last executing test programs: 2m56.893616455s ago: executing program 4 (id=2351): io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000200)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0xc, 0xb}, 0x1}, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0xffffffff, 0x2, 0x6, 0x7, 0x81, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x95, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff3f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x2, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0xe5e54be0630c28fa, 0x4, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gre0\x00', 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) getsockname$unix(r5, &(0x7f0000000100), &(0x7f0000000280)=0x6e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m56.06057845s ago: executing program 4 (id=2356): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x2f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000640)=""/4130, 0x1022, 0x1000000000001) pipe(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x3, 0x7, 0x5c86, 0x8, 0x4, "1a4da949397db8432d8ca3b9683fc514ad5e2f"}) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0c00018008000600", @ANYRES32, @ANYBLOB="0c000280050023000000000008000500", @ANYRES32=r4], 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2m54.986726408s ago: executing program 4 (id=2361): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x30, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c001280"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 2m51.734998872s ago: executing program 4 (id=2366): r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0xffffffffffff0001, 0xd2, 0x80000000}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x8be, 0x400, 0x1024002, 0x8004d}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000001c0)={0x2e, 0x4d, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@any_dev={0x3, 0x9ad, 0x0, 0x0, 0x1000, 0x800, 0x0, 0x0, 0x62}}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) 2m47.061217884s ago: executing program 4 (id=2374): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x5, 0x0, &(0x7f0000000180)) ioctl$UI_DEV_CREATE(r1, 0x5501) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x1411, 0x923, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x404e0c5}, 0x4000804) 2m43.014478805s ago: executing program 4 (id=2385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}], 0x1}, 0x20) (fail_nth: 1) 2m41.650878494s ago: executing program 2 (id=2391): stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={r2, @in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x7}, 0x90) (async) r3 = syz_ublk_setup_io_uring(0x42cc, &(0x7f0000000200)={0x0, 0xee5b, 0x200, 0x2, 0x2b2}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) (async, rerun: 64) r4 = syz_open_dev$vcsa(&(0x7f0000000340), 0x8001, 0x2) (rerun: 64) ioctl$BLKCRYPTOIMPORTKEY(r4, 0xc0401289, &(0x7f0000000440)={&(0x7f0000000380)="fb35872aad892936b1570030060d76393002f764", 0x14, &(0x7f00000003c0)=""/86, 0x56}) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000480)=0x1) (async) write$P9_RFLUSH(r4, &(0x7f00000004c0)={0x7, 0x6d, 0x1}, 0x7) (async) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', r4, 0x4000, r4}, 0x18) (async) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f00000005c0)=@nullb, r0, &(0x7f0000000600)) (async) fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000000680), &(0x7f00000006c0), 0x2, 0x2) (async, rerun: 32) r6 = add_key$user(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000780)="7fd69fa00d7eaf5be195bfe4a032bdfe9f8a26020c8d7c7f02c32b8fb577bc0b14c419d9b2444d440c8c803a7c028d05cb19fd6d358327f25d19775961ea2192d8a8800e91674addadc5c1022f4f75ff19eedff253b1b45b4e59edcd2cb5eca8574be88629bef1ed20aa6ca37113fb2d3aad22ccdfd1e1a78dc909d849d3142429a4751404a8a06559d63f66ec", 0x8d, 0xfffffffffffffffc) (rerun: 32) write$P9_RWALK(r4, &(0x7f0000000840)={0x30, 0x6f, 0x1, {0x3, [{0x8, 0x3, 0x4}, {0x20, 0x4, 0x5}, {0x20, 0x0, 0x4}]}}, 0x30) (async) keyctl$reject(0x13, r6, 0x100, 0x2, 0xfffffffffffffffc) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x40010, r1, 0x1a626000) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@remote}}, {{@in6}, 0x0, @in6=@ipv4}}, &(0x7f0000000980)=0xe8) (async) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000009c0)={0x0, 0x0, 0xfffd, 0xfffa}, 0x8) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) ioctl$FIONCLEX(r3, 0x5450) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000a40)={0x8, 0x0, 0x4, 0x0, 0x8}) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (async) cachestat(r1, &(0x7f0000000ac0)={0x7, 0x3}, &(0x7f0000000b00), 0x0) read$FUSE(r7, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r8, &(0x7f0000002b80)={0x38, 0x5, 0x35, 0x978, 0xdd6, 0x0, 0x1, 0x3, 0x7, 0x7803}, 0x0) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000002bc0)={0x1, [0x7]}, 0x6) (async, rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000002c80)=@nat={'nat\x00', 