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1287.992893][T10903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1288.102586][T10903] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.209746][T20990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1288.209764][T20990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1288.550908][T21811] lo speed is unknown, defaulting to 1000 [ 1288.551049][T21811] lo speed is unknown, defaulting to 1000 [ 1288.722832][T14466] gspca_vc032x: reg_w err -71 [ 1288.722850][T14466] gspca_vc032x: I2c Bus Busy Wait 00 [ 1288.722862][T14466] gspca_vc032x: I2c Bus Busy Wait 00 [ 1288.722872][T14466] gspca_vc032x: I2c Bus Busy Wait 00 [ 1288.722883][T14466] gspca_vc032x: I2c Bus Busy Wait 00 [ 1288.722893][T14466] gspca_vc032x: I2c Bus Busy Wait 00 [ 1288.722902][T14466] gspca_vc032x: I2c Bus Busy Wait 00 [ 1288.722912][T14466] gspca_vc032x: I2c Bus Busy Wait 00 [ 1288.722922][T14466] gspca_vc032x: I2c Bus Busy Wait 00 [ 1288.722933][T14466] gspca_vc032x: I2c Bus Busy Wait 00 [ 1288.722943][T14466] gspca_vc032x: I2c Bus Busy Wait 00 [ 1288.722954][T14466] gspca_vc032x: I2c Bus Busy Wait 00 [ 1288.722963][T14466] gspca_vc032x: I2c Bus Busy Wait 00 [ 1288.722973][T14466] gspca_vc032x: I2c Bus Busy Wait 00 [ 1288.722997][T14466] gspca_vc032x: I2c Bus Busy Wait 00 [ 1288.723008][T14466] gspca_vc032x: I2c Bus Busy Wait 00 [ 1288.723017][T14466] gspca_vc032x: I2c Bus Busy Wait 00 [ 1288.723026][T14466] gspca_vc032x: I2c Bus Busy Wait 00 [ 1288.723037][T14466] gspca_vc032x: I2c Bus Busy Wait 00 [ 1288.723046][T14466] gspca_vc032x: Unknown sensor... [ 1288.723136][T14466] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 1288.808284][T14466] usb 6-1: USB disconnect, device number 87 [ 1289.600489][T21818] FAULT_INJECTION: forcing a failure. [ 1289.600489][T21818] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.600526][T21818] CPU: 1 UID: 0 PID: 21818 Comm: syz.4.5217 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 1289.600553][T21818] Tainted: [L]=SOFTLOCKUP [ 1289.600561][T21818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1289.600573][T21818] Call Trace: [ 1289.600581][T21818] [ 1289.600590][T21818] dump_stack_lvl+0xe8/0x150 [ 1289.600625][T21818] should_fail_ex+0x46b/0x600 [ 1289.600653][T21818] should_failslab+0xa8/0x100 [ 1289.600679][T21818] __kmalloc_noprof+0xfe/0x780 [ 1289.600702][T21818] ? bpf_test_init+0x9f/0x150 [ 1289.600722][T21818] ? bpf_test_init+0x9f/0x150 [ 1289.600748][T21818] bpf_test_init+0x9f/0x150 [ 1289.600774][T21818] bpf_prog_test_run_skb+0x31e/0x2230 [ 1289.600817][T21818] ? __fget_files+0x3a8/0x420 [ 1289.600843][T21818] ? __fget_files+0x2a/0x420 [ 1289.600874][T21818] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1289.600909][T21818] bpf_prog_test_run+0x2cb/0x340 [ 1289.600938][T21818] __sys_bpf+0xa22/0xd90 [ 1289.600968][T21818] ? __pfx___sys_bpf+0x10/0x10 [ 1289.600997][T21818] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1289.601028][T21818] ? rt_mutex_slowunlock+0x219/0x460 [ 1289.601066][T21818] ? ksys_write+0x248/0x270 [ 1289.601096][T21818] ? __pfx_ksys_write+0x10/0x10 [ 1289.601128][T21818] __x64_sys_bpf+0xba/0xd0 [ 1289.601159][T21818] do_syscall_64+0x166/0x520 [ 1289.601185][T21818] ? trace_irq_disable+0x3b/0x140 [ 1289.601205][T21818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.601225][T21818] ? clear_bhb_loop+0x70/0xc0 [ 1289.601249][T21818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.601269][T21818] RIP: 0033:0x7f50b7c6e0d9 [ 1289.601287][T21818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1289.601303][T21818] RSP: 002b:00007f50b5ec6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1289.601325][T21818] RAX: ffffffffffffffda RBX: 00007f50b7ef5fa0 RCX: 00007f50b7c6e0d9 [ 1289.601340][T21818] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1289.601353][T21818] RBP: 00007f50b5ec6090 R08: 0000000000000000 R09: 0000000000000000 [ 1289.601365][T21818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1289.601377][T21818] R13: 00007f50b7ef6038 R14: 00007f50b7ef5fa0 R15: 00007ffdedc16938 [ 1289.601406][T21818] [ 1290.065499][T21823] FAULT_INJECTION: forcing a failure. [ 1290.065499][T21823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1290.065535][T21823] CPU: 1 UID: 0 PID: 21823 Comm: syz.5.5218 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 1290.065562][T21823] Tainted: [L]=SOFTLOCKUP [ 1290.065569][T21823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1290.065581][T21823] Call Trace: [ 1290.065589][T21823] [ 1290.065598][T21823] dump_stack_lvl+0xe8/0x150 [ 1290.065632][T21823] should_fail_ex+0x46b/0x600 [ 1290.065658][T21823] _copy_from_user+0x2d/0xb0 [ 1290.065682][T21823] ___sys_recvmsg+0x173/0x5a0 [ 1290.065707][T21823] ? __pfx____sys_recvmsg+0x10/0x10 [ 1290.065737][T21823] ? __fget_files+0x2a/0x420 [ 1290.065786][T21823] do_recvmmsg+0x320/0x7f0 [ 1290.065811][T21823] ? __pfx_do_recvmmsg+0x10/0x10 [ 1290.065830][T21823] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1290.065883][T21823] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1290.065909][T21823] __x64_sys_recvmmsg+0x198/0x250 [ 1290.065929][T21823] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1290.065954][T21823] do_syscall_64+0x166/0x520 [ 1290.065974][T21823] ? trace_irq_disable+0x3b/0x140 [ 1290.065990][T21823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1290.066006][T21823] ? clear_bhb_loop+0x70/0xc0 [ 1290.066026][T21823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1290.066042][T21823] RIP: 0033:0x7f9562e9e0d9 [ 1290.066058][T21823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1290.066072][T21823] RSP: 002b:00007f95610f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1290.066089][T21823] RAX: ffffffffffffffda RBX: 00007f9563125fa0 RCX: 00007f9562e9e0d9 [ 1290.066111][T21823] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000003 [ 1290.066123][T21823] RBP: 00007f95610f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1290.066134][T21823] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1290.066145][T21823] R13: 00007f9563126038 R14: 00007f9563125fa0 R15: 00007ffe58297d38 [ 1290.066173][T21823] [ 1290.317289][T21811] lo speed is unknown, defaulting to 1000 [ 1290.429743][T21826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1290.491550][T21811] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1290.491587][T21811] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1290.491628][T21811] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1290.522936][T21814] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 1290.595421][T21826] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1290.610893][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1290.657031][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1290.721633][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1290.737353][T21811] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1290.754686][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1290.757424][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1290.803980][T21814] usb 7-1: not running at top speed; connect to a high speed hub [ 1290.804054][T21814] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1290.812058][T21814] usb 7-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 1290.812083][T21814] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1290.812132][T21814] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1290.833828][T21814] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.833852][T21814] usb 