last executing test programs: 45.840407865s ago: executing program 4 (id=565): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1001, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000bc0), 0x0, 0x0, 0x0}) 45.659482179s ago: executing program 4 (id=566): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_procfs(0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r2 = dup(r1) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x6, 0x5418, 0x204, 0x5, 0xde8, 0x3, 0x100001, 0xf8}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111}}, 0x1fff8) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x0, 0x2}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 44.005121309s ago: executing program 4 (id=573): r0 = fsopen(&(0x7f0000002000)='nilfs2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x7e) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0xb, 0x4) 41.847842351s ago: executing program 0 (id=586): r0 = fsopen(&(0x7f0000002000)='nilfs2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x7e) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r2, 0x0, 0x0, 0xfffffffc, 0x0, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fsopen(0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000)=0xb, 0x4) 41.49561867s ago: executing program 4 (id=589): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021207c109050c04400006030f07059acb"], 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000180)={0x1d, r4, 0x0, {0x2, 0xf0, 0x4}, 0xfd}, 0x18) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x2, {0x0, 0x1}, 0x1}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0, 0x1}, 0x94) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r1, &(0x7f0000000100), 0x10) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(r7, r7, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r5, {0xee00, 0xee01}}, './file0\x00'}) statx(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x800, 0x40, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000840), 0x1000) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000010005001db7a7678843468d78fc001000700f02f58347576e278e411a291cfcfb0000000000000000", @ANYRES32=r13, @ANYBLOB="040007000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r11, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r12, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r14, @ANYBLOB="10000000000000002000010000000000"], 0x5c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) landlock_create_ruleset(0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 38.836521604s ago: executing program 0 (id=596): r0 = open(&(0x7f0000000280)='.\x00', 0xc8180, 0x0) fcntl$notify(r0, 0x402, 0x8000001d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) statx(r0, &(0x7f0000000140)='./file0\x00', 0x6000, 0x400, &(0x7f0000000400)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc000000130001002bbd7000fbdbdf250000000000000000000000005a4a4942ffffffff0000000000000000000000000000008d040000060a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000000000000000100000000000000fffffffffffffffffeffffffffffffff010100000000000000000000000000000200000000000000000000000000000065170000000000000000000040000000000000000000000002000000000000010000000200000000440005000a010101000000000000000000000000000004d52b0000000a000000ac1414aa0000000000000000000000000635000004000000040000007f00000000000000"], 0xfc}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="0d080000000002"], 0x48}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004010000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000400000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8, &(0x7f0000000d40)=ANY=[@ANYBLOB="b4000000000000001e1000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x6}, 0x22) 38.758596737s ago: executing program 1 (id=597): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0040d07, &(0x7f0000000040)=0x122) 37.651483233s ago: executing program 1 (id=599): r0 = fsopen(&(0x7f0000002000)='nilfs2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x7e) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0xb, 0x4) 37.504900623s ago: executing program 0 (id=600): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000200)='c', 0xffffff3c}], 0x1, 0xb) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[@ANYRES8], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f00000003c0)=0x7) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x0, 0x6}) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e23, 0x100, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}}, 0x0, 0x0, 0x4f, 0x0, "3e4641f3cce9866040f8cb5c3e0ab71972958a84663af93d3c2eb62e424b5be5390875d92be4947a277f4d830f65459a4ca20bddc220b47f0647cd8b5989b758bc6d65fa511e8d1833f9496a0c8de6e9"}, 0xd8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x83, 0x0, "a30b3b28af4d2f246a01a845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a0000c6df82b800"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r3, 0xe4776000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4, &(0x7f0000000380)=[{0x8, 0x0, 0x0, 0x2c}, {0x5, 0x6, 0x6, 0x3}, {0x4, 0x56, 0x14, 0x6}, {0x7, 0x1, 0x2, 0x800}]}) msgctl$IPC_RMID(0x0, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYRES16=r5, @ANYBLOB="4d0c15626548c978392e1030a9089abd8cc296452a582dda3ea59a51067deff50fab2b02dd61e77e07cb6ad2657a6630", @ANYRESDEC=0x0, @ANYBLOB="4d9793290bc0107515f0e30f453d40b881e26bc395674138da2ba3233ef77360e3c12d3128ddac78f396633e8d92a929fc2b7d8325cdaf864b53d3d5df98d544c00c03f2552ae92fbd61ee95db8197663a26043ddddeafd71ae2fe5f37475746640f22af9ddf7d765125dbcf7db23abc2df5adb1eec3691d7a4216b112977b63366145721e0eb196a3daa241efbf3dc8d021c9dc4ed35b24b0096964109e96152d506f951809ed1cf816e4c76d55bd1d3ae59dbbf9024e6c6520c9ca91fb234b4655267b34a5327c9f23181c8cf061db178ce7d13a5471aa3ddb2faaea5d7b80d3411d"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000060a01040000000000000000000000010900010073797a3100000000040004800900028073797a3200000000140000001100010000000000000000000100000a"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209b00000000028eb7fafaa8b125736e00"}, 0xd8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x46, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790db5c4e09db1ac8225b997fc21693c0942f0686928c388bc6f6318ac44e37fb1549083f9cc1b177fc9f5d0b83414c"}}) socket$nl_route(0x10, 0x3, 0x0) 37.160107932s ago: executing program 4 (id=602): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 37.140591432s ago: executing program 1 (id=603): pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14, 0x67, 0x2, {0x40}}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048884) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="5a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000440)=0x0) capget(&(0x7f0000000480)={0x19980330, r3}, &(0x7f00000004c0)={0x0, 0x101, 0x10, 0x7eb, 0x1a000, 0x81}) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r4 = io_uring_setup(0x6606, &(0x7f0000000240)={0x0, 0xddf9, 0x100, 0xfffffffe, 0xa8}) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xc0, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xa4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40880}, 0x10) close_range(r4, r4, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0x0, 0xfffffff7, 0x84a8, 0x515f3157, 0x4, "78e1141009fd93233bce43f20613281f43d01f"}) write$UHID_INPUT(r6, &(0x7f0000001040)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b0872fc8b546a1b4d09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f5a0a169b50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1010}}, 0x1b7) ioctl$FE_GET_EVENT(r6, 0x80286f4e, &(0x7f00000002c0)) syz_clone(0x4000600, &(0x7f0000000140)="aafb3e5864238265271916525ac0145c30c19c70e90a2887cb8477010eb3918b968f4d78c91cf9518c4c", 0x2a, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="34471fa2653c48fb3f64ce08fd711cee426ce232") 36.959947544s ago: executing program 1 (id=604): r0 = socket(0x2, 0x80805, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x891b, &(0x7f0000000040)={'pimreg1\x00'}) 36.79410125s ago: executing program 1 (id=606): r0 = fsopen(&(0x7f0000002000)='nilfs2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x7e) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r2, 0x0, 0x0, 0xfffffffc, 0x0, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fsopen(0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000)=0xb, 0x4) 36.402229422s ago: executing program 3 (id=607): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f1", 0x37}, {&(0x7f0000000780)}, {0x0}, {0x0}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd27, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400066, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 36.344231838s ago: executing program 0 (id=608): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021207c109050c04400006030f07059acb"], 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 36.203988988s ago: executing program 4 (id=610): r0 = open(&(0x7f0000000280)='.\x00', 0xc8180, 0x0) fcntl$notify(r0, 0x402, 0x8000001d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) statx(r0, &(0x7f0000000140)='./file0\x00', 0x6000, 0x400, &(0x7f0000000400)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc000000130001002bbd7000fbdbdf250000000000000000000000005a4a4942ffffffff0000000000000000000000000000008d040000060a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000000000000000100000000000000fffffffffffffffffeffffffffffffff010100000000000000000000000000000200000000000000000000000000000065170000000000000000000040000000000000000000000002000000000000010000000200000000440005000a010101000000000000000000000000000004d52b0000000a000000ac1414aa0000000000000000000000000635000004000000040000007f00000000000000"], 0xfc}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="0d080000000002"], 0x48}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004010000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000400000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8, &(0x7f0000000d40)=ANY=[@ANYBLOB="b4000000000000001e1000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x6}, 0x22) 35.937774943s ago: executing program 3 (id=611): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() mount$fuse(0x0, &(0x7f0000000880)='./file0\x00', 0x0, 0x8000, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x20000) sched_setscheduler(r0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) fanotify_init(0x2, 0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xfffffffc) umount2(0x0, 0xb) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000400000000000000000000000000f0ff000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000100"/28], 0x50) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) lseek(r4, 0x40000007, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000002900)={0x50, 0x0, r5, {0x7, 0x2d, 0x3, 0x1008104c, 0xffff, 0x9, 0x2814, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) 35.085677819s ago: executing program 2 (id=612): socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 33.664959032s ago: executing program 2 (id=613): r0 = fsopen(&(0x7f0000002000)='nilfs2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x7e) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0xb, 0x4) 33.616368731s ago: executing program 3 (id=614): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000034c0)={0x2020}, 0x2020) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000200000000007ac4a9151ea4eccd0000100000000000"], 0x0, 0x2a, 0x0, 0x1}, 0x28) rseq(&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1, 0xc0000000, 0x9, 0xfffffffffffffffc}, 0x3}, 0x20, 0x1, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='/', 0x1, 0x2f70000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$l2tp(0x2, 0x2, 0x73) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_CONNECTINFO(r3, 0x80045503, &(0x7f00000000c0)) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x28, 0x1, 0xf7, 0xfffff038}, {0x6, 0x6, 0x0, 0x57c}]}, 0x10) 33.609417721s ago: executing program 1 (id=615): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x34}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x64, 0x10, 0x1, 0x70bd6c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x15b30}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x90, @multicast}}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x44010}, 0x4000040) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000440)='batadv_slave_1\x00', 0x10) syz_emit_ethernet(0x86, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x4400, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x1, "93c9691928972925723d55c712e63c92b492a3c50c9c3d27093a79585e8b73b3", "8aa4c506a2ba17a29171ce08a1e0f09d", {"c952a7f1f0443ce3114cee3518bfb345"}}}}}}}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) write$tun(r7, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x4000054) 28.628102529s ago: executing program 0 (id=616): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1058}], 0x1) 26.735683491s ago: executing program 0 (id=617): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2000000076000d0b0000000000000000030000000000000008000180"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x200, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, 0x0) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0], 0xfdef) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0b062dbd7000000000003000000008000200", @ANYRES32=r5, @ANYBLOB="05003500e900000005003300030000000500340000000000050036"], 0x3c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, 0x0, 0x4010000) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000004000000000000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0], 0x50) r8 = socket$inet6(0xa, 0x80002, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000640)={0x1, @le_set_event_mask={{0x2001, 0x8}, {"23375dc14dccbaf5"}}}, 0xc) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r9, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60) getsockopt$inet_buf(r9, 0x118, 0x4, 0x0, &(0x7f0000000000)=0x60) setsockopt$sock_int(r8, 0x1, 0xf, 0x0, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 24.982102514s ago: executing program 2 (id=618): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021207c109050c04400006030f07059acb"], 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000180)={0x1d, r4, 0x0, {0x2, 0xf0, 0x4}, 0xfd}, 0x18) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x2, {0x0, 0x1}, 0x1}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd8019ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b6"], 0x0, 0x1}, 0x94) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r1, &(0x7f0000000100), 0x10) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(r7, r7, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r5, {0xee00, 0xee01}}, './file0\x00'}) statx(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x800, 0x40, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000840), 0x1000) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000010005001db7a7678843468d78fc001000700f02f58347576e278e411a291cfcfb0000000000000000", @ANYRES32=r13, @ANYBLOB="040007000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r11, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r12, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r14, @ANYBLOB="10000000000000002000010000000000"], 0x5c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) landlock_create_ruleset(0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 23.71740064s ago: executing program 3 (id=619): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x80}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x40080) (fail_nth: 3) 23.443856127s ago: executing program 3 (id=620): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 22.917879003s ago: executing program 3 (id=621): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f1", 0x37}, {&(0x7f0000000780)}, {0x0}, {0x0}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd27, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400066, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 21.066481445s ago: executing program 32 (id=610): r0 = open(&(0x7f0000000280)='.\x00', 0xc8180, 0x0) fcntl$notify(r0, 0x402, 0x8000001d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) statx(r0, &(0x7f0000000140)='./file0\x00', 0x6000, 0x400, &(0x7f0000000400)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc000000130001002bbd7000fbdbdf250000000000000000000000005a4a4942ffffffff0000000000000000000000000000008d040000060a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000000000000000100000000000000fffffffffffffffffeffffffffffffff010100000000000000000000000000000200000000000000000000000000000065170000000000000000000040000000000000000000000002000000000000010000000200000000440005000a010101000000000000000000000000000004d52b0000000a000000ac1414aa0000000000000000000000000635000004000000040000007f00000000000000"], 0xfc}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="0d080000000002"], 0x48}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004010000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000400000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8, &(0x7f0000000d40)=ANY=[@ANYBLOB="b4000000000000001e1000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x6}, 0x22) 19.528601691s ago: executing program 2 (id=623): socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 17.883820731s ago: executing program 33 (id=615): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x34}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x64, 0x10, 0x1, 0x70bd6c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x15b30}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x90, @multicast}}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x44010}, 0x4000040) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000440)='batadv_slave_1\x00', 0x10) syz_emit_ethernet(0x86, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x4400, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x1, "93c9691928972925723d55c712e63c92b492a3c50c9c3d27093a79585e8b73b3", "8aa4c506a2ba17a29171ce08a1e0f09d", {"c952a7f1f0443ce3114cee3518bfb345"}}}}}}}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) write$tun(r7, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x4000054) 17.844890866s ago: executing program 2 (id=625): r0 = fsopen(&(0x7f0000002000)='nilfs2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x7e) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r2, 0x0, 0x0, 0xfffffffc, 0x0, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fsopen(0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000)=0xb, 0x4) 15.835892354s ago: executing program 2 (id=626): syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) 11.52876487s ago: executing program 34 (id=617): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2000000076000d0b0000000000000000030000000000000008000180"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x200, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, 0x0) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0], 0xfdef) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0b062dbd7000000000003000000008000200", @ANYRES32=r5, @ANYBLOB="05003500e900000005003300030000000500340000000000050036"], 0x3c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, 0x0, 0x4010000) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000004000000000000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0], 0x50) r8 = socket$inet6(0xa, 0x80002, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000640)={0x1, @le_set_event_mask={{0x2001, 0x8}, {"23375dc14dccbaf5"}}}, 0xc) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r9, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60) getsockopt$inet_buf(r9, 0x118, 0x4, 0x0, &(0x7f0000000000)=0x60) setsockopt$sock_int(r8, 0x1, 0xf, 0x0, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 7.538322938s ago: executing program 35 (id=621): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f1", 0x37}, {&(0x7f0000000780)}, {0x0}, {0x0}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd27, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400066, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 36 (id=626): syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) kernel console output (not intermixed with test programs): T5613] usb 2-1: Manufacturer: syz [ 129.476438][ T5613] usb 2-1: SerialNumber: syz [ 129.561501][ T5613] usb 2-1: config 0 descriptor?? [ 129.626738][ T5613] streamzap 2-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 129.687462][ T5611] usb 5-1: USB disconnect, device number 6 [ 129.836486][ T6290] netlink: 52 bytes leftover after parsing attributes in process `syz.1.145'. [ 130.056584][ T6298] siw: device registration error -23 [ 130.163328][ T6303] comedi comedi3: 8255: I/O port conflict (0xfffffffc,4) [ 130.318092][ T5605] rtl8150 1-1:1.0: couldn't reset the device [ 130.321070][ T5605] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 130.407350][ T31] usb 2-1: USB disconnect, device number 6 [ 130.499582][ T6297] hfsplus: unable to find HFS+ superblock [ 130.615113][ T5605] usb 1-1: USB disconnect, device number 4 [ 130.962726][ T5613] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 131.022460][ T6316] 9pnet_fd: Insufficient options for proto=fd [ 131.030337][ T6314] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.057593][ T6321] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 131.124350][ T6314] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 131.127281][ T6300] smbdirect: ib_dev[syz2] removed [ 131.142696][ T5613] usb 4-1: Using ep0 maxpacket: 32 [ 131.143535][ T5613] usb 4-1: too many configurations: 47, using maximum allowed: 8 [ 131.146576][ T5613] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 131.146606][ T5613] usb 4-1: can't read configurations, error -61 [ 131.286495][ T5613] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 131.387768][ T6022] udevd[6022]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:65.