0x1b, 0x5, 0x410, 0x0, 0x1d0, 0xffffffff, 0x1d0, 0x0, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, &(0x7f0000002c00), {[{{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@ah={{0x30}, {[0x8823, 0x8935]}}, @common=@addrtype={{0x30}, {0x40, 0x40, 0x1, 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xa, @private=0xa010100, @broadcast, @port=0x4e24, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xb, @multicast1, @private=0xa010100, @gre_key=0x5, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv4=@empty, @ipv4=@remote, @icmp_id=0x65, @gre_key=0x7}}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="c7c826c8100a", 0x2a, 0xd, [0x21, 0x2b, 0x24, 0x24, 0x27, 0x1f, 0x1f, 0xd, 0x12, 0x2c, 0x6, 0x29, 0x6, 0x23, 0x27, 0x2a], 0x2, 0x7, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) (async) ioctl$XFS_IOC_BULKSTAT(0xffffffffffffffff, 0x8040587f, &(0x7f0000003680)={{0x7, 0x2, 0x1, 0x2, 0x400}, &(0x7f0000003140)=[{}, {}, {}, {}, {}, {}, {}]}) 2m41.423902936s ago: executing program 2 (id=2392): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x403, r5) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x5) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000002540)={0x2020}, 0x2040) 2m39.468761107s ago: executing program 2 (id=2394): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x10, 0x3, 0x0) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='nv', 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x244, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x48}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}]}, @TIPC_NLA_NODE={0x190, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ID={0xbe, 0x3, "2a5bb3e489438301feddb1547cc648a178a8f8029c2a61f371c4e330437c9beff1b9d73108679bfe7aa15cfdaa7e5b6056bc450c032c0eba76627ed077b5dc9365089b1762aebd11a637b1e8c9b221e17f7831ee16a0642a48f9133dde5ea2b16ab56f859a352bd029958499fa82728a42d75a8e926e4adbef40d770d18634208991f2d0c60039c3b2b363dd6ea6d426ea3cf7000fe4b2c34e69bc7c390e7d63e33753d9735927a3d696ea0eef5f752b7d4674ebd780e45fa1cf"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fe4fd6a2809bed2e63a584da9caec7ad41a9d1ca"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "00c8e74f8a39a7e65a391ff97ea4621630862adf"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "901bf3261b9919132255ddcd1619d236ae24941474930eec791278852a"}}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x4c801}, 0x4040040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="020e0000180000000000000000000000030005000000000002000000ac1e0001000000000000000003000600000000000200000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000800120000000200000000000000000006000000000000000000000000000000ff02000000000000000000000000000100000000000000000000000000000000040003"], 0xc0}}, 0x0) sendmsg$key(r7, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001040)={0x2, 0x13, 0x8, 0x0, 0x2, 0x0, 0x70bd2a, 0x25dfdbfe}, 0x10}}, 0x10) r8 = dup(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$PIO_UNIMAPCLR(r8, 0x4b68, 0x0) listns(&(0x7f0000000040)={0x20, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xf4240, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff080000080000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x500) 2m35.416348866s ago: executing program 2 (id=2403): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000001a40)={&(0x7f0000000180)}) 2m31.960693078s ago: executing program 2 (id=2413): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) truncate(0x0, 0x20fffbfffc) getuid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(0xffffffffffffffff, 0x8002af76, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r0 = syz_clone(0x400, 0x0, 0xffffffb4, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x700000000000000) io_submit(0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="00220f000000b0"], 0x0}, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000040)={0x2, 0x200, 0x0, 0x1, 0xfffffffd, 0x3e}) 2m27.146420579s ago: executing program 32 (id=2385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}], 0x1}, 0x20) (fail_nth: 1) 2m26.976178752s ago: executing program 2 (id=2425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0xb, 0xe174ff1ad323ca07, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb"}}}}}, 0x0) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}], 0x1}, 0x20) 2m10.25360025s ago: executing program 33 (id=2425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0xb, 0xe174ff1ad323ca07, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb"}}}}}, 0x0) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}], 0x1}, 0x20) 1m33.172961004s ago: executing program 0 (id=2526): getxattr(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="758be2496736008df4b8a98dc385d2f62b0d02fe7ada94288f57a8ec26475e18ea24847c94eff4a297a01badf48db444e77ce56fb86713f515b582cc2729fd1f88c64766a83f2d07db64d6b3ebad219128f58c9707d07c01e7ea583dfa00734fdff940a236b6e2b3a6c90d5315b51bf856cd9cf6af1a33e26d51f3333051b92b29e836ece5ca29e51cf2f3ccc80200000000000000d74249a60b9b31f7887607657eca1c704e9d78e49d5c98d4e3f2d74d31e1ef39c72f1f04ca9d4cdf55bdc2c3af7cfec4f7be929ba88d7cc6c8a6ea3d86b524351cf4558c0dd776d21e1c65f85e6bee79ae5803ab230f80ef5d81acc7f6aaf841048b9767a451c1da4628d8d0241cfac12b6fa4c9fc8e9fd1d9eec9f89cc3ee1390db040028235a"], 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/sockstat\x00') write$P9_RVERSION(r2, 0x0, 0x0) socket$kcm(0x21, 0x7, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000440)="66b9800000c00f326635000800000f3066b8007000000f23d80f21f86635400000c00f23f864f2c025d666b8d55c23630f23d00f21f86635000000010f23f8f20f10f6440f20c066350c000000440f22c0f30fc7b780daba210066edbaf80c66b83ea6898b66efbafc0ced670f38ca6915", 0x71}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='c '], 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) 1m28.075818953s ago: executing program 0 (id=2537): munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) personality(0x87bf5ac905ea0f7f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0xad7f585b85390de9) 1m27.370398417s ago: executing program 0 (id=2540): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000240)={0x20000, 0x4, 0x10000000000337, 0x200, 0x3, 0xfffffffffffffffd, 0x8f7e, 0x8, 0x1}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000240)={0x0, 0x124d, 0x6, '\x00', &(0x7f0000000180)=0x25}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200248b4}, 0x2002889c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}}}, 0x0) mkdirat(r0, &(0x7f00000002c0)='./dev\x00', 0x1c0) mount(0x0, &(0x7f0000002000)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x107010, 0x0) syz_usb_connect(0x5, 0x47, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040cd0607010001010203010902350001010080fa0904"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0) 1m25.950698793s ago: executing program 0 (id=2545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) (async) r8 = socket$kcm(0x11, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getrusage(0xffffffffffffffff, &(0x7f0000000680)) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="050000000000000000003000000008000300", @ANYRES32=r11, @ANYBLOB='\x00'], 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r10, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x61}}}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x2}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x4}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xb271}]}, 0x64}, 0x1, 0x0, 0x0, 0x85}, 0x8000) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m21.403252004s ago: executing program 0 (id=2552): r0 = syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x8, &(0x7f0000000040)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000f00103afffc000000000000000000000000000000ff0200"/70], 0x0) sched_setscheduler(0x0, 0x7, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = gettid() timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r6, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) 1m16.746466398s ago: executing program 0 (id=2562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) io_setup(0x4, &(0x7f00000013c0)=0x0) r2 = eventfd(0x0) io_submit(r1, 0x1, &(0x7f0000002c00)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}]) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) (async) io_setup(0x4, &(0x7f00000013c0)) (async) eventfd(0x0) (async) io_submit(r1, 0x1, &(0x7f0000002c00)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}]) (async) close(r0) (async) 41.885781897s ago: executing program 3 (id=2616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x77359400}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = syz_open_procfs(r2, &(0x7f0000000140)='net/fib_triestat\x00') preadv(r5, &(0x7f0000000540)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x2a, 0xd) 40.435298626s ago: executing program 3 (id=2618): socket$inet6(0xa, 0x80003, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x5, 0x20000) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2, {0x4, 0xac0, 0xdaeb, 0xf912}}) 38.316547632s ago: executing program 6 (id=2620): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semop(r3, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x40008000) bind$inet(r4, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x40800) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r6, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x5, 0x0, 0x8, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x20037}, 0x60) listen(r6, 0x0) ppoll(&(0x7f0000000000)=[{r6}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0) unshare(0x6a040000) syz_usb_connect$uac2(0x0, 0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000081e0400304000010203010902"], 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0xa2, 0xb, 0x4, 0xc, 0x4, 0x6], 0x1, 0x0, 0x0, [{}]}, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 34.916506977s ago: executing program 6 (id=2624): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710263d2ac", 0x0, 0xe505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd}, 0x2e) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x9, 0x8, 0x0, 0x0, 0x26, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r2 = syz_io_uring_setup(0x712a, &(0x7f0000000300)={0x0, 0xfffffffe, 0x10000, 0x3, 0x18}, &(0x7f0000000580)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000480)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 33.849893666s ago: executing program 3 (id=2625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f00000ac000/0x2000)=nil, 0x2000, 0x4, 0x100010, 0xffffffffffffffff, 0xe8102000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$pppoe(0x18, 0x1, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x4, 0x8001, 0x3, 0x80, 0xfffffffffffffffd}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0xf29, 0x663, 0x7fffffff, 0x3}, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x0, 0x1, 0x9, 0x2, 0xfff, r2}) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) 31.645914667s ago: executing program 6 (id=2628): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x5}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0x30, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x20801}, 0x0) ftruncate(0xffffffffffffffff, 0x2008001) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r3, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000200)="175c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320cc3264", 0x53}, {&(0x7f0000000540)="7f96b1c0057470ba3ad9c683aafbd45ff640c70156ed61", 0x17}], 0x3) sendmmsg(r3, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893aeefbf94850960", 0xca}, {&(0x7f00000003c0)="b2d616a9dec7caaae6068e74d8d177dd8b8aa56c5385b89f36796568341b240b37b2b1e3b156fa9213688620ef58c4919387aaccd16c83fdbddf03f729526fa83bd438eff0e768eb0920e0b42e529a2a1d8b4822681057ec91d9e9c16f1d884850c01521c4ab21", 0x67}, {&(0x7f0000000440)="1e653b2c046caa413f0ed03bce1b9411b6c7bfb6dc8c7fcb1da18b236c0b3539206a8ae5e4365ea01b4e287fd6a634f8a81824", 0x33}], 0x3}}, {{0x0, 0xffffffffffffff9d, &(0x7f0000003300)=[{&(0x7f0000000bc0)="d1e3abaefb479cf8f70fd1aa72fade85a2ec95c5e1f0c100fa7c7a2a5a7cfa38eac776a8f1691595fc65e172fa", 0x2d}, {&(0x7f0000000e00)="0a4ea05345e0d8afa8b5fa95afe5a8c360a0516ef024e6fc9e71d01c08f98c7e678dfebd5de0d8cd11e74dda9f53c5385af63ec9601b304555d45f5640d16849c016ba463a637d869e218cdd76ed8314e3e787fb73b6b15c118db456e91699908e61478704f3046a2ae00895fdbbf3451c1950db28b4d5c120da004a6928a814bb7eb189735a8a1ec299e14aa10743524d48fc29a09467c15f5f0713f99aab9127bfc8e50ad3e97b1c5e50f3dbcf7817763e9e7dcb20a1931e4a6f7720038c8e8f12e5dd7251d46f83add6132363b1b554aa2f73ff0a4ae1f192b9bb88d8941451e904fe1745046f6faa2f7bd9d9", 0xee}, {&(0x7f0000000f00)="88a69f5139292fe55d24310330d349370620dd2737877e864a0d6d86ec395b0c41689f2e0742c4d3282f151e6faf27deab0464cdf91d6a7b73cbec929aa85b3d4f5114785c23d6c325efab561ca5f90113281359edb7ccdea124d6ea38a34d046ed5a7fdfc137e465ae8b692cb06ce3d14da5dc3ba35cac41c2fb97fe2618ebdd40e4a7f086b994b09b899c9d85392366c09ddaa", 0x94}, {&(0x7f0000000fc0)="d6385764205d32c000b4ed22e47544133441e31487e5734b9e4a0945fa03b8c27f6c3bdaf773db4793c3d31933b274c0b7b8c90b1d061f22a1e4c2ac9deab6311c09afe4f963417378b3aa1a177408bc55e62df4c50365", 0x57}, {&(0x7f0000002240)="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", 0x7ff}], 0x5}}, {{&(0x7f00000043c0)=@rc={0x1f, @any, 0xa}, 0x80, &(0x7f0000006800)}}], 0x3, 0x0) ppoll(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1}, 0x4080) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000000)={0x9, 0xd6, 0x0, 0x7, 0xffffffde, 0x344f, "85ec21e1382c329131320f813d6d7ab7", 0x0, 0x7, 0x2, 0x5, 0x80, 0x7, 0x4}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x191f, 0x4000, 0x8, 0x223}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r5, 0x1912, 0x71, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000100)={0x2, r5, 0x4, {0x8, 0x5}, 0x6}, 0x1) 29.479016599s ago: executing program 6 (id=2631): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x0, 0x100, 0x6, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe8df}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xa, &(0x7f0000000500)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) listen(0xffffffffffffffff, 0x0) socket(0x10, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x7) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x110000) 28.285810169s ago: executing program 6 (id=2632): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000440)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) sendto(r1, &(0x7f0000000480)="9a21", 0x2, 0x4000001, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0xdc82964405a8d329) syz_usb_connect(0x3, 0x32, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="7dc0f2a2c74edf5ae64d894a624b8bff0498cf071102d8962d6f300a9f5d46f5f4b79b04028e4020767de699ab8966e97bcd3aa73f1201dff4d454854171e8a0218857e5d6132848fc54b5ca814df67aad8320aef91cd28adcf2f566e1eb9f3a97698b7a1e1827c49440aef7ec5464", @ANYRESHEX=r1, @ANYRESDEC=r0], 