7-1: Product: syz [ 1290.833867][T21814] usb 7-1: Manufacturer: syz [ 1290.833880][T21814] usb 7-1: SerialNumber: syz [ 1290.951318][T21811] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1291.276921][T21814] cdc_ncm 7-1:1.0: skipping garbage [ 1291.276944][T21814] cdc_ncm 7-1:1.0: skipping garbage [ 1291.276964][T21814] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 1291.277008][T21814] cdc_ncm 7-1:1.0: bind() failure [ 1291.331953][T21814] usb 7-1: USB disconnect, device number 23 [ 1291.832762][T17161] nvmet: connect request for invalid subsystem testsubsys! [ 1291.832920][T21842] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1292.009160][T21849] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5224'. [ 1292.250817][T21811] lo speed is unknown, defaulting to 1000 [ 1292.334522][T21854] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5225'. [ 1292.433992][T21811] lo speed is unknown, defaulting to 1000 [ 1292.456140][T21811] lo speed is unknown, defaulting to 1000 [ 1292.545111][T21811] lo speed is unknown, defaulting to 1000 [ 1292.559561][T21811] lo speed is unknown, defaulting to 1000 [ 1292.594895][T21811] lo speed is unknown, defaulting to 1000 [ 1292.632445][T21811] lo speed is unknown, defaulting to 1000 [ 1292.745573][ T58] I/O error, dev loop8, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 1292.863269][T21831] lo speed is unknown, defaulting to 1000 [ 1294.896761][ T61] Bluetooth: hci2: command tx timeout [ 1294.940961][T17160] IPVS: starting estimator thread 0... [ 1295.043159][T21874] IPVS: using max 11 ests per chain, 26400 per kthread [ 1295.146132][T21815] usb 6-1: new full-speed USB device number 88 using dummy_hcd [ 1295.290144][T21815] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06 [ 1295.291336][T21815] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.292571][T21815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1295.292601][T21815] usb 6-1: SerialNumber: syz [ 1295.335975][T21815] usb 6-1: config 0 descriptor?? [ 1295.370772][T21815] usb 6-1: selecting invalid altsetting 1 [ 1295.370788][T21815] usb 6-1: Can not set alternate setting to 1, error: -22 [ 1295.370865][T21815] synaptics_usb 6-1:0.0: probe with driver synaptics_usb failed with error -22 [ 1295.577280][ T1247] usb 6-1: USB disconnect, device number 88 [ 1295.972190][T21831] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.972317][T21831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.972459][T21831] bridge_slave_0: entered allmulticast mode [ 1295.989942][T21831] bridge_slave_0: entered promiscuous mode [ 1296.004445][T21831] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.004575][T21831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.004758][T21831] bridge_slave_1: entered allmulticast mode [ 1296.009974][T21831] bridge_slave_1: entered promiscuous mode [ 1296.165731][T21831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1296.189480][T21831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1296.295087][T21831] team0: Port device team_slave_0 added [ 1296.312767][T21831] team0: Port device team_slave_1 added [ 1296.406712][T21831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1296.406727][T21831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.406750][T21831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1296.408595][T21831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1296.408608][T21831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.408629][T21831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1296.561715][T21864] ------------[ cut here ]------------ [ 1296.561730][T21864] kcov->t != t [ 1296.561760][T21864] WARNING: kernel/kcov.c:475 at kcov_task_exit+0x181/0x240, CPU#1: syz.5.5228/21864 [ 1296.561829][T21864] Modules linked in: [ 1296.561859][T21864] CPU: 1 UID: 0 PID: 21864 Comm: syz.5.5228 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 1296.561896][T21864] Tainted: [L]=SOFTLOCKUP [ 1296.561905][T21864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1296.561920][T21864] RIP: 0010:kcov_task_exit+0x181/0x240 [ 1296.561945][T21864] Code: 90 00 00 00 e8 f0 cc 59 00 4c 89 f7 5b 41 5e 41 5f e9 33 a5 5f 00 7c 40 5b 41 5e 41 5f e9 87 89 8c 09 cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 1296.561966][T21864] RSP: 0018:ffffc90003e87ae0 EFLAGS: 00010206 [ 1296.561986][T21864] RAX: b21cf5b5b0a37e00 RBX: ffff888036255d00 RCX: ffffffff99aae501 [ 1296.562005][T21864] RDX: 000000003b682001 RSI: ffffffff8bcb9e60 RDI: 00000000ffffffff [ 1296.562023][T21864] RBP: ffffc90003e87c30 R08: ffffffff8b510e52 R09: 0000000000000000 [ 1296.562041][T21864] R10: 0000000000000000 R11: ffffffff8e1c3740 R12: 0000000000000009 [ 1296.562057][T21864] R13: 0000000000000004 R14: ffff88802bb0a900 R15: ffff88802bb0a908 [ 1296.562075][T21864] FS: 0000555566f3b500(0000) GS:ffff888125d06000(0000) knlGS:0000000000000000 [ 1296.562096][T21864] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1296.562114][T21864] CR2: 0000001b32511000 CR3: 0000000029470000 CR4: 00000000003526f0 [ 1296.562135][T21864] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1296.562151][T21864] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1296.562168][T21864] Call Trace: [ 1296.562177][T21864] [ 1296.562189][T21864] do_exit+0x159/0x2360 [ 1296.562228][T21864] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1296.562259][T21864] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 1296.562287][T21864] ? __pfx_do_exit+0x10/0x10 [ 1296.562324][T21864] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1296.562347][T21864] ? rt_spin_lock+0x1e2/0x400 [ 1296.562378][T21864] ? rt_spin_unlock+0x159/0x200 [ 1296.562434][T21864] do_group_exit+0x22d/0x2f0 [ 1296.562470][T21864] ? rt_spin_unlock+0x165/0x200 [ 1296.562498][T21864] get_signal+0x121b/0x12c0 [ 1296.562549][T21864] arch_do_signal_or_restart+0xbb/0x860 [ 1296.562585][T21864] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1296.562640][T21864] exit_to_user_mode_loop+0x10e/0x770 [ 1296.562667][T21864] ? rcu_is_watching+0x16/0xb0 [ 1296.562702][T21864] do_syscall_64+0x328/0x520 [ 1296.562731][T21864] ? trace_irq_disable+0x3b/0x140 [ 1296.562755][T21864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.562780][T21864] ? clear_bhb_loop+0x70/0xc0 [ 1296.562810][T21864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.562835][T21864] RIP: 0033:0x7f9562e9e0d9 [ 1296.562858][T21864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1296.562878][T21864] RSP: 002b:00007ffe58297e98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1296.562904][T21864] RAX: 0000000000000000 RBX: 00007ffe58297f80 RCX: 00007f9562e9e0d9 [ 1296.562921][T21864] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1296.562936][T21864] RBP: 00000000001451a0 R08: 0000000000000001 R09: 0000000000000000 [ 1296.562951][T21864] R10: 0000001b2d620000 R11: 0000000000000246 R12: 00007ffe58297fc0 [ 1296.562968][T21864] R13: 00007f9563125fac R14: 0000000000145c8b R15: 00007f9563125fa0 [ 1296.563005][T21864] [ 1296.563027][T21864] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1296.563049][T21864] CPU: 1 UID: 0 PID: 21864 Comm: syz.5.5228 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 1296.563083][T21864] Tainted: [L]=SOFTLOCKUP [ 1296.563122][T21864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1296.563137][T21864] Call Trace: [ 1296.563147][T21864] [ 1296.563157][T21864] vpanic+0x56d/0xa60 [ 1296.563194][T21864] ? __pfx__printk+0x10/0x10 [ 1296.563220][T21864] ? __pfx_vpanic+0x10/0x10 [ 1296.563251][T21864] ? is_bpf_text_address+0x292/0x2b0 [ 1296.563281][T21864] ? is_bpf_text_address+0x26/0x2b0 [ 1296.563319][T21864] panic+0xc5/0xd0 [ 1296.563354][T21864] ? __pfx_panic+0x10/0x10 [ 1296.563413][T21864] __warn+0x315/0x4c0 [ 1296.563449][T21864] ? kcov_task_exit+0x181/0x240 [ 1296.563476][T21864] ? kcov_task_exit+0x181/0x240 [ 1296.563500][T21864] __report_bug+0x276/0x570 [ 1296.563535][T21864] ? kcov_task_exit+0x181/0x240 [ 1296.563560][T21864] ? __pfx___report_bug+0x10/0x10 [ 1296.563588][T21864] ? try_to_take_rt_mutex+0x842/0xb00 [ 1296.563634][T21864] ? is_bpf_text_address+0x26/0x2b0 [ 1296.563670][T21864] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1296.563700][T21864] ? rt_spin_lock+0x1e2/0x400 [ 1296.563724][T21864] ? rt_spin_lock+0x1e2/0x400 [ 1296.563750][T21864] ? kcov_task_exit+0x181/0x240 [ 1296.563773][T21864] report_bug+0x16b/0x220 [ 1296.563804][T21864] ? kcov_task_exit+0x181/0x240 [ 1296.563824][T21864] ? kcov_task_exit+0x183/0x240 [ 1296.563846][T21864] handle_bug+0x9c/0x200 [ 1296.563879][T21864] exc_invalid_op+0x1a/0x50 [ 1296.563912][T21864] asm_exc_invalid_op+0x1a/0x20 [ 1296.563935][T21864] RIP: 0010:kcov_task_exit+0x181/0x240 [ 1296.563958][T21864] Code: 90 00 00 00 e8 f0 cc 59 00 4c 89 f7 5b 41 5e 41 5f e9 33 a5 5f 00 7c 40 5b 41 5e 41 5f e9 87 89 8c 09 cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 1296.563979][T21864] RSP: 0018:ffffc90003e87ae0 EFLAGS: 00010206 [ 1296.564000][T21864] RAX: b21cf5b5b0a37e00 RBX: ffff888036255d00 RCX: ffffffff99aae501 [ 1296.564019][T21864] RDX: 000000003b682001 RSI: ffffffff8bcb9e60 RDI: 00000000ffffffff [ 1296.564039][T21864] RBP: ffffc90003e87c30 R08: ffffffff8b510e52 R09: 0000000000000000 [ 1296.564057][T21864] R10: 0000000000000000 R11: ffffffff8e1c3740 R12: 0000000000000009 [ 1296.564073][T21864] R13: 0000000000000004 R14: ffff88802bb0a900 R15: ffff88802bb0a908 [ 1296.564099][T21864] ? rt_spin_lock+0x1e2/0x400 [ 1296.564132][T21864] do_exit+0x159/0x2360 [ 1296.564167][T21864] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1296.564197][T21864] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 1296.564224][T21864] ? __pfx_do_exit+0x10/0x10 [ 1296.564258][T21864] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1296.564280][T21864] ? rt_spin_lock+0x1e2/0x400 [ 1296.564310][T21864] ? rt_spin_unlock+0x159/0x200 [ 1296.564336][T21864] do_group_exit+0x22d/0x2f0 [ 1296.564370][T21864] ? rt_spin_unlock+0x165/0x200 [ 1296.564404][T21864] get_signal+0x121b/0x12c0 [ 1296.564458][T21864] arch_do_signal_or_restart+0xbb/0x860 [ 1296.564494][T21864] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1296.564546][T21864] exit_to_user_mode_loop+0x10e/0x770 [ 1296.564571][T21864] ? rcu_is_watching+0x16/0xb0 [ 1296.564605][T21864] do_syscall_64+0x328/0x520 [ 1296.564634][T21864] ? trace_irq_disable+0x3b/0x140 [ 1296.564658][T21864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.564683][T21864] ? clear_bhb_loop+0x70/0xc0 [ 1296.564712][T21864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.564736][T21864] RIP: 0033:0x7f9562e9e0d9 [ 1296.564757][T21864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1296.564778][T21864] RSP: 002b:00007ffe58297e98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1296.564803][T21864] RAX: 0000000000000000 RBX: 00007ffe58297f80 RCX: 00007f9562e9e0d9 [ 1296.564820][T21864] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1296.564835][T21864] RBP: 00000000001451a0 R08: 0000000000000001 R09: 0000000000000000 [ 1296.564851][T21864] R10: 0000001b2d620000 R11: 0000000000000246 R12: 00007ffe58297fc0 [ 1296.564868][T21864] R13: 00007f9563125fac R14: 0000000000145c8b R15: 00007f9563125fa0 [ 1296.564904][T21864] [ 1296.565503][T21864] Kernel Offset: disabled