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.462204][ T5613] usb 4-1: Using ep0 maxpacket: 32 [ 131.463039][ T5613] usb 4-1: too many configurations: 47, using maximum allowed: 8 [ 131.464697][ T5613] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 131.464729][ T5613] usb 4-1: can't read configurations, error -61 [ 131.465451][ T5613] usb usb4-port1: attempt power cycle [ 131.742075][ T5715] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 131.842205][ T5613] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 131.845293][ T6333] openvswitch: netlink: IPv4 tunnel dst address is zero [ 131.847866][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.159'. [ 131.877236][ T5613] usb 4-1: Using ep0 maxpacket: 32 [ 131.877810][ T5613] usb 4-1: too many configurations: 47, using maximum allowed: 8 [ 131.879287][ T5613] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 131.879319][ T5613] usb 4-1: can't read configurations, error -61 [ 131.892635][ T5715] usb 1-1: Using ep0 maxpacket: 8 [ 131.947717][ T6337] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 132.418463][ T5715] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 132.418541][ T5715] usb 1-1: config 0 has no interface number 0 [ 132.418921][ T5715] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 132.418991][ T5715] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 132.419065][ T5715] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 132.419137][ T5715] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 132.419186][ T5715] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 132.419394][ T5715] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.782695][ T5715] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 132.782725][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.782744][ T5715] usb 1-1: Product: syz [ 132.782758][ T5715] usb 1-1: Manufacturer: syz [ 132.782772][ T5715] usb 1-1: SerialNumber: syz [ 132.812174][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.812240][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.868275][ T5613] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 132.886724][ T5613] usb 4-1: Using ep0 maxpacket: 32 [ 132.895763][ T5613] usb 4-1: too many configurations: 47, using maximum allowed: 8 [ 132.899054][ T5613] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 132.899094][ T5613] usb 4-1: can't read configurations, error -61 [ 132.902970][ T5613] usb usb4-port1: unable to enumerate USB device [ 132.928598][ T5715] usb 1-1: config 0 descriptor?? [ 133.053021][ T6339] comedi comedi3: 8255: I/O port conflict (0xfffffffc,4) [ 133.316285][ T5715] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 133.772123][ T5715] usb 1-1: USB disconnect, device number 5 [ 133.801462][ T6353] 9p: Bad value for 'rfdno' [ 134.012055][ T37] audit: type=1326 audit(1778060215.903:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6355 comm="syz.3.168" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db4b6cdd9 code=0x7ffc0000 [ 134.012105][ T37] audit: type=1326 audit(1778060215.903:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6355 comm="syz.3.168" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db4b6cdd9 code=0x7ffc0000 [ 134.062774][ T37] audit: type=1326 audit(1778060215.953:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6355 comm="syz.3.168" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db4b6cdd9 code=0x7ffc0000 [ 134.062822][ T37] audit: type=1326 audit(1778060215.953:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6355 comm="syz.3.168" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db4b6cdd9 code=0x7ffc0000 [ 134.062858][ T37] audit: type=1326 audit(1778060215.953:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6355 comm="syz.3.168" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2db4b6cdd9 code=0x7ffc0000 [ 134.062893][ T37] audit: type=1326 audit(1778060215.953:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6355 comm="syz.3.168" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db4b6cdd9 code=0x7ffc0000 [ 134.062929][ T37] audit: type=1326 audit(1778060215.963:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6355 comm="syz.3.168" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db4b6cdd9 code=0x7ffc0000 [ 134.068897][ T37] audit: type=1326 audit(1778060215.963:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6355 comm="syz.3.168" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f2db4b6cdd9 code=0x7ffc0000 [ 134.068942][ T37] audit: type=1326 audit(1778060215.963:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6355 comm="syz.3.168" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db4b6cdd9 code=0x7ffc0000 [ 134.068980][ T37] audit: type=1326 audit(1778060215.963:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6355 comm="syz.3.168" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db4b6cdd9 code=0x7ffc0000 [ 134.339411][ T6360] FAULT_INJECTION: forcing a failure. [ 134.339411][ T6360] name failslab, interval 1, probability 0, space 0, times 1 [ 134.339442][ T6360] CPU: 0 UID: 0 PID: 6360 Comm: syz.4.169 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 134.339462][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 134.339472][ T6360] Call Trace: [ 134.339479][ T6360] [ 134.339486][ T6360] dump_stack_lvl+0xe8/0x150 [ 134.339513][ T6360] should_fail_ex+0x46b/0x600 [ 134.339544][ T6360] should_failslab+0xa8/0x100 [ 134.339581][ T6360] kmem_cache_alloc_noprof+0x87/0x680 [ 134.339601][ T6360] ? audit_log_start+0x367/0xa40 [ 134.339629][ T6360] audit_log_start+0x367/0xa40 [ 134.339657][ T6360] ? __pfx_audit_log_start+0x10/0x10 [ 134.339678][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 134.339711][ T6360] ? get_pid_task+0x20/0x1f0 [ 134.339731][ T6360] ? get_pid_task+0x20/0x1f0 [ 134.339761][ T6360] audit_seccomp+0x63/0x190 [ 134.339787][ T6360] __seccomp_filter+0xd48/0x1ef0 [ 134.339820][ T6360] ? __pfx___seccomp_filter+0x10/0x10 [ 134.339842][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 134.339862][ T6360] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 134.339882][ T6360] ? rt_mutex_slowunlock+0x1cb/0x300 [ 134.339905][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 134.339938][ T6360] ? fput+0xa0/0xd0 [ 134.339966][ T6360] ? __pfx_ksys_write+0x10/0x10 [ 134.339990][ T6360] ? __secure_computing+0xe1/0x2a0 [ 134.340012][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.340031][ T6360] do_syscall_64+0xf9/0xf80 [ 134.340048][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.340067][ T6360] ? clear_bhb_loop+0x40/0x90 [ 134.340088][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.340105][ T6360] RIP: 0033:0x7f2b469ecdd9 [ 134.340122][ T6360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.340136][ T6360] RSP: 002b:00007f2b44c46028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 134.340154][ T6360] RAX: ffffffffffffffda RBX: 00007f2b46c65fa0 RCX: 00007f2b469ecdd9 [ 134.340167][ T6360] RDX: 0000200000000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.340178][ T6360] RBP: 00007f2b44c46090 R08: 0000000000000000 R09: 0000000000000000 [ 134.340189][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.340200][ T6360] R13: 00007f2b46c66038 R14: 00007f2b46c65fa0 R15: 00007ffd99539208 [ 134.340229][ T6360] [ 134.703763][ T6373] comedi comedi3: 8255: I/O port conflict (0xfffffffc,4) [ 135.445371][ T5715] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 135.577373][ T6387] input: syz1 as /devices/virtual/input/input5 [ 135.603628][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 135.607063][ T5715] usb 4-1: too many configurations: 47, using maximum allowed: 8 [ 135.609692][ T5715] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 135.609725][ T5715] usb 4-1: can't read configurations, error -61 [ 135.732078][ T5715] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 135.833830][ T5605] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 135.882038][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 135.901894][ T5715] usb 4-1: too many configurations: 47, using maximum allowed: 8 [ 135.918276][ T5715] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 135.918309][ T5715] usb 4-1: can't read configurations, error -61 [ 135.950940][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 135.960907][ T5715] usb usb4-port1: attempt power cycle [ 136.122221][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 136.133253][ T31] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 136.133279][ T31] usb 5-1: config 0 has no interface number 0 [ 136.133321][ T31] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 136.133396][ T31] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 136.133425][ T31] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 136.133450][ T31] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 136.133475][ T31] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 136.133496][ T31] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.139635][ T31] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 136.139663][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.139681][ T31] usb 5-1: Product: syz [ 136.139748][ T31] usb 5-1: Manufacturer: syz [ 136.139762][ T31] usb 5-1: SerialNumber: syz [ 136.209099][ T31] usb 5-1: config 0 descriptor?? [ 136.382167][ T5611] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 136.411621][ T5715] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 136.432598][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 136.433517][ T5715] usb 4-1: too many configurations: 47, using maximum allowed: 8 [ 136.436901][ T5715] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 136.436934][ T5715] usb 4-1: can't read configurations, error -61 [ 136.562692][ T5715] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 136.573222][ T5611] usb 2-1: Using ep0 maxpacket: 32 [ 136.578147][ T5611] usb 2-1: unable to get BOS descriptor or descriptor too short [ 136.583688][ T5611] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 64 [ 136.583716][ T5611] usb 2-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.583741][ T5611] usb 2-1: config 1 interface 0 has no altsetting 0 [ 136.596650][ T5611] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.596675][ T5611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.596694][ T5611] usb 2-1: Product: syz [ 136.596928][ T5611] usb 2-1: Manufacturer: syz [ 136.596942][ T5611] usb 2-1: SerialNumber: syz [ 136.658115][ T6396] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 136.679985][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 136.705978][ T5715] usb 4-1: too many configurations: 47, using maximum allowed: 8 [ 136.716673][ T5715] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 136.716707][ T5715] usb 4-1: can't read configurations, error -61 [ 136.756095][ T5715] usb usb4-port1: unable to enumerate USB device [ 136.905493][ T31] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 136.972130][ T5611] cdc_ether 2-1:1.0: Descriptor too short [ 137.313212][ T5611] usb 2-1: USB disconnect, device number 7 [ 139.522980][ T5729] usb 5-1: USB disconnect, device number 7 [ 139.894985][ T6422] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 140.622941][ T5605] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 141.724156][ T5605] usb 1-1: Using ep0 maxpacket: 8 [ 141.729442][ T5605] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 141.729474][ T5605] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 141.774619][ T5605] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 141.774648][ T5605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.774668][ T5605] usb 1-1: Product: syz [ 141.774681][ T5605] usb 1-1: Manufacturer: syz [ 141.774695][ T5605] usb 1-1: SerialNumber: syz [ 141.829662][ T5605] usb 1-1: config 0 descriptor?? [ 141.874971][ T5611] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 141.918971][ T5605] streamzap 1-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 142.033722][ T5611] usb 2-1: Using ep0 maxpacket: 32 [ 142.036784][ T5611] usb 2-1: unable to get BOS descriptor or descriptor too short [ 142.038072][ T5611] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 142.040519][ T5611] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 142.040545][ T5611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.040564][ T5611] usb 2-1: Product: syz [ 142.040577][ T5611] usb 2-1: Manufacturer: syz [ 142.040585][ T5611] usb 2-1: SerialNumber: syz [ 142.116297][ T6424] netlink: 52 bytes leftover after parsing attributes in process `syz.0.191'. [ 142.172103][ T5613] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 142.313901][ T6432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.332543][ T5613] usb 3-1: Using ep0 maxpacket: 32 [ 142.336184][ T6432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.336828][ T5613] usb 3-1: config 105 has too many interfaces: 47, using maximum allowed: 32 [ 142.336850][ T5613] usb 3-1: config 105 has an invalid descriptor of length 0, skipping remainder of the config [ 142.336868][ T5613] usb 3-1: config 105 has 0 interfaces, different from the descriptor's value: 47 [ 142.347520][ T5613] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 142.347600][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.347619][ T5613] usb 3-1: Product: syz [ 142.347632][ T5613] usb 3-1: Manufacturer: syz [ 142.347645][ T5613] usb 3-1: SerialNumber: syz [ 142.537543][ T5611] usb 2-1: Cannot retrieve CPort count: -71 [ 142.537572][ T5611] usb 2-1: Cannot retrieve CPort count: -71 [ 142.537593][ T5611] es2_ap_driver 2-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 142.568140][ T5611] usb 2-1: USB disconnect, device number 8 [ 142.735782][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 142.748361][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 142.867729][ T5613] usb 3-1: USB disconnect, device number 3 [ 142.886437][ T5839] usb 1-1: USB disconnect, device number 7 [ 143.311315][ T6452] netlink: 156 bytes leftover after parsing attributes in process `syz.3.201'. [ 143.347734][ T6444] ntfs3(loop4): try to read out of volume at offset 0x0 [ 143.551374][ T6458] FAULT_INJECTION: forcing a failure. [ 143.551374][ T6458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.551406][ T6458] CPU: 0 UID: 0 PID: 6458 Comm: syz.2.203 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 143.551427][ T6458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 143.551438][ T6458] Call Trace: [ 143.551448][ T6458] [ 143.551456][ T6458] dump_stack_lvl+0xe8/0x150 [ 143.551484][ T6458] should_fail_ex+0x46b/0x600 [ 143.551516][ T6458] _copy_from_user+0x2d/0xb0 [ 143.551537][ T6458] do_sys_poll+0x2a0/0xf50 [ 143.551574][ T6458] ? __lock_acquire+0x6b5/0x2cf0 [ 143.551596][ T6458] ? __pfx_do_sys_poll+0x10/0x10 [ 143.551622][ T6458] ? is_bpf_text_address+0x292/0x2b0 [ 143.551645][ T6458] ? is_bpf_text_address+0x26/0x2b0 [ 143.551762][ T6458] ? set_user_sigmask+0xcd/0x1c0 [ 143.551789][ T6458] ? __pfx_set_user_sigmask+0x10/0x10 [ 143.551807][ T6458] ? kmem_cache_free+0x187/0x6c0 [ 143.551827][ T6458] ? do_sys_openat2+0x14c/0x200 [ 143.551859][ T6458] __se_sys_ppoll+0x209/0x2b0 [ 143.551888][ T6458] ? __pfx___se_sys_ppoll+0x10/0x10 [ 143.551911][ T6458] ? __pfx_ksys_write+0x10/0x10 [ 143.551936][ T6458] ? __x64_sys_ppoll+0x20/0xc0 [ 143.551956][ T6458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.551973][ T6458] do_syscall_64+0x15f/0xf80 [ 143.551991][ T6458] ? trace_irq_disable+0x3b/0x140 [ 143.552011][ T6458] ? clear_bhb_loop+0x40/0x90 [ 143.552033][ T6458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.552051][ T6458] RIP: 0033:0x7fc9d430cdd9 [ 143.552067][ T6458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.552082][ T6458] RSP: 002b:00007fc9d255e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 143.552101][ T6458] RAX: ffffffffffffffda RBX: 00007fc9d4585fa0 RCX: 00007fc9d430cdd9 [ 143.552114][ T6458] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 143.552126][ T6458] RBP: 00007fc9d255e090 R08: 0000000000000000 R09: 0000000000000000 [ 143.552137][ T6458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.552148][ T6458] R13: 00007fc9d4586038 R14: 00007fc9d4585fa0 R15: 00007ffd2bdbd448 [ 143.552178][ T6458] [ 143.943962][ T36] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 144.092095][ T36] usb 1-1: Using ep0 maxpacket: 8 [ 144.094305][ T36] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 144.094331][ T36] usb 1-1: config 0 has no interface number 0 [ 144.094373][ T36] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 144.094395][ T36] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 144.094422][ T36] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 144.094447][ T36] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 144.094471][ T36] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 144.094493][ T36] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.097063][ T36] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 144.097086][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.097102][ T36] usb 1-1: Product: syz [ 144.097113][ T36] usb 1-1: Manufacturer: syz [ 144.097123][ T36] usb 1-1: SerialNumber: syz [ 144.281898][ T36] usb 1-1: config 0 descriptor?? [ 144.681357][ T36] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 144.764405][ T5605] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 145.092965][ T6487] fuse: Bad value for 'fd' [ 145.237046][ T5605] usb 4-1: Using ep0 maxpacket: 8 [ 145.462687][ T5605] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 145.462716][ T5605] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 145.811491][ T5605] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 145.811522][ T5605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.811540][ T5605] usb 4-1: Product: syz [ 145.811552][ T5605] usb 4-1: Manufacturer: syz [ 145.811564][ T5605] usb 4-1: SerialNumber: syz [ 145.824604][ T6486] comedi comedi3: 8255: I/O port conflict (0xfffffffc,4) [ 145.875519][ T6490] iowarrior 1-1:0.186: Error -90 while submitting URB [ 145.975137][ T5605] usb 4-1: config 0 descriptor?? [ 146.010721][ T5605] streamzap 4-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 146.094940][ T5839] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 146.242105][ T5839] usb 5-1: Using ep0 maxpacket: 32 [ 146.248890][ T5839] usb 5-1: config 105 has too many interfaces: 47, using maximum allowed: 32 [ 146.248916][ T5839] usb 5-1: config 105 has an invalid descriptor of length 0, skipping remainder of the config [ 146.248935][ T5839] usb 5-1: config 105 has 0 interfaces, different from the descriptor's value: 47 [ 146.276252][ T6478] netlink: 52 bytes leftover after parsing attributes in process `syz.3.211'. [ 146.301319][ T5839] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 146.301349][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.301368][ T5839] usb 5-1: Product: syz [ 146.301382][ T5839] usb 5-1: Manufacturer: syz [ 146.301396][ T5839] usb 5-1: SerialNumber: syz [ 146.522768][ T5605] usb 1-1: USB disconnect, device number 8 [ 146.615591][ T5839] usb 5-1: USB disconnect, device number 8 [ 146.800553][ T5605] usb 4-1: USB disconnect, device number 18 [ 147.877457][ T6528] fuse: Bad value for 'fd' [ 148.899341][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.229'. [ 148.923199][ T6533] FAULT_INJECTION: forcing a failure. [ 148.923199][ T6533] name failslab, interval 1, probability 0, space 0, times 0 [ 148.923227][ T6533] CPU: 1 UID: 0 PID: 6533 Comm: syz.0.230 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 148.923255][ T6533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 148.923265][ T6533] Call Trace: [ 148.923273][ T6533] [ 148.923280][ T6533] dump_stack_lvl+0xe8/0x150 [ 148.923305][ T6533] should_fail_ex+0x46b/0x600 [ 148.923337][ T6533] should_failslab+0xa8/0x100 [ 148.923360][ T6533] __kmalloc_cache_noprof+0x84/0x690 [ 148.923380][ T6533] ? tipc_conn_alloc+0x57/0x500 [ 148.923405][ T6533] tipc_conn_alloc+0x57/0x500 [ 148.923431][ T6533] tipc_topsrv_kern_subscr+0xf8/0x250 [ 148.923449][ T6533] ? tipc_own_addr+0x45/0x2a0 [ 148.923471][ T6533] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 148.923493][ T6533] ? tipc_own_addr+0x45/0x2a0 [ 148.923516][ T6533] ? __asan_memset+0x22/0x50 [ 148.923546][ T6533] tipc_group_create+0x364/0x500 [ 148.923574][ T6533] tipc_sk_join+0x256/0x6a0 [ 148.923598][ T6533] ? __pfx_tipc_sk_join+0x10/0x10 [ 148.923617][ T6533] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 148.923636][ T6533] ? lockdep_hardirqs_on+0x7a/0x110 [ 148.923662][ T6533] tipc_setsockopt+0x73e/0x990 [ 148.923685][ T6533] ? __pfx_tipc_setsockopt+0x10/0x10 [ 148.923703][ T6533] ? __fget_files+0x2a/0x420 [ 148.923722][ T6533] ? __fget_files+0x2a/0x420 [ 148.923737][ T6533] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 148.923756][ T6533] ? __pfx_tipc_setsockopt+0x10/0x10 [ 148.923775][ T6533] do_sock_setsockopt+0x17c/0x1b0 [ 148.923801][ T6533] __x64_sys_setsockopt+0x143/0x1b0 [ 148.923824][ T6533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.923843][ T6533] do_syscall_64+0x15f/0xf80 [ 148.923861][ T6533] ? trace_irq_disable+0x3b/0x140 [ 148.923882][ T6533] ? clear_bhb_loop+0x40/0x90 [ 148.923902][ T6533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.923918][ T6533] RIP: 0033:0x7fa858eacdd9 [ 148.923934][ T6533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.923948][ T6533] RSP: 002b:00007fa8570dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 148.923967][ T6533] RAX: ffffffffffffffda RBX: 00007fa859126090 RCX: 00007fa858eacdd9 [ 148.923980][ T6533] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006 [ 148.923990][ T6533] RBP: 00007fa8570dd090 R08: 00000000000004bd R09: 0000000000000000 [ 148.924001][ T6533] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 148.924013][ T6533] R13: 00007fa859126128 R14: 00007fa859126090 R15: 00007fffab5b5c98 [ 148.924040][ T6533] [ 148.943750][ T6532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.247976][ T5611] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 149.412094][ T5611] usb 2-1: Using ep0 maxpacket: 32 [ 149.414145][ T5611] usb 2-1: config 105 has too many interfaces: 47, using maximum allowed: 32 [ 149.414168][ T5611] usb 2-1: config 105 has an invalid descriptor of length 0, skipping remainder of the config [ 149.414186][ T5611] usb 2-1: config 105 has 0 interfaces, different from the descriptor's value: 47 [ 149.422856][ T5611] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 149.422881][ T5611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.422896][ T5611] usb 2-1: Product: syz [ 149.422906][ T5611] usb 2-1: Manufacturer: syz [ 149.422917][ T5611] usb 2-1: SerialNumber: syz [ 149.722453][ T5611] usb 2-1: USB disconnect, device number 9 [ 150.000288][ T6560] comedi comedi3: 8255: I/O port conflict (0xfffffffc,4) [ 150.286144][ T6572] FAULT_INJECTION: forcing a failure. [ 150.286144][ T6572] name failslab, interval 1, probability 0, space 0, times 0 [ 150.286164][ T6572] CPU: 1 UID: 0 PID: 6572 Comm: syz.1.246 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 150.286176][ T6572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 150.286182][ T6572] Call Trace: [ 150.286186][ T6572] [ 150.286191][ T6572] dump_stack_lvl+0xe8/0x150 [ 150.286208][ T6572] should_fail_ex+0x46b/0x600 [ 150.286227][ T6572] should_failslab+0xa8/0x100 [ 150.286241][ T6572] __kmalloc_noprof+0xdf/0x7b0 [ 150.286251][ T6572] ? kfree+0x4d/0x6c0 [ 150.286260][ T6572] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 150.286278][ T6572] tomoyo_realpath_from_path+0xe3/0x5d0 [ 150.286293][ T6572] ? tomoyo_domain+0xd8/0x130 [ 150.286305][ T6572] ? tomoyo_path_number_perm+0x219/0x630 [ 150.286318][ T6572] tomoyo_path_number_perm+0x246/0x630 [ 150.286332][ T6572] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 150.286353][ T6572] ? sb_end_write+0xe9/0x1c0 [ 150.286367][ T6572] ? vfs_write+0x9ce/0xba0 [ 150.286394][ T6572] ? ksys_write+0x202/0x270 [ 150.286408][ T6572] security_file_ioctl+0xc3/0x2a0 [ 150.286423][ T6572] __se_sys_ioctl+0x47/0x170 [ 150.286435][ T6572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.286446][ T6572] do_syscall_64+0x15f/0xf80 [ 150.286458][ T6572] ? clear_bhb_loop+0x40/0x90 [ 150.286470][ T6572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.286480][ T6572] RIP: 0033:0x7f8bc8f1cdd9 [ 150.286490][ T6572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.286497][ T6572] RSP: 002b:00007f8bc7176028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.286510][ T6572] RAX: ffffffffffffffda RBX: 00007f8bc9195fa0 RCX: 00007f8bc8f1cdd9 [ 150.286520][ T6572] RDX: 0000200000000100 RSI: 00000000000007a0 RDI: 0000000000000004 [ 150.286526][ T6572] RBP: 00007f8bc7176090 R08: 0000000000000000 R09: 0000000000000000 [ 150.286536][ T6572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.286541][ T6572] R13: 00007f8bc9196038 R14: 00007f8bc9195fa0 R15: 00007ffd942e9048 [ 150.286557][ T6572] [ 150.286570][ T6572] ERROR: Out of memory at tomoyo_realpath_from_path. [ 150.702130][ T5613] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 150.888369][ T5613] usb 1-1: Invalid ep0 maxpacket: 64 [ 151.056273][ T5613] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 151.127190][ T6590] comedi comedi3: 8255: I/O port conflict (0xfffffffc,4) [ 151.202039][ T5613] usb 1-1: Invalid ep0 maxpacket: 64 [ 151.208608][ T5613] usb usb1-port1: attempt power cycle [ 151.542122][ T5613] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 151.549652][ T6602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.257'. [ 151.569658][ T5613] usb 1-1: Invalid ep0 maxpacket: 64 [ 151.693179][ T5613] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 151.717850][ T5613] usb 1-1: Invalid ep0 maxpacket: 64 [ 151.725603][ T5613] usb usb1-port1: unable to enumerate USB device [ 151.800987][ T6618] netlink: 156 bytes leftover after parsing attributes in process `syz.3.263'. [ 152.563754][ T6623] hfsplus: unable to find HFS+ superblock [ 154.811319][ T6631] comedi comedi3: 8255: I/O port conflict (0xfffffffc,4) [ 155.373742][ T6653] netlink: 136 bytes leftover after parsing attributes in process `syz.3.275'. [ 155.472060][ T5715] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 155.634585][ T5715] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 155.634616][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.660666][ T5715] usb 1-1: config 0 descriptor?? [ 155.674389][ T5715] cp210x 1-1:0.0: cp210x converter detected [ 156.162155][ T5839] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 156.211220][ T5715] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 156.328476][ T5715] usb 1-1: cp210x converter now attached to ttyUSB0 [ 156.407905][ T5839] usb 3-1: Using ep0 maxpacket: 8 [ 156.410210][ T5839] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 156.410234][ T5839] usb 3-1: config 0 has no interface number 0 [ 156.410270][ T5839] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 156.410291][ T5839] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 156.410318][ T5839] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 156.410343][ T5839] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 156.410368][ T5839] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 156.410389][ T5839] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.414492][ T5839] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 156.414517][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.414544][ T5839] usb 3-1: Product: syz [ 156.414557][ T5839] usb 3-1: Manufacturer: syz [ 156.414570][ T5839] usb 3-1: SerialNumber: syz [ 156.476795][ T5839] usb 3-1: config 0 descriptor?? [ 156.697477][ T5611] usb 1-1: USB disconnect, device number 13 [ 156.700191][ T6683] kAFS: No cell specified [ 156.809692][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'. [ 156.850425][ T5611] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 156.875294][ T5839] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 157.054058][ T5611] cp210x 1-1:0.0: device disconnected [ 157.128356][ T5839] usb 3-1: USB disconnect, device number 4 [ 157.615077][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.294'. [ 159.882183][ T5605] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 160.226947][ T5605] usb 2-1: Using ep0 maxpacket: 16 [ 160.231820][ T5605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.231851][ T5605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.231888][ T5605] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 160.231911][ T5605] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.294444][ T5605] usb 2-1: config 0 descriptor?? [ 160.461778][ T6752] netlink: 700 bytes leftover after parsing attributes in process `syz.4.312'. [ 160.649157][ T5839] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 160.750676][ T36] hid-generic 0005:16C0:5505.0002: item fetching failed at offset 0/1 [ 160.762743][ T36] hid-generic 0005:16C0:5505.0002: probe with driver hid-generic failed with error -22 [ 160.813341][ T5839] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 160.813371][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.813390][ T5839] usb 4-1: Product: syz [ 160.813404][ T5839] usb 4-1: Manufacturer: syz [ 160.813416][ T5839] usb 4-1: SerialNumber: syz [ 160.904938][ T6761] erspan0: entered promiscuous mode [ 160.905971][ T6760] erspan0: left promiscuous mode [ 161.048763][ T5605] usbhid 2-1:0.0: can't add hid device: -71 [ 161.048882][ T5605] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 161.086224][ T5605] usb 2-1: USB disconnect, device number 10 [ 161.118823][ T6757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.135596][ T6757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.479007][ T6772] netlink: 'syz.2.318': attribute type 3 has an invalid length. [ 161.666379][ T5839] rtl8150 4-1:1.0: couldn't reset the device [ 161.666741][ T5839] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 161.692581][ T5839] usb 4-1: USB disconnect, device number 19 [ 161.940900][ T6784] tls_set_device_offload: netdev not found [ 163.218068][ T6794] FAULT_INJECTION: forcing a failure. [ 163.218068][ T6794] name failslab, interval 1, probability 0, space 0, times 0 [ 163.218101][ T6794] CPU: 0 UID: 0 PID: 6794 Comm: syz.3.328 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 163.218122][ T6794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.218133][ T6794] Call Trace: [ 163.218140][ T6794] [ 163.218147][ T6794] dump_stack_lvl+0xe8/0x150 [ 163.218173][ T6794] should_fail_ex+0x46b/0x600 [ 163.218205][ T6794] should_failslab+0xa8/0x100 [ 163.218228][ T6794] __kmalloc_noprof+0xdf/0x7b0 [ 163.218248][ T6794] ? tomoyo_encode+0x28b/0x550 [ 163.218279][ T6794] tomoyo_encode+0x28b/0x550 [ 163.218309][ T6794] tomoyo_realpath_from_path+0x58d/0x5d0 [ 163.218345][ T6794] ? tomoyo_path_number_perm+0x219/0x630 [ 163.218368][ T6794] tomoyo_path_number_perm+0x246/0x630 [ 163.218393][ T6794] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 163.218415][ T6794] ? __lock_acquire+0x6b5/0x2cf0 [ 163.218441][ T6794] ? do_raw_spin_lock+0x12b/0x2f0 [ 163.218494][ T6794] ? __fget_files+0x2a/0x420 [ 163.218514][ T6794] ? __fget_files+0x2a/0x420 [ 163.218530][ T6794] ? __fget_files+0x3a6/0x420 [ 163.218545][ T6794] ? __fget_files+0x2a/0x420 [ 163.218566][ T6794] security_file_ioctl+0xc3/0x2a0 [ 163.218592][ T6794] __se_sys_ioctl+0x47/0x170 [ 163.218613][ T6794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.218634][ T6794] do_syscall_64+0x15f/0xf80 [ 163.218653][ T6794] ? trace_irq_disable+0x3b/0x140 [ 163.218674][ T6794] ? clear_bhb_loop+0x40/0x90 [ 163.218696][ T6794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.218714][ T6794] RIP: 0033:0x7f2db4b6cdd9 [ 163.218731][ T6794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.218745][ T6794] RSP: 002b:00007f2db2dc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.218764][ T6794] RAX: ffffffffffffffda RBX: 00007f2db4de5fa0 RCX: 00007f2db4b6cdd9 [ 163.218777][ T6794] RDX: 0000000000000000 RSI: 0000000040046207 RDI: 0000000000000003 [ 163.218788][ T6794] RBP: 00007f2db2dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 163.218799][ T6794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.218809][ T6794] R13: 00007f2db4de6038 R14: 00007f2db4de5fa0 R15: 00007ffebdb51f58 [ 163.218840][ T6794] [ 163.218858][ T6794] ERROR: Out of memory at tomoyo_realpath_from_path. [ 163.587353][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.333'. [ 163.612371][ T6802] FAULT_INJECTION: forcing a failure. [ 163.612371][ T6802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.612402][ T6802] CPU: 0 UID: 0 PID: 6802 Comm: syz.3.333 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 163.612424][ T6802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.612434][ T6802] Call Trace: [ 163.612441][ T6802] [ 163.612448][ T6802] dump_stack_lvl+0xe8/0x150 [ 163.612475][ T6802] should_fail_ex+0x46b/0x600 [ 163.612504][ T6802] _copy_from_iter+0x1d3/0x1670 [ 163.612529][ T6802] ? trace_kmem_cache_alloc+0x29/0xe0 [ 163.612546][ T6802] ? __alloc_skb+0x27d/0x7d0 [ 163.612565][ T6802] ? __pfx__copy_from_iter+0x10/0x10 [ 163.612580][ T6802] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 163.612599][ T6802] ? __alloc_skb+0x27d/0x7d0 [ 163.612622][ T6802] ? netlink_sendmsg+0x650/0xb40 [ 163.612641][ T6802] ? skb_put+0x11b/0x210 [ 163.612664][ T6802] netlink_sendmsg+0x6c0/0xb40 [ 163.612693][ T6802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.612715][ T6802] ? unwind_get_return_address+0x4d/0x90 [ 163.612742][ T6802] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 163.612762][ T6802] ____sys_sendmsg+0x94c/0x9c0 [ 163.612789][ T6802] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.612818][ T6802] ? import_iovec+0x73/0xa0 [ 163.612841][ T6802] ___sys_sendmsg+0x2a5/0x360 [ 163.612860][ T6802] ? __lock_acquire+0x6b5/0x2cf0 [ 163.612886][ T6802] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.612941][ T6802] ? __fget_files+0x2a/0x420 [ 163.612958][ T6802] ? __fget_files+0x3a6/0x420 [ 163.612988][ T6802] __x64_sys_sendmsg+0x1c3/0x2a0 [ 163.613019][ T6802] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 163.613050][ T6802] ? __pfx_ksys_write+0x10/0x10 [ 163.613078][ T6802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.613098][ T6802] do_syscall_64+0x15f/0xf80 [ 163.613116][ T6802] ? trace_irq_disable+0x3b/0x140 [ 163.613137][ T6802] ? clear_bhb_loop+0x40/0x90 [ 163.613158][ T6802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.613173][ T6802] RIP: 0033:0x7f2db4b6cdd9 [ 163.613189][ T6802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.613201][ T6802] RSP: 002b:00007f2db2dc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.613218][ T6802] RAX: ffffffffffffffda RBX: 00007f2db4de5fa0 RCX: 00007f2db4b6cdd9 [ 163.613228][ T6802] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000006 [ 163.613236][ T6802] RBP: 00007f2db2dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 163.613243][ T6802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.613251][ T6802] R13: 00007f2db4de6038 R14: 00007f2db4de5fa0 R15: 00007ffebdb51f58 [ 163.613272][ T6802] [ 165.892138][ T5839] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 166.124614][ T5839] usb 4-1: unable to get BOS descriptor or descriptor too short [ 166.125342][ T5839] usb 4-1: not running at top speed; connect to a high speed hub [ 166.126638][ T5839] usb 4-1: config 2 has an invalid interface number: 160 but max is 0 [ 166.126661][ T5839] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 166.126679][ T5839] usb 4-1: config 2 has no interface number 0 [ 166.126721][ T5839] usb 4-1: config 2 interface 160 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 166.126829][ T5839] usb 4-1: config 2 interface 160 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 166.126855][ T5839] usb 4-1: config 2 interface 160 has no altsetting 0 [ 166.129337][ T5839] usb 4-1: New USB device found, idVendor=19d2, idProduct=ffce, bcdDevice=65.e8 [ 166.129362][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.129380][ T5839] usb 4-1: Product: syz [ 166.129393][ T5839] usb 4-1: Manufacturer: syz [ 166.129405][ T5839] usb 4-1: SerialNumber: syz [ 166.283635][ T36] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 166.329437][ T6835] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 166.516414][ T36] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 166.516444][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.516464][ T36] usb 1-1: Product: syz [ 166.516477][ T36] usb 1-1: Manufacturer: syz [ 166.516489][ T36] usb 1-1: SerialNumber: syz [ 166.566008][ T36] usb 1-1: config 0 descriptor?? [ 166.680400][ T5839] option 4-1:2.160: GSM modem (1-port) converter detected [ 166.974890][ T5839] usb 4-1: USB disconnect, device number 20 [ 166.984930][ T5839] option 4-1:2.160: device disconnected [ 167.912076][ T5715] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 168.098400][ T5715] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 168.098419][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.098430][ T5715] usb 4-1: Product: syz [ 168.098437][ T5715] usb 4-1: Manufacturer: syz [ 168.098444][ T5715] usb 4-1: SerialNumber: syz [ 168.162109][ T5715] usb 4-1: config 0 descriptor?? [ 168.395564][ T36] cx82310_eth 1-1:0.0: probe with driver cx82310_eth failed with error -22 [ 168.460693][ T36] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 168.475353][ T5715] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 168.505684][ T36] usb 1-1: USB disconnect, device number 14 [ 169.472152][ T5605] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 169.642116][ T5605] usb 1-1: Using ep0 maxpacket: 8 [ 169.649010][ T5605] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 169.649036][ T5605] usb 1-1: config 0 has no interface number 0 [ 169.649514][ T5605] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 169.649538][ T5605] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 169.649942][ T5605] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 169.649969][ T5605] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 169.649993][ T5605] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 169.650015][ T5605] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.745102][ T5605] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 169.745133][ T5605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.745152][ T5605] usb 1-1: Product: syz [ 169.745175][ T5605] usb 1-1: Manufacturer: syz [ 169.745189][ T5605] usb 1-1: SerialNumber: syz [ 169.795333][ T5605] usb 1-1: config 0 descriptor?? [ 170.178712][ T5715] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 170.302827][ T5715] usb 4-1: USB disconnect, device number 21 [ 170.470172][ T5605] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 170.504758][ T5605] usb 1-1: USB disconnect, device number 15 [ 170.702350][ T6929] fuse: Bad value for 'fd' [ 171.742153][ T5613] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 171.892079][ T5613] usb 3-1: Using ep0 maxpacket: 32 [ 171.895047][ T5613] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 171.895073][ T5613] usb 3-1: config 0 has no interface number 0 [ 171.895118][ T5613] usb 3-1: config 0 interface 12 has no altsetting 0 [ 171.903123][ T5613] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 