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x20240) ioctl$UBLK_U_CMD_START_DEV(r2, 0xc0207506, &(0x7f0000000080)={0x0, 0xffff, 0x0, 0x0, 0x0}) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0xffffffffffff0001) 26.692524278s ago: executing program 3 (id=2633): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) r1 = open(&(0x7f00009e1000)='./bus\x00', 0x7690c1, 0x12) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'gre0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x700, 0x7800, 0xf, 0x2, {{0x5, 0x4, 0x2, 0x2f, 0x14, 0x67, 0x0, 0x86, 0x4, 0x0, @multicast2, @broadcast}}}}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x4d, 0x0, &(0x7f0000000000)=0x2f) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x2, 0x0) syz_clone(0x29805911, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000000010000006d05000005"], 0x50) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) ioctl$USBDEVFS_FORBID_SUSPEND(r4, 0x5521) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) 25.193443927s ago: executing program 5 (id=2634): socket$inet6(0xa, 0x80003, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x5, 0x20000) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2, {0x4, 0xac0, 0xdaeb, 0xf912}}) 24.830255114s ago: executing program 6 (id=2635): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x81c}]}]}, 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0xf, [0x1, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29a, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0xd, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x400000, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x4, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x18c, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x100, 0x0, 0x0, 0x204, 0x0, 0x0, 0x4000, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x402, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0xc9, 0x0, 0x8, 0x9, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x5cb9, 0xcaa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) r3 = eventfd2(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000200)={0xfffffff8, 0x0, 0x10001, 0x1, 0x4f, "0d41810700943aaa91e15b1b6f6ff88c6b00", 0x9, 0x2}) io_setup(0x81, &(0x7f0000000400)=0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r6, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x6, 0x4, 0x0, 0x2, 0x5775d27c, 0x158, 0x20100}, 0x20) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040007"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) read$eventfd(r3, &(0x7f0000000340), 0x8) io_submit(r5, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000100)=0x1, 0x4) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r10, 0x0, 0x10000, 0x0, 0x8, 0x2ea473, 0x2eb80c}) ioctl$UI_DEV_CREATE(r2, 0x5501) pwritev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="4a3471253e2ebc73e9dddfc516ebb4dbe6222144057eb0866ccdd13b80d2b7ef483f0e7a8a4d7ee1116048c7fa3498b026f622c3af764b3dbcd342a5fd94e035512feffdad59ba0d39648ed62664dd4bb31cb3742a07e31399e477c6adb2b68baf4ffd2bb3d2414ab5998a0a9768d9756f0a89652c1e4e", 0x77}, {&(0x7f0000000180)="e237c426b4bf360996b9a1489aa01b0233adabc02ca2fa260c9058d8c501315fe353e130af97adaa4218d925922c5368a8df2244cc55b4", 0x37}], 0x2, 0x1, 0x5) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000240)) syz_usb_connect$uac1(0x5, 0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000008d118042d4000010203010902700003010920060904000000010100000a240116000a0002"], 0x0) 22.564400484s ago: executing program 5 (id=2636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x77359400}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000d00)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f51313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3fbc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5befaffffff2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcfde14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d57750e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e1db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3d1c557bee3", 0x559, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) r5 = syz_open_procfs(r2, &(0x7f0000000140)='net/fib_triestat\x00') preadv(r5, &(0x7f0000000540)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x2a, 0xd) 21.576268941s ago: executing program 3 (id=2639): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20040084) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit$UBLK(0x0, r5, r6, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r3, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x70, &(0x7f0000000680)={0x70, 0x1, {0x0, 0x9, 0xc, 0xc, 0xd, 0xa}, {}, {}, {0x0, 0xfffffffd}}}}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r8, 0xc997405dd37fff69, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 19.92660466s ago: executing program 3 (id=2640): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2240}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x3}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) listen(0xffffffffffffffff, 0x5) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000081001000080049b4003800000000a3069078ac1414bbac1414aa070f09e00000027f00000100000000004e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xdc, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 15.613441601s ago: executing program 5 (id=2642): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f00000ac000/0x2000)=nil, 0x2000, 0x4, 0x100010, 0xffffffffffffffff, 0xe8102000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$pppoe(0x18, 0x1, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x4, 0x8001, 0x3, 0x80, 0xfffffffffffffffd}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0xf29, 0x663, 0x7fffffff, 0x3}, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x0, 0x1, 0x9, 0x2, 0xfff, r2}) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) 13.663754418s ago: executing program 1 (id=2644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x77359400}}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = syz_open_procfs(r2, &(0x7f0000000140)='net/fib_triestat\x00') preadv(r5, &(0x7f0000000540)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x2a, 0xd) 9.650132649s ago: executing program 34 (id=2635): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x81c}]}]}, 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0xf, [0x1, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29a, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0xd, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x400000, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x4, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x18c, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x100, 0x0, 0x0, 0x204, 0x0, 0x0, 0x4000, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x402, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0xc9, 0x0, 0x8, 0x9, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x5cb9, 0xcaa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) r3 = eventfd2(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000200)={0xfffffff8, 0x0, 0x10001, 0x1, 0x4f, "0d41810700943aaa91e15b1b6f6ff88c6b00", 0x9, 0x2}) io_setup(0x81, &(0x7f0000000400)=0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r6, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x6, 0x4, 0x0, 0x2, 0x5775d27c, 0x158, 0x20100}, 0x20) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040007"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) read$eventfd(r3, &(0x7f0000000340), 0x8) io_submit(r5, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000100)=0x1, 0x4) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r10, 0x0, 0x10000, 0x0, 0x8, 0x2ea473, 0x2eb80c}) ioctl$UI_DEV_CREATE(r2, 0x5501) pwritev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="4a3471253e2ebc73e9dddfc516ebb4dbe6222144057eb0866ccdd13b80d2b7ef483f0e7a8a4d7ee1116048c7fa3498b026f622c3af764b3dbcd342a5fd94e035512feffdad59ba0d39648ed62664dd4bb31cb3742a07e31399e477c6adb2b68baf4ffd2bb3d2414ab5998a0a9768d9756f0a89652c1e4e", 0x77}, {&(0x7f0000000180)="e237c426b4bf360996b9a1489aa01b0233adabc02ca2fa260c9058d8c501315fe353e130af97adaa4218d925922c5368a8df2244cc55b4", 0x37}], 0x2, 0x1, 0x5) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000240)) syz_usb_connect$uac1(0x5, 0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000008d118042d4000010203010902700003010920060904000000010100000a240116000a0002"], 0x0) 9.617289338s ago: executing program 1 (id=2646): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x3, 0x182}) sched_setscheduler(0x0, 0x5, &(0x7f0000000900)=0x38) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000e000/0x1000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setns(0xc9, 0x20000000) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$eventfd(r1, &(0x7f00000001c0), 0x8) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000000000002000002300004802c0001800b0001006e756d67656e00001c00028008000140000100130800687a6682000108000240000100010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}}, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1a3b, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 8.136144868s ago: executing program 5 (id=2647): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000200)="6d31d842000000806a", 0x9}, {&(0x7f0000000040)="18f17419b146a84cbeda9224297dac92d747ced31a35cd6d7b9b442343ada863ecd2a9abcae9c24f89e086f890db26e60abb098b3c5dbf9d2ef1b9c77d874baabb4b8f78e051d4632866ae642a2651fe1cb76754cd5b59fa84e2d937c49821003116b8ba4ab0293456b739", 0x6b}, {&(0x7f0000000500)="edb4a0cdd18a271cdbaace5806cf8a2692bea8933fc7b9e8f05c9d5150d5e56f76c53ebff12630745660e26f01c67083b94f8b4b057788c24b8eb47837899455e593c0cabc47ff2ba3ac6bad652739262852c58d03d2c3a2e47a69855d1f43606791bbae827314cee4cf1c9413374044f78a2d", 0x73}], 