last executing test programs: 47m26.307747682s ago: executing program 32 (id=497): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(&(0x7f0000000e40)=@filename='proc\x00', &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000350)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000450)='-2', 0x2) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000470), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='tcp 2049\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1\n', 0x2) 35m59.388083786s ago: executing program 33 (id=4538): r0 = socket(0x10, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x80800) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 35m31.708934241s ago: executing program 34 (id=4693): r0 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x8e) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 35m12.446859591s ago: executing program 35 (id=4767): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 32m40.517138091s ago: executing program 36 (id=5099): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_setup(0x7d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, 0x0, 0x0) 30m39.544634117s ago: executing program 37 (id=5365): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)=ANY=[@ANYBLOB="d80000000314010000000000000000000900020073797a32000000000800410072786500140033006272696467655f736c6176655f3000000900020073797a32000000000800410073697700140033006e6574706369300000000000000000000900020073797a310000000008004100727865001400330076657468315f746f5f626f6e640000000900020073797a30000000000800410072786500140033007465616d3000001800000000000000000900020073797a3200000000080041007278650014003300626f6e645f736c6176655f30"], 0xd8}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) 28m3.043391869s ago: executing program 4 (id=6673): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000200)=""/41, 0x29) lseek(r2, 0x0, 0x0) 28m2.566160132s ago: executing program 4 (id=6676): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount(0x0, 0x0, 0x0, 0x303402e, 0x0) r2 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000021, 0x0) 28m1.822213783s ago: executing program 4 (id=6682): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000008f0b000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 27m59.20576496s ago: executing program 4 (id=6708): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(r0, &(0x7f0000001f00)="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", 0x917) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 27m58.580883145s ago: executing program 4 (id=6715): sync() sync() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sync() io_setup(0x2007, &(0x7f0000000980)=0x0) io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_getevents(r0, 0x4, 0x0, &(0x7f00000000c0), 0x0) 27m58.25606005s ago: executing program 3 (id=6720): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffe14) write$FUSE_INIT(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) utimes(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={{0x77359400}, {0x77359400}}) close_range(r1, 0xffffffffffffffff, 0x0) 27m57.571845263s ago: executing program 3 (id=6727): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x100}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 27m57.501815148s ago: executing program 6 (id=6728): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)=0x8000, 0x4) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) 27m57.348581169s ago: executing program 3 (id=6730): socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x6, 0x2, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x30, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4000000) 27m57.128180715s ago: executing program 3 (id=6733): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0xc, r1, 0x1, 0xffffffff}, 0x10) 27m56.733958012s ago: executing program 3 (id=6737): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x20000002}) epoll_pwait2(r1, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_pwait(r1, &(0x7f00000002c0)=[{}], 0x1, 0xfffffffe, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)={0x800001f}) 27m56.718707254s ago: executing program 4 (id=6738): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x1, {0x3, 0x1, 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_vlan={0x58, 0x1, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x1, {{0x1, 0x80000001, 0x3, 0x6, 0x3fe}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x2, 0x64}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x4, 0x3}]}, {}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000800)="00112233445566778899aabb8100000108004500001c0000000040113cce01010101010101020001000200080000", 0x2e, 0x0, &(0x7f0000000900)={0x11, 0x0, r2, 0x0, 0x0, 0x6, @random="001122334455"}, 0x14) 27m56.475494628s ago: executing program 6 (id=6740): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$dupfd(r0, 0x406, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0x6e98, 0xc000, 0x80008, 0x150}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 27m56.339800884s ago: executing program 6 (id=6742): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 27m56.220540689s ago: executing program 3 (id=6744): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) 27m55.514890687s ago: executing program 7 (id=6751): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 27m55.378440458s ago: executing program 6 (id=6753): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) close(0x3) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000580)="9b", 0x29fff, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000180)='e', 0x1) shutdown(r0, 0x1) 27m55.282711388s ago: executing program 7 (id=6755): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) read$rfkill(r2, &(0x7f0000000580), 0x8) 27m55.155892779s ago: executing program 6 (id=6756): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0xc3072, 0xffffffffffffffff, 0x200000) socket$xdp(0x2c, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x8008af26, &(0x7f0000000000)=0x1) socket$pptp(0x18, 0x1, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) 27m54.077633875s ago: executing program 6 (id=6765): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r1, 0x25, 0x8, @void}, 0x10) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) sendmsg$nl_route(r4, 0x0, 0x40014) 27m53.748455799s ago: executing program 7 (id=6771): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_clone3(&(0x7f00000023c0)={0x400000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) syz_genetlink_get_family_id$gtp(&(0x7f0000002080), r1) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 27m52.779108835s ago: executing program 7 (id=6784): r0 = semget$private(0x0, 0x7, 0x191) semtimedop(r0, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 27m51.758847393s ago: executing program 7 (id=6795): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="f31fbd0d660f2a630066b8000000000f23d80f21f86635000000000f23f8b80d008ed82e667c75f364b646660fc735b800008ee866b9ff03000066ba000000000f3066b9bb0800000f32", 0x4a}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x100, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0xfffffffffffffffe}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe2d1f2b6255614c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c955000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0d4}, 0x4008040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c840) ioctl$KVM_RUN(r2, 0xae80, 0x0) 27m50.908498337s ago: executing program 7 (id=6801): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 27m49.035771452s ago: executing program 9 (id=6832): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4) listen(r1, 0xfffffffd) 27m48.994748905s ago: executing program 9 (id=6833): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000680)={[0x0, 0x8a, 0x7fffffffffffe, 0x5, 0x105, 0xfffffffffbfffffd, 0x4002004c4, 0x1003, 0x3, 0x210001, 0x1000000000000010, 0x2, 0x4, 0x0, 0x2, 0x4000000000000000], 0x70000, 0x2200}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x1ffffff, 0x4, 0xc4, 0x53, 0x3e, 0x2, 0x80, 0x41, 0x6b, 0x45, 0x6, 0x5, 0x800000001}, {0xb, 0xa7f2, 0x8, 0x88, 0x8, 0xfd, 0x6, 0x3, 0xe, 0x7, 0x7, 0x6, 0x40000000000001}, {0x0, 0x7, 0xd, 0x10, 0x21, 0x11, 0x7, 0xb3, 0x4, 0x15, 0x0, 0x2, 0xfffffffffffffb97}], 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 27m48.952522978s ago: executing program 9 (id=6834): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000480)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) listen(r2, 0x90004) accept4(r2, 0x0, 0x0, 0x800) openat$vsock(0xffffffffffffff9c, 0x0, 0x101000, 0x0) 27m48.741061353s ago: executing program 9 (id=6835): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) preadv(r0, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/36, 0x24}], 0x1, 0xfffeffff, 0x6) bind$alg(r1, &(0x7f00000009c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 27m48.740862433s ago: executing program 9 (id=6836): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) io_uring_setup(0x7, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 27m48.718790021s ago: executing program 9 (id=6837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000100)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="010530000a00280006000000600000000008114020010000000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64) 27m41.520242961s ago: executing program 38 (id=6738): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x1, {0x3, 0x1, 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_vlan={0x58, 0x1, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x1, {{0x1, 0x80000001, 0x3, 0x6, 0x3fe}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x2, 0x64}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x4, 0x3}]}, {}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000800)="00112233445566778899aabb8100000108004500001c0000000040113cce01010101010101020001000200080000", 0x2e, 0x0, &(0x7f0000000900)={0x11, 0x0, r2, 0x0, 0x0, 0x6, @random="001122334455"}, 0x14) 27m40.850345537s ago: executing program 39 (id=6744): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) 27m38.978770861s ago: executing program 40 (id=6765): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r1, 0x25, 0x8, @void}, 0x10) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) sendmsg$nl_route(r4, 0x0, 0x40014) 27m35.488965066s ago: executing program 41 (id=6801): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 27m33.545135628s ago: executing program 42 (id=6837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000100)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="010530000a00280006000000600000000008114020010000000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64) 31.512460952s ago: executing program 1 (id=13548): r0 = io_uring_setup(0x136a, &(0x7f0000000400)={0x0, 0x1f8a, 0x40, 0x1, 0x100028c}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)={0x7fffffff}) close_range(r0, 0xffffffffffffffff, 0x0) 30.955918244s ago: executing program 1 (id=13552): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 29.625465803s ago: executing program 1 (id=13555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070613000000000000000000010000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) 26.739329055s ago: executing program 1 (id=13558): mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, &(0x7f0000000040)='usrquota') 25.92174043s ago: executing program 1 (id=13562): timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x77359400}}, 0x0) 25.62852286s ago: executing program 1 (id=13563): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x4000000) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000180)={0x2, 0x3, 0x40}) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) 9.714584564s ago: executing program 5 (id=13621): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@get={0x1, 0x0, 0xfffffffffffffffe}) r1 = gettid() fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000001c0)={0x1, 0x2, 0x0, 0x8, r1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x110}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) iopl(0x3) iopl(0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x111002, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001800010031bd7000fcdbdf250a000000ff02ff000001000008000400", @ANYRES32=r5, @ANYBLOB="0600150008000000180016"], 0x44}}, 0x0) 9.693348354s ago: executing program 2 (id=13622): unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 9.507057104s ago: executing program 2 (id=13623): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x7) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0xb}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 9.445834429s ago: executing program 8 (id=13625): r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) symlinkat(&(0x7f00000000c0)='./file2\x00', r0, &(0x7f0000000100)='./file2\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000080)) 8.522580017s ago: executing program 8 (id=13627): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) get_robust_list(r1, &(0x7f0000000640)=0x0, 0x0) r4 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/192, 0xc0}, {&(0x7f0000000280)}, {&(0x7f0000000440)=""/95, 0x5f}, {&(0x7f0000000380)=""/78, 0x4e}], 0x4) 8.251918907s ago: executing program 8 (id=13628): syz_open_dev$media(&(0x7f0000000380), 0x10, 0x101000) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/notes', 0x0, 0x15) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x2, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f3, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x0, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x334}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 8.211616986s ago: executing program 0 (id=13629): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r2, 0x0, 0x100000000000000}, 0x38) 8.067664657s ago: executing program 2 (id=13630): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x3, 0x6, 0x601, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x10) 7.9328606s ago: executing program 2 (id=13631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$vsock_stream(0x28, 0x1, 0x0) accept4(r3, 0x0, 0x0, 0x80000) 7.823315008s ago: executing program 5 (id=13632): socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='net/route\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 7.715130628s ago: executing program 0 (id=13633): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7.387019428s ago: executing program 2 (id=13634): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r0, &(0x7f0000000180)='nullb1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000200)='my_configfs/nullb/nullb1/power\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000500)=ANY=[@ANYBLOB="df26337ef300aaaaaaaaaa2608004b0000"], 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) syz_open_dev$I2C(&(0x7f00000000c0), 0x837, 0x452d40) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x34}}, 0x4000044) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8003}]}) close_range(r5, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40081, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) 7.294090661s ago: executing program 5 (id=13635): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) write$nci(0xffffffffffffffff, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000280)=0x3, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, 0x0, &(0x7f0000000040), &(0x7f0000000140)) umount2(&(0x7f0000000080)='./file0\x00', 0x9) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000400060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) syslog(0x3, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0xffffffff, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x9, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x3, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0xd, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x51, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x4, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x40000a9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484451], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x20, 0x7e, 0x9, 0x9602, 0x40006, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c) 7.039369332s ago: executing program 8 (id=13636): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x50424752, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x3, 0x0, 0x0, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0xff00) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r5, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000480), 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, 0x0) sendmsg$tipc(r6, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000400)='J', 0x1}], 0x1}, 0x2000c8c0) 4.917070051s ago: executing program 8 (id=13637): r0 = socket(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="611404"], 0xa8) 1.245085808s ago: executing program 2 (id=13638): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./gadget/ep1in-bulk\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$FUSE_INIT(r1, 0x0, 0x0) 1.21563233s ago: executing program 8 (id=13639): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) shutdown(r3, 0x32ce970513f32900) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xf0, 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0), 0x0) 994.764153ms ago: executing program 0 (id=13640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x10) 966.894007ms ago: executing program 5 (id=13641): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001800010031bd7000fcdbdf250a000000ff02ff000001000008000400", @ANYRES32=r1, @ANYBLOB="0600150008000000180016"], 