171.903151][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.903169][ T5613] usb 3-1: Product: syz [ 171.903183][ T5613] usb 3-1: Manufacturer: syz [ 171.903204][ T5613] usb 3-1: SerialNumber: syz [ 171.992520][ T5613] usb 3-1: config 0 descriptor?? [ 172.096053][ T37] kauditd_printk_skb: 42 callbacks suppressed [ 172.096071][ T37] audit: type=1326 audit(1778060252.631:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6959 comm="syz.3.385" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db4b6cdd9 code=0x7ffc0000 [ 172.096114][ T37] audit: type=1326 audit(1778060252.631:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6959 comm="syz.3.385" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db4b6cdd9 code=0x7ffc0000 [ 172.100705][ T37] audit: type=1326 audit(1778060252.631:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6959 comm="syz.3.385" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f2db4b6cdd9 code=0x7ffc0000 [ 172.100901][ T37] audit: type=1326 audit(1778060252.631:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6959 comm="syz.3.385" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db4b6cdd9 code=0x7ffc0000 [ 172.104838][ T37] audit: type=1326 audit(1778060252.631:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6959 comm="syz.3.385" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2db4b6cdd9 code=0x7ffc0000 [ 172.258104][ T37] audit: type=1326 audit(1778060252.771:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6959 comm="syz.3.385" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db4b6cdd9 code=0x7ffc0000 [ 172.359569][ T5613] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 172.359639][ T5613] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 172.359654][ T5613] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 172.359743][ T5613] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 172.426361][ T5613] usb 3-1: USB disconnect, device number 5 [ 172.762103][ T5715] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 172.922251][ T5715] usb 4-1: Invalid ep0 maxpacket: 64 [ 173.052249][ T5715] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 173.097425][ T6966] fuse: Bad value for 'fd' [ 173.203743][ T5715] usb 4-1: Invalid ep0 maxpacket: 64 [ 173.207128][ T5715] usb usb4-port1: attempt power cycle [ 173.542062][ T5715] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 173.564237][ T5715] usb 4-1: Invalid ep0 maxpacket: 64 [ 173.703231][ T5715] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 173.735140][ T5715] usb 4-1: Invalid ep0 maxpacket: 64 [ 173.735582][ T5715] usb usb4-port1: unable to enumerate USB device [ 173.797522][ T6979] dvmrp0: entered allmulticast mode [ 174.095949][ T6990] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 174.095949][ T6990] The task syz.4.393 (6990) triggered the difference, watch for misbehavior. [ 175.319895][ T6995] FAULT_INJECTION: forcing a failure. [ 175.319895][ T6995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.319926][ T6995] CPU: 0 UID: 0 PID: 6995 Comm: syz.4.396 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 175.319944][ T6995] Tainted: [L]=SOFTLOCKUP [ 175.319949][ T6995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 175.319956][ T6995] Call Trace: [ 175.319961][ T6995] [ 175.319967][ T6995] dump_stack_lvl+0xe8/0x150 [ 175.319989][ T6995] should_fail_ex+0x46b/0x600 [ 175.320012][ T6995] _copy_from_iter+0x1d3/0x1670 [ 175.320036][ T6995] ? trace_kmem_cache_alloc+0x29/0xe0 [ 175.320055][ T6995] ? __alloc_skb+0x27d/0x7d0 [ 175.320073][ T6995] ? __pfx__copy_from_iter+0x10/0x10 [ 175.320089][ T6995] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 175.320107][ T6995] ? __alloc_skb+0x27d/0x7d0 [ 175.320131][ T6995] ? netlink_sendmsg+0x650/0xb40 [ 175.320150][ T6995] ? skb_put+0x11b/0x210 [ 175.320169][ T6995] netlink_sendmsg+0x6c0/0xb40 [ 175.320191][ T6995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.320207][ T6995] ? unwind_get_return_address+0x4d/0x90 [ 175.320227][ T6995] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 175.320244][ T6995] ____sys_sendmsg+0x94c/0x9c0 [ 175.320268][ T6995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.320290][ T6995] ? import_iovec+0x73/0xa0 [ 175.320307][ T6995] ___sys_sendmsg+0x2a5/0x360 [ 175.320322][ T6995] ? __lock_acquire+0x6b5/0x2cf0 [ 175.320342][ T6995] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.320385][ T6995] ? __fget_files+0x2a/0x420 [ 175.320397][ T6995] ? __fget_files+0x3a6/0x420 [ 175.320418][ T6995] __x64_sys_sendmsg+0x1c3/0x2a0 [ 175.320437][ T6995] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 175.320459][ T6995] ? __pfx_ksys_write+0x10/0x10 [ 175.320482][ T6995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.320498][ T6995] do_syscall_64+0x15f/0xf80 [ 175.320513][ T6995] ? trace_irq_disable+0x3b/0x140 [ 175.320530][ T6995] ? clear_bhb_loop+0x40/0x90 [ 175.320548][ T6995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.320564][ T6995] RIP: 0033:0x7f2b469ecdd9 [ 175.320578][ T6995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.320591][ T6995] RSP: 002b:00007f2b44c46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.320609][ T6995] RAX: ffffffffffffffda RBX: 00007f2b46c65fa0 RCX: 00007f2b469ecdd9 [ 175.320621][ T6995] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 175.320639][ T6995] RBP: 00007f2b44c46090 R08: 0000000000000000 R09: 0000000000000000 [ 175.320650][ T6995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.320660][ T6995] R13: 00007f2b46c66038 R14: 00007f2b46c65fa0 R15: 00007ffd99539208 [ 175.320686][ T6995] [ 175.446256][ T6998] netlink: 'syz.4.397': attribute type 39 has an invalid length. [ 177.671426][ T7025] 9p: Bad value for 'rfdno' [ 177.842994][ T7036] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 177.843008][ T7036] UDF-fs: Scanning with blocksize 512 failed [ 177.844268][ T7036] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 177.844279][ T7036] UDF-fs: Scanning with blocksize 1024 failed [ 177.845327][ T7036] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 177.845336][ T7036] UDF-fs: Scanning with blocksize 2048 failed [ 177.845621][ T7036] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 177.845629][ T7036] UDF-fs: Scanning with blocksize 4096 failed [ 177.871290][ T7030] ieee802154 phy0 wpan0: encryption failed: -22 [ 177.871437][ T7030] ieee802154 phy0 wpan0: encryption failed: -22 [ 177.911611][ T5839] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 178.102046][ T5839] usb 1-1: Using ep0 maxpacket: 8 [ 178.104941][ T5839] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 178.104966][ T5839] usb 1-1: config 0 has no interface number 0 [ 178.105134][ T5839] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 178.105159][ T5839] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 178.105187][ T5839] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 178.105209][ T5839] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 178.105232][ T5839] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 178.105250][ T5839] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.110740][ T5839] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 178.110768][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.110786][ T5839] usb 1-1: Product: syz [ 178.110800][ T5839] usb 1-1: Manufacturer: syz [ 178.110814][ T5839] usb 1-1: SerialNumber: syz [ 178.267989][ T5839] usb 1-1: config 0 descriptor?? [ 178.851452][ T5604] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 178.851479][ T5604] CPU: 1 UID: 0 PID: 5604 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 178.851507][ T5604] Tainted: [L]=SOFTLOCKUP [ 178.851514][ T5604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 178.851527][ T5604] Workqueue: hci0 hci_rx_work [ 178.851555][ T5604] Call Trace: [ 178.851563][ T5604] [ 178.851572][ T5604] dump_stack_lvl+0xe8/0x150 [ 178.851594][ T5604] sysfs_create_dir_ns+0x271/0x2a0 [ 178.851611][ T5604] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 178.851627][ T5604] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 178.851655][ T5604] ? rt_spin_unlock+0x160/0x200 [ 178.851686][ T5604] kobject_add_internal+0x631/0xd10 [ 178.851722][ T5604] kobject_add+0x163/0x240 [ 178.851752][ T5604] ? __pfx_kobject_add+0x10/0x10 [ 178.851771][ T5604] ? get_device_parent+0x370/0x3a0 [ 178.851785][ T5604] device_add+0x408/0xbb0 [ 178.851798][ T5604] hci_conn_add_sysfs+0xd5/0x210 [ 178.851818][ T5604] le_conn_complete_evt+0x10e6/0x16b0 [ 178.851857][ T5604] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 178.851889][ T5604] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 178.851912][ T5604] ? lockdep_hardirqs_on+0x7a/0x110 [ 178.851933][ T5604] ? skb_pull_data+0xfb/0x200 [ 178.851962][ T5604] hci_le_conn_complete_evt+0x187/0x470 [ 178.851996][ T5604] hci_event_packet+0x659/0xef0 [ 178.852023][ T5604] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 178.852048][ T5604] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 178.852073][ T5604] ? __pfx_hci_event_packet+0x10/0x10 [ 178.852093][ T5604] ? rt_spin_unlock+0x14f/0x200 [ 178.852130][ T5604] ? hci_send_to_monitor+0xe2/0x590 [ 178.852160][ T5604] hci_rx_work+0x3ee/0x1040 [ 178.852176][ T5604] ? process_scheduled_works+0xa70/0x1860 [ 178.852192][ T5604] process_scheduled_works+0xb5d/0x1860 [ 178.852247][ T5604] ? __pfx_process_scheduled_works+0x10/0x10 [ 178.852285][ T5604] ? assign_work+0x3d5/0x5e0 [ 178.852309][ T5604] worker_thread+0xa53/0xfc0 [ 178.852337][ T5604] kthread+0x388/0x470 [ 178.852351][ T5604] ? __pfx_worker_thread+0x10/0x10 [ 178.852369][ T5604] ? __pfx_kthread+0x10/0x10 [ 178.852396][ T5604] ret_from_fork+0x514/0xb70 [ 178.852421][ T5604] ? __pfx_ret_from_fork+0x10/0x10 [ 178.852444][ T5604] ? __switch_to+0xc79/0x1410 [ 178.852475][ T5604] ? __pfx_kthread+0x10/0x10 [ 178.852490][ T5604] ret_from_fork_asm+0x1a/0x30 [ 178.852514][ T5604] [ 178.852702][ T5604] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 178.852741][ T5604] Bluetooth: hci0: failed to register connection device [ 179.156878][ T5839] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 179.189569][ T5839] usb 1-1: USB disconnect, device number 16 [ 179.302881][ T5611] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 179.452096][ T5611] usb 5-1: Using ep0 maxpacket: 32 [ 179.456549][ T5611] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.456602][ T5611] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.456629][ T5611] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.456652][ T5611] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.456678][ T5611] usb 5-1: config 0 interface 0 has no altsetting 0 [ 179.456710][ T5611] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 179.456732][ T5611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.703200][ T5611] usb 5-1: config 0 descriptor?? [ 179.878392][ T7058] Mount JFS Failure: -5 [ 179.878414][ T7058] jfs_mount failed w/return code = -5 [ 182.252968][ T36] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 182.895901][ T5611] usbhid 5-1:0.0: can't add hid device: -71 [ 182.896018][ T5611] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 182.911762][ T5611] usb 5-1: USB disconnect, device number 9 [ 183.089887][ T36] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 183.089915][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.089934][ T36] usb 1-1: config 0 has no interface number 0 [ 183.089975][ T36] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 183.141792][ T36] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 183.141819][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.141837][ T36] usb 1-1: config 0 has no interface number 0 [ 183.141880][ T36] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 183.141921][ T36] usb 1-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 183.188832][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.209361][ T36] usb 1-1: config 0 descriptor?? [ 183.929958][ T36] usb 1-1: USB disconnect, device number 17 [ 184.265650][ T7116] FAULT_INJECTION: forcing a failure. [ 184.265650][ T7116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.265684][ T7116] CPU: 1 UID: 0 PID: 7116 Comm: syz.3.431 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 184.265715][ T7116] Tainted: [L]=SOFTLOCKUP [ 184.265721][ T7116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 184.265730][ T7116] Call Trace: [ 184.265737][ T7116] [ 184.265747][ T7116] dump_stack_lvl+0xe8/0x150 [ 184.265773][ T7116] should_fail_ex+0x46b/0x600 [ 184.265804][ T7116] _copy_to_user+0x31/0xb0 [ 184.265820][ T7116] simple_read_from_buffer+0xe1/0x170 [ 184.265838][ T7116] proc_fail_nth_read+0x1be/0x230 [ 184.265856][ T7116] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.265872][ T7116] ? rw_verify_area+0x2ac/0x4e0 [ 184.265883][ T7116] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.265898][ T7116] vfs_read+0x212/0xa80 [ 184.265913][ T7116] ? __pfx_vfs_read+0x10/0x10 [ 184.265924][ T7116] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 184.265936][ T7116] ? lockdep_hardirqs_on+0x7a/0x110 [ 184.265948][ T7116] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 184.265961][ T7116] ? mutex_lock_nested+0x152/0x1d0 [ 184.265973][ T7116] ? fdget_pos+0x252/0x320 [ 184.265987][ T7116] ksys_read+0x156/0x270 [ 184.265999][ T7116] ? __pfx_ksys_read+0x10/0x10 [ 184.266013][ T7116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.266024][ T7116] do_syscall_64+0x15f/0xf80 [ 184.266034][ T7116] ? trace_irq_disable+0x3b/0x140 [ 184.266046][ T7116] ? clear_bhb_loop+0x40/0x90 [ 184.266058][ T7116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.266068][ T7116] RIP: 0033:0x7f2db4b2d60e [ 184.266087][ T7116] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 184.266096][ T7116] RSP: 002b:00007f2db2da4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 184.266107][ T7116] RAX: ffffffffffffffda RBX: 00007f2db2da56c0 RCX: 00007f2db4b2d60e [ 184.266114][ T7116] RDX: 000000000000000f RSI: 00007f2db2da50a0 RDI: 0000000000000006 [ 184.266120][ T7116] RBP: 00007f2db2da5090 R08: 0000000000000000 R09: 0000000000000000 [ 184.266126][ T7116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.266132][ T7116] R13: 00007f2db4de6128 R14: 00007f2db4de6090 R15: 00007ffebdb51f58 [ 184.266147][ T7116] [ 186.596648][ T7144] lo speed is unknown, defaulting to 1000 [ 186.596693][ T7144] lo speed is unknown, defaulting to 1000 [ 186.597385][ T7144] lo speed is unknown, defaulting to 1000 [ 186.599530][ T7144] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 186.599549][ T7144] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 186.599569][ T7144] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 186.606130][ T7144] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 186.684320][ T7144] lo speed is unknown, defaulting to 1000 [ 186.685728][ T7144] lo speed is unknown, defaulting to 1000 [ 186.687117][ T7144] lo speed is unknown, defaulting to 1000 [ 186.690103][ T7144] lo speed is unknown, defaulting to 1000 [ 186.691535][ T7144] lo speed is unknown, defaulting to 1000 [ 187.432860][ T7144] hfsplus: unable to find HFS+ superblock [ 188.642098][ T36] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 188.663570][ T7179] FAULT_INJECTION: forcing a failure. [ 188.663570][ T7179] name failslab, interval 1, probability 0, space 0, times 0 [ 188.663594][ T7179] CPU: 0 UID: 0 PID: 7179 Comm: syz.3.453 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 188.663612][ T7179] Tainted: [L]=SOFTLOCKUP [ 188.663618][ T7179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 188.663627][ T7179] Call Trace: [ 188.663634][ T7179] [ 188.663641][ T7179] dump_stack_lvl+0xe8/0x150 [ 188.663667][ T7179] should_fail_ex+0x46b/0x600 [ 188.663697][ T7179] should_failslab+0xa8/0x100 [ 188.663720][ T7179] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 188.663739][ T7179] ? __alloc_skb+0x1d0/0x7d0 [ 188.663751][ T7179] ? lockdep_hardirqs_on+0x7a/0x110 [ 188.663765][ T7179] __alloc_skb+0x1d0/0x7d0 [ 188.663778][ T7179] alloc_skb_with_frags+0xc8/0x760 [ 188.663789][ T7179] ? __lock_acquire+0x6b5/0x2cf0 [ 188.663804][ T7179] ? try_to_take_rt_mutex+0x840/0xb00 [ 188.663818][ T7179] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 188.663830][ T7179] sock_alloc_send_pskb+0x884/0x9a0 [ 188.663847][ T7179] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 188.663865][ T7179] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 188.663880][ T7179] ? dev_get_by_index+0x22/0x2e0 [ 188.663893][ T7179] ? dev_get_by_index+0x22/0x2e0 [ 188.663909][ T7179] packet_sendmsg+0x315a/0x4fb0 [ 188.663924][ T7179] ? __lock_acquire+0x6b5/0x2cf0 [ 188.663941][ T7179] ? unwind_next_frame+0xa6/0x2550 [ 188.663956][ T7179] ? unwind_next_frame+0xa6/0x2550 [ 188.663969][ T7179] ? smack_socket_sendmsg+0x1f8/0x590 [ 188.663985][ T7179] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 188.663998][ T7179] ? __lock_acquire+0x6b5/0x2cf0 [ 188.664010][ T7179] ? __pfx_packet_sendmsg+0x10/0x10 [ 188.664025][ T7179] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 188.664042][ T7179] ? __kernel_text_address+0xd/0x30 [ 188.664059][ T7179] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 188.664072][ T7179] ____sys_sendmsg+0x94c/0x9c0 [ 188.664087][ T7179] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.664103][ T7179] ? import_iovec+0x73/0xa0 [ 188.664116][ T7179] ___sys_sendmsg+0x2a5/0x360 [ 188.664127][ T7179] ? __lock_acquire+0x6b5/0x2cf0 [ 188.664141][ T7179] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.664169][ T7179] ? __fget_files+0x2a/0x420 [ 188.664178][ T7179] ? __fget_files+0x3a6/0x420 [ 188.664192][ T7179] __x64_sys_sendmsg+0x1c3/0x2a0 [ 188.664205][ T7179] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 188.664221][ T7179] ? __pfx_ksys_write+0x10/0x10 [ 188.664236][ T7179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.664247][ T7179] do_syscall_64+0x15f/0xf80 [ 188.664257][ T7179] ? trace_irq_disable+0x3b/0x140 [ 188.664269][ T7179] ? clear_bhb_loop+0x40/0x90 [ 188.664281][ T7179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.664290][ T7179] RIP: 0033:0x7f2db4b6cdd9 [ 188.664300][ T7179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.664308][ T7179] RSP: 002b:00007f2db2dc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.664320][ T7179] RAX: ffffffffffffffda RBX: 00007f2db4de5fa0 RCX: 00007f2db4b6cdd9 [ 188.664333][ T7179] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 188.664339][ T7179] RBP: 00007f2db2dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 188.664345][ T7179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.664351][ T7179] R13: 00007f2db4de6038 R14: 00007f2db4de5fa0 R15: 00007ffebdb51f58 [ 188.664366][ T7179] [ 189.203672][ T36] usb 1-1: Using ep0 maxpacket: 16 [ 189.217309][ T36] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 7.00 [ 189.217337][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.217356][ T36] usb 1-1: Product: syz [ 189.217370][ T36] usb 1-1: Manufacturer: syz [ 189.217384][ T36] usb 1-1: SerialNumber: syz [ 189.254821][ T36] usb 1-1: config 0 descriptor?? [ 189.284440][ T36] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 189.300214][ T36] usb 1-1: Detected FT2232H [ 190.036342][ T36] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 190.137650][ T36] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 190.172668][ T36] usb 1-1: USB disconnect, device number 18 [ 190.276392][ T36] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 190.315851][ T36] ftdi_sio 1-1:0.0: device disconnected [ 190.543289][ T5613] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 190.621217][ T7198] capability: warning: `syz.1.461' uses 32-bit capabilities (legacy support in use) [ 190.693192][ T5613] usb 5-1: Using ep0 maxpacket: 8 [ 190.694761][ T5613] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 190.694776][ T5613] usb 5-1: config 0 has no interface number 0 [ 190.694800][ T5613] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 190.694812][ T5613] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 190.694826][ T5613] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 190.694838][ T5613] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 190.694851][ T5613] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 190.694861][ T5613] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.696836][ T5613] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 190.696851][ T5613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.696861][ T5613] usb 5-1: Product: syz [ 190.696868][ T5613] usb 5-1: Manufacturer: syz [ 190.696875][ T5613] usb 5-1: SerialNumber: syz [ 190.725739][ T5613] usb 5-1: config 0 descriptor?? [ 191.189097][ T5613] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 191.317361][ T7211] binder: 7210:7211 ioctl c0306201 0 returned -14 [ 191.601470][ T5605] usb 5-1: USB disconnect, device number 10 [ 191.601914][ T7217] netlink: 'syz.0.467': attribute type 4 has an invalid length. [ 191.603534][ T7217] netlink: 17 bytes leftover after parsing attributes in process `syz.0.467'. [ 191.659484][ T7220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.676623][ T7220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.927452][ T7229] FAULT_INJECTION: forcing a failure. [ 191.927452][ T7229] name failslab, interval 1, probability 0, space 0, times 0 [ 191.927488][ T7229] CPU: 0 UID: 0 PID: 7229 Comm: syz.1.469 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 191.927514][ T7229] Tainted: [L]=SOFTLOCKUP [ 191.927520][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 191.927530][ T7229] Call Trace: [ 191.927538][ T7229] [ 191.927546][ T7229] dump_stack_lvl+0xe8/0x150 [ 191.927572][ T7229] should_fail_ex+0x46b/0x600 [ 191.927605][ T7229] should_failslab+0xa8/0x100 [ 191.927629][ T7229] kmem_cache_alloc_noprof+0x87/0x680 [ 191.927648][ T7229] ? __netlink_lookup+0xc6/0x8b0 [ 191.927669][ T7229] ? skb_clone+0x212/0x3a0 [ 191.927695][ T7229] skb_clone+0x212/0x3a0 [ 191.927720][ T7229] __netlink_deliver_tap+0x404/0x850 [ 191.927757][ T7229] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.927780][ T7229] netlink_deliver_tap+0x19c/0x1b0 [ 191.927802][ T7229] netlink_unicast+0x754/0x920 [ 191.927832][ T7229] netlink_sendmsg+0x813/0xb40 [ 191.927852][ T7229] ? __lock_acquire+0x6b5/0x2cf0 [ 191.927883][ T7229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.927906][ T7229] ? __lock_acquire+0x6b5/0x2cf0 [ 191.927932][ T7229] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 191.927950][ T7229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.927972][ T7229] sock_sendmsg+0x3fb/0x450 [ 191.927996][ T7229] ? unwind_next_frame+0xa6/0x2550 [ 191.928026][ T7229] ? __pfx_sock_sendmsg+0x10/0x10 [ 191.928064][ T7229] ? __asan_memset+0x22/0x50 [ 191.928088][ T7229] ? iov_iter_bvec+0xb8/0x180 [ 191.928111][ T7229] splice_to_socket+0xae5/0x11f0 [ 191.928153][ T7229] ? __pfx_splice_to_socket+0x10/0x10 [ 191.928218][ T7229] ? rw_verify_area+0x25b/0x4e0 [ 191.928240][ T7229] ? __pfx_splice_to_socket+0x10/0x10 [ 191.928258][ T7229] do_splice+0xef8/0x1940 [ 191.928307][ T7229] ? __pfx_do_splice+0x10/0x10 [ 191.928336][ T7229] __se_sys_splice+0x353/0x490 [ 191.928361][ T7229] ? __pfx___se_sys_splice+0x10/0x10 [ 191.928386][ T7229] ? __x64_sys_splice+0x21/0xf0 [ 191.928404][ T7229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.928424][ T7229] do_syscall_64+0x15f/0xf80 [ 191.928443][ T7229] ? trace_irq_disable+0x3b/0x140 [ 191.928464][ T7229] ? clear_bhb_loop+0x40/0x90 [ 191.928487][ T7229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.928505][ T7229] RIP: 0033:0x7f8bc8f1cdd9 [ 191.928522][ T7229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.928536][ T7229] RSP: 002b:00007f8bc7155028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 191.928555][ T7229] RAX: ffffffffffffffda RBX: 00007f8bc9196090 RCX: 00007f8bc8f1cdd9 [ 191.928569][ T7229] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 191.928579][ T7229] RBP: 00007f8bc7155090 R08: 000000000004ffe6 R09: 8864000000000000 [ 191.928592][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.928602][ T7229] R13: 00007f8bc9196128 R14: 00007f8bc9196090 R15: 00007ffd942e9048 [ 191.928633][ T7229] [ 193.572078][ T5613] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 193.722082][ T5613] usb 2-1: Using ep0 maxpacket: 32 [ 193.725076][ T5613] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 193.725100][ T5613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.761626][ T5613] usb 2-1: config 0 descriptor?? [ 193.972456][ T5613] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 194.033301][ T36] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 194.074013][ T5613] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 194.075181][ T5613] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 194.075261][ T5613] usb 2-1: media controller created [ 194.122801][ T5613] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.195427][ T36] usb 3-1: Using ep0 maxpacket: 16 [ 194.199887][ T36] usb 3-1: config 7 has an invalid interface number: 251 but max is 0 [ 194.199911][ T36] usb 3-1: config 7 has no interface number 0 [ 194.199979][ T36] usb 3-1: config 7 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 194.200004][ T36] usb 3-1: config 7 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 194.206050][ T36] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 194.206074][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.206092][ T36] usb 3-1: Product: syz [ 194.206105][ T36] usb 3-1: Manufacturer: syz [ 194.206118][ T36] usb 3-1: SerialNumber: syz [ 194.230048][ T7261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.230571][ T7261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.234984][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.235045][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.257852][ T7274] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 194.258096][ T7274] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 194.344986][ T5613] az6027: usb out operation failed. (-71) [ 194.346961][ T5613] az6027: usb out operation failed. (-71) [ 194.346983][ T5613] stb0899_attach: Driver disabled by Kconfig [ 194.346993][ T5613] az6027: no front-end attached [ 194.346993][ T5613] [ 194.347394][ T5613] az6027: usb out operation failed. (-71) [ 194.347407][ T5613] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 194.400448][ T5613] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 194.497739][ T5613] dvb-usb: schedule remote query interval to 400 msecs. [ 194.497761][ T5613] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 194.523959][ T5613] usb 2-1: USB disconnect, device number 11 [ 194.666624][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 195.580118][ T5613] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 195.641429][ T5605] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 195.792068][ T5605] usb 5-1: Using ep0 maxpacket: 32 [ 195.794323][ T5605] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.794351][ T5605] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.794426][ T5605] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 195.794466][ T5605] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 195.794488][ T5605] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.874178][ T5605] usb 5-1: config 0 descriptor?? [ 196.138108][ T36] asix 3-1:7.251: probe with driver asix failed with error -71 [ 196.249353][ T36] usb 3-1: USB disconnect, device number 6 [ 196.255537][ T5605] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0003/input/input7 [ 197.026891][ T7326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.074229][ T7326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.229629][ T5605] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0003/input/input8 [ 197.833911][ T5605] kye 0003:0458:5011.0003: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 198.684035][ T7367] hfsplus: unable to find HFS+ superblock [ 201.439123][ T5604] Bluetooth: hci0: command 0x0406 tx timeout [ 201.914664][ T5605] usb 5-1: USB disconnect, device number 11 [ 202.646023][ T7377] fido_id[7377]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 202.749199][ T7385] kAFS: No cell specified [ 202.760821][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'. [ 202.843044][ T5714] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 203.742253][ T5714] usb 2-1: Using ep0 maxpacket: 32 [ 203.746359][ T5714] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 203.746383][ T5714] usb 2-1: config 2 has no interface number 0 [ 203.746426][ T5714] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 203.746450][ T5714] usb 2-1: config 2 interface 88 has no altsetting 0 [ 203.751094][ T5714] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 203.751120][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.751139][ T5714] usb 2-1: Product: syz [ 203.751153][ T5714] usb 2-1: Manufacturer: syz [ 203.751166][ T5714] usb 2-1: SerialNumber: syz [ 203.776364][ T7380] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 203.921841][ T7384] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.922750][ T7384] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.020640][ T7380] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 204.304339][ T7384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.310299][ T7384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.626628][ T5714] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 204.626893][ T5714] asix 2-1:2.88: probe with driver asix failed with error -71 [ 204.645757][ T5714] usb 2-1: USB disconnect, device number 12 [ 204.783313][ T7401] binder: BINDER_SET_CONTEXT_MGR already set [ 204.783330][ T7401] binder: 7400:7401 ioctl 4018620d 200000004a80 returned -16 [ 205.274592][ T162] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.292996][ T162] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.293093][ T162] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.307970][ T162] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.650674][ T7417] hfsplus: unable to find HFS+ superblock [ 206.634368][ T37] audit: type=1326 audit(1778060287.161:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7442 comm="syz.0.543" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa858eacdd9 code=0x7ffc0000 [ 206.634419][ T37] audit: type=1326 audit(1778060287.161:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7442 comm="syz.0.543" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa858eacdd9 code=0x7ffc0000 [ 206.692083][ T37] audit: type=1326 audit(1778060287.171:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7442 comm="syz.0.543" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fa858eacdd9 code=0x7ffc0000 [ 206.692134][ T37] audit: type=1326 audit(1778060287.171:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7442 comm="syz.0.543" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa858eacdd9 code=0x7ffc0000 [ 206.692175][ T37] audit: type=1326 audit(1778060287.171:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7442 comm="syz.0.543" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa858eacdd9 code=0x7ffc0000 [ 206.692214][ T37] audit: type=1326 audit(1778060287.181:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7442 comm="syz.0.543" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa858eacdd9 code=0x7ffc0000 [ 206.692251][ T37] audit: type=1326 audit(1778060287.181:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7442 comm="syz.0.543" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa858eacdd9 code=0x7ffc0000 [ 206.692288][ T37] audit: type=1326 audit(1778060287.191:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7442 comm="syz.0.543" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa858eacdd9 code=0x7ffc0000 [ 206.692340][ T37] audit: type=1326 audit(1778060287.191:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7442 comm="syz.0.543" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa858eacdd9 code=0x7ffc0000 [ 206.692378][ T37] audit: type=1326 audit(1778060287.191:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7442 comm="syz.0.543" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa858eacdd9 code=0x7ffc0000 [ 207.077554][ T7451] netlink: 128 bytes leftover after parsing attributes in process `syz.0.543'. [ 207.182665][ T7451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.199171][ T5611] lo speed is unknown, defaulting to 1000 [ 207.260760][ T7458] Unsupported ieee802154 address type: 0 [ 207.873569][ T1257] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 208.012288][ T5611] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 208.104074][ T1257] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 208.104099][ T1257] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.108879][ T1257] usb 4-1: config 0 descriptor?? [ 208.119173][ T1257] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 208.164059][ T5611] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.164086][ T5611] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.165357][ T5611] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 208.165393][ T5611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 208.165439][ T5611] usb 1-1: SerialNumber: syz [ 208.272069][ T5605] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 208.402074][ T5605] usb 2-1: device descriptor read/64, error -71 [ 208.633834][ T5611] usb 1-1: 0:2 : does not exist [ 208.662641][ T5605] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 208.802140][ T5605] usb 2-1: device descriptor read/64, error -71 [ 208.937051][ T5605] usb usb2-port1: attempt power cycle [ 209.133068][ T1257] gspca_sunplus: reg_w_riv err -71 [ 209.133178][ T1257] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 209.153602][ T1257] usb 4-1: USB disconnect, device number 27 [ 209.312091][ T5605] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 209.319307][ T5611] usb 1-1: USB disconnect, device number 19 [ 209.340081][ T5605] usb 2-1: device descriptor read/8, error -71 [ 209.413983][ T7500] binder: BINDER_SET_CONTEXT_MGR already set [ 209.413993][ T7500] binder: 7499:7500 ioctl 4018620d 200000004a80 returned -16 [ 209.511646][ T6022] udevd[6022]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.582039][ T5605] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 209.604301][ T5605] usb 2-1: device descriptor read/8, error -71 [ 209.722356][ T5605] usb usb2-port1: unable to enumerate USB device [ 209.792136][ T5839] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 209.925571][ T5839] usb 3-1: device descriptor read/64, error -71 [ 210.931712][ T5839] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 211.092096][ T5839] usb 3-1: device descriptor read/64, error -71 [ 211.193032][ T5605] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 211.214488][ T5839] usb usb3-port1: attempt power cycle [ 211.367623][ T5605] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 211.367650][ T5605] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 211.370386][ T5605] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 211.370411][ T5605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.370431][ T5605] usb 1-1: Product: syz [ 211.370446][ T5605] usb 1-1: Manufacturer: syz [ 211.370460][ T5605] usb 1-1: SerialNumber: syz [ 211.394803][ T5605] usb 1-1: config 0 descriptor?? [ 211.417009][ T5605] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 211.552335][ T5839] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 211.572886][ T5839] usb 3-1: device descriptor read/8, error -71 [ 211.812119][ T5839] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 211.839988][ T5839] usb 3-1: device descriptor read/8, error -71 [ 211.942813][ T5839] usb usb3-port1: unable to enumerate USB device [ 211.958888][ T5605] gspca_sunplus: reg_r err -110 [ 211.958986][ T5605] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 212.759655][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.579'. [ 212.877296][ T5605] usb 1-1: USB disconnect, device number 20 [ 213.585186][ T7567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.588'. [ 213.857127][ T5605] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 214.013274][ T5605] usb 4-1: Using ep0 maxpacket: 32 [ 214.015523][ T5605] usb 4-1: config 8 has an invalid interface number: 135 but max is 2 [ 214.015548][ T5605] usb 4-1: config 8 has an invalid interface number: 131 but max is 2 [ 214.015568][ T5605] usb 4-1: config 8 has an invalid interface number: 225 but max is 2 [ 214.015587][ T5605] usb 4-1: config 8 has no interface number 0 [ 214.015604][ T5605] usb 4-1: config 8 has no interface number 1 [ 214.015618][ T5605] usb 4-1: config 8 has no interface number 2 [ 214.015655][ T5605] usb 4-1: config 8 interface 135 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 64 [ 214.015670][ T5605] usb 4-1: config 8 interface 135 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 64 [ 214.015691][ T5605] usb 4-1: config 8 interface 135 altsetting 5 endpoint 0xE has an invalid bInterval 64, changing to 7 [ 214.015715][ T5605] usb 4-1: config 8 interface 135 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 214.015735][ T5605] usb 4-1: config 8 interface 135 altsetting 5 bulk endpoint 0xA has invalid maxpacket 16 [ 214.015757][ T5605] usb 4-1: config 8 interface 135 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 214.015792][ T5605] usb 4-1: config 8 interface 131 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 214.015806][ T5605] usb 4-1: config 8 interface 131 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 214.015816][ T5605] usb 4-1: config 8 interface 131 altsetting 4 endpoint 0x8 has invalid wMaxPacketSize 0 [ 214.015835][ T5605] usb 4-1: config 8 interface 225 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 214.015846][ T5605] usb 4-1: config 8 interface 225 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 214.015866][ T5605] usb 4-1: config 8 interface 225 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 214.015886][ T5605] usb 4-1: config 8 interface 135 has no altsetting 0 [ 214.015903][ T5605] usb 4-1: config 8 interface 131 has no altsetting 0 [ 214.019666][ T5605] usb 4-1: New USB device found, idVendor=13d3, idProduct=3226, bcdDevice=1f.eb [ 214.019682][ T5605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.019692][ T5605] usb 4-1: Product: ࠝ [ 214.019699][ T5605] usb 4-1: Manufacturer: 쎧䡕ㄺ䕷阮旊꿦ࢩᡤᤖ죶࿛﹞킪輶碊䢰埇篰✍塄ハ栠꘬혍賖눔ꢄ근䉑髯㸪⑋睡桉ۗ믝Ṥ≟捧뇨└㠓ｋ㹀ퟪ琵駗엢蓆郊翔Ꝕꁼﰃ蓼䃮唿♋䓙￉䊎⣍䘊ꢟ㓂賱﮴蚋촷Ẇ隁蒈ꇘ멬堭ጕᘝ鎬뀵꧅࿍쓀쭟 [ 214.019715][ T5605] usb 4-1: SerialNumber: 罚﯅ᵜ᪗滉✢靿䶪뻏દ孎졕 [ 214.103007][ T7566] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 214.103710][ T7566] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 214.107801][ T7566] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 214.227677][ T1006] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 214.412113][ T1006] usb 5-1: Using ep0 maxpacket: 8 [ 214.416932][ T1006] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 214.416957][ T1006] usb 5-1: config 0 has no interface number 0 [ 214.417000][ T1006] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 214.417022][ T1006] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 214.417050][ T1006] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 214.417074][ T1006] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 214.417098][ T1006] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 214.417119][ T1006] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.518783][ T1006] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 214.518819][ T1006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.518838][ T1006] usb 5-1: Product: syz [ 214.518851][ T1006] usb 5-1: Manufacturer: syz [ 214.518864][ T1006] usb 5-1: SerialNumber: syz [ 214.558431][ T1006] usb 5-1: config 0 descriptor?? [ 215.047905][ T1006] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 215.555567][ T5605] hub 4-1:8.131: Invalid hub with more than one config or interface [ 215.555616][ T5605] hub 4-1:8.131: probe with driver hub failed with error -22 [ 215.640040][ T5605] usb 4-1: USB disconnect, device number 28 [ 215.971862][ T7589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.999141][ T7589] batadv_slave_0: entered promiscuous mode [ 216.017984][ T7589] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 216.336963][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.593'. [ 216.752211][ T7591] hsr_slave_1 (unregistering): left promiscuous mode [ 217.593487][ T5611] usb 5-1: USB disconnect, device number 12 [ 220.062152][ T5605] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 220.932036][ T5605] usb 1-1: Using ep0 maxpacket: 8 [ 220.934031][ T5605] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 220.934056][ T5605] usb 1-1: config 0 has no interface number 0 [ 220.934109][ T5605] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 220.934139][ T5605] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 220.934167][ T5605] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 220.934191][ T5605] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 220.934217][ T5605] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 220.934239][ T5605] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.958928][ T5605] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 220.958958][ T5605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.958977][ T5605] usb 1-1: Product: syz [ 220.958991][ T5605] usb 1-1: Manufacturer: syz [ 220.959005][ T5605] usb 1-1: SerialNumber: syz [ 221.085162][ T7656] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 221.520559][ T5605] usb 1-1: config 0 descriptor?? [ 223.281656][ T5603] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 223.281808][ T5603] Bluetooth: hci4: Injecting HCI hardware error event [ 223.297093][ T5604] Bluetooth: hci4: hardware error 0x00 [ 223.348885][ T5605] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 224.264667][ T5605] usb 1-1: USB disconnect, device number 21 [ 230.092050][ T5604] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 231.610925][ T5605] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 231.846131][ T5605] usb 3-1: Using ep0 maxpacket: 8 [ 231.848842][ T5605] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 231.848868][ T5605] usb 3-1: config 0 has no interface number 0 [ 231.848913][ T5605] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 231.848936][ T5605] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 231.848970][ T5605] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 231.848996][ T5605] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 231.849021][ T5605] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 231.849044][ T5605] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.951236][ T5605] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 231.951269][ T5605] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.951289][ T5605] usb 3-1: Product: syz [ 231.951304][ T5605] usb 3-1: Manufacturer: syz [ 231.951318][ T5605] usb 3-1: SerialNumber: syz [ 231.991754][ T5605] usb 3-1: config 0 descriptor?? [ 234.348317][ T5603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 234.395897][ T5603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 234.398039][ T5603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 234.399252][ T5603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 234.400079][ T5603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 234.903168][ T7687] lo speed is unknown, defaulting to 1000 [ 235.536877][ T7687] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.537079][ T7687] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.537244][ T7687] bridge_slave_0: entered allmulticast mode [ 235.539977][ T7687] bridge_slave_0: entered promiscuous mode [ 235.575440][ T7687] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.575646][ T7687] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.575876][ T7687] bridge_slave_1: entered allmulticast mode [ 235.678330][ T7687] bridge_slave_1: entered promiscuous mode [ 235.863257][ T7705] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 235.917278][ T7687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.937578][ T7687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.991189][ T7687] team0: Port device team_slave_0 added [ 236.006953][ T7687] team0: Port device team_slave_1 added [ 236.060094][ T7687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.060111][ T7687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.060137][ T7687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.095437][ T7687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.095453][ T7687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.095480][ T7687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.244982][ T7687] hsr_slave_0: entered promiscuous mode [ 236.246266][ T7687] hsr_slave_1: entered promiscuous mode [ 236.261766][ T5605] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 236.274894][ T5605] usb 3-1: USB disconnect, device number 11 [ 236.395040][ T7687] debugfs: 'hsr0' already exists in 'hsr' [ 236.395065][ T7687] Cannot create hsr debugfs directory [ 237.169223][ T5603] Bluetooth: hci5: command tx timeout [ 237.556885][ T5604] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 237.594158][ T5604] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 237.596232][ T5604] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 237.599043][ T5604] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 237.600952][ T5604] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 239.192154][ T5603] Bluetooth: hci5: command tx timeout [ 239.752415][ T5603] Bluetooth: hci6: command tx timeout [ 241.057935][ T7709] lo speed is unknown, defaulting to 1000 [ 242.083573][ T5603] Bluetooth: hci5: command tx timeout [ 242.148112][ T5603] Bluetooth: hci6: command tx timeout [ 242.820994][ T7709] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.821209][ T7709] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.821712][ T7709] bridge_slave_0: entered allmulticast mode [ 242.845416][ T7709] bridge_slave_0: entered promiscuous mode [ 242.859232][ T7709] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.859443][ T7709] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.860808][ T7709] bridge_slave_1: entered allmulticast mode [ 242.886902][ T7709] bridge_slave_1: entered promiscuous mode [ 242.949681][ T7709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.971301][ T7709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.032912][ T7709] team0: Port device team_slave_0 added [ 243.036411][ T7709] team0: Port device team_slave_1 added [ 243.094952][ T7709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.094968][ T7709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.094994][ T7709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.097486][ T7709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.097500][ T7709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.097526][ T7709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.265062][ T7709] hsr_slave_0: entered promiscuous mode [ 243.266393][ T7709] hsr_slave_1: entered promiscuous mode [ 243.267299][ T7709] debugfs: 'hsr0' already exists in 'hsr' [ 243.267322][ T7709] Cannot create hsr debugfs directory [ 244.154761][ T5604] Bluetooth: hci5: command tx timeout [ 244.154810][ T5603] Bluetooth: hci6: command tx timeout [ 244.786823][ T5604] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 244.870026][ T5604] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 244.871362][ T5604] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 244.887350][ T5604] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 244.889421][ T5604] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 246.236257][ T5603] Bluetooth: hci6: command tx timeout [ 246.284391][ T7736] lo speed is unknown, defaulting to 1000 [ 246.808639][ T7736] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.808850][ T7736] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.809019][ T7736] bridge_slave_0: entered allmulticast mode [ 246.811683][ T7736] bridge_slave_0: entered promiscuous mode [ 246.844117][ T7736] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.844322][ T7736] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.844830][ T7736] bridge_slave_1: entered allmulticast mode [ 246.847378][ T7736] bridge_slave_1: entered promiscuous mode [ 246.930683][ T7736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.944989][ T7736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.952362][ T5603] Bluetooth: hci7: command tx timeout [ 247.007102][ T7736] team0: Port device team_slave_0 added [ 247.010920][ T7736] team0: Port device team_slave_1 added [ 247.068498][ T7736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.068514][ T7736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.068540][ T7736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.071044][ T7736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.071057][ T7736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.071082][ T7736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.236776][ T7736] hsr_slave_0: entered promiscuous mode [ 247.238098][ T7736] hsr_slave_1: entered promiscuous mode [ 247.239040][ T7736] debugfs: 'hsr0' already exists in 'hsr' [ 247.239078][ T7736] Cannot create hsr debugfs directory [ 247.885284][ T5604] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 247.917337][ T5604] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 247.919437][ T5604] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 247.922292][ T5604] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 247.923024][ T5604] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 249.035239][ T5603] Bluetooth: hci7: command tx timeout [ 250.398305][ T7756] lo speed is unknown, defaulting to 1000 [ 250.907504][ T7756] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.907713][ T7756] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.907894][ T7756] bridge_slave_0: entered allmulticast mode [ 250.910942][ T7756] bridge_slave_0: entered promiscuous mode [ 250.950499][ T7756] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.950692][ T7756] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.950886][ T7756] bridge_slave_1: entered allmulticast mode [ 250.977605][ T7756] bridge_slave_1: entered promiscuous mode [ 251.067938][ T7756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.084314][ T7756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.112162][ T5603] Bluetooth: hci7: command tx timeout [ 251.159335][ T7756] team0: Port device team_slave_0 added [ 251.173706][ T7756] team0: Port device team_slave_1 added [ 251.233691][ T7756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.233708][ T7756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.233734][ T7756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.235970][ T7756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.235983][ T7756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.236008][ T7756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.413977][ T7756] hsr_slave_0: entered promiscuous mode [ 251.415374][ T7756] hsr_slave_1: entered promiscuous mode [ 251.416367][ T7756] debugfs: 'hsr0' already exists in 'hsr' [ 251.416390][ T7756] Cannot create hsr debugfs directory [ 253.192370][ T5603] Bluetooth: hci7: command tx timeout [ 254.273226][ T5603] Bluetooth: hci8: command tx timeout [ 255.388398][ T5604] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 255.438948][ T5604] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 255.441185][ T5604] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 255.444568][ T5604] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 255.445320][ T5604] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 256.030269][ T7774] lo speed is unknown, defaulting to 1000 [ 256.618839][ T7774] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.619047][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.619237][ T7774] bridge_slave_0: entered allmulticast mode [ 256.621906][ T7774] bridge_slave_0: entered promiscuous mode [ 256.657551][ T7774] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.657760][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.657948][ T7774] bridge_slave_1: entered allmulticast mode [ 256.660629][ T7774] bridge_slave_1: entered promiscuous mode [ 256.746027][ T7774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.765496][ T7774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.822560][ T7774] team0: Port device team_slave_0 added [ 256.826259][ T7774] team0: Port device team_slave_1 added [ 256.877003][ T7774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.877019][ T7774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.877045][ T7774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.879307][ T7774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.879320][ T7774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.879346][ T7774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.049572][ T7774] hsr_slave_0: entered promiscuous mode [ 257.051107][ T7774] hsr_slave_1: entered promiscuous mode [ 257.064264][ T7774] debugfs: 'hsr0' already exists in 'hsr' [ 257.064290][ T7774] Cannot create hsr debugfs directory [ 257.592727][ T5603] Bluetooth: hci9: command tx timeout [ 259.672074][ T5603] Bluetooth: hci9: command tx timeout [ 260.259196][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.259267][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.281666][ T5603] Bluetooth: hci8: command tx timeout [ 261.762683][ T5603] Bluetooth: hci9: command tx timeout [ 262.833589][ T5603] Bluetooth: hci8: command tx timeout [ 263.834048][ T5604] Bluetooth: hci9: command tx timeout [ 266.392226][ T5604] Bluetooth: hci8: command tx timeout [ 277.062010][ C1] sched: DL replenish lagged too much [ 294.837776][ T5603] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 294.848656][ T5603] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 294.865701][ T5603] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 294.903052][ T5603] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 294.903942][ T5603] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 295.430996][ T7792] lo speed is unknown, defaulting to 1000 [ 295.915991][ T7792] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.917691][ T7792] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.917905][ T7792] bridge_slave_0: entered allmulticast mode [ 295.944737][ T7792] bridge_slave_0: entered promiscuous mode [ 295.974025][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.975649][ T7792] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.975894][ T7792] bridge_slave_1: entered allmulticast mode [ 295.981626][ T7792] bridge_slave_1: entered promiscuous mode [ 296.102535][ T7792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.110142][ T7792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.198543][ T7792] team0: Port device team_slave_0 added [ 296.208579][ T7792] team0: Port device team_slave_1 added [ 296.259774][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.259791][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.259817][ T7792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.275123][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.275138][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.275165][ T7792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.499616][ T7792] hsr_slave_0: entered promiscuous mode [ 296.501016][ T7792] hsr_slave_1: entered promiscuous mode [ 296.515133][ T7792] debugfs: 'hsr0' already exists in 'hsr' [ 296.515159][ T7792] Cannot create hsr debugfs directory [ 296.952107][ T5603] Bluetooth: hci10: command tx timeout [ 297.891517][ T5604] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 297.927510][ T5604] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 297.929757][ T5604] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 297.931330][ T5604] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 297.936524][ T5604] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 299.032293][ T5604] Bluetooth: hci10: command tx timeout [ 299.951568][ T7812] lo speed is unknown, defaulting to 1000 [ 300.764758][ T7812] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.764976][ T7812] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.765507][ T7812] bridge_slave_0: entered allmulticast mode [ 300.768197][ T7812] bridge_slave_0: entered promiscuous mode [ 300.771895][ T7812] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.810018][ T7812] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.810654][ T7812] bridge_slave_1: entered allmulticast mode [ 300.830134][ T7812] bridge_slave_1: entered promiscuous mode [ 300.905152][ T7812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.909627][ T7812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.975327][ T7812] team0: Port device team_slave_0 added [ 300.979506][ T7812] team0: Port device team_slave_1 added [ 301.038877][ T7812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.038894][ T7812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.038921][ T7812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.041623][ T7812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.041650][ T7812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.041676][ T7812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.112492][ T5604] Bluetooth: hci10: command tx timeout [ 301.204589][ T7812] hsr_slave_0: entered promiscuous mode [ 301.205988][ T7812] hsr_slave_1: entered promiscuous mode [ 301.206971][ T7812] debugfs: 'hsr0' already exists in 'hsr' [ 301.206994][ T7812] Cannot create hsr debugfs directory [ 302.323115][ T5604] Bluetooth: hci11: command tx timeout [ 303.192208][ T5604] Bluetooth: hci10: command tx timeout [ 304.411415][ T5603] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 304.475737][ T5603] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 304.478167][ T5603] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 304.479262][ T5603] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 304.480225][ T5603] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 305.626145][ T7830] lo speed is unknown, defaulting to 1000 [ 306.632318][ T5604] Bluetooth: hci12: command tx timeout [ 307.289485][ T7830] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.289703][ T7830] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.290277][ T7830] bridge_slave_0: entered allmulticast mode [ 307.315643][ T7830] bridge_slave_0: entered promiscuous mode [ 307.328912][ T7830] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.329106][ T7830] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.329328][ T7830] bridge_slave_1: entered allmulticast mode [ 307.357011][ T7830] bridge_slave_1: entered promiscuous mode [ 307.423154][ T7830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.427955][ T7830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.556586][ T7830] team0: Port device team_slave_0 added [ 307.560541][ T7830] team0: Port device team_slave_1 added [ 307.617879][ T7830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.617896][ T7830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.617921][ T7830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.620565][ T7830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.620578][ T7830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.620603][ T7830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.861849][ T7830] hsr_slave_0: entered promiscuous mode [ 307.872421][ T7830] hsr_slave_1: entered promiscuous mode [ 307.873423][ T7830] debugfs: 'hsr0' already exists in 'hsr' [ 307.873448][ T7830] Cannot create hsr debugfs directory [ 308.252059][ T5604] Bluetooth: hci11: command tx timeout [ 309.212045][ T5604] Bluetooth: hci12: command tx timeout [ 310.193678][ T5603] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 310.243576][ T5603] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 310.247412][ T5603] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 310.248472][ T5603] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 310.249204][ T5603] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 311.287114][ T5604] Bluetooth: hci12: command tx timeout [ 311.868441][ T7851] lo speed is unknown, defaulting to 1000 [ 312.318276][ T5604] Bluetooth: hci13: command tx timeout [ 312.737352][ T7851] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.737555][ T7851] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.737744][ T7851] bridge_slave_0: entered allmulticast mode [ 312.740365][ T7851] bridge_slave_0: entered promiscuous mode [ 312.776848][ T7851] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.777050][ T7851] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.777268][ T7851] bridge_slave_1: entered allmulticast mode [ 312.780013][ T7851] bridge_slave_1: entered promiscuous mode [ 312.888557][ T7851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.913830][ T7851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.014356][ T7851] team0: Port device team_slave_0 added [ 313.018120][ T7851] team0: Port device team_slave_1 added [ 313.071771][ T7851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.071788][ T7851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.071814][ T7851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.121292][ T7851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.121308][ T7851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.121335][ T7851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.244235][ T7851] hsr_slave_0: entered promiscuous mode [ 313.245656][ T7851] hsr_slave_1: entered promiscuous mode [ 313.246643][ T7851] debugfs: 'hsr0' already exists in 'hsr' [ 313.246665][ T7851] Cannot create hsr debugfs directory [ 313.357481][ T5604] Bluetooth: hci12: command tx timeout [ 314.252649][ T5604] Bluetooth: hci11: command tx timeout [ 315.199455][ T5603] Bluetooth: hci13: command tx timeout [ 315.954498][ T5603] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 315.994492][ T5603] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 315.998023][ T5603] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 315.999096][ T5603] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 316.000952][ T5603] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 317.280948][ T5604] Bluetooth: hci13: command tx timeout [ 317.881770][ T7875] lo speed is unknown, defaulting to 1000 [ 318.768351][ T7875] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.768564][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.769096][ T7875] bridge_slave_0: entered allmulticast mode [ 318.771842][ T7875] bridge_slave_0: entered promiscuous mode [ 318.776084][ T7875] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.776263][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.776771][ T7875] bridge_slave_1: entered allmulticast mode [ 318.784035][ T7875] bridge_slave_1: entered promiscuous mode [ 318.839689][ T7875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.848743][ T7875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.893106][ T7875] team0: Port device team_slave_0 added [ 318.900634][ T7875] team0: Port device team_slave_1 added [ 318.945249][ T7875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.945267][ T7875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.945292][ T7875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.947913][ T7875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.947926][ T7875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.947952][ T7875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.017162][ T7875] hsr_slave_0: entered promiscuous mode [ 319.018636][ T7875] hsr_slave_1: entered promiscuous mode [ 319.019744][ T7875] debugfs: 'hsr0' already exists in 'hsr' [ 319.019767][ T7875] Cannot create hsr debugfs directory [ 320.322259][ T5603] Bluetooth: hci14: command tx timeout [ 320.322752][ T5603] Bluetooth: hci13: command tx timeout [ 320.328691][ T5604] Bluetooth: hci11: command tx timeout [ 326.191130][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.191278][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.222704][ T5603] Bluetooth: hci14: command tx timeout [ 331.962063][ T5603] Bluetooth: hci14: command tx timeout [ 337.195315][ T5604] Bluetooth: hci14: command tx timeout [ 354.912820][ T5604] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 354.946278][ T5604] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 354.947602][ T5604] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 354.950437][ T5604] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 354.957157][ T5604] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 358.387675][ T5604] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 358.426128][ T5604] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 358.428296][ T5604] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 358.468810][ T5604] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 358.469651][ T5604] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 362.736742][ T5604] Bluetooth: hci15: command tx timeout [ 365.400204][ T5603] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 365.438029][ T5603] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 365.439305][ T5603] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 365.440811][ T5603] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 365.441609][ T5603] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 368.950766][ T5614] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 368.987770][ T5614] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 368.989855][ T5614] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 368.991315][ T5614] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 369.013808][ T5614] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 374.780138][ T5614] Bluetooth: hci16: command tx timeout [ 374.780393][ T5614] Bluetooth: hci6: command 0x0406 tx timeout [ 374.780529][ T5614] Bluetooth: hci15: command tx timeout [ 374.780570][ T5614] Bluetooth: hci17: command tx timeout [ 374.781787][ T5614] Bluetooth: hci5: command 0x0406 tx timeout [ 374.781836][ T5614] Bluetooth: hci18: command tx timeout [ 377.905755][ T5614] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 377.945076][ T5614] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 377.946489][ T5614] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 377.947967][ T5614] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 377.948762][ T5614] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 386.254858][ T5614] Bluetooth: hci17: command tx timeout [ 386.254897][ T5614] Bluetooth: hci15: command tx timeout [ 386.254918][ T5614] Bluetooth: hci16: command tx timeout [ 386.254938][ T5614] Bluetooth: hci18: command tx timeout [ 386.254957][ T5614] Bluetooth: hci7: command 0x0406 tx timeout [ 387.792742][ T38] INFO: task syz.1.615:7658 blocked for more than 152 seconds. [ 387.792773][ T38] Tainted: G L syzkaller #0 [ 387.792785][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 387.792794][ T38] task:syz.1.615 state:D stack:27480 pid:7658 tgid:7657 ppid:5597 task_flags:0x400140 flags:0x00080002 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 387.792869][ T38] Call Trace: [ 387.792877][ T38] [ 387.792890][ T38] __schedule+0x1681/0x54c0 [ 387.792949][ T38] ? __pfx___schedule+0x10/0x10 [ 387.792967][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 387.793008][ T38] rt_mutex_schedule+0x76/0xf0 [ 387.793028][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 387.793066][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 387.793093][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 387.793121][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 387.793146][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 387.793182][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 387.793212][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 387.793242][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 387.793264][ T38] mutex_lock_nested+0x168/0x1d0 [ 387.793288][ T38] ? radix_tree_lookup+0x243/0x290 [ 387.793316][ T38] genl_rcv_msg+0x10b/0x7a0 [ 387.793348][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 387.793374][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 387.793417][ T38] netlink_rcv_skb+0x232/0x4b0 [ 387.793440][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 387.793466][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 387.793501][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.793522][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.793547][ T38] genl_rcv+0x28/0x40 [ 387.793570][ T38] netlink_unicast+0x780/0x920 [ 387.793602][ T38] netlink_sendmsg+0x813/0xb40 [ 387.793634][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.793663][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 387.793683][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.793712][ T38] __sys_sendto+0x67f/0x710 [ 387.793740][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 387.793789][ T38] ? exc_page_fault+0x6a/0xc0 [ 387.793813][ T38] ? do_user_addr_fault+0xc6f/0x1340 [ 387.793839][ T38] __x64_sys_sendto+0xde/0x100 [ 387.793860][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.793881][ T38] do_syscall_64+0x15f/0xf80 [ 387.793900][ [ 387.793900][ T38] ? trace_irq_disable+0x3b/0x140 [ 387.793921][ T38] ? clear_bhb_loop+0x40/0x90 [ 387.793945][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.793967][ T38] RIP: 0033:0x7f8bc8edd60e [ 387.793985][ T38] RSP: 002b:00007f8bc7174e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 387.794003][ T38] RAX: ffffffffffffffda RBX: 00007f8bc71766c0 RCX: 00007f8bc8edd60e [ 387.794018][ T38] RDX: 0000000000000028 RSI: 00007f8bc7175000 RDI: 0000000000000005 [ 387.794030][ T38] RBP: 0000000000000000 R08: 00007f8bc7174f04 R09: 000000000000000c [ 387.794043][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 387.794054][ T38] R13: 00007f8bc7174f58 R14: 00007f8bc7175000 R15: 0000000000000000 [ 387.794087][ T38] [ 387.794094][ T38] INFO: task syz.1.615:7661 blocked for more than 152 seconds. [ 387.794110][ T38] Tainted: G L syzkaller #0 [ 387.794134][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 387.794143][ T38] task:syz.1.615 state:D stack:25144 pid:7661 tgid:7657 ppid:5597 task_flags:0x400140 flags:0x00080002 [ 387.794215][ T38] Call Trace: [ 387.794222][ T38] [ 387.794233][ T38] __schedule+0x1681/0x54c0 [ 387.794251][ T38] ? nlmon_xmit+0xb0/0x100 [ 387.794318][ T38] ? __pfx___schedule+0x10/0x10 [ 387.794354][ T38] rt_mutex_schedule+0x76/0xf0 [ 387.794372][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 387.794421][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 387.794448][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 387.794473][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 387.794510][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 387.794539][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 387.794569][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 387.794591][ T38] mutex_lock_nested+0x168/0x1d0 [ 387.794614][ T38] ? radix_tree_lookup+0x243/0x290 [ 387.794643][ T38] genl_rcv_msg+0x10b/0x7a0 [ 387.794672][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 387.794694][ T38] ? ref_tracker_free+0x673/0x820 [ 387.794718][ T38] ? __pfx_ref_tracker_free+0x10/0x10 [ 387.794748][ T38] netlink_rcv_skb+0x232/0x4b0 [ 387.794771][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 387.794797][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 387.794832][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.794853][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.794878][ T38] genl_rcv+0x28/0x40 [ 387.794901][ T38] netlink_unicast+0x780/0x920 [ 387.794932][ T38] netlink_sendmsg+0x813/0xb40 [ 387.794964][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.794994][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 387.795013][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.795036][ T38] __sys_sendto+0x67f/0x710 [ 387.795062][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 387.795116][ T38] ? fd_install+0x97/0x3e0 [ 387.795141][ T38] ? fd_install+0x30c/0x3e0 [ 387.795173][ T38] __x64_sys_sendto+0xde/0x100 [ 387.795195][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.795216][ T38] do_syscall_64+0x15f/0xf80 [ 387.795234][ T38] ? trace_irq_disable+0x3b/0x140 [ 387.795255][ T38] ? clear_bhb_loop+0x40/0x90 [ 387.795278][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.795296][ T38] RIP: 0033:0x7f8bc8edd60e [ 387.795312][ T38] RSP: 002b:00007f8bc7132e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 387.795330][ T38] RAX: ffffffffffffffda RBX: 00007f8bc71346c0 RCX: 00007f8bc8edd60e [ 387.795344][ T38] RDX: 0000000000000020 RSI: 00007f8bc7133000 RDI: 0000000000000009 [ 387.795357][ T38] RBP: 0000000000000000 R08: 00007f8bc7132f04 R09: 000000000000000c [ 387.795369][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 387.795381][ T38] R13: 00007f8bc7132f58 R14: 00007f8bc7133000 R15: 0000000000000000 [ 387.795417][ T38] [ 387.795425][ T38] INFO: task syz.0.617:7670 blocked for more than 152 seconds. [ 387.795441][ T38] Tainted: G L syzkaller #0 [ 387.795451][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 387.795459][ T38] task:syz.0.617 state:D stack:25920 pid:7670 tgid:7669 ppid:5594 task_flags:0x400140 flags:0x00080002 [ 387.795510][ T38] Call Trace: [ 387.795516][ T38] [ 387.795528][ T38] __schedule+0x1681/0x54c0 [ 387.795559][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 387.795600][ T38] ? __pfx___schedule+0x10/0x10 [ 387.795635][ T38] rt_mutex_schedule+0x76/0xf0 [ 387.795653][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 387.795696][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 387.795724][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 387.795749][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 387.795786][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 387.795815][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 387.795845][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 387.795867][ T38] mutex_lock_nested+0x168/0x1d0 [ 387.795891][ T38] ? radix_tree_lookup+0x243/0x290 [ 387.795919][ T38] genl_rcv_msg+0x10b/0x7a0 [ 387.795950][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 387.795975][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 387.796012][ T38] netlink_rcv_skb+0x232/0x4b0 [ 387.796034][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 387.796061][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 387.796096][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.796116][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.796142][ T38] genl_rcv+0x28/0x40 [ 387.796164][ T38] netlink_unicast+0x780/0x920 [ 387.796195][ T38] netlink_sendmsg+0x813/0xb40 [ 387.796226][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.796257][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 387.796275][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.796298][ T38] __sys_sendto+0x67f/0x710 [ 387.796325][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 387.796372][ T38] ? exc_page_fault+0x6a/0xc0 [ 387.796401][ T38] ? do_user_addr_fault+0xc6f/0x1340 [ 387.796427][ T38] __x64_sys_sendto+0xde/0x100 [ 387.796448][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.796469][ T38] do_syscall_64+0x15f/0xf80 [ 387.796488][ T38] ? trace_irq_disable+0x3b/0x140 [ 387.796508][ T38] ? clear_bhb_loop+0x40/0x90 [ 387.796535][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.796554][ T38] RIP: 0033:0x7fa858e6d60e [ 387.796569][ T38] RSP: 002b:00007fa8570fce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 387.796587][ T38] RAX: ffffffffffffffda RBX: 00007fa8570fe6c0 RCX: 00007fa858e6d60e [ 387.796601][ T38] RDX: 0000000000000020 RSI: 00007fa8570fd000 RDI: 0000000000000005 [ 387.796613][ T38] RBP: 0000000000000000 R08: 00007fa8570fcf04 R09: 000000000000000c [ 387.796625][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 387.796637][ T38] R13: 00007fa8570fcf58 R14: 00007fa8570fd000 R15: 0000000000000000 [ 387.796668][ T38] [ 387.796676][ T38] INFO: task syz.0.617:7673 blocked for more than 152 seconds. [ 387.796691][ T38] Tainted: G L syzkaller #0 [ 387.796702][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 387.796710][ T38] task:syz.0.617 state:D stack:27048 pid:7673 tgid:7669 ppid:5594 task_flags:0x400140 flags:0x00080002 [ 387.796761][ T38] Call Trace: [ 387.796767][ T38] [ 387.796779][ T38] __schedule+0x1681/0x54c0 [ 387.796810][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 387.796851][ T38] ? __pfx___schedule+0x10/0x10 [ 387.796885][ T38] rt_mutex_schedule+0x76/0xf0 [ 387.796904][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 387.796947][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 387.796974][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 387.796999][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 387.797036][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 387.797064][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 387.797095][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 387.797117][ T38] mutex_lock_nested+0x168/0x1d0 [ 387.797140][ T38] ? radix_tree_lookup+0x243/0x290 [ 387.797168][ T38] genl_rcv_msg+0x10b/0x7a0 [ 387.797198][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 387.797224][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 387.797261][ T38] netlink_rcv_skb+0x232/0x4b0 [ 387.797283][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 387.797309][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 387.797344][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.797365][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.797390][ T38] genl_rcv+0x28/0x40 [ 387.797418][ T38] netlink_unicast+0x780/0x920 [ 387.797449][ T38] netlink_sendmsg+0x813/0xb40 [ 387.797481][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.797511][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 387.797529][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.797552][ T38] __sys_sendto+0x67f/0x710 [ 387.797579][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 387.797597][ T38] ? do_futex+0x333/0x420 [ 387.797652][ T38] ? rcu_is_watching+0x15/0xb0 [ 387.797685][ T38] __x64_sys_sendto+0xde/0x100 [ 387.797707][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.797727][ T38] do_syscall_64+0x15f/0xf80 [ 387.797749][ T38] ? clear_bhb_loop+0x40/0x90 [ 387.797772][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.797790][ T38] RIP: 0033:0x7fa858e6d60e [ 387.797806][ T38] RSP: 002b:00007fa8570dbe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 387.797824][ T38] RAX: ffffffffffffffda RBX: 00007fa8570dd6c0 RCX: 00007fa858e6d60e [ 387.797837][ T38] RDX: 0000000000000028 RSI: 00007fa8570dc000 RDI: 000000000000000d [ 387.797849][ T38] RBP: 0000000000000000 R08: 00007fa8570dbf04 R09: 000000000000000c [ 387.797861][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 387.797873][ T38] R13: 00007fa8570dbf58 R14: 00007fa8570dc000 R15: 0000000000000000 [ 387.797904][ T38] [ 387.797912][ T38] INFO: task syz.3.621:7684 blocked for more than 152 seconds. [ 387.797928][ T38] Tainted: G L syzkaller #0 [ 387.797937][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 387.797946][ T38] task:syz.3.621 state:D stack:25088 pid:7684 tgid:7683 ppid:5596 task_flags:0x400140 flags:0x00080002 [ 387.797995][ T38] Call Trace: [ 387.798001][ T38] [ 387.798012][ T38] __schedule+0x1681/0x54c0 [ 387.798030][ T38] ? nlmon_xmit+0xb0/0x100 [ 387.798082][ T38] ? __pfx___schedule+0x10/0x10 [ 387.798117][ T38] rt_mutex_schedule+0x76/0xf0 [ 387.798136][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 387.798179][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 387.798206][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 387.798232][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 387.798268][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 387.798296][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 387.798327][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 387.798348][ T38] mutex_lock_nested+0x168/0x1d0 [ 387.798372][ T38] ? radix_tree_lookup+0x243/0x290 [ 387.798405][ T38] genl_rcv_msg+0x10b/0x7a0 [ 387.798436][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 387.798458][ T38] ? ref_tracker_free+0x673/0x820 [ 387.798480][ T38] ? __pfx_ref_tracker_free+0x10/0x10 [ 387.798511][ T38] netlink_rcv_skb+0x232/0x4b0 [ 387.798533][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 387.798559][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 387.798594][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.798616][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.798641][ T38] genl_rcv+0x28/0x40 [ 387.798663][ T38] netlink_unicast+0x780/0x920 [ 387.798694][ T38] netlink_sendmsg+0x813/0xb40 [ 387.798725][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.798756][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 387.798774][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.798797][ T38] __sys_sendto+0x67f/0x710 [ 387.798824][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 387.798872][ T38] ? exc_page_fault+0x6a/0xc0 [ 387.798896][ T38] ? do_user_addr_fault+0xc6f/0x1340 [ 387.798921][ T38] __x64_sys_sendto+0xde/0x100 [ 387.798942][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.798963][ T38] do_syscall_64+0x15f/0xf80 [ 387.798982][ T38] ? trace_irq_disable+0x3b/0x140 [ 387.799002][ T38] ? clear_bhb_loop+0x40/0x90 [ 387.799026][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.799044][ T38] RIP: 0033:0x7f2db4b2d60e [ 387.799059][ T38] RSP: 002b:00007f2db2dc4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 387.799077][ T38] RAX: ffffffffffffffda RBX: 00007f2db2dc66c0 RCX: 00007f2db4b2d60e [ 387.799090][ T38] RDX: 0000000000000020 RSI: 00007f2db2dc5000 RDI: 0000000000000009 [ 387.799103][ T38] RBP: 0000000000000000 R08: 00007f2db2dc4f04 R09: 000000000000000c [ 387.799115][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 387.799127][ T38] R13: 00007f2db2dc4f58 R14: 00007f2db2dc5000 R15: 0000000000000000 [ 387.799159][ T38] [ 387.799205][ T38] [ 387.799205][ T38] Showing all locks held in the system: [ 387.799214][ T38] 4 locks held by kworker/u8:0/12: [ 387.799230][ T38] 6 locks held by ktimers/0/16: [ 387.799241][ T38] 6 locks held by ktimers/1/29: [ 387.799251][ T38] #0: ffffffff8de5f340 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 387.799297][ T38] #1: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 387.799341][ T38] #2: ffff8880b89285f8 (&base->softirq_expiry_lock){+...}-{3:3}, at: hrtimer_run_softirq+0x7f/0x260 [ 387.799386][ T38] #3: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 387.799438][ T38] #4: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 387.799484][ T38] #5: ffffffff8eb91d78 (hwsim_radio_lock){+...}-{3:3}, at: mac80211_hwsim_tx_frame_no_nl+0x76f/0x1650 [ 387.799539][ T38] 1 lock held by khungtaskd/38: [ 387.799549][ T38] #0: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 387.799618][ T38] 5 locks held by kworker/u9:1/4913: [ 387.799629][ T38] #0: ffff888060501138 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 387.799673][ T38] #1: ffffc90010827c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 387.799718][ T38] #2: ffff88805ef6cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 387.799762][ T38] #3: ffff88805ef6c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 387.799810][ T38] #4: ffffffff8f4d6e38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 387.799859][ T38] 2 locks held by getty/5352: [ 387.799870][ T38] #0: ffff888036bae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 387.799914][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 387.799965][ T38] 3 locks held by kworker/u9:2/5601: [ 387.799975][ T38] #0: ffff888031eb4138 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 387.800019][ T38] #1: ffffc90004427c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 387.800064][ T38] #2: ffff88802aa40f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 387.800107][ T38] 5 locks held by kworker/u9:3/5603: [ 387.800118][ T38] #0: ffff88803a24c138 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 387.800162][ T38] #1: ffffc90004437c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 387.800208][ T38] #2: ffff88803d72cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 387.800251][ T38] #3: ffff88803d72c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 387.800298][ T38] #4: ffffffff8f4d6e38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 387.800346][ T38] 6 locks held by kworker/u9:4/5604: [ 387.800356][ T38] #0: ffff888060e46138 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 387.800406][ T38] #1: ffffc90004457c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 387.800451][ T38] #2: ffff88806166cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 387.800494][ T38] #3: ffff88806166c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 387.800542][ T38] #4: ffffffff8f4d6e38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 387.800589][ T38] #5: ffff888040150b70 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 387.800643][ T38] 4 locks held by kworker/u9:5/5606: [ 387.800653][ T38] #0: ffff88805eaee138 ((wq_completion)hci19#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 387.800702][ T38] #1: ffffc90004477c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 387.800746][ T38] #2: ffff88807ade80b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x950 [ 387.800791][ T38] #3: ffffffff8f4d6e38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x54c/0x950 [ 387.800842][ T38] 3 locks held by syz.4.610/7650: [ 387.800853][ T38] 2 locks held by syz.1.615/7658: [ 387.800863][ T38] #0: ffffffff8f3c6a00 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 387.800910][ T38] #1: ffffffff8f3c6818 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 387.800958][ T38] 2 locks held by syz.1.615/7661: [ 387.800968][ T38] #0: ffffffff8f3c6a00 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 387.801014][ T38] #1: ffffffff8f3c6818 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 387.801062][ T38] 2 locks held by syz.0.617/7670: [ 387.801072][ T38] #0: ffffffff8f3c6a00 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 387.801118][ T38] #1: ffffffff8f3c6818 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 387.801165][ T38] 2 locks held by syz.0.617/7673: [ 387.801176][ T38] #0: ffffffff8f3c6a00 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 387.801222][ T38] #1: ffffffff8f3c6818 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 387.801269][ T38] 2 locks held by syz.3.621/7684: [ 387.801280][ T38] #0: ffffffff8f3c6a00 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 387.801326][ T38] #1: ffffffff8f3c6818 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 387.801374][ T38] 2 locks held by syz-executor/7687: [ 387.801384][ T38] #0: ffffffff8f3c6a00 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 387.801435][ T38] #1: ffffffff8f3c6818 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 387.801483][ T38] 2 locks held by syz-executor/7709: [ 387.801494][ T38] #0: ffffffff8f3c6a00 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 387.801540][ T38] #1: ffffffff8f3c6818 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 387.801587][ T38] 2 locks held by syz.2.626/7717: [ 387.801598][ T38] #0: ffffffff8f3c6a00 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 387.801643][ T38] #1: ffffffff8f3c6818 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 387.801691][ T38] 2 locks held by syz-executor/7736: [ 387.801701][ T38] #0: ffffffff8f3c6a00 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 387.801747][ T38] #1: ffffffff8f3c6818 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 387.801795][ T38] 2 locks held by syz-executor/7756: [ 387.801805][ T38] #0: ffffffff8f3c6a00 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 387.801851][ T38] #1: ffffffff8f3c6818 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 387.801899][ T38] 2 locks held by syz-executor/7774: [ 387.801909][ T38] #0: ffffffff8f3c6a00 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 388.108577][ T38] #1: ffffffff8f3c6818 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 388.108630][ T38] 2 locks held by syz-executor/7792: [ 388.108641][ T38] #0: ffffffff8f3c6a00 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 388.108688][ T38] #1: ffffffff8f3c6818 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 388.108736][ T38] 2 locks held by syz-executor/7812: [ 388.108747][ T38] #0: ffffffff8f3c6a00 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 388.108793][ T38] #1: ffffffff8f3c6818 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 388.108841][ T38] 2 locks held by syz-executor/7830: [ 388.108852][ T38] #0: ffffffff8f3c6a00 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 388.108899][ T38] #1: ffffffff8f3c6818 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 388.108947][ T38] 2 locks held by syz-executor/7851: [ 388.108957][ T38] #0: ffffffff8f3c6a00 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 388.109003][ T38] #1: ffffffff8f3c6818 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 388.109051][ T38] 2 locks held by syz-executor/7875: [ 388.109062][ T38] #0: ffffffff8f3c6a00 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 388.109108][ T38] #1: ffffffff8f3c6818 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 388.109156][ T38] 1 lock held by syz-executor/7893: [ 388.109167][ T38] #0: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: __do_wait+0xe1/0x740 [ 388.109216][ T38] 5 locks held by syz-executor/7894: [ 388.109226][ T38] #0: ffff88805f6b96f8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 388.109280][ T38] #1: ffffffff8f3c4980 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 388.109329][ T38] #2: ffffffff8de5f340 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 388.109372][ T38] #3: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 388.109421][ T38] #4: ffffffff8eb91d78 (hwsim_radio_lock){+...}-{3:3}, at: mac80211_hwsim_netlink_notify+0x183/0x1190 [ 388.109469][ T38] 5 locks held by udevd/7895: [ 388.109480][ T38] #0: ffff88805f6bab38 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 388.109532][ T38] #1: ffffffff8f3c4980 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 388.109580][ T38] #2: ffffffff8de5f340 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 388.109622][ T38] #3: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 388.109665][ T38] #4: ffffffff8eb91d78 (hwsim_radio_lock){+...}-{3:3}, at: mac80211_hwsim_netlink_notify+0x183/0x1190 [ 388.109712][ T38] 5 locks held by udevd/7897: [ 388.109722][ T38] #0: ffff88805f6bb1f8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 388.109775][ T38] #1: ffffffff8f3c4980 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 388.109822][ T38] #2: ffffffff8de5f340 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 388.109865][ T38] #3: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 388.109908][ T38] #4: ffffffff8eb91d78 (hwsim_radio_lock){+...}-{3:3}, at: mac80211_hwsim_netlink_notify+0x183/0x1190 [ 388.267615][ T38] 3 locks held by syz-executor/7906: [ 388.267629][ T38] 5 locks held by syz-executor/7907: [ 388.267647][ T38] #0: ffff888059c7b1f8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 388.267708][ T38] #1: ffffffff8f3c4980 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 388.267759][ T38] #2: ffffffff8de5f340 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 388.267803][ T38] #3: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 388.267846][ T38] #4: ffffffff8eb91d78 (hwsim_radio_lock){+...}-{3:3}, at: mac80211_hwsim_netlink_notify+0x183/0x1190 [ 388.267893][ T38] 5 locks held by udevd/7909: [ 388.267904][ T38] #0: ffff88803fd74cf8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 388.267956][ T38] #1: ffffffff8f3c4980 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 388.268004][ T38] #2: ffffffff8de5f340 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 388.268048][ T38] #3: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 388.268091][ T38] #4: ffffffff8eb91d78 (hwsim_radio_lock){+...}-{3:3}, at: mac80211_hwsim_netlink_notify+0x183/0x1190 [ 388.268144][ T38] 5 locks held by syz-executor/7918: [ 388.268155][ T38] 5 locks held by syz-executor/7919: [ 388.268166][ T38] #0: ffff88805f4a9038 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 388.268232][ T38] #1: ffffffff8f3c4980 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 388.268280][ T38] #2: ffffffff8de5f340 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 388.268323][ T38] #3: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 388.268367][ T38] #4: ffffffff8eb91d78 (hwsim_radio_lock){+...}-{3:3}, at: mac80211_hwsim_netlink_notify+0x183/0x1190 [ 388.268413][ T38] 4 locks held by syz-executor/7929: [ 388.268425][ T38] 5 locks held by syz-executor/7930: [ 388.268435][ T38] #0: ffff888059d0e138 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 388.268488][ T38] #1: ffffffff8f3c4980 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 388.268536][ T38] #2: ffffffff8de5f340 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 388.268579][ T38] #3: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 388.268621][ T38] #4: ffffffff8eb91d78 (hwsim_radio_lock){+...}-{3:3}, at: mac80211_hwsim_netlink_notify+0x183/0x1190 [ 388.268675][ T38] 4 locks held by syz-executor/7940: [ 388.268686][ T38] 5 locks held by syz-executor/7941: [ 388.268696][ T38] #0: ffff888059d0da78 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 388.268749][ T38] #1: ffffffff8f3c4980 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 388.268797][ T38] #2: ffffffff8de5f340 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 388.268840][ T38] #3: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 388.268883][ T38] #4: ffffffff8eb91d78 (hwsim_radio_lock){+...}-{3:3}, at: mac80211_hwsim_netlink_notify+0x183/0x1190 [ 388.268932][ T38] [ 388.268937][ T38] ============================================= [ 388.268937][ T38] [ 388.268961][ T38] NMI backtrace for cpu 0 [ 388.268987][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 388.269029][ T38] Tainted: [L]=SOFTLOCKUP [ 388.269036][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 388.269047][ T38] Call Trace: [ 388.269054][ T38] [ 388.269061][ T38] dump_stack_lvl+0xe8/0x150 [ 388.269084][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 388.269108][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 388.269132][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 388.269158][ T38] sys_info+0x135/0x170 [ 388.269179][ T38] watchdog+0xfd3/0x1030 [ 388.269207][ T38] ? watchdog+0x1c9/0x1030 [ 388.269233][ T38] kthread+0x388/0x470 [ 388.269256][ T38] ? __pfx_watchdog+0x10/0x10 [ 388.269274][ T38] ? __pfx_kthread+0x10/0x10 [ 388.269298][ T38] ret_from_fork+0x514/0xb70 [ 388.269322][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 388.269342][ T38] ? __switch_to+0xc79/0x1410 [ 388.269376][ T38] ? __pfx_kthread+0x10/0x10 [ 388.269400][ T38] ret_from_fork_asm+0x1a/0x30 [ 388.269439][ T38] [ 388.269460][ T38] Sending NMI from CPU 0 to CPUs 1: [ 388.269487][ C1] NMI backtrace for cpu 1 [ 388.269505][ C1] CPU: 1 UID: 0 PID: 7650 Comm: syz.4.610 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 388.269550][ C1] Tainted: [L]=SOFTLOCKUP [ 388.269563][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 388.269584][ C1] RIP: 0010:lock_is_held_type+0x106/0x150 [ 388.269609][ C1] Code: 19 00 00 b8 ff ff ff ff 65 0f c1 05 a4 4e 4e 07 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 48 c7 [ 388.269622][ C1] RSP: 0018:ffffc9001dcd67f8 EFLAGS: 00000206 [ 388.269636][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000046 [ 388.269645][ C1] RDX: 0000000000000002 RSI: ffffffff8d862179 RDI: ffffffff8ba74d60 [ 388.269656][ C1] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 388.269666][ C1] R10: 0000000000000100 R11: 0000000000000007 R12: 0000000000000246 [ 388.269675][ C1] R13: ffff888026b6dc40 R14: ffffffff8dfc8140 R15: 0000000000000002 [ 388.269686][ C1] FS: 00007f2b44c256c0(0000) GS:ffff888126279000(0000) knlGS:0000000000000000 [ 388.269699][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.269710][ C1] CR2: 00007ffd816abff0 CR3: 0000000063c92000 CR4: 00000000003526f0 [ 388.269724][ C1] Call Trace: [ 388.269734][ C1] [ 388.269739][ C1] ? net_generic+0x1e/0x240 [ 388.269763][ C1] net_generic+0x101/0x240 [ 388.269782][ C1] tipc_sk_lookup+0xa6/0x920 [ 388.269800][ C1] ? tipc_sk_lookup+0xb5/0x920 [ 388.269819][ C1] ? __pfx_tipc_sk_lookup+0x10/0x10 [ 388.269838][ C1] ? __nla_parse+0x40/0x60 [ 388.269856][ C1] tipc_nl_publ_dump+0x2c9/0xcd0 [ 388.269882][ C1] ? __pfx_tipc_nl_publ_dump+0x10/0x10 [ 388.269900][ C1] ? irqentry_exit+0x218/0x730 [ 388.269915][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 388.269930][ C1] ? irqentry_exit+0x218/0x730 [ 388.269956][ C1] __tipc_nl_compat_dumpit+0x472/0xbe0 [ 388.269978][ C1] ? do_syscall_64+0x15f/0xf80 [ 388.269992][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.270013][ C1] ? __pfx___tipc_nl_compat_dumpit+0x10/0x10 [ 388.270042][ C1] ? rcu_is_watching+0x15/0xb0 [ 388.270069][ C1] ? __asan_memcpy+0x40/0x70 [ 388.270089][ C1] ? nla_put+0xd0/0x150 [ 388.270107][ C1] tipc_nl_compat_sk_dump+0x6c2/0x8b0 [ 388.270135][ C1] ? __pfx_tipc_nl_publ_dump+0x10/0x10 [ 388.270152][ C1] ? __pfx___tipc_nl_compat_publ_dump+0x10/0x10 [ 388.270173][ C1] ? __pfx_tipc_nl_compat_sk_dump+0x10/0x10 [ 388.270200][ C1] ? rhashtable_walk_stop+0x260/0x290 [ 388.270219][ C1] ? __nla_parse+0x40/0x60 [ 388.270236][ C1] __tipc_nl_compat_dumpit+0x5d8/0xbe0 [ 388.270264][ C1] ? __pfx___tipc_nl_compat_dumpit+0x10/0x10 [ 388.270293][ C1] ? rcu_is_watching+0x15/0xb0 [ 388.270319][ C1] ? __asan_memset+0x22/0x50 [ 388.270338][ C1] ? __nlmsg_put+0xef/0x1b0 [ 388.270355][ C1] tipc_nl_compat_dumpit+0x566/0x7b0 [ 388.270377][ C1] tipc_nl_compat_recv+0x899/0xcf0 [ 388.270403][ C1] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 388.270422][ C1] ? __pfx_tipc_nl_sk_dump+0x10/0x10 [ 388.270439][ C1] ? __pfx_tipc_nl_compat_sk_dump+0x10/0x10 [ 388.270459][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 388.270483][ C1] ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0 [ 388.270512][ C1] genl_family_rcv_msg_doit+0x22a/0x330 [ 388.270535][ C1] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 388.270560][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 388.270575][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 388.270594][ C1] genl_rcv_msg+0x61c/0x7a0 [ 388.270619][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 388.270637][ C1] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 388.270664][ C1] netlink_rcv_skb+0x232/0x4b0 [ 388.270684][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 388.270704][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 388.270726][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 388.270741][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 388.270759][ C1] genl_rcv+0x28/0x40 [ 388.270777][ C1] netlink_unicast+0x780/0x920 [ 388.270797][ C1] netlink_sendmsg+0x813/0xb40 [ 388.270818][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.270838][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 388.270856][ C1] ____sys_sendmsg+0x94c/0x9c0 [ 388.270876][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.270897][ C1] ? import_iovec+0x73/0xa0 [ 388.270914][ C1] ___sys_sendmsg+0x2a5/0x360 [ 388.270931][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 388.270950][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.270970][ C1] ? futex_wake+0x4af/0x580 [ 388.270998][ C1] ? __fget_files+0x2a/0x420 [ 388.271010][ C1] ? __fget_files+0x3a6/0x420 [ 388.271029][ C1] __x64_sys_sendmsg+0x1c3/0x2a0 [ 388.271047][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 388.271068][ C1] ? rcu_is_watching+0x15/0xb0 [ 388.271092][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.271107][ C1] do_syscall_64+0x15f/0xf80 [ 388.271122][ C1] ? trace_irq_disable+0x3b/0x140 [ 388.271138][ C1] ? clear_bhb_loop+0x40/0x90 [ 388.271155][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.271170][ C1] RIP: 0033:0x7f2b469ecdd9 [ 388.271184][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.271196][ C1] RSP: 002b:00007f2b44c25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.271211][ C1] RAX: ffffffffffffffda RBX: 00007f2b46c66090 RCX: 00007f2b469ecdd9 [ 388.271222][ C1] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 388.271232][ C1] RBP: 00007f2b46a82d69 R08: 0000000000000000 R09: 0000000000000000 [ 388.271241][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.271250][ C1] R13: 00007f2b46c66128 R14: 00007f2b46c66090 R15: 00007ffd99539208 [ 388.271269][ C1] [ 388.303338][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 388.303359][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 388.303385][ T38] Tainted: [L]=SOFTLOCKUP [ 388.303393][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 388.303404][ T38] Call Trace: [ 388.303412][ T38] [ 388.303420][ T38] vpanic+0x56c/0xa60 [ 388.303447][ T38] ? __pfx___schedule+0x10/0x10 [ 388.303468][ T38] ? __pfx_vpanic+0x10/0x10 [ 388.303499][ T38] panic+0xc5/0xd0 [ 388.303520][ T38] ? __pfx_panic+0x10/0x10 [ 388.303543][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 388.303574][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 388.303603][ T38] watchdog+0x102c/0x1030 [ 388.303637][ T38] ? watchdog+0x1c9/0x1030 [ 388.303663][ T38] kthread+0x388/0x470 [ 388.303687][ T38] ? __pfx_watchdog+0x10/0x10 [ 388.303705][ T38] ? __pfx_kthread+0x10/0x10 [ 388.303729][ T38] ret_from_fork+0x514/0xb70 [ 388.303753][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 388.303773][ T38] ? __switch_to+0xc79/0x1410 [ 388.303802][ T38] ? __pfx_kthread+0x10/0x10 [ 388.303826][ T38] ret_from_fork_asm+0x1a/0x30 [ 388.303864][ T38] [ 388.304014][ T38] Kernel Offset: disabled