0x3) 5.905174883s ago: executing program 1 (id=2648): mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000087c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff85010014, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r0, &(0x7f00000042c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x40000000000, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) (fail_nth: 1) 5.250627307s ago: executing program 5 (id=2649): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f00000ac000/0x2000)=nil, 0x2000, 0x4, 0x100010, 0xffffffffffffffff, 0xe8102000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$pppoe(0x18, 0x1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x4, 0x8001, 0x3, 0x80, 0xfffffffffffffffd}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0xf29, 0x663, 0x7fffffff, 0x3}, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x0, 0x1, 0x9, 0x2, 0xfff, r2}) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) 3.635631136s ago: executing program 35 (id=2640): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2240}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x3}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) listen(0xffffffffffffffff, 0x5) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000081001000080049b4003800000000a3069078ac1414bbac1414aa070f09e00000027f00000100000000004e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xdc, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.616018146s ago: executing program 5 (id=2651): r0 = socket(0x2, 0x80805, 0x0) fcntl$setpipe(r0, 0x407, 0x3) lsm_list_modules(0xfffffffffffffffe, &(0x7f00000002c0)=0xfffffcbd, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000002400)='sockfs\x00', 0x1e408, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000023c0)=r3) write(r2, &(0x7f0000000000)='7', 0x1) syz_clone(0x10004500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x38, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038121e940e60491553994010203010902260001000000000904000002e517bb0009050402090000000009058802"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) r4 = fsopen(&(0x7f0000000040)='udf\x00', 0x1) r5 = fcntl$dupfd(r4, 0x406, r4) r6 = socket$inet(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0800000000000000f0ff0b"], 0x0, 0x26, 0x0, 0x8}, 0x28) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0b06c900060008"], 0xe) bind$alg(r0, &(0x7f0000002480)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) bind$inet(r6, &(0x7f0000000000)={0x2, 0x1111, @empty}, 0x10) listen(r6, 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r1, &(0x7f0000002580)="6e716e3d74737072743d7463702c7476616464723d31320200302e302e312c74727352766369647d343336392c9b3ed0146864725f644873060d2637c35212d22e24bcd94a3d87139d06000000e42add47f76d2904db9332df0551e7e521f59076a188c899da0de44f7fcc5c08c776fa59e5fec1655647fe", 0x78) accept$inet(r6, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(0xffffffffffffffff, &(0x7f0000000100)="0100800080000000000000020000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0a159d70000", 0x80) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000080), 0x0) 3.545833048s ago: executing program 1 (id=2652): r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0xffffffffffff0001, 0xd2, 0x80000000}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x8be, 0x400, 0x1024002, 0x8004d}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000001c0)={0x2e, 0x4d, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@any_dev={0x3, 0x9ad, 0x0, 0x0, 0x1000, 0x800, 0x0, 0x0, 0x62}}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) sched_rr_get_interval(r1, &(0x7f0000000040)) 1.075989142s ago: executing program 1 (id=2653): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x0, 0x100, 0x6, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe8df}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xa, &(0x7f0000000500)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) listen(0xffffffffffffffff, 0x0) socket(0x10, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x7) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x110000) 0s ago: executing program 1 (id=2654): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, 0x0, 0x0, 0xffffffff00000000}, 0x20) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xffffffff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb94aaaaaaaa2e08004515001c0067000000029078"], 0x0) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc1400e8034788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): can_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x8e2b instead [ 797.359207][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x1f15 instead [ 797.359249][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 797.359265][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 797.359281][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x8e2b instead [ 797.359299][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x1f15 instead [ 797.359343][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 797.359358][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 797.359374][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x8e2b instead [ 797.359392][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x1f15 instead [ 797.359436][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 797.359452][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 797.359468][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x8e2b instead [ 797.359486][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x1f15 instead [ 797.359528][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 797.359543][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 797.359560][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x8e2b instead [ 797.359578][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x1f15 instead [ 797.359620][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 797.359635][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 797.359652][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x8e2b instead [ 797.359674][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x1f15 instead [ 797.359719][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 797.359734][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 797.359750][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x8e2b instead [ 797.359767][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x1f15 instead [ 797.599753][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 797.599780][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 797.599798][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x8e2b instead [ 797.599817][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x1f15 instead [ 797.599862][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 797.599878][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 797.599896][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x8e2b instead [ 797.599916][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x1f15 instead [ 797.599962][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 797.599978][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 797.599995][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x8e2b instead [ 797.600012][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x1f15 instead [ 797.600057][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 797.600072][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 797.600089][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x8e2b instead [ 797.600106][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x1f15 instead [ 797.600150][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 797.600166][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 797.600181][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x8e2b instead [ 797.600199][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x1f15 instead [ 797.600241][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 797.600256][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 797.600273][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x8e2b instead [ 797.600291][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x1f15 instead [ 797.600368][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 797.600383][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 797.600400][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x8e2b instead [ 797.600417][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x1f15 instead [ 797.600463][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 797.600480][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 797.600497][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x8e2b instead [ 797.600516][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x1f15 instead [ 797.600561][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 797.600576][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 797.600593][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x8e2b instead [ 797.600610][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x1f15 instead [ 797.600652][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 797.600674][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 797.600691][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x8e2b instead [ 797.600708][T14516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x1f15 instead [ 797.600741][T14516] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 797.600750][T14516] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 798.932483][T14529] libceph: resolve 'y' (ret=-3): failed [ 799.633558][T11270] Bluetooth: hci5: Frame reassembly failed (-84) [ 800.991937][T14543] FAULT_INJECTION: forcing a failure. [ 800.991937][T14543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 800.991995][T14543] CPU: 1 UID: 0 PID: 14543 Comm: syz.4.2347 Tainted: G L syzkaller #0 PREEMPT(full) [ 800.