0x44}}, 0x0) 822.957427ms ago: executing program 0 (id=13642): r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) close_range(r0, 0xffffffffffffffff, 0x0) 763.868312ms ago: executing program 5 (id=13643): clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x67, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x96, 0x0, 0x4000000000000000}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x400000, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000005580)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x0, 0x0, 0x260, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@srh={{0x30}, {0x1, 0x6, 0x4, 0x6, 0x3, 0x3000, 0x851}}, @common=@srh1={{0x90}, {0x33, 0x7, 0x6, 0x7, 0x5, @dev={0xfe, 0x80, '\x00', 0x42}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, [0x0, 0xff000000, 0x0, 0xffffffff], [0xffffff00, 0xffffff00, 0x0, 0xffffffff], [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], 0x2000, 0x200}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @loopback, [0xffffff00, 0x0, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xff, 0xff], 'veth1_virt_wifi\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x3c, 0x8, 0x2, 0x20}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x81, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x460) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000400)={0xaa06, 0x0, r7, 0xbbbbbbbb}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) mremap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00004be000/0x1000)=nil) set_mempolicy_home_node(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x0) write$UHID_INPUT(r9, &(0x7f0000001980)={0xf, {"a2e3ad214fc752f91b294f0955f70e0dd038e7ff7fc6e5539b3267078b089b34083b681a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b313b0d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) clock_settime(0x0, &(0x7f0000000080)={r0, r1+10000000}) 392.420115ms ago: executing program 0 (id=13644): socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='net/route\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 27.857609ms ago: executing program 5 (id=13645): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ec1306000000000000010902"], 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x3) close(0x3) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0x0, 0x2000}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000140)='log\x00') syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 0 (id=13646): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x50424752, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x3, 0x0, 0x0, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0xff00) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r5, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000480), 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, 0x0) sendmsg$tipc(r6, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000400)='J', 0x1}], 0x1}, 0x2000c8c0) kernel console output (not intermixed with test programs): ncryption failed: -22 [ 2775.350399][ T9573] corsair 0003:1B1C:1B3E.002B: unknown main item tag 0x2 [ 2775.350436][ T9573] corsair 0003:1B1C:1B3E.002B: unknown main item tag 0x6 [ 2775.350464][ T9573] corsair 0003:1B1C:1B3E.002B: unknown main item tag 0x4 [ 2775.350492][ T9573] corsair 0003:1B1C:1B3E.002B: unknown main item tag 0x0 [ 2775.392429][ T9573] corsair 0003:1B1C:1B3E.002B: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.2-1/input0 [ 2775.547722][ T9573] usb 3-1: USB disconnect, device number 63 [ 2775.720142][T13311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2776.143713][T13318] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2776.480819][T13330] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2776.922328][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2777.104155][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2777.104183][ T10] usb 2-1: config 0 has no interfaces? [ 2777.104213][ T10] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2777.104237][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2777.239192][ T10] usb 2-1: config 0 descriptor?? [ 2777.521582][T13347] IPVS: persistence engine module ip_vs_pe_ not found [ 2778.373177][T13369] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2778.932274][ T10] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2779.102273][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 2779.108311][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 2779.108340][ T10] usb 3-1: config 179 has no interface number 0 [ 2779.108396][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2779.108424][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2779.108452][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2779.108477][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2779.108502][ T10] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2779.108613][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2779.108635][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2779.180711][T13368] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2779.621024][T20424] usb 3-1: USB disconnect, device number 64 [ 2779.621059][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2779.621115][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2779.735376][T19909] usb 2-1: USB disconnect, device number 71 [ 2780.326105][T13396] IPVS: persistence engine module ip_vs_pe_ not found [ 2784.502201][T19909] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2784.671148][T13495] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2784.688030][T19909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2784.688062][T19909] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2784.688075][T19909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2784.698062][T19909] usb 2-1: config 0 descriptor?? [ 2784.912328][ T10] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 2785.068190][T19909] usbhid 2-1:0.0: can't add hid device: -71 [ 2785.068315][T19909] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2785.147797][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2785.151101][ T10] usb 9-1: not running at top speed; connect to a high speed hub [ 2785.155990][ T10] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 2785.167830][T19909] usb 2-1: USB disconnect, device number 72 [ 2785.174122][ T10] usb 9-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 2785.174152][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2785.174171][ T10] usb 9-1: Product: syz [ 2785.174184][ T10] usb 9-1: Manufacturer: syz [ 2785.174196][ T10] usb 9-1: SerialNumber: syz [ 2785.652276][T19909] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 2785.817038][T19909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2785.817089][T19909] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2785.817114][T19909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2785.823971][T19909] usb 2-1: config 0 descriptor?? [ 2786.119237][ T10] usb 9-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 2786.119265][ T10] usb 9-1: found format II with max.bitrate = 512, frame size=4095 [ 2786.119485][ T10] usb 9-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 2786.119506][ T10] usb 9-1: found format II with max.bitrate = 512, frame size=4095 [ 2786.184801][ T10] usb 9-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 2786.311943][T19909] keytouch 0003:0926:3333.002C: fixing up Keytouch IEC report descriptor [ 2786.326582][T19909] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.002C/input/input30 [ 2786.420731][ T10] usb 9-1: USB disconnect, device number 25 [ 2786.600664][T13489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2786.619160][T13489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2786.793369][T13489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2786.797799][T13489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2787.236402][T13535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2787.236873][T13535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2787.843464][T19909] keytouch 0003:0926:3333.002C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 2787.977370][T19909] usb 2-1: USB disconnect, device number 73 [ 2788.066123][T13558] udevd[13558]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 2788.263347][T13552] fido_id[13552]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 2789.721008][T13594] IPVS: persistence engine module ip_vs_pe_ not found [ 2789.958203][T13610] netlink: 'syz.5.12362': attribute type 2 has an invalid length. [ 2791.332258][T19909] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2791.497376][T19909] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2791.498523][T19909] usb 6-1: config 12 has an invalid interface number: 99 but max is 0 [ 2791.498550][T19909] usb 6-1: config 12 has no interface number 0 [ 2791.498594][T19909] usb 6-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid wMaxPacketSize 0 [ 2791.498617][T19909] usb 6-1: config 12 interface 99 has no altsetting 0 [ 2791.501855][T19909] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 2791.501886][T19909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2791.501905][T19909] usb 6-1: Product: ᠊ [ 2791.501919][T19909] usb 6-1: Manufacturer: ю [ 2791.501932][T19909] usb 6-1: SerialNumber: syz [ 2791.799457][T19909] usb 6-1: no audio or video endpoints found [ 2791.812498][T19909] usb 6-1: USB disconnect, device number 40 [ 2791.863589][T13650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2791.864316][T13650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2791.896605][T27900] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 2792.042157][T27900] usb 9-1: Using ep0 maxpacket: 32 [ 2792.044581][T27900] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2792.045750][T27900] usb 9-1: config index 0 descriptor too short (expected 20680, got 144) [ 2792.045783][T27900] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2792.045804][T27900] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 2792.048081][T27900] usb 9-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 2792.048108][T27900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2792.048128][T27900] usb 9-1: Product: Є [ 2792.048141][T27900] usb 9-1: Manufacturer: ᠉ [ 2792.048156][T27900] usb 9-1: SerialNumber: syz [ 2792.368201][T13656] netlink: 32 bytes leftover after parsing attributes in process `syz.8.12374'. [ 2792.369293][T13656] netlink: 28 bytes leftover after parsing attributes in process `syz.8.12374'. [ 2792.657925][T19909] usb 2-1: new low-speed USB device number 74 using dummy_hcd [ 2792.829385][T19909] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 2792.829434][T19909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 2792.829462][T19909] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2792.829508][T19909] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2792.829531][T19909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2792.843708][T19909] usb 2-1: config 0 descriptor?? [ 2792.844769][T13654] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2793.149317][T27900] usb 9-1: USB disconnect, device number 26 [ 2793.275538][T19909] corsair 0003:1B1C:1B3E.002D: unknown main item tag 0x2 [ 2793.275578][T19909] corsair 0003:1B1C:1B3E.002D: unknown main item tag 0x6 [ 2793.275607][T19909] corsair 0003:1B1C:1B3E.002D: unknown main item tag 0x4 [ 2793.275633][T19909] corsair 0003:1B1C:1B3E.002D: unknown main item tag 0x0 [ 2793.279479][T19909] corsair 0003:1B1C:1B3E.002D: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.1-1/input0 [ 2793.478946][T27900] usb 2-1: USB disconnect, device number 74 [ 2794.077443][T13684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12385'. [ 2794.860056][T13694] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2796.362246][ T9573] usb 9-1: new low-speed USB device number 27 using dummy_hcd [ 2796.514719][ T9573] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 2796.514767][ T9573] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 2796.514795][ T9573] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2796.514845][ T9573] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2796.514869][ T9573] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2796.579587][ T9573] usb 9-1: config 0 descriptor?? [ 2796.580660][T13720] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2796.991574][ T9573] corsair 0003:1B1C:1B3E.002E: unknown main item tag 0x2 [ 2796.991609][ T9573] corsair 0003:1B1C:1B3E.002E: unknown main item tag 0x6 [ 2796.991638][ T9573] corsair 0003:1B1C:1B3E.002E: unknown main item tag 0x4 [ 2796.991666][ T9573] corsair 0003:1B1C:1B3E.002E: unknown main item tag 0x0 [ 2797.036507][ T9573] corsair 0003:1B1C:1B3E.002E: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.8-1/input0 [ 2797.192748][ T822] usb 9-1: USB disconnect, device number 27 [ 2799.058168][T13781] FAULT_INJECTION: forcing a failure. [ 2799.058168][T13781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2799.058203][T13781] CPU: 1 UID: 0 PID: 13781 Comm: syz.5.12413 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2799.058230][T13781] Tainted: [L]=SOFTLOCKUP [ 2799.058237][T13781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2799.058249][T13781] Call Trace: [ 2799.058256][T13781] [ 2799.058266][T13781] dump_stack_lvl+0xe8/0x150 [ 2799.058299][T13781] should_fail_ex+0x467/0x600 [ 2799.058338][T13781] _copy_to_user+0x31/0xb0 [ 2799.058364][T13781] simple_read_from_buffer+0xe1/0x170 [ 2799.058498][T13781] proc_fail_nth_read+0x1be/0x230 [ 2799.058580][T13781] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2799.058603][T13781] ? rw_verify_area+0x250/0x4d0 [ 2799.058624][T13781] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2799.058643][T13781] vfs_read+0x219/0xa90 [ 2799.058670][T13781] ? __pfx_vfs_read+0x10/0x10 [ 2799.058694][T13781] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2799.058719][T13781] ? lockdep_hardirqs_on+0x7a/0x110 [ 2799.058742][T13781] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2799.058765][T13781] ? mutex_lock_nested+0x152/0x1d0 [ 2799.058782][T13781] ? fdget_pos+0x252/0x320 [ 2799.058811][T13781] ksys_read+0x156/0x270 [ 2799.058836][T13781] ? __pfx_ksys_read+0x10/0x10 [ 2799.058867][T13781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2799.058888][T13781] do_syscall_64+0x174/0x580 [ 2799.058911][T13781] ? trace_irq_disable+0x3b/0x140 [ 2799.058930][T13781] ? clear_bhb_loop+0x40/0x90 [ 2799.058953][T13781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2799.058972][T13781] RIP: 0033:0x7f6fe6e2e84e [ 2799.058990][T13781] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2799.059006][T13781] RSP: 002b:00007f6fe50c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2799.059026][T13781] RAX: ffffffffffffffda RBX: 00007f6fe50c66c0 RCX: 00007f6fe6e2e84e [ 2799.059040][T13781] RDX: 000000000000000f RSI: 00007f6fe50c60a0 RDI: 0000000000000005 [ 2799.059052][T13781] RBP: 00007f6fe50c6090 R08: 0000000000000000 R09: 0000000000000000 [ 2799.059064][T13781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2799.059075][T13781] R13: 00007f6fe70f6038 R14: 00007f6fe70f5fa0 R15: 00007ffe8ba1c768 [ 2799.059107][T13781] [ 2800.115445][T13804] FAULT_INJECTION: forcing a failure. [ 2800.115445][T13804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2800.115491][T13804] CPU: 0 UID: 0 PID: 13804 Comm: syz.2.12420 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2800.115517][T13804] Tainted: [L]=SOFTLOCKUP [ 2800.115524][T13804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2800.115535][T13804] Call Trace: [ 2800.115543][T13804] [ 2800.115552][T13804] dump_stack_lvl+0xe8/0x150 [ 2800.115586][T13804] should_fail_ex+0x467/0x600 [ 2800.115620][T13804] strncpy_from_user+0x36/0x2c0 [ 2800.115692][T13804] do_getname+0x77/0x250 [ 2800.115724][T13804] user_path_at+0x2a/0x160 [ 2800.115749][T13804] __se_sys_mount+0x2dc/0x420 [ 2800.115840][T13804] ? __pfx___se_sys_mount+0x10/0x10 [ 2800.115866][T13804] ? __x64_sys_mount+0x20/0xc0 [ 2800.115885][T13804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2800.115906][T13804] do_syscall_64+0x174/0x580 [ 2800.115931][T13804] ? trace_irq_disable+0x3b/0x140 [ 2800.115949][T13804] ? clear_bhb_loop+0x40/0x90 [ 2800.115972][T13804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2800.115991][T13804] RIP: 0033:0x7f858bc9e019 [ 2800.116009][T13804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2800.116024][T13804] RSP: 002b:00007f8589ef6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2800.116045][T13804] RAX: ffffffffffffffda RBX: 00007f858bf25fa0 RCX: 00007f858bc9e019 [ 2800.116060][T13804] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000000 [ 2800.116072][T13804] RBP: 00007f8589ef6090 R08: 0000000000000000 R09: 0000000000000000 [ 2800.116085][T13804] R10: 0000000000100000 R11: 0000000000000246 R12: 0000000000000001 [ 2800.116097][T13804] R13: 00007f858bf26038 R14: 00007f858bf25fa0 R15: 00007ffe1d09f458 [ 2800.116126][T13804] [ 2800.802231][T19909] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2800.995256][T19909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2800.995292][T19909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2800.995315][T19909] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2800.995357][T19909] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2800.995380][T19909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2801.005128][T19909] usb 3-1: config 0 descriptor?? [ 2801.831213][T19909] usbhid 3-1:0.0: can't add hid device: -71 [ 2801.831352][T19909] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2801.854954][T19909] usb 3-1: USB disconnect, device number 65 [ 2804.660518][T13888] netlink: 'syz.2.12447': attribute type 362 has an invalid length. [ 2804.721283][T13891] netlink: 'syz.2.12447': attribute type 3 has an invalid length. [ 2806.870268][ T10] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2807.027741][T13930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2807.101923][T13930] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2807.114637][T13930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2807.144634][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 2807.162522][T13930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2807.169162][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 2807.169189][ T10] usb 2-1: config 179 has no interface number 0 [ 2807.169252][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2807.169284][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2807.169311][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2807.169335][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2807.169361][ T10] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2807.169399][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2807.169421][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2807.204177][T13930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2807.514240][T13924] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2808.275913][T20424] usb 2-1: USB disconnect, device number 75 [ 2808.276006][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2808.276067][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2808.516722][T20648] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2809.389271][T20648] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2809.593825][T13969] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2809.595860][T13969] cramfs: wrong magic [ 2809.636804][T13927] lo speed is unknown, defaulting to 1000 [ 2809.741462][T13972] 9p: Bad value for 'wfdno' [ 2809.742285][T30102] Bluetooth: hci0: command tx timeout [ 2810.140324][T20648] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2810.760557][T20648] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2811.019865][T13999] ocfs2_dlmfs: Unknown parameter '' [ 2811.052622][T13927] bridge0: port 1(bridge_slave_0) entered blocking state [ 2811.052854][T13927] bridge0: port 1(bridge_slave_0) entered disabled state [ 2811.053150][T13927] bridge_slave_0: entered allmulticast mode [ 2811.055769][T13927] bridge_slave_0: entered promiscuous mode [ 2811.059033][T13927] bridge0: port 2(bridge_slave_1) entered blocking state [ 2811.059210][T13927] bridge0: port 2(bridge_slave_1) entered disabled state [ 2811.059377][T13927] bridge_slave_1: entered allmulticast mode [ 2811.061551][T13927] bridge_slave_1: entered promiscuous mode [ 2811.166584][T13927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2811.181557][T13927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2811.328231][T13927] team0: Port device team_slave_0 added [ 2811.370765][T13927] team0: Port device team_slave_1 added [ 2811.467531][T13927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2811.467546][T13927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2811.467567][T13927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2811.472245][T13927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2811.472260][T13927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2811.472305][T13927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2811.805542][T14009] FAULT_INJECTION: forcing a failure. [ 2811.805542][T14009] name failslab, interval 1, probability 0, space 0, times 0 [ 2811.805572][T14009] CPU: 1 UID: 0 PID: 14009 Comm: syz.5.12479 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2811.805593][T14009] Tainted: [L]=SOFTLOCKUP [ 2811.805597][T14009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2811.805606][T14009] Call Trace: [ 2811.805612][T14009] [ 2811.805619][T14009] dump_stack_lvl+0xe8/0x150 [ 2811.805645][T14009] should_fail_ex+0x467/0x600 [ 2811.805672][T14009] should_failslab+0xa8/0x100 [ 2811.805691][T14009] __kmalloc_noprof+0xfe/0x780 [ 2811.805707][T14009] ? tomoyo_encode+0x2ad/0x570 [ 2811.805725][T14009] ? tomoyo_encode+0x2ad/0x570 [ 2811.805754][T14009] tomoyo_encode+0x2ad/0x570 [ 2811.805775][T14009] tomoyo_realpath_from_path+0x5fa/0x640 [ 2811.805800][T14009] ? tomoyo_path_number_perm+0x219/0x5f0 [ 2811.805815][T14009] tomoyo_path_number_perm+0x246/0x5f0 [ 2811.805832][T14009] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2811.805847][T14009] ? __lock_acquire+0x683/0x2ce0 [ 2811.805874][T14009] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2811.805892][T14009] ? hook_file_ioctl+0x1f3/0x600 [ 2811.805911][T14009] ? lockdep_hardirqs_on+0x7a/0x110 [ 2811.805942][T14009] ? __fget_files+0x2a/0x420 [ 2811.805960][T14009] ? __fget_files+0x2a/0x420 [ 2811.805973][T14009] ? __fget_files+0x3a8/0x420 [ 2811.805986][T14009] ? __fget_files+0x2a/0x420 [ 2811.806003][T14009] security_file_ioctl+0xc3/0x2a0 [ 2811.806022][T14009] __se_sys_ioctl+0x47/0x170 [ 2811.806041][T14009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2811.806057][T14009] do_syscall_64+0x174/0x580 [ 2811.806075][T14009] ? trace_irq_disable+0x3b/0x140 [ 2811.806090][T14009] ? clear_bhb_loop+0x40/0x90 [ 2811.806109][T14009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2811.806126][T14009] RIP: 0033:0x7f6fe6e6e019 [ 2811.806142][T14009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2811.806154][T14009] RSP: 002b:00007f6fe50c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2811.806171][T14009] RAX: ffffffffffffffda RBX: 00007f6fe70f5fa0 RCX: 00007f6fe6e6e019 [ 2811.806182][T14009] RDX: 0000200000000280 RSI: 0000000000003b86 RDI: 0000000000000003 [ 2811.806192][T14009] RBP: 00007f6fe50c6090 R08: 0000000000000000 R09: 0000000000000000 [ 2811.806201][T14009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2811.806210][T14009] R13: 00007f6fe70f6038 R14: 00007f6fe70f5fa0 R15: 00007ffe8ba1c768 [ 2811.806233][T14009] [ 2811.806269][T14009] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2811.810860][T14009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2811.824102][T30102] Bluetooth: hci0: command tx timeout [ 2812.698949][T14027] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2813.290121][T13927] hsr_slave_0: entered promiscuous mode [ 2813.296198][T13927] hsr_slave_1: entered promiscuous mode [ 2813.299838][T13927] debugfs: 'hsr0' already exists in 'hsr' [ 2813.299866][T13927] Cannot create hsr debugfs directory [ 2813.902402][T30102] Bluetooth: hci0: command tx timeout [ 2813.967372][T20648] bridge_slave_1: left allmulticast mode [ 2813.967408][T20648] bridge_slave_1: left promiscuous mode [ 2813.967753][T20648] bridge0: port 2(bridge_slave_1) entered disabled state [ 2814.336072][T20648] bridge_slave_0: left allmulticast mode [ 2814.336108][T20648] bridge_slave_0: left promiscuous mode [ 2814.336390][T20648] bridge0: port 1(bridge_slave_0) entered disabled state [ 2814.542474][ T9573] usb 6-1: new low-speed USB device number 41 using dummy_hcd [ 2814.715745][T14054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2814.716714][T14054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2814.720399][ T9573] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 2814.720442][ T9573] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 2814.720468][ T9573] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2814.720499][ T9573] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2814.720512][ T9573] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2814.747997][ T9573] usb 6-1: config 0 descriptor?? [ 2814.749051][T14061] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2815.185504][ T9573] corsair 0003:1B1C:1B3E.002F: unknown main item tag 0x2 [ 2815.185543][ T9573] corsair 0003:1B1C:1B3E.002F: unknown main item tag 0x6 [ 2815.185597][ T9573] corsair 0003:1B1C:1B3E.002F: unknown main item tag 0x4 [ 2815.185623][ T9573] corsair 0003:1B1C:1B3E.002F: unknown main item tag 0x0 [ 2815.241960][ T9573] corsair 0003:1B1C:1B3E.002F: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.5-1/input0 [ 2815.678667][T14083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2816.051615][T30102] Bluetooth: hci0: command tx timeout [ 2816.414177][T20648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2816.452491][T20648] bond_slave_0: left allmulticast mode [ 2816.473757][T20648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2816.516263][T20648] bond_slave_1: left allmulticast mode [ 2816.517932][T20648] bond0 (unregistering): Released all slaves [ 2816.765196][ T10] usb 6-1: reset low-speed USB device number 41 using dummy_hcd [ 2816.905778][ T5262] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2817.111340][T19619] netdevsim netdevsim2 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 2817.111578][ T1516] netdevsim netdevsim2 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 2817.111667][ T1516] netdevsim netdevsim2 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 2817.352319][ T156] netdevsim netdevsim2 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 2818.278311][T14127] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2818.333387][T14128] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2818.541415][T23196] usb 6-1: USB disconnect, device number 41 [ 2818.948842][T13927] netdevsim netdevsim2 eth12 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2819.821480][T14151] netlink: 80 bytes leftover after parsing attributes in process `syz.5.12515'. [ 2819.824261][T14151] loop8: detected capacity change from 0 to 7 [ 2819.826469][T14151] Dev loop8: unable to read RDB block 7 [ 2819.826508][T14151] loop8: unable to read partition table [ 2819.826678][T14151] loop8: partition table beyond EOD, truncated [ 2819.840965][ T5262] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2819.983097][T14151] loop_reread_partitions: partition scan of loop8 (被x^>) failed (rc=-5) [ 2820.220158][T14159] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12517'. [ 2820.359343][T14161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2820.359841][T14161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2821.746197][T14187] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2821.844408][T13927] netdevsim netdevsim2 eth11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2822.118411][T14199] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2822.352118][ T9803] usb 9-1: new low-speed USB device number 28 using dummy_hcd [ 2822.535696][ T9803] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 2822.535744][ T9803] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 2822.535770][ T9803] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2822.535807][ T9803] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2822.535830][ T9803] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2822.539716][ T9803] usb 9-1: config 0 descriptor?? [ 2822.584710][T14192] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2822.771410][T13927] netdevsim netdevsim2 eth10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2823.007627][ T9803] corsair 0003:1B1C:1B3E.0030: unknown main item tag 0x2 [ 2823.007667][ T9803] corsair 0003:1B1C:1B3E.0030: unknown main item tag 0x6 [ 2823.007696][ T9803] corsair 0003:1B1C:1B3E.0030: unknown main item tag 0x4 [ 2823.007722][ T9803] corsair 0003:1B1C:1B3E.0030: unknown main item tag 0x0 [ 2823.094455][ T9803] corsair 0003:1B1C:1B3E.0030: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.8-1/input0 [ 2823.205758][ T9803] usb 9-1: USB disconnect, device number 28 [ 2823.403512][T14215] fido_id[14215]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 2824.143173][T13927] netdevsim netdevsim2 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2824.287946][T14243] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2824.925390][T20648] hsr_slave_0: left promiscuous mode [ 2824.962749][T20648] hsr_slave_1: left promiscuous mode [ 2824.965091][T20648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2824.965117][T20648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2825.035639][T20648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2825.035664][T20648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2825.039532][T14262] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2825.107762][T14266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2825.599635][T20648] veth1_macvtap: left promiscuous mode [ 2825.599741][T20648] veth0_macvtap: left promiscuous mode [ 2825.599967][T20648] veth1_vlan: left promiscuous mode [ 2825.600096][T20648] veth0_vlan: left promiscuous mode [ 2825.962520][T20424] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2826.274037][T20424] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2826.274065][T20424] usb 6-1: config 0 has no interfaces? [ 2826.274096][T20424] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2826.274109][T20424] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2826.279260][T20424] usb 6-1: config 0 descriptor?? [ 2826.502284][T14287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2826.547571][T14289] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2826.803120][T20648] team0 (unregistering): Port device team_slave_1 removed [ 2826.864380][T20648] team0 (unregistering): Port device team_slave_0 removed [ 2828.937046][T14331] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2829.123837][T23196] usb 6-1: USB disconnect, device number 42 [ 2830.027522][T14357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2830.028157][T14357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2831.289461][T20648] IPVS: stop unused estimator thread 0... [ 2831.300361][T13927] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2831.344249][T13927] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2831.346848][T13927] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2831.409908][T13927] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2831.411421][T13927] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2831.537420][T13927] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2831.541909][T13927] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2831.574980][T13927] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2831.727260][T13927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2831.760927][T13927] 8021q: adding VLAN 0 to HW filter on device team0 [ 2831.779933][T20648] bridge0: port 1(bridge_slave_0) entered blocking state [ 2831.780132][T20648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2831.857287][T20648] bridge0: port 2(bridge_slave_1) entered blocking state [ 2831.857364][T20648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2832.631193][T13927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2832.972481][T13927] veth0_vlan: entered promiscuous mode [ 2833.058925][T13927] veth1_vlan: entered promiscuous mode [ 2833.301543][T13927] veth0_macvtap: entered promiscuous mode [ 2833.351597][T13927] veth1_macvtap: entered promiscuous mode [ 2833.364446][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 2833.364463][ T37] audit: type=1326 audit(38696727.706:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14434 comm="syz.8.12581" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ac7ee019 code=0x7ffc0000 [ 2833.364857][ T37] audit: type=1326 audit(38696727.706:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14434 comm="syz.8.12581" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ac7ee019 code=0x7ffc0000 [ 2833.377026][ T37] audit: type=1326 audit(38696727.716:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14434 comm="syz.8.12581" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ac7ee019 code=0x7ffc0000 [ 2833.377739][ T37] audit: type=1326 audit(38696727.716:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14434 comm="syz.8.12581" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ac7ee019 code=0x7ffc0000 [ 2833.377922][ T37] audit: type=1326 audit(38696727.716:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14434 comm="syz.8.12581" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f61ac7ee019 code=0x7ffc0000 [ 2833.378052][ T37] audit: type=1326 audit(38696727.716:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14434 comm="syz.8.12581" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ac7ee019 code=0x7ffc0000 [ 2833.378198][ T37] audit: type=1326 audit(38696727.716:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14434 comm="syz.8.12581" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ac7ee019 code=0x7ffc0000 [ 2833.398415][ T37] audit: type=1326 audit(38696727.736:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14434 comm="syz.8.12581" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ac7ee019 code=0x7ffc0000 [ 2833.398574][ T37] audit: type=1326 audit(38696727.736:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14434 comm="syz.8.12581" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f61ac7ee019 code=0x7ffc0000 [ 2833.399529][ T37] audit: type=1326 audit(38696727.736:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14434 comm="syz.8.12581" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ac7ee019 code=0x7ffc0000 [ 2833.710347][T13927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2833.761099][T13927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2834.082233][ T8394] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2834.092997][ T156] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2834.158593][ T8394] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2834.181166][ T8394] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2834.628065][T30422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2834.628085][T30422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2835.653477][T19619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2835.653497][T19619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2836.082255][T14459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2836.082859][T14459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2836.706649][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 2837.045650][T14489] binder: 14488:14489 ioctl c0046209 0 returned -22 [ 2838.194894][T14525] IPv6: NLM_F_CREATE should be specified when creating new route [ 2838.898797][ T37] kauditd_printk_skb: 338 callbacks suppressed [ 2838.898815][ T37] audit: type=1326 audit(38696733.236:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14544 comm="syz.5.12613" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe6e6e019 code=0x7ffc0000 [ 2838.899540][ T37] audit: type=1326 audit(38696733.236:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14544 comm="syz.5.12613" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe6e6e019 code=0x7ffc0000 [ 2838.899587][ T37] audit: type=1326 audit(38696733.236:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14544 comm="syz.5.12613" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe6e6e019 code=0x7ffc0000 [ 2838.899960][ T37] audit: type=1326 audit(38696733.236:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14544 comm="syz.5.12613" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f6fe6e6e019 code=0x7ffc0000 [ 2838.900299][ T37] audit: type=1326 audit(38696733.236:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14544 comm="syz.5.12613" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe6e6e019 code=0x7ffc0000 [ 2838.900619][ T37] audit: type=1326 audit(38696733.236:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14544 comm="syz.5.12613" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe6e6e019 code=0x7ffc0000 [ 2838.901208][ T37] audit: type=1326 audit(38696733.236:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14544 comm="syz.5.12613" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe6e6e019 code=0x7ffc0000 [ 2838.901252][ T37] audit: type=1326 audit(38696733.236:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14544 comm="syz.5.12613" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe6e6e019 code=0x7ffc0000 [ 2838.901521][ T37] audit: type=1326 audit(38696733.236:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14544 comm="syz.5.12613" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fe6e6e019 code=0x7ffc0000 [ 2838.901913][ T37] audit: type=1326 audit(38696733.236:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14544 comm="syz.5.12613" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe6e6e019 code=0x7ffc0000 [ 2839.271896][T14552] netlink: 'syz.1.12616': attribute type 6 has an invalid length. [ 2842.107048][T14621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2842.161012][T14623] IPv6: NLM_F_CREATE should be specified when creating new route [ 2843.082202][T32684] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2843.312125][T32684] usb 2-1: Using ep0 maxpacket: 8 [ 2843.318257][T32684] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 2843.318286][T32684] usb 2-1: config 179 has no interface number 0 [ 2843.318436][T32684] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2843.318465][T32684] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2843.318493][T32684] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2843.318517][T32684] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2843.318541][T32684] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2843.318581][T32684] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2843.318602][T32684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2843.460167][T14638] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2843.876705][ T822] usb 2-1: USB disconnect, device number 76 [ 2843.876741][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2843.876875][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2845.482262][T19909] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 2845.647666][T19909] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 2845.647717][T19909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 2845.647745][T19909] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2845.647789][T19909] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2845.647812][T19909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2845.655910][T19909] usb 3-1: config 0 descriptor?? [ 2845.656986][T14690] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2846.064161][T19909] corsair 0003:1B1C:1B3E.0031: unknown main item tag 0x2 [ 2846.064196][T19909] corsair 0003:1B1C:1B3E.0031: unknown main item tag 0x6 [ 2846.064223][T19909] corsair 0003:1B1C:1B3E.0031: unknown main item tag 0x4 [ 2846.064251][T19909] corsair 0003:1B1C:1B3E.0031: unknown main item tag 0x0 [ 2846.069789][T19909] corsair 0003:1B1C:1B3E.0031: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.2-1/input0 [ 2846.263546][T19909] usb 3-1: USB disconnect, device number 66 [ 2848.542272][T19909] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 2848.603220][ T37] kauditd_printk_skb: 87 callbacks suppressed [ 2848.603239][ T37] audit: type=1326 audit(38696742.946:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14760 comm="syz.5.12684" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe6e6e019 code=0x7ffc0000 [ 2848.603447][ T37] audit: type=1326 audit(38696742.946:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14760 comm="syz.5.12684" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe6e6e019 code=0x7ffc0000 [ 2848.603489][ T37] audit: type=1326 audit(38696742.946:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14760 comm="syz.5.12684" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe6e6e019 code=0x7ffc0000 [ 2848.603686][ T37] audit: type=1326 audit(38696742.946:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14760 comm="syz.5.12684" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe6e6e019 code=0x7ffc0000 [ 2848.603850][ T37] audit: type=1326 audit(38696742.946:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14760 comm="syz.5.12684" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f6fe6e6e019 code=0x7ffc0000 [ 2848.604006][ T37] audit: type=1326 audit(38696742.946:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14760 comm="syz.5.12684" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe6e6e019 code=0x7ffc0000 [ 2848.604208][ T37] audit: type=1326 audit(38696742.946:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14760 comm="syz.5.12684" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe6e6e019 code=0x7ffc0000 [ 2848.604365][ T37] audit: type=1326 audit(38696742.946:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14760 comm="syz.5.12684" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe6e6e019 code=0x7ffc0000 [ 2848.604951][ T37] audit: type=1326 audit(38696742.946:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14760 comm="syz.5.12684" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe6e6e019 code=0x7ffc0000 [ 2848.604995][ T37] audit: type=1326 audit(38696742.946:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14760 comm="syz.5.12684" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe6e6e019 code=0x7ffc0000 [ 2848.694728][T19909] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 2848.694780][T19909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 2848.694805][T19909] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2848.694932][T19909] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2848.694955][T19909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2848.720578][T19909] usb 2-1: config 0 descriptor?? [ 2848.724138][T14756] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2849.160163][T19909] corsair 0003:1B1C:1B3E.0032: unknown main item tag 0x2 [ 2849.160211][T19909] corsair 0003:1B1C:1B3E.0032: unknown main item tag 0x6 [ 2849.160238][T19909] corsair 0003:1B1C:1B3E.0032: unknown main item tag 0x4 [ 2849.160265][T19909] corsair 0003:1B1C:1B3E.0032: unknown main item tag 0x0 [ 2849.209574][T19909] corsair 0003:1B1C:1B3E.0032: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.1-1/input0 [ 2849.416927][T23196] usb 2-1: USB disconnect, device number 77 [ 2849.519532][T14766] fido_id[14766]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 2852.546902][T14866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2855.055866][T14924] netlink: 'syz.0.12740': attribute type 1 has an invalid length. [ 2855.578658][T14930] FAULT_INJECTION: forcing a failure. [ 2855.578658][T14930] name failslab, interval 1, probability 0, space 0, times 0 [ 2855.578682][T14930] CPU: 1 UID: 0 PID: 14930 Comm: syz.1.12743 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2855.578698][T14930] Tainted: [L]=SOFTLOCKUP [ 2855.578702][T14930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2855.578708][T14930] Call Trace: [ 2855.578713][T14930] [ 2855.578718][T14930] dump_stack_lvl+0xe8/0x150 [ 2855.578740][T14930] should_fail_ex+0x467/0x600 [ 2855.578761][T14930] should_failslab+0xa8/0x100 [ 2855.578776][T14930] __kmalloc_cache_noprof+0xa0/0x6b0 [ 2855.578788][T14930] ? ip6_setup_cork+0x613/0xf60 [ 2855.578892][T14930] ? ip6_setup_cork+0x613/0xf60 [ 2855.578908][T14930] ip6_setup_cork+0x613/0xf60 [ 2855.578921][T14930] ? __lock_acquire+0x683/0x2ce0 [ 2855.578936][T14930] ip6_make_skb+0x1e7/0x350 [ 2855.578949][T14930] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 2855.578972][T14930] ? __pfx_ip6_make_skb+0x10/0x10 [ 2855.578996][T14930] ? ip6_dst_hoplimit+0x65/0x3e0 [ 2855.579006][T14930] ? ip6_dst_hoplimit+0x65/0x3e0 [ 2855.579019][T14930] udpv6_sendmsg+0x1dfb/0x2610 [ 2855.579071][T14930] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 2855.579090][T14930] ? __lock_acquire+0x683/0x2ce0 [ 2855.579117][T14930] ? __asan_memset+0x22/0x50 [ 2855.579137][T14930] ? inet_send_prepare+0x5b/0x260 [ 2855.579173][T14930] ? inet6_sendmsg+0xe4/0x120 [ 2855.579183][T14930] ? __pfx_inet6_sendmsg+0x10/0x10 [ 2855.579192][T14930] sock_sendmsg_nosec+0x90/0x180 [ 2855.579245][T14930] ____sys_sendmsg+0x565/0x870 [ 2855.579259][T14930] ? __might_fault+0xaf/0x130 [ 2855.579273][T14930] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2855.579291][T14930] ? import_iovec+0x73/0xa0 [ 2855.579305][T14930] ___sys_sendmsg+0x2a5/0x360 [ 2855.579318][T14930] ? __lock_acquire+0x683/0x2ce0 [ 2855.579330][T14930] ? __pfx____sys_sendmsg+0x10/0x10 [ 2855.579346][T14930] ? kstrtouint+0x6e/0xe0 [ 2855.579373][T14930] ? __fget_files+0x2a/0x420 [ 2855.579384][T14930] ? __fget_files+0x3a8/0x420 [ 2855.579406][T14930] __sys_sendmmsg+0x279/0x4d0 [ 2855.579422][T14930] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2855.579440][T14930] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2855.579459][T14930] ? ksys_write+0x248/0x270 [ 2855.579473][T14930] ? __pfx_ksys_write+0x10/0x10 [ 2855.579489][T14930] __x64_sys_sendmmsg+0xa0/0xc0 [ 2855.579502][T14930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2855.579513][T14930] do_syscall_64+0x174/0x580 [ 2855.579527][T14930] ? trace_irq_disable+0x3b/0x140 [ 2855.579538][T14930] ? clear_bhb_loop+0x40/0x90 [ 2855.579551][T14930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2855.579561][T14930] RIP: 0033:0x7fbeb479e019 [ 2855.579573][T14930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2855.579582][T14930] RSP: 002b:00007fbeb29f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2855.579594][T14930] RAX: ffffffffffffffda RBX: 00007fbeb4a25fa0 RCX: 00007fbeb479e019 [ 2855.579602][T14930] RDX: 000000000000003b RSI: 0000200000001840 RDI: 0000000000000003 [ 2855.579609][T14930] RBP: 00007fbeb29f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2855.579615][T14930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2855.579621][T14930] R13: 00007fbeb4a26038 R14: 00007fbeb4a25fa0 R15: 00007ffde0cd1208 [ 2855.579637][T14930] [ 2855.960765][T14940] lo speed is unknown, defaulting to 1000 [ 2857.808920][T14988] netlink: 'syz.0.12761': attribute type 1 has an invalid length. [ 2862.272212][T19909] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 2862.448649][T19909] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 2862.448679][T19909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 2862.448694][T19909] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2862.448718][T19909] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2862.448730][T19909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2862.475034][T19909] usb 3-1: config 0 descriptor?? [ 2862.475853][T15092] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2862.939441][T19909] corsair 0003:1B1C:1B3E.0033: unknown main item tag 0x2 [ 2862.939479][T19909] corsair 0003:1B1C:1B3E.0033: unknown main item tag 0x6 [ 2862.939508][T19909] corsair 0003:1B1C:1B3E.0033: unknown main item tag 0x4 [ 2862.939536][T19909] corsair 0003:1B1C:1B3E.0033: unknown main item tag 0x0 [ 2863.018789][T19909] corsair 0003:1B1C:1B3E.0033: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.2-1/input0 [ 2863.146003][T19909] usb 3-1: USB disconnect, device number 67 [ 2863.644681][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12797'. [ 2863.650023][T15119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2863.650576][T15119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2863.745705][T15117] IPVS: persistence engine module ip_vs_pe_ not found [ 2865.164244][T15155] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2865.576887][T15166] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2865.916304][T15174] IPVS: persistence engine module ip_vs_pe_ not found [ 2866.804569][T15194] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2867.870330][T15214] input: syz0 as /devices/virtual/input/input31 [ 2868.026574][T15214] netlink: 'syz.5.12824': attribute type 1 has an invalid length. [ 2868.026588][T15214] netlink: 224 bytes leftover after parsing attributes in process `syz.5.12824'. [ 2870.513762][ T10] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 2870.662286][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 2870.666203][ T10] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 2870.666232][ T10] usb 9-1: config 179 has no interface number 0 [ 2870.666422][ T10] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2870.666450][ T10] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2870.666478][ T10] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2870.666504][ T10] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2870.666531][ T10] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2870.666575][ T10] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2870.666597][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2870.678901][T15251] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2871.190480][ T9803] usb 9-1: USB disconnect, device number 29 [ 2871.190583][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2871.190643][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2872.829078][T15321] FAULT_INJECTION: forcing a failure. [ 2872.829078][T15321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2872.829112][T15321] CPU: 0 UID: 0 PID: 15321 Comm: syz.1.12861 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2872.829136][T15321] Tainted: [L]=SOFTLOCKUP [ 2872.829143][T15321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2872.829154][T15321] Call Trace: [ 2872.829162][T15321] [ 2872.829171][T15321] dump_stack_lvl+0xe8/0x150 [ 2872.829205][T15321] should_fail_ex+0x467/0x600 [ 2872.829242][T15321] _copy_to_user+0x31/0xb0 [ 2872.829267][T15321] simple_read_from_buffer+0xe1/0x170 [ 2872.829294][T15321] proc_fail_nth_read+0x1be/0x230 [ 2872.829319][T15321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2872.829340][T15321] ? rw_verify_area+0x250/0x4d0 [ 2872.829374][T15321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2872.829393][T15321] vfs_read+0x219/0xa90 [ 2872.829419][T15321] ? __pfx_vfs_read+0x10/0x10 [ 2872.829441][T15321] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2872.829467][T15321] ? lockdep_hardirqs_on+0x7a/0x110 [ 2872.829489][T15321] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2872.829511][T15321] ? mutex_lock_nested+0x152/0x1d0 [ 2872.829526][T15321] ? fdget_pos+0x252/0x320 [ 2872.829553][T15321] ksys_read+0x156/0x270 [ 2872.829576][T15321] ? __pfx_ksys_read+0x10/0x10 [ 2872.829603][T15321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2872.829621][T15321] do_syscall_64+0x174/0x580 [ 2872.829638][T15321] ? trace_irq_disable+0x3b/0x140 [ 2872.829651][T15321] ? clear_bhb_loop+0x40/0x90 [ 2872.829664][T15321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2872.829674][T15321] RIP: 0033:0x7fbeb475e84e [ 2872.829686][T15321] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2872.829695][T15321] RSP: 002b:00007fbeb29f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2872.829707][T15321] RAX: ffffffffffffffda RBX: 00007fbeb29f66c0 RCX: 00007fbeb475e84e [ 2872.829715][T15321] RDX: 000000000000000f RSI: 00007fbeb29f60a0 RDI: 0000000000000004 [ 2872.829721][T15321] RBP: 00007fbeb29f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2872.829728][T15321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2872.829734][T15321] R13: 00007fbeb4a26038 R14: 00007fbeb4a25fa0 R15: 00007ffde0cd1208 [ 2872.829751][T15321] [ 2873.735953][T15341] netlink: 'syz.2.12866': attribute type 1 has an invalid length. [ 2873.735976][T15341] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12866'. [ 2875.348533][ T37] kauditd_printk_skb: 182 callbacks suppressed [ 2875.348551][ T37] audit: type=1326 audit(38696769.686:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15390 comm="syz.1.12883" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb479e019 code=0x7ffc0000 [ 2875.348599][ T37] audit: type=1326 audit(38696769.686:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15390 comm="syz.1.12883" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb479e019 code=0x7ffc0000 [ 2875.348869][ T37] audit: type=1326 audit(38696769.686:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15390 comm="syz.1.12883" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb479e019 code=0x7ffc0000 [ 2875.349174][ T37] audit: type=1326 audit(38696769.686:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15390 comm="syz.1.12883" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fbeb479e019 code=0x7ffc0000 [ 2875.349213][ T37] audit: type=1326 audit(38696769.686:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15390 comm="syz.1.12883" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb479e019 code=0x7ffc0000 [ 2875.349424][ T37] audit: type=1326 audit(38696769.686:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15390 comm="syz.1.12883" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb479e019 code=0x7ffc0000 [ 2875.349648][ T37] audit: type=1326 audit(38696769.686:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15390 comm="syz.1.12883" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb479e019 code=0x7ffc0000 [ 2875.349691][ T37] audit: type=1326 audit(38696769.686:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15390 comm="syz.1.12883" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb479e019 code=0x7ffc0000 [ 2875.349879][ T37] audit: type=1326 audit(38696769.686:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15390 comm="syz.1.12883" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fbeb479e019 code=0x7ffc0000 [ 2875.349990][ T37] audit: type=1326 audit(38696769.686:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15390 comm="syz.1.12883" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb479e019 code=0x7ffc0000 [ 2877.822175][ T9803] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 2877.993871][ T9803] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2877.993899][ T9803] usb 9-1: config 0 has no interfaces? [ 2877.993928][ T9803] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2877.993951][ T9803] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2877.998639][ T9803] usb 9-1: config 0 descriptor?? [ 2878.895389][T15471] IPVS: persistence engine module ip_vs_pe_ not found [ 2880.523408][ T9803] usb 9-1: USB disconnect, device number 30 [ 2882.612252][T32684] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2882.765476][T32684] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2882.765493][T32684] usb 3-1: config 0 has no interfaces? [ 2882.765511][T32684] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2882.765523][T32684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2882.771127][T32684] usb 3-1: config 0 descriptor?? [ 2884.052134][T19909] usb 9-1: new low-speed USB device number 31 using dummy_hcd [ 2884.234486][T19909] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 2884.234534][T19909] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 2884.234549][T19909] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2884.234573][T19909] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2884.234585][T19909] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2884.238582][T19909] usb 9-1: config 0 descriptor?? [ 2884.239947][T15560] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2884.650708][T19909] corsair 0003:1B1C:1B3E.0034: unknown main item tag 0x2 [ 2884.650745][T19909] corsair 0003:1B1C:1B3E.0034: unknown main item tag 0x6 [ 2884.650770][T19909] corsair 0003:1B1C:1B3E.0034: unknown main item tag 0x4 [ 2884.650795][T19909] corsair 0003:1B1C:1B3E.0034: unknown main item tag 0x0 [ 2884.659795][T19909] corsair 0003:1B1C:1B3E.0034: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.8-1/input0 [ 2884.854841][T19909] usb 9-1: USB disconnect, device number 31 [ 2885.425510][ T9803] usb 3-1: USB disconnect, device number 68 [ 2888.756550][T15672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12967'. [ 2889.012973][ T9803] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 2889.168812][ T9803] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 2889.168848][ T9803] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 2889.168862][ T9803] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2889.168887][ T9803] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2889.168900][ T9803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2889.176540][ T9803] usb 3-1: config 0 descriptor?? [ 2889.177580][T15672] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2889.441763][ T37] kauditd_printk_skb: 62 callbacks suppressed [ 2889.441781][ T37] audit: type=1326 audit(38696783.776:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15678 comm="syz.8.12969" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61ac7ee019 code=0x0 [ 2889.607149][ T9803] corsair 0003:1B1C:1B3E.0035: unknown main item tag 0x2 [ 2889.607187][ T9803] corsair 0003:1B1C:1B3E.0035: unknown main item tag 0x6 [ 2889.607215][ T9803] corsair 0003:1B1C:1B3E.0035: unknown main item tag 0x4 [ 2889.607243][ T9803] corsair 0003:1B1C:1B3E.0035: unknown main item tag 0x0 [ 2889.667094][ T9803] corsair 0003:1B1C:1B3E.0035: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.2-1/input0 [ 2889.798467][ T9803] usb 3-1: USB disconnect, device number 69 [ 2892.243894][ T37] audit: type=1326 audit(38696786.586:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15732 comm="syz.5.12983" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6fe6e6e019 code=0x0 [ 2894.663746][T15780] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2895.066584][ T37] audit: type=1326 audit(38696789.406:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15787 comm="syz.8.12999" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61ac7ee019 code=0x0 [ 2896.232191][T32684] usb 9-1: new low-speed USB device number 32 using dummy_hcd [ 2896.384228][T32684] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 2896.384268][T32684] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 2896.384283][T32684] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2896.384307][T32684] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2896.384320][T32684] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2896.389354][T32684] usb 9-1: config 0 descriptor?? [ 2896.390220][T15807] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2896.816264][T32684] corsair 0003:1B1C:1B3E.0036: unknown main item tag 0x2 [ 2896.816300][T32684] corsair 0003:1B1C:1B3E.0036: unknown main item tag 0x6 [ 2896.816328][T32684] corsair 0003:1B1C:1B3E.0036: unknown main item tag 0x4 [ 2896.816355][T32684] corsair 0003:1B1C:1B3E.0036: unknown main item tag 0x0 [ 2896.852981][T32684] corsair 0003:1B1C:1B3E.0036: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.8-1/input0 [ 2896.999743][T32684] usb 9-1: USB disconnect, device number 32 [ 2897.573279][ T9803] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2897.725098][ T9803] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2897.725127][ T9803] usb 2-1: config 0 has no interfaces? [ 2897.725158][ T9803] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2897.725181][ T9803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2897.739791][ T9803] usb 2-1: config 0 descriptor?? [ 2898.146171][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 2900.262345][T32684] usb 6-1: new low-speed USB device number 43 using dummy_hcd [ 2900.354795][ T10] usb 2-1: USB disconnect, device number 78 [ 2900.416561][T32684] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 2900.416610][T32684] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 2900.416637][T32684] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2900.416678][T32684] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2900.416700][T32684] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2900.477628][T32684] usb 6-1: config 0 descriptor?? [ 2900.478679][T15884] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2900.888648][T32684] corsair 0003:1B1C:1B3E.0037: unknown main item tag 0x2 [ 2900.888687][T32684] corsair 0003:1B1C:1B3E.0037: unknown main item tag 0x6 [ 2900.888715][T32684] corsair 0003:1B1C:1B3E.0037: unknown main item tag 0x4 [ 2900.888743][T32684] corsair 0003:1B1C:1B3E.0037: unknown main item tag 0x0 [ 2900.955080][T32684] corsair 0003:1B1C:1B3E.0037: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.5-1/input0 [ 2901.087177][T32684] usb 6-1: USB disconnect, device number 43 [ 2921.672287][T23196] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 2921.826136][T23196] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2921.826165][T23196] usb 9-1: config 0 has no interfaces? [ 2921.826197][T23196] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2921.826217][T23196] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2921.834982][T23196] usb 9-1: config 0 descriptor?? [ 2923.398397][T16343] IPVS: persistence engine module ip_vs_pe_ not found [ 2924.473352][T23196] usb 9-1: USB disconnect, device number 33 [ 2924.564051][ T9803] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2924.712282][ T9803] usb 3-1: Using ep0 maxpacket: 32 [ 2924.715873][ T9803] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 8 [ 2924.715901][ T9803] usb 3-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 2924.715913][ T9803] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 2924.718401][ T9803] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 2924.718425][ T9803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2924.718436][ T9803] usb 3-1: Product: 鐣⸬節㏞엧鍧Ἆ㘶퍸蔹л䮰첻僈ꝸ闁㫅뿡誙쳁䬺Ŷ쬥霙ᛠ鉏뼀쇾瞑厁퉻ᩤ꯱ί賂祐ⱡ鼜ႛꖺ럶薤㪄葫봍﬷㇯콧撪첣簎牟४臝ꎝ㯏஽⍾쁏晖烞㶊憄犎쩥Ⴡ吝奅濳烗ㅚ춋ᓧౠ㏭任渎봫⡧厘蹕⯟⻸ㇱ㴺闓뾋℁为漯竍ݒ긋䚹탟掀ǁ匸 [ 2924.718452][ T9803] usb 3-1: Manufacturer: 䣢촌჏㩦郮賐亪뭽較떒命㌳ [ 2924.718461][ T9803] usb 3-1: SerialNumber: 䫣ㆧ膻밴禢繠ꤙ濂⓪㺺먝죊薌甂扝巚㫎젛淽㍺㐇瑑▻匇ⲑ깍 [ 2924.828666][T16361] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2925.045061][ T9803] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2925.045135][ T9803] usb 3-1: MIDIStreaming interface descriptor not found [ 2925.199263][ T9803] usb 3-1: USB disconnect, device number 70 [ 2925.354332][T13558] udevd[13558]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 2925.674920][T23196] usb 2-1: new low-speed USB device number 79 using dummy_hcd [ 2925.826549][T23196] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 2925.826579][T23196] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 2925.826594][T23196] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2925.826618][T23196] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2925.826635][T23196] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2925.833567][T23196] usb 2-1: config 0 descriptor?? [ 2925.870954][T16378] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2926.324477][T23196] corsair 0003:1B1C:1B3E.0038: unknown main item tag 0x2 [ 2926.324515][T23196] corsair 0003:1B1C:1B3E.0038: unknown main item tag 0x6 [ 2926.324542][T23196] corsair 0003:1B1C:1B3E.0038: unknown main item tag 0x4 [ 2926.324568][T23196] corsair 0003:1B1C:1B3E.0038: unknown main item tag 0x0 [ 2926.378542][T23196] corsair 0003:1B1C:1B3E.0038: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.1-1/input0 [ 2926.554026][T23196] usb 2-1: USB disconnect, device number 79 [ 2929.032306][ T9803] usb 6-1: new low-speed USB device number 44 using dummy_hcd [ 2929.206035][ T9803] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 2929.206096][ T9803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 2929.206125][ T9803] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2929.206169][ T9803] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2929.206193][ T9803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2929.291695][ T9803] usb 6-1: config 0 descriptor?? [ 2929.292460][T16439] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2929.709166][ T9803] corsair 0003:1B1C:1B3E.0039: unknown main item tag 0x2 [ 2929.709205][ T9803] corsair 0003:1B1C:1B3E.0039: unknown main item tag 0x6 [ 2929.711011][ T9803] corsair 0003:1B1C:1B3E.0039: unknown main item tag 0x4 [ 2929.711049][ T9803] corsair 0003:1B1C:1B3E.0039: unknown main item tag 0x0 [ 2929.771486][ T9803] corsair 0003:1B1C:1B3E.0039: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.5-1/input0 [ 2929.914593][ T9573] usb 6-1: USB disconnect, device number 44 [ 2930.942342][T30102] Bluetooth: hci0: command 0x0406 tx timeout [ 2933.828244][T16540] IPVS: persistence engine module ip_vs_pe_ not found [ 2937.898005][T16620] netlink: 16 bytes leftover after parsing attributes in process `syz.8.13231'. [ 2937.898032][T16620] netlink: 52 bytes leftover after parsing attributes in process `syz.8.13231'. [ 2937.929990][T16620] fuse: Bad value for 'group_id' [ 2937.930034][T16620] fuse: Bad value for 'group_id' [ 2937.932492][T16620] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13231'. [ 2940.552247][ T5589] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2940.712623][ T5589] usb 3-1: Using ep0 maxpacket: 32 [ 2940.719533][ T5589] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 8 [ 2940.719566][ T5589] usb 3-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 2940.719588][ T5589] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 2940.721828][ T5589] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 2940.721856][ T5589] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2940.721876][ T5589] usb 3-1: Product: 鐣⸬節㏞엧鍧Ἆ㘶퍸蔹л䮰첻僈ꝸ闁㫅뿡誙쳁䬺Ŷ쬥霙ᛠ鉏뼀쇾瞑厁퉻ᩤ꯱ί賂祐ⱡ鼜ႛꖺ럶薤㪄葫봍﬷㇯콧撪첣簎牟४臝ꎝ㯏஽⍾쁏晖烞㶊憄犎쩥Ⴡ吝奅濳烗ㅚ춋ᓧౠ㏭任渎봫⡧厘蹕⯟⻸ㇱ㴺闓뾋℁为漯竍ݒ긋䚹탟掀ǁ匸 [ 2940.721906][ T5589] usb 3-1: Manufacturer: 䣢촌჏㩦郮賐亪뭽較떒命㌳ [ 2940.721923][ T5589] usb 3-1: SerialNumber: 䫣ㆧ膻밴禢繠ꤙ濂⓪㺺먝죊薌甂扝巚㫎젛淽㍺㐇瑑▻匇ⲑ깍 [ 2940.830381][T16668] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2941.078271][ T5589] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2941.078305][ T5589] usb 3-1: MIDIStreaming interface descriptor not found [ 2941.178916][ T5589] usb 3-1: USB disconnect, device number 71 [ 2941.307454][T13558] udevd[13558]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 2942.422173][T19909] usb 6-1: new low-speed USB device number 45 using dummy_hcd [ 2942.577126][T19909] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 2942.577177][T19909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 2942.577204][T19909] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2942.577246][T19909] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2942.577269][T19909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2942.636171][T19909] usb 6-1: config 0 descriptor?? [ 2942.636975][T16701] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2943.045301][T19909] corsair 0003:1B1C:1B3E.003A: unknown main item tag 0x2 [ 2943.045431][T19909] corsair 0003:1B1C:1B3E.003A: unknown main item tag 0x6 [ 2943.045460][T19909] corsair 0003:1B1C:1B3E.003A: unknown main item tag 0x4 [ 2943.045486][T19909] corsair 0003:1B1C:1B3E.003A: unknown main item tag 0x0 [ 2943.050350][T19909] corsair 0003:1B1C:1B3E.003A: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.5-1/input0 [ 2943.251366][T23196] usb 6-1: USB disconnect, device number 45 [ 2944.480827][T16748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2944.481545][T16748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2945.926153][T16783] FAULT_INJECTION: forcing a failure. [ 2945.926153][T16783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2945.926200][T16783] CPU: 0 UID: 0 PID: 16783 Comm: syz.2.13277 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2945.926228][T16783] Tainted: [L]=SOFTLOCKUP [ 2945.926234][T16783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2945.926246][T16783] Call Trace: [ 2945.926254][T16783] [ 2945.926263][T16783] dump_stack_lvl+0xe8/0x150 [ 2945.926299][T16783] should_fail_ex+0x467/0x600 [ 2945.926333][T16783] _copy_from_user+0x2d/0xb0 [ 2945.926356][T16783] __sys_bpf+0x2e7/0xd90 [ 2945.926385][T16783] ? __pfx___sys_bpf+0x10/0x10 [ 2945.926407][T16783] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2945.926438][T16783] ? rt_mutex_slowunlock+0x219/0x460 [ 2945.926475][T16783] ? ksys_write+0x248/0x270 [ 2945.926501][T16783] ? __pfx_ksys_write+0x10/0x10 [ 2945.926528][T16783] __x64_sys_bpf+0xba/0xd0 [ 2945.926556][T16783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2945.926577][T16783] do_syscall_64+0x174/0x580 [ 2945.926600][T16783] ? trace_irq_disable+0x3b/0x140 [ 2945.926619][T16783] ? clear_bhb_loop+0x40/0x90 [ 2945.926639][T16783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2945.926655][T16783] RIP: 0033:0x7fb3610ee019 [ 2945.926672][T16783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2945.926687][T16783] RSP: 002b:00007fb35f346028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2945.926705][T16783] RAX: ffffffffffffffda RBX: 00007fb361375fa0 RCX: 00007fb3610ee019 [ 2945.926713][T16783] RDX: 0000000000000020 RSI: 00002000000003c0 RDI: 0000000000000008 [ 2945.926720][T16783] RBP: 00007fb35f346090 R08: 0000000000000000 R09: 0000000000000000 [ 2945.926726][T16783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2945.926732][T16783] R13: 00007fb361376038 R14: 00007fb361375fa0 R15: 00007fff902799e8 [ 2945.926748][T16783] [ 2946.072405][T19909] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 2946.322206][T19909] usb 9-1: Using ep0 maxpacket: 32 [ 2946.326969][T19909] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 8 [ 2946.327010][T19909] usb 9-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 2946.327034][T19909] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 2946.330690][T19909] usb 9-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 2946.330722][T19909] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2946.330743][T19909] usb 9-1: Product: 鐣⸬節㏞엧鍧Ἆ㘶퍸蔹л䮰첻僈ꝸ闁㫅뿡誙쳁䬺Ŷ쬥霙ᛠ鉏뼀쇾瞑厁퉻ᩤ꯱ί賂祐ⱡ鼜ႛꖺ럶薤㪄葫봍﬷㇯콧撪첣簎牟४臝ꎝ㯏஽⍾쁏晖烞㶊憄犎쩥Ⴡ吝奅濳烗ㅚ춋ᓧౠ㏭任渎봫⡧厘蹕⯟⻸ㇱ㴺闓뾋℁为漯竍ݒ긋䚹탟掀ǁ匸 [ 2946.330775][T19909] usb 9-1: Manufacturer: 䣢촌჏㩦郮賐亪뭽較떒命㌳ [ 2946.330791][T19909] usb 9-1: SerialNumber: 䫣ㆧ膻밴禢繠ꤙ濂⓪㺺먝죊薌甂扝巚㫎젛淽㍺㐇瑑▻匇ⲑ깍 [ 2946.442855][T16781] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2946.667506][T19909] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 2946.667558][T19909] usb 9-1: MIDIStreaming interface descriptor not found [ 2946.829495][T19909] usb 9-1: USB disconnect, device number 34 [ 2947.486711][T16824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2947.488713][T16824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2947.886447][T16830] netlink: 'syz.1.13292': attribute type 1 has an invalid length. [ 2947.886468][T16830] netlink: 224 bytes leftover after parsing attributes in process `syz.1.13292'. [ 2948.928402][T16855] FAULT_INJECTION: forcing a failure. [ 2948.928402][T16855] name failslab, interval 1, probability 0, space 0, times 0 [ 2948.928426][T16855] CPU: 0 UID: 0 PID: 16855 Comm: syz.5.13300 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2948.928441][T16855] Tainted: [L]=SOFTLOCKUP [ 2948.928445][T16855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2948.928452][T16855] Call Trace: [ 2948.928456][T16855] [ 2948.928464][T16855] dump_stack_lvl+0xe8/0x150 [ 2948.928485][T16855] should_fail_ex+0x467/0x600 [ 2948.928505][T16855] should_failslab+0xa8/0x100 [ 2948.928521][T16855] __kmalloc_noprof+0xfe/0x780 [ 2948.928534][T16855] ? tomoyo_encode+0x2ad/0x570 [ 2948.928548][T16855] ? tomoyo_encode+0x2ad/0x570 [ 2948.928565][T16855] tomoyo_encode+0x2ad/0x570 [ 2948.928580][T16855] tomoyo_realpath_from_path+0x5fa/0x640 [ 2948.928599][T16855] ? tomoyo_path_number_perm+0x219/0x5f0 [ 2948.928610][T16855] tomoyo_path_number_perm+0x246/0x5f0 [ 2948.928624][T16855] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2948.928637][T16855] ? sb_end_write+0xe5/0x190 [ 2948.928648][T16855] ? vfs_write+0x9e0/0xbb0 [ 2948.928663][T16855] ? hook_file_ioctl+0x1f3/0x600 [ 2948.928692][T16855] ? ksys_write+0x202/0x270 [ 2948.928708][T16855] security_file_ioctl+0xc3/0x2a0 [ 2948.928722][T16855] __se_sys_ioctl+0x47/0x170 [ 2948.928749][T16855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2948.928769][T16855] do_syscall_64+0x174/0x580 [ 2948.928792][T16855] ? trace_irq_disable+0x3b/0x140 [ 2948.928811][T16855] ? clear_bhb_loop+0x40/0x90 [ 2948.928834][T16855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2948.928852][T16855] RIP: 0033:0x7f6fe6e6e019 [ 2948.928870][T16855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2948.928880][T16855] RSP: 002b:00007f6fe50c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2948.928892][T16855] RAX: ffffffffffffffda RBX: 00007f6fe70f5fa0 RCX: 00007f6fe6e6e019 [ 2948.928900][T16855] RDX: 0000000000000000 RSI: 0000000000000707 RDI: 0000000000000003 [ 2948.928907][T16855] RBP: 00007f6fe50c6090 R08: 0000000000000000 R09: 0000000000000000 [ 2948.928913][T16855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2948.928919][T16855] R13: 00007f6fe70f6038 R14: 00007f6fe70f5fa0 R15: 00007ffe8ba1c768 [ 2948.928943][T16855] [ 2948.929032][T16855] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2949.582368][ T9573] usb 6-1: new low-speed USB device number 46 using dummy_hcd [ 2949.692172][ T9803] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2949.734542][ T9573] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 2949.734592][ T9573] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 2949.734619][ T9573] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2949.734662][ T9573] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2949.734686][ T9573] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2949.740845][ T9573] usb 6-1: config 0 descriptor?? [ 2949.743385][T16857] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2949.892287][ T9803] usb 2-1: Using ep0 maxpacket: 32 [ 2949.901873][ T9803] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 8 [ 2949.901905][ T9803] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 2949.901929][ T9803] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 2949.941660][ T9803] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 2949.941692][ T9803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2949.941711][ T9803] usb 2-1: Product: 鐣⸬節㏞엧鍧Ἆ㘶퍸蔹л䮰첻僈ꝸ闁㫅뿡誙쳁䬺Ŷ쬥霙ᛠ鉏뼀쇾瞑厁퉻ᩤ꯱ί賂祐ⱡ鼜ႛꖺ럶薤㪄葫봍﬷㇯콧撪첣簎牟४臝ꎝ㯏஽⍾쁏晖烞㶊憄犎쩥Ⴡ吝奅濳烗ㅚ춋ᓧౠ㏭任渎봫⡧厘蹕⯟⻸ㇱ㴺闓뾋℁为漯竍ݒ긋䚹탟掀ǁ匸 [ 2949.941752][ T9803] usb 2-1: Manufacturer: 䣢촌჏㩦郮賐亪뭽較떒命㌳ [ 2949.941769][ T9803] usb 2-1: SerialNumber: 䫣ㆧ膻밴禢繠ꤙ濂⓪㺺먝죊薌甂扝巚㫎젛淽㍺㐇瑑▻匇ⲑ깍 [ 2950.024826][T16863] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2950.156700][ T9573] corsair 0003:1B1C:1B3E.003B: unknown main item tag 0x2 [ 2950.156737][ T9573] corsair 0003:1B1C:1B3E.003B: unknown main item tag 0x6 [ 2950.156766][ T9573] corsair 0003:1B1C:1B3E.003B: unknown main item tag 0x4 [ 2950.156793][ T9573] corsair 0003:1B1C:1B3E.003B: unknown main item tag 0x0 [ 2950.164877][ T9573] corsair 0003:1B1C:1B3E.003B: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.5-1/input0 [ 2950.300377][ T9803] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2950.300437][ T9803] usb 2-1: MIDIStreaming interface descriptor not found [ 2950.398701][ T10] usb 6-1: USB disconnect, device number 46 [ 2950.473921][ T9803] usb 2-1: USB disconnect, device number 80 [ 2950.997811][T16892] netlink: 'syz.5.13311': attribute type 3 has an invalid length. [ 2950.997833][T16892] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13311'. [ 2950.997851][T16892] netlink: 'syz.5.13311': attribute type 3 has an invalid length. [ 2950.997863][T16892] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13311'. [ 2951.212213][ T9803] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2951.372294][ T9803] usb 2-1: Using ep0 maxpacket: 32 [ 2951.377047][ T9803] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 8 [ 2951.377079][ T9803] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 2951.377189][ T9803] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 2951.379767][ T9803] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 2951.379797][ T9803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2951.379813][ T9803] usb 2-1: Product: 鐣⸬節㏞엧鍧Ἆ㘶퍸蔹л䮰첻僈ꝸ闁㫅뿡誙쳁䬺Ŷ쬥霙ᛠ鉏뼀쇾瞑厁퉻ᩤ꯱ί賂祐ⱡ鼜ႛꖺ럶薤㪄葫봍﬷㇯콧撪첣簎牟४臝ꎝ㯏஽⍾쁏晖烞㶊憄犎쩥Ⴡ吝奅濳烗ㅚ춋ᓧౠ㏭任渎봫⡧厘蹕⯟⻸ㇱ㴺闓뾋℁为漯竍ݒ긋䚹탟掀ǁ匸 [ 2951.379829][ T9803] usb 2-1: Manufacturer: 䣢촌჏㩦郮賐亪뭽較떒命㌳ [ 2951.379838][ T9803] usb 2-1: SerialNumber: 䫣ㆧ膻밴禢繠ꤙ濂⓪㺺먝죊薌甂扝巚㫎젛淽㍺㐇瑑▻匇ⲑ깍 [ 2951.488926][T16888] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2951.719928][ T9803] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2951.719965][ T9803] usb 2-1: MIDIStreaming interface descriptor not found [ 2951.865163][ T9803] usb 2-1: USB disconnect, device number 81 [ 2952.017719][T13558] udevd[13558]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 2954.062591][ T9803] usb 9-1: new low-speed USB device number 35 using dummy_hcd [ 2954.235255][ T9803] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 2954.235304][ T9803] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 2954.235330][ T9803] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2954.235369][ T9803] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2954.235392][ T9803] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2954.239103][ T9803] usb 9-1: config 0 descriptor?? [ 2954.241057][T16945] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2954.659133][ T9803] corsair 0003:1B1C:1B3E.003C: unknown main item tag 0x2 [ 2954.659181][ T9803] corsair 0003:1B1C:1B3E.003C: unknown main item tag 0x6 [ 2954.659210][ T9803] corsair 0003:1B1C:1B3E.003C: unknown main item tag 0x4 [ 2954.659238][ T9803] corsair 0003:1B1C:1B3E.003C: unknown main item tag 0x0 [ 2954.727478][ T9803] corsair 0003:1B1C:1B3E.003C: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.8-1/input0 [ 2954.866381][ T9573] usb 9-1: USB disconnect, device number 35 [ 2956.212342][ T5589] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 2956.388197][ T5589] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2956.388226][ T5589] usb 2-1: config 0 has no interfaces? [ 2956.388256][ T5589] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2956.388278][ T5589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2956.428199][ T5589] usb 2-1: config 0 descriptor?? [ 2959.026203][ T5589] usb 2-1: USB disconnect, device number 82 [ 2959.552129][ T5589] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 2959.596689][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.702300][ T5589] usb 2-1: Using ep0 maxpacket: 32 [ 2959.708307][ T5589] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 8 [ 2959.708539][ T5589] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 2959.708567][ T5589] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 2959.755123][ T5589] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 2959.755153][ T5589] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2959.755172][ T5589] usb 2-1: Product: 鐣⸬節㏞엧鍧Ἆ㘶퍸蔹л䮰첻僈ꝸ闁㫅뿡誙쳁䬺Ŷ쬥霙ᛠ鉏뼀쇾瞑厁퉻ᩤ꯱ί賂祐ⱡ鼜ႛꖺ럶薤㪄葫봍﬷㇯콧撪첣簎牟४臝ꎝ㯏஽⍾쁏晖烞㶊憄犎쩥Ⴡ吝奅濳烗ㅚ춋ᓧౠ㏭任渎봫⡧厘蹕⯟⻸ㇱ㴺闓뾋℁为漯竍ݒ긋䚹탟掀ǁ匸 [ 2959.755296][ T5589] usb 2-1: Manufacturer: 䣢촌჏㩦郮賐亪뭽較떒命㌳ [ 2959.755314][ T5589] usb 2-1: SerialNumber: 䫣ㆧ膻밴禢繠ꤙ濂⓪㺺먝죊薌甂扝巚㫎젛淽㍺㐇瑑▻匇ⲑ깍 [ 2959.806350][T17037] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2960.040754][ T5589] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2960.040809][ T5589] usb 2-1: MIDIStreaming interface descriptor not found [ 2960.226544][ T5589] usb 2-1: USB disconnect, device number 83 [ 2960.564128][T13558] udevd[13558]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 2960.742945][T17058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2961.657828][T19909] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 2961.838691][T19909] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2961.838719][T19909] usb 9-1: config 0 has no interfaces? [ 2961.838749][T19909] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2961.838771][T19909] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2961.886643][T19909] usb 9-1: config 0 descriptor?? [ 2962.542365][T23196] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2962.692293][T23196] usb 3-1: Using ep0 maxpacket: 8 [ 2962.694578][T23196] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 2962.694607][T23196] usb 3-1: config 179 has no interface number 0 [ 2962.694639][T23196] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2962.694662][T23196] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2962.694681][T23196] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2962.694693][T23196] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2962.694717][T23196] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2962.694729][T23196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2962.709914][T17080] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2962.944655][ T5589] usb 3-1: USB disconnect, device number 72 [ 2963.355350][T17100] MPI: mpi too large (113288 bits) [ 2964.449047][T19909] usb 9-1: USB disconnect, device number 36 [ 2966.012326][T19909] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 2966.182341][T19909] usb 9-1: Using ep0 maxpacket: 32 [ 2966.187406][T19909] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 8 [ 2966.187441][T19909] usb 9-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 2966.187463][T19909] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 2966.189961][T19909] usb 9-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 2966.189990][T19909] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2966.190009][T19909] usb 9-1: Product: 鐣⸬節㏞엧鍧Ἆ㘶퍸蔹л䮰첻僈ꝸ闁㫅뿡誙쳁䬺Ŷ쬥霙ᛠ鉏뼀쇾瞑厁퉻ᩤ꯱ί賂祐ⱡ鼜ႛꖺ럶薤㪄葫봍﬷㇯콧撪첣簎牟४臝ꎝ㯏஽⍾쁏晖烞㶊憄犎쩥Ⴡ吝奅濳烗ㅚ춋ᓧౠ㏭任渎봫⡧厘蹕⯟⻸ㇱ㴺闓뾋℁为漯竍ݒ긋䚹탟掀ǁ匸 [ 2966.190039][T19909] usb 9-1: Manufacturer: 䣢촌჏㩦郮賐亪뭽較떒命㌳ [ 2966.190056][T19909] usb 9-1: SerialNumber: 䫣ㆧ膻밴禢繠ꤙ濂⓪㺺먝죊薌甂扝巚㫎젛淽㍺㐇瑑▻匇ⲑ깍 [ 2966.305172][T17141] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2966.527601][T19909] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 2966.527637][T19909] usb 9-1: MIDIStreaming interface descriptor not found [ 2966.621539][T19909] usb 9-1: USB disconnect, device number 37 [ 2966.746519][T13558] udevd[13558]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 2969.032510][T19909] usb 2-1: new low-speed USB device number 84 using dummy_hcd [ 2969.238972][T19909] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 2969.239026][T19909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 2969.239056][T19909] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2969.239099][T19909] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2969.239122][T19909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2969.296274][T19909] usb 2-1: config 0 descriptor?? [ 2969.297137][T17211] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2969.709354][T19909] corsair 0003:1B1C:1B3E.003D: unknown main item tag 0x2 [ 2969.709393][T19909] corsair 0003:1B1C:1B3E.003D: unknown main item tag 0x6 [ 2969.709423][T19909] corsair 0003:1B1C:1B3E.003D: unknown main item tag 0x4 [ 2969.709451][T19909] corsair 0003:1B1C:1B3E.003D: unknown main item tag 0x0 [ 2969.756634][T19909] corsair 0003:1B1C:1B3E.003D: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.1-1/input0 [ 2969.948616][ T10] usb 2-1: USB disconnect, device number 84 [ 2971.955451][T17280] netlink: 76 bytes leftover after parsing attributes in process `syz.1.13421'. [ 2971.955470][T17280] netlink: 76 bytes leftover after parsing attributes in process `syz.1.13421'. [ 2972.131216][ T37] audit: type=1800 audit(38696866.446:1846): pid=17280 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.1.13421" name="/newroot/1268/mnt2" dev="tmpfs" ino=6724 res=0 errno=0 [ 2973.390844][T30102] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2973.494452][T30102] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2973.500503][T30102] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2973.539044][T30102] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2973.539781][T30102] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2974.222311][T19909] usb 2-1: new low-speed USB device number 85 using dummy_hcd [ 2974.449780][T19909] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 2974.449809][T19909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 2974.449823][T19909] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 2974.449846][T19909] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 2974.449859][T19909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2974.459391][T19909] usb 2-1: config 0 descriptor?? [ 2974.460433][T17314] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2974.887620][T19909] corsair 0003:1B1C:1B3E.003E: unknown main item tag 0x2 [ 2974.887655][T19909] corsair 0003:1B1C:1B3E.003E: unknown main item tag 0x6 [ 2974.887680][T19909] corsair 0003:1B1C:1B3E.003E: unknown main item tag 0x4 [ 2974.887706][T19909] corsair 0003:1B1C:1B3E.003E: unknown main item tag 0x0 [ 2974.930024][T19909] corsair 0003:1B1C:1B3E.003E: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.1-1/input0 [ 2975.083711][T19909] usb 2-1: USB disconnect, device number 85 [ 2975.176139][T17336] fido_id[17336]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 2975.820305][ T8394] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2975.834241][T30102] Bluetooth: hci3: command tx timeout [ 2975.914682][T17306] lo speed is unknown, defaulting to 1000 [ 2976.270220][ T8394] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2976.749620][ T8394] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2977.090006][ T8394] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2977.155017][T17306] bridge0: port 1(bridge_slave_0) entered blocking state [ 2977.155191][T17306] bridge0: port 1(bridge_slave_0) entered disabled state [ 2977.155417][T17306] bridge_slave_0: entered allmulticast mode [ 2977.156908][T17306] bridge_slave_0: entered promiscuous mode [ 2977.159214][T17306] bridge0: port 2(bridge_slave_1) entered blocking state [ 2977.159334][T17306] bridge0: port 2(bridge_slave_1) entered disabled state [ 2977.159468][T17306] bridge_slave_1: entered allmulticast mode [ 2977.160945][T17306] bridge_slave_1: entered promiscuous mode [ 2977.220359][T17306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2977.224928][T17306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2977.261841][T17306] team0: Port device team_slave_0 added [ 2977.266181][T17306] team0: Port device team_slave_1 added [ 2977.314758][T17306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2977.314775][T17306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2977.314801][T17306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2977.317388][T17306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2977.317414][T17306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2977.317434][T17306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2977.495555][T17306] hsr_slave_0: entered promiscuous mode [ 2977.496397][T17306] hsr_slave_1: entered promiscuous mode [ 2977.904166][ T43] netdevsim netdevsim8 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 2977.905914][T30102] Bluetooth: hci3: command tx timeout [ 2977.952687][ T43] netdevsim netdevsim8 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 2977.952737][ T43] netdevsim netdevsim8 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 2978.042227][ T13] netdevsim netdevsim8 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 2978.182991][ T8394] bridge_slave_1: left allmulticast mode [ 2978.183026][ T8394] bridge_slave_1: left promiscuous mode [ 2978.183291][ T8394] bridge0: port 2(bridge_slave_1) entered disabled state [ 2978.334617][ T8394] bridge_slave_0: left allmulticast mode [ 2978.334642][ T8394] bridge_slave_0: left promiscuous mode [ 2978.334821][ T8394] bridge0: port 1(bridge_slave_0) entered disabled state [ 2979.393604][ T8394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2979.474356][ T8394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2979.503541][ T8394] bond0 (unregistering): Released all slaves [ 2979.509597][ T8394] bond1 (unregistering): Released all slaves [ 2979.895324][ T5262] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2980.048504][T30102] Bluetooth: hci3: command tx timeout [ 2980.191451][T17306] netdevsim netdevsim8 eth12 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2980.970515][T17306] netdevsim netdevsim8 eth11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2981.059685][ T5262] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2981.671618][T17306] netdevsim netdevsim8 eth10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2981.873034][ T8394] hsr_slave_0: left promiscuous mode [ 2981.892272][ T8394] hsr_slave_1: left promiscuous mode [ 2981.893059][ T8394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2981.893075][ T8394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2981.943114][ T8394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2981.943139][ T8394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2982.033955][ T8394] veth1_macvtap: left promiscuous mode [ 2982.034025][ T8394] veth0_macvtap: left promiscuous mode [ 2982.034168][ T8394] veth1_vlan: left promiscuous mode [ 2982.034279][ T8394] veth0_vlan: left promiscuous mode [ 2982.062218][T30102] Bluetooth: hci3: command tx timeout [ 2982.814540][ T8394] team0 (unregistering): Port device team_slave_1 removed [ 2982.853259][ T8394] team0 (unregistering): Port device team_slave_0 removed [ 2983.298783][T17306] netdevsim netdevsim8 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2985.300045][T17306] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2985.417664][T17306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2985.418674][T17306] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2985.475683][T17306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2985.477251][T17306] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2985.517147][T17306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2985.518140][T17306] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2985.567585][T17306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2985.670670][T17306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2985.687268][T17306] 8021q: adding VLAN 0 to HW filter on device team0 [ 2985.701472][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 2985.707004][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2985.729345][ T8390] bridge0: port 2(bridge_slave_1) entered blocking state [ 2985.729468][ T8390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2985.798634][T17306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2986.161424][T17306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2986.368035][T17306] veth0_vlan: entered promiscuous mode [ 2986.443128][T17306] veth1_vlan: entered promiscuous mode [ 2986.480356][T17306] veth0_macvtap: entered promiscuous mode [ 2986.486862][T17306] veth1_macvtap: entered promiscuous mode [ 2986.512224][T17306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2986.524327][T17306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2986.609635][T27190] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2986.609682][T27190] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2986.609711][T27190] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2986.609736][T27190] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2987.641123][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2987.641144][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2988.155845][ T8390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2988.155860][ T8390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3009.011171][T13930] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3009.050487][T13930] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3009.064443][T13930] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3009.120509][T13930] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3009.195923][T13930] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3010.920789][ T8394] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3011.259765][T17447] lo speed is unknown, defaulting to 1000 [ 3011.582689][T30102] Bluetooth: hci4: command tx timeout [ 3011.799071][ T8394] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3012.437212][ T8394] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3013.067871][ T8394] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3013.162263][T23196] usb 3-1: new low-speed USB device number 73 using dummy_hcd [ 3013.313900][T23196] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 3013.313945][T23196] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 3013.313973][T23196] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 3013.314008][T23196] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 3013.314025][T23196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3013.388271][T23196] usb 3-1: config 0 descriptor?? [ 3013.389405][T17518] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3013.418933][T17447] bridge0: port 1(bridge_slave_0) entered blocking state [ 3013.419058][T17447] bridge0: port 1(bridge_slave_0) entered disabled state [ 3013.419339][T17447] bridge_slave_0: entered allmulticast mode [ 3013.451557][T17447] bridge_slave_0: entered promiscuous mode [ 3013.456991][T17447] bridge0: port 2(bridge_slave_1) entered blocking state [ 3013.457105][T17447] bridge0: port 2(bridge_slave_1) entered disabled state [ 3013.457348][T17447] bridge_slave_1: entered allmulticast mode [ 3013.475493][T17447] bridge_slave_1: entered promiscuous mode [ 3013.662311][T30102] Bluetooth: hci4: command tx timeout [ 3013.692098][T17447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3013.710797][T17447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3013.801708][T17447] team0: Port device team_slave_0 added [ 3013.808778][T23196] corsair 0003:1B1C:1B3E.003F: unknown main item tag 0x2 [ 3013.808810][T23196] corsair 0003:1B1C:1B3E.003F: unknown main item tag 0x6 [ 3013.808832][T23196] corsair 0003:1B1C:1B3E.003F: unknown main item tag 0x4 [ 3013.808857][T23196] corsair 0003:1B1C:1B3E.003F: unknown main item tag 0x0 [ 3013.816326][T17447] team0: Port device team_slave_1 added [ 3013.879886][T23196] corsair 0003:1B1C:1B3E.003F: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.2-1/input0 [ 3013.978714][T17447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3013.978731][T17447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3013.978755][T17447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3013.988370][T17447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3013.988387][T17447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3013.988412][T17447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3014.147481][ T5589] usb 3-1: USB disconnect, device number 73 [ 3014.279448][T17533] fido_id[17533]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 3014.746698][T17447] hsr_slave_0: entered promiscuous mode [ 3014.790509][T17447] hsr_slave_1: entered promiscuous mode [ 3014.799134][T17447] debugfs: 'hsr0' already exists in 'hsr' [ 3014.799162][T17447] Cannot create hsr debugfs directory [ 3015.742350][T30102] Bluetooth: hci4: command tx timeout [ 3015.783934][ T13] netdevsim netdevsim0 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 3015.963037][ T13] netdevsim netdevsim0 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 3016.653366][ T8394] bridge_slave_1: left allmulticast mode [ 3016.653402][ T8394] bridge_slave_1: left promiscuous mode [ 3016.653678][ T8394] bridge0: port 2(bridge_slave_1) entered disabled state [ 3016.961271][ T8394] bridge_slave_0: left allmulticast mode [ 3016.961307][ T8394] bridge_slave_0: left promiscuous mode [ 3016.961561][ T8394] bridge0: port 1(bridge_slave_0) entered disabled state [ 3017.824046][T30102] Bluetooth: hci4: command tx timeout [ 3019.023048][ T8394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3019.104676][ T8394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3019.145114][ T8394] bond0 (unregistering): Released all slaves [ 3019.238022][ T5262] 8021q: adding VLAN 0 to HW filter on device eth9 [ 3019.492754][T27190] netdevsim netdevsim0 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 3019.512200][T15276] netdevsim netdevsim0 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 3020.848661][T17447] netdevsim netdevsim0 eth12 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3021.037623][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 3021.987602][ T5262] 8021q: adding VLAN 0 to HW filter on device eth10 [ 3022.184679][T17447] netdevsim netdevsim0 eth11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3023.181586][T17447] netdevsim netdevsim0 eth10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3023.795012][ T8394] hsr_slave_0: left promiscuous mode [ 3023.832198][ T8394] hsr_slave_1: left promiscuous mode [ 3023.833357][ T8394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3023.833384][ T8394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3023.893282][ T8394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3023.893308][ T8394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3024.052296][ T8394] veth1_macvtap: left promiscuous mode [ 3024.052455][ T8394] veth0_macvtap: left promiscuous mode [ 3024.052707][ T8394] veth1_vlan: left promiscuous mode [ 3024.052883][ T8394] veth0_vlan: left promiscuous mode [ 3025.272885][ T8394] team0 (unregistering): Port device team_slave_1 removed [ 3025.332929][ T8394] team0 (unregistering): Port device team_slave_0 removed [ 3025.352223][T19909] usb 3-1: new low-speed USB device number 74 using dummy_hcd [ 3025.522591][T19909] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 3025.522640][T19909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 3025.522672][T19909] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 3025.522715][T19909] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 3025.522738][T19909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3025.605101][T19909] usb 3-1: config 0 descriptor?? [ 3025.606142][T17736] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3026.035889][T19909] corsair 0003:1B1C:1B3E.0040: unknown main item tag 0x2 [ 3026.035928][T19909] corsair 0003:1B1C:1B3E.0040: unknown main item tag 0x6 [ 3026.035958][T19909] corsair 0003:1B1C:1B3E.0040: unknown main item tag 0x4 [ 3026.035987][T19909] corsair 0003:1B1C:1B3E.0040: unknown main item tag 0x0 [ 3026.073719][T19909] corsair 0003:1B1C:1B3E.0040: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.2-1/input0 [ 3026.219488][T19909] usb 3-1: USB disconnect, device number 74 [ 3026.406352][T17756] fido_id[17756]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 3026.680237][T17447] netdevsim netdevsim0 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3026.950618][T17763] bridge0: port 1(bridge_slave_0) entered disabled state [ 3027.055157][T17763] bridge_slave_0 (unregistering): left allmulticast mode [ 3027.055190][T17763] bridge_slave_0 (unregistering): left promiscuous mode [ 3027.055282][T17763] bridge0: port 1(bridge_slave_0) entered disabled state [ 3030.469360][T17447] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3030.553772][T17447] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3030.560014][T17447] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3030.641400][T17447] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3030.651032][T17447] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3030.733219][T17447] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3030.734432][T17447] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3030.810112][T17447] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3030.824974][ T822] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 3030.978678][ T822] usb 3-1: Using ep0 maxpacket: 32 [ 3031.117888][ T822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3031.117923][ T822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3031.117962][ T822] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 3031.117986][ T822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3031.221773][ T822] usb 3-1: config 0 descriptor?? [ 3031.361927][T17862] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 3031.686949][T17447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3031.726188][ T822] ft260 0003:0403:6030.0041: unknown main item tag 0x0 [ 3031.726224][ T822] ft260 0003:0403:6030.0041: unknown main item tag 0x0 [ 3031.751517][T17447] 8021q: adding VLAN 0 to HW filter on device team0 [ 3031.789330][ T8390] bridge0: port 1(bridge_slave_0) entered blocking state [ 3031.789460][ T8390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3031.861325][T20648] bridge0: port 2(bridge_slave_1) entered blocking state [ 3031.861448][T20648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3031.921077][ T822] ft260 0003:0403:6030.0041: chip code: 0000 0000 [ 3032.127806][ T822] ft260 0003:0403:6030.0041: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 3032.325209][T17873] FAULT_INJECTION: forcing a failure. [ 3032.325209][T17873] name fail_futex, interval 1, probability 0, space 0, times 1 [ 3032.325255][T17873] CPU: 0 UID: 0 PID: 17873 Comm: syz.8.13534 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 3032.325283][T17873] Tainted: [L]=SOFTLOCKUP [ 3032.325290][T17873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3032.325301][T17873] Call Trace: [ 3032.325310][T17873] [ 3032.325319][T17873] dump_stack_lvl+0xe8/0x150 [ 3032.325361][T17873] should_fail_ex+0x467/0x600 [ 3032.325400][T17873] get_futex_key+0x1b3/0x1580 [ 3032.325545][T17873] ? __pfx_get_futex_key+0x10/0x10 [ 3032.325583][T17873] futex_wait_setup+0x4a/0x590 [ 3032.325612][T17873] ? __resched_curr+0x106/0x530 [ 3032.325655][T17873] ? __futex_wait+0xe1/0x410 [ 3032.325690][T17873] __futex_wait+0x161/0x410 [ 3032.325725][T17873] ? __pfx___futex_wait+0x10/0x10 [ 3032.325761][T17873] ? __pfx_futex_wake_mark+0x10/0x10 [ 3032.325786][T17873] ? try_to_wake_up+0x84b/0x1430 [ 3032.325843][T17873] futex_wait+0x121/0x390 [ 3032.325876][T17873] ? __pfx_futex_wait+0x10/0x10 [ 3032.325926][T17873] do_futex+0x3e7/0x4e0 [ 3032.325949][T17873] ? lockdep_hardirqs_on+0x7a/0x110 [ 3032.325968][T17873] ? __pfx_do_futex+0x10/0x10 [ 3032.325981][T17873] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 3032.325999][T17873] __se_sys_futex+0x3a8/0x450 [ 3032.326030][T17873] ? ksys_write+0x248/0x270 [ 3032.326058][T17873] ? __pfx___se_sys_futex+0x10/0x10 [ 3032.326085][T17873] ? __pfx_ksys_write+0x10/0x10 [ 3032.326112][T17873] ? __x64_sys_futex+0x21/0xf0 [ 3032.326126][T17873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3032.326139][T17873] do_syscall_64+0x174/0x580 [ 3032.326155][T17873] ? clear_bhb_loop+0x40/0x90 [ 3032.326176][T17873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3032.326197][T17873] RIP: 0033:0x7f2715aae019 [ 3032.326218][T17873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3032.326246][T17873] RSP: 002b:00007f2713d060e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3032.326268][T17873] RAX: ffffffffffffffda RBX: 00007f2715d35fa8 RCX: 00007f2715aae019 [ 3032.326284][T17873] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2715d35fa8 [ 3032.326291][T17873] RBP: 00007f2715d35fa0 R08: 0000000000000000 R09: 0000000000000000 [ 3032.326298][T17873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3032.326305][T17873] R13: 00007f2715d36038 R14: 00007ffc6b0a9ab0 R15: 00007ffc6b0a9b98 [ 3032.326322][T17873] [ 3032.333137][ T822] ft260 0003:0403:6030.0041: failed to retrieve status: -32, no wakeup [ 3032.340548][ T822] ft260 0003:0403:6030.0041: failed to retrieve status: -32 [ 3032.340905][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 3032.341111][ T822] ft260 0003:0403:6030.0041: failed to reset I2C controller: -32 [ 3032.723823][ T822] usb 3-1: USB disconnect, device number 75 [ 3033.964666][T17447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3034.337664][T17447] veth0_vlan: entered promiscuous mode [ 3034.431018][T17447] veth1_vlan: entered promiscuous mode [ 3034.571754][T17447] veth0_macvtap: entered promiscuous mode [ 3034.594439][T17447] veth1_macvtap: entered promiscuous mode [ 3034.654952][T17447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3034.678008][T17447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3034.714895][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3034.715134][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3034.732221][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3034.733716][ T8390] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3039.566412][T17958] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3039.566456][T17958] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 3039.566644][T17958] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3039.566663][T17958] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 3039.690492][T15276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3039.690515][T15276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3040.265040][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3040.265061][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3042.431076][T17984] tipc: Started in network mode [ 3042.431095][T17984] tipc: Node identity 5ebcc1b0a0a7, cluster identity 4711 [ 3042.431221][T17984] tipc: Enabled bearer , priority 0 [ 3042.466803][T17989] netlink: 'syz.8.13568': attribute type 4 has an invalid length. [ 3042.521054][T17991] netlink: 'syz.8.13568': attribute type 4 has an invalid length. [ 3042.690163][T17979] tipc: Disabling bearer [ 3042.998188][T13930] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3043.061547][T13930] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3043.080719][T13930] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3043.115378][T13930] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3043.158625][T13930] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3045.743793][T30102] Bluetooth: hci5: command tx timeout [ 3046.540772][T18040] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 3046.845803][T18055] futex_wake_op: syz.0.13585 tries to shift op by 144; fix this program [ 3046.926688][T18059] serio: Serial port ptm1 [ 3047.298199][ T156] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3047.826378][T30102] Bluetooth: hci5: command tx timeout [ 3049.053695][T18060] team0: Device wg0 is of different type [ 3049.269822][T18060] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 3049.483308][T18068] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13587'. [ 3049.909512][ T156] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3049.928406][T30102] Bluetooth: hci5: command tx timeout [ 3050.002270][T18081] lo speed is unknown, defaulting to 1000 [ 3050.027028][T18068] bridge0: port 2(bridge_slave_1) entered disabled state [ 3050.028757][T18068] bridge0: port 1(bridge_slave_0) entered disabled state [ 3050.054038][T18082] tipc: Enabling of bearer rejected, failed to enable media [ 3050.123457][T17997] lo speed is unknown, defaulting to 1000 [ 3052.176485][T30102] Bluetooth: hci5: command tx timeout [ 3052.819386][T18124] xt_limit: Overflow, try lower: 324382443/0 [ 3053.031347][ T37] audit: type=1800 audit(38696947.366:1847): pid=18135 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.13604" name="c_chmask" dev="configfs" ino=317384 res=0 errno=0 [ 3053.490536][ T37] audit: type=1800 audit(38696947.816:1848): pid=18135 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.13604" name="UDC" dev="configfs" ino=317389 res=0 errno=0 [ 3054.104096][ T156] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3054.550796][T18149] tipc: Failed to remove unknown binding: 66,0,0/0:1529282767/1529282768 [ 3054.569689][T18151] futex_wake_op: syz.5.13609 tries to shift op by 144; fix this program [ 3054.860002][T18156] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3055.041897][ T156] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3055.490053][T18170] random: crng reseeded on system resumption [ 3057.874500][T17997] bridge0: port 1(bridge_slave_0) entered blocking state [ 3057.874730][T17997] bridge0: port 1(bridge_slave_0) entered disabled state [ 3057.875010][T17997] bridge_slave_0: entered allmulticast mode [ 3057.878578][T17997] bridge_slave_0: entered promiscuous mode [ 3057.931271][T17997] bridge0: port 2(bridge_slave_1) entered blocking state [ 3057.931447][T17997] bridge0: port 2(bridge_slave_1) entered disabled state [ 3057.931720][T17997] bridge_slave_1: entered allmulticast mode [ 3057.965349][T17997] bridge_slave_1: entered promiscuous mode [ 3058.397924][T17997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3058.612278][T17997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3059.262661][ T37] audit: type=1800 audit(38696953.596:1849): pid=18226 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.13634" name="power" dev="configfs" ino=319548 res=0 errno=0 [ 3065.002850][T17997] team0: Port device team_slave_0 added [ 3065.002989][T15276] netdevsim netdevsim1 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 3065.004148][T15276] netdevsim netdevsim1 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 3065.014090][T18237] netdevsim netdevsim1 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 3065.028004][T17997] team0: Port device team_slave_1 added [ 3065.189469][T18258] 9p: Bad value for 'rfdno' [ 3065.483688][T17997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3065.483706][T17997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3065.483735][T17997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3065.490893][T17997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3065.490910][T17997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3065.490938][T17997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3065.645461][T18252] gadgetfs: bound to dummy_udc driver [ 3065.802522][T18255] ================================================================== [ 3065.802541][T18255] BUG: KASAN: slab-use-after-free in mutex_lock_interruptible_nested+0x5a/0x1d0 [ 3065.802576][T18255] Read of size 1 at addr ffff8880331ae858 by task syz.2.13638/18255 [ 3065.802597][T18255] [ 3065.802613][T18255] CPU: 1 UID: 0 PID: 18255 Comm: syz.2.13638 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3065.802645][T18255] Tainted: [L]=SOFTLOCKUP [ 3065.802653][T18255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3065.802667][T18255] Call Trace: [ 3065.802676][T18255] [ 3065.802686][T18255] dump_stack_lvl+0xe8/0x150 [ 3065.802720][T18255] print_address_description+0x55/0x1e0 [ 3065.802765][T18255] ? mutex_lock_interruptible_nested+0x5a/0x1d0 [ 3065.802787][T18255] print_report+0x58/0x70 [ 3065.802830][T18255] kasan_report+0x117/0x150 [ 3065.802859][T18255] ? mutex_lock_interruptible_nested+0x5a/0x1d0 [ 3065.802885][T18255] ? ep_open+0x4e/0x270 [ 3065.802995][T18255] __kasan_check_byte+0x2a/0x40 [ 3065.803019][T18255] lock_acquire+0x84/0x350 [ 3065.803043][T18255] ? ep_open+0x4e/0x270 [ 3065.803067][T18255] ? ep_open+0x4e/0x270 [ 3065.803087][T18255] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 3065.803109][T18255] ? ep_open+0x4e/0x270 [ 3065.803133][T18255] ep_open+[ 3065.803133][T18255] ep_open+0x4e/0x270 [ 3065.803153][T18255] ? do_dentry_open+0x83a/0x1420 [ 3065.803174][T18255] ? __pfx_ep_open+0x10/0x10 [ 3065.803195][T18255] do_dentry_open+0x849/0x1420 [ 3065.803219][T18255] vfs_open+0x3b/0x350 [ 3065.803237][T18255] ? path_openat+0x2e49/0x3850 [ 3065.803264][T18255] path_openat+0x2e60/0x3850 [ 3065.803292][T18255] ? kmem_cache_alloc_noprof+0x355/0x650 [ 3065.803313][T18255] ? __x64_sys_openat+0x138/0x170 [ 3065.803344][T18255] do_file_open+0x23e/0x4a0 [ 3065.803368][T18255] ? lockdep_hardirqs_on+0x7a/0x110 [ 3065.803397][T18255] ? __pfx_do_file_open+0x10/0x10 [ 3065.803434][T18255] ? alloc_fd+0x654/0x6d0 [ 3065.803459][T18255] do_sys_openat2+0x115/0x200 [ 3065.803479][T18255] ? __pfx_do_sys_openat2+0x10/0x10 [ 3065.803505][T18255] __x64_sys_openat+0x138/0x170 [ 3065.803526][T18255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3065.803547][T18255] do_syscall_64+0x174/0x580 [ 3065.803574][T18255] ? trace_irq_disable+0x3b/0x140 [ 3065.803595][T18255] ? clear_bhb_loop+0x40/0x90 [ 3065.803618][T18255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3065.803640][T18255] RIP: 0033:0x7fb3610ee019 [ 3065.803660][T18255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3065.803678][T18255] RSP: 002b:00007fb35f325028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3065.803703][T18255] RAX: ffffffffffffffda RBX: 00007fb361376090 RCX: 00007fb3610ee019 [ 3065.803719][T18255] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 3065.803734][T18255] RBP: 00007fb36118500c R08: 0000000000000000 R09: 0000000000000000 [ 3065.803748][T18255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3065.803762][T18255] R13: 00007fb361376128 R14: 00007fb361376090 R15: 00007fff902799e8 [ 3065.803787][T18255] [ 3065.803803][T18255] [ 3065.803815][T18255] Allocated by task 18252: [ 3065.803826][T18255] kasan_save_track+0x3e/0x80 [ 3065.803844][T18255] __kasan_kmalloc+0x93/0xb0 [ 3065.803862][T18255] __kmalloc_cache_noprof+0x3d2/0x6b0 [ 3065.803880][T18255] gadgetfs_bind+0x27a/0xae0 [ 3065.803897][T18255] gadget_bind_driver+0x2ca/0x9e0 [ 3065.804003][T18255] really_probe+0x254/0xae0 [ 3065.804075][T18255] __driver_probe_device+0x1e8/0x360 [ 3065.804100][T18255] driver_probe_device+0x4f/0x240 [ 3065.804125][T18255] __driver_attach+0x339/0x600 [ 3065.804148][T18255] bus_for_each_dev+0x23e/0x2c0 [ 3065.804164][T18255] bus_add_driver+0x348/0x670 [ 3065.804183][T18255] driver_register+0x23a/0x320 [ 3065.804199][T18255] usb_gadget_register_driver_owner+0xf9/0x270 [ 3065.804226][T18255] dev_config+0xe4e/0x12c0 [ 3065.804242][T18255] vfs_write+0x29f/0xbb0 [ 3065.804263][T18255] ksys_write+0x156/0x270 [ 3065.804283][T18255] do_syscall_64+0x174/0x580 [ 3065.804305][T18255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3065.804322][T18255] [ 3065.804327][T18255] Freed by task 18251: [ 3065.804338][T18255] kasan_save_track+0x3e/0x80 [ 3065.804356][T18255] kasan_save_free_info+0x40/0x50 [ 3065.804382][T18255] __kasan_slab_free+0x5c/0x80 [ 3065.804400][T18255] kfree+0x1c5/0x6c0 [ 3065.804415][T18255] destroy_ep_files+0x29f/0x330 [ 3065.804433][T18255] gadgetfs_unbind+0x112/0x2c0 [ 3065.804452][T18255] gadget_unbind_driver+0x1cb/0x410 [ 3065.804480][T18255] device_release_driver_internal+0x48b/0x880 [ 3065.804506][T18255] driver_detach+0x1f3/0x2d0 [ 3065.804529][T18255] bus_remove_driver+0x229/0x320 [ 3065.804548][T18255] usb_gadget_unregister_driver+0x4e/0x70 [ 3065.804572][T18255] dev_release+0x86/0x210 [ 3065.804589][T18255] __fput+0x42a/0xa80 [ 3065.804606][T18255] task_work_run+0x1d9/0x270 [ 3065.804672][T18255] exit_to_user_mode_loop+0x1fa/0x730 [ 3065.804717][T18255] do_syscall_64+0x353/0x580 [ 3065.804740][T18255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3065.804758][T18255] [ 3065.804763][T18255] The buggy address belongs to the object at ffff8880331ae800 [ 3065.804763][T18255] which belongs to the cache kmalloc-512 of size 512 [ 3065.804780][T18255] The buggy address is located 88 bytes inside of [ 3065.804780][T18255] freed 512-byte region [ffff8880331ae800, ffff8880331aea00) [ 3065.804810][T18255] [ 3065.804815][T18255] The buggy address belongs to the physical page: [ 3065.804832][T18255] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x331ac [ 3065.804850][T18255] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3065.804865][T18255] flags: 0x80000000000040(head|node=0|zone=1) [ 3065.804881][T18255] page_type: f5(slab) [ 3065.804899][T18255] raw: 0080000000000040 ffff88813ffb2c80 dead000000000100 dead000000000122 [ 3065.804917][T18255] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 3065.804938][T18255] head: 0080000000000040 ffff88813ffb2c80 dead000000000100 dead000000000122 [ 3065.804955][T18255] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 3065.804973][T18255] head: 0080000000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 3065.804989][T18255] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004 [ 3065.804999][T18255] page dumped because: kasan: bad access detected [ 3065.805014][T18255] page_owner tracks the page as allocated [ 3065.805022][T18255] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5604, tgid 5604 (syz-executor), ts 91191968814, free_ts 91060951770 [ 3065.805058][T18255] post_alloc_hook+0x1f9/0x250 [ 3065.805077][T18255] get_page_from_freelist+0x262a/0x26a0 [ 3065.805100][T18255] __alloc_frozen_pages_noprof+0x18d/0x380 [ 3065.805123][T18255] allocate_slab+0x79/0x5e0 [ 3065.805148][T18255] refill_objects+0x2d8/0x350 [ 3065.805173][T18255] __pcs_replace_empty_main+0x330/0x690 [ 3065.805198][T18255] __kmalloc_cache_noprof+0x468/0x6b0 [ 3065.805218][T18255] ____ip_mc_inc_group+0x518/0xdb0 [ 3065.805239][T18255] ip_mc_up+0x115/0x2e0 [ 3065.805259][T18255] inetdev_event+0xfca/0x15e0 [ 3065.805326][T18255] notifier_call_chain+0x1a5/0x3d0 [ 3065.805400][T18255] __dev_notify_flags+0x1aa/0x310 [ 3065.805471][T18255] netif_change_flags+0xde/0x1b0 [ 3065.805493][T18255] do_setlink+0xdd6/0x4670 [ 3065.805570][T18255] rtnl_newlink+0x15c2/0x1bd0 [ 3065.805590][T18255] rtnetlink_rcv_msg+0x802/0xc00 [ 3065.805610][T18255] page last free pid 5604 tgid 5604 stack trace: [ 3065.805623][T18255] __free_frozen_pages+0x10e7/0x11c0 [ 3065.805643][T18255] __slab_free+0x252/0x2a0 [ 3065.805661][T18255] qlist_free_all+0x99/0x100 [ 3065.805678][T18255] kasan_quarantine_reduce+0x148/0x160 [ 3065.805695][T18255] __kasan_slab_alloc+0x22/0x80 [ 3065.805715][T18255] kmem_cache_alloc_node_noprof+0x3eb/0x670 [ 3065.805734][T18255] __alloc_skb+0x1d7/0x7a0 [ 3065.805781][T18255] netlink_ack+0x136/0xb30 [ 3065.805846][T18255] netlink_rcv_skb+0x2a4/0x4a0 [ 3065.805869][T18255] netlink_unicast+0x7f5/0x990 [ 3065.805890][T18255] netlink_sendmsg+0x813/0xb40 [ 3065.805915][T18255] sock_sendmsg_nosec+0x13a/0x180 [ 3065.805946][T18255] __sys_sendto+0x41e/0x5d0 [ 3065.805968][T18255] __x64_sys_sendto+0xde/0x100 [ 3065.805990][T18255] do_syscall_64+0x174/0x580 [ 3065.806012][T18255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3065.806030][T18255] [ 3065.806036][T18255] Memory state around the buggy address: [ 3065.806083][T18255] ffff8880331ae700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3065.806098][T18255] ffff8880331ae780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3065.806113][T18255] >ffff8880331ae800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3065.806124][T18255] ^ [ 3065.806168][T18255] ffff8880331ae880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3065.806182][T18255] ffff8880331ae900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3065.806193][T18255] ================================================================== [ 3065.984518][T18255] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 3065.984547][T18255] CPU: 1 UID: 0 PID: 18255 Comm: syz.2.13638 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 3065.984579][T18255] Tainted: [L]=SOFTLOCKUP [ 3065.984587][T18255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3065.984601][T18255] Call Trace: [ 3065.984609][T18255] [ 3065.984617][T18255] vpanic+0x56c/0xa60 [ 3065.984645][T18255] ? __pfx_vpanic+0x10/0x10 [ 3065.984666][T18255] ? __pfx___schedule+0x10/0x10 [ 3065.984695][T18255] panic+0xc5/0xd0 [ 3065.984712][T18255] ? __pfx_panic+0x10/0x10 [ 3065.984731][T18255] ? preempt_schedule_thunk+0x16/0x40 [ 3065.984854][T18255] ? mutex_lock_interruptible_nested+0x5a/0x1d0 [ 3065.984876][T18255] check_panic_on_warn+0x89/0xb0 [ 3065.984942][T18255] ? mutex_lock_interruptible_nested+0x5a/0x1d0 [ 3065.984964][T18255] end_report+0x73/0x170 [ 3065.984988][T18255] ? mutex_lock_interruptible_nested+0x5a/0x1d0 [ 3065.985008][T18255] kasan_report+0x128/0x150 [ 3065.985031][T18255] ? mutex_lock_interruptible_nested+0x5a/0x1d0 [ 3065.985056][T18255] ? ep_open+0x4e/0x270 [ 3065.985085][T18255] __kasan_check_byte+0x2a/0x40 [ 3065.985108][T18255] lock_acquire+0x84/0x350 [ 3065.985132][T18255] ? ep_open+0x4e/0x270 [ 3065.985163][T18255] ? ep_open+0x4e/0x270 [ 3065.985183][T18255] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 3065.985204][T18255] ? ep_open+0x4e/0x270 [ 3065.985226][T18255] ep_open+0x4e/0x270 [ 3065.985245][T18255] ? do_dentry_open+0x83a/0x1420 [ 3065.985271][T18255] ? __pfx_ep_open+0x10/0x10 [ 3065.985292][T18255] do_dentry_open+0x849/0x1420 [ 3065.985317][T18255] vfs_open+0x3b/0x350 [ 3065.985334][T18255] ? path_openat+0x2e49/0x3850 [ 3065.985360][T18255] path_openat+0x2e60/0x3850 [ 3065.985388][T18255] ? kmem_cache_alloc_noprof+0x355/0x650 [ 3065.985408][T18255] ? __x64_sys_openat+0x138/0x170 [ 3065.985438][T18255] do_file_open+0x23e/0x4a0 [ 3065.985461][T18255] ? lockdep_hardirqs_on+0x7a/0x110 [ 3065.985488][T18255] ? __pfx_do_file_open+0x10/0x10 [ 3065.985524][T18255] ? alloc_fd+0x654/0x6d0 [ 3065.985547][T18255] do_sys_openat2+0x115/0x200 [ 3065.985568][T18255] ? __pfx_do_sys_openat2+0x10/0x10 [ 3065.985594][T18255] __x64_sys_openat+0x138/0x170 [ 3065.985615][T18255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3065.985637][T18255] do_syscall_64+0x174/0x580 [ 3065.985662][T18255] ? trace_irq_disable+0x3b/0x140 [ 3065.985682][T18255] ? clear_bhb_loop+0x40/0x90 [ 3065.985705][T18255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3065.985725][T18255] RIP: 0033:0x7fb3610ee019 [ 3065.985819][T18255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3065.985838][T18255] RSP: 002b:00007fb35f325028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3065.985860][T18255] RAX: ffffffffffffffda RBX: 00007fb361376090 RCX: 00007fb3610ee019 [ 3065.985877][T18255] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 3065.985893][T18255] RBP: 00007fb36118500c R08: 0000000000000000 R09: 0000000000000000 [ 3065.985907][T18255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3065.985920][T18255] R13: 00007fb361376128 R14: 00007fb361376090 R15: 00007fff902799e8 [ 3065.985944][T18255] [ 3065.986274][T18255] Kernel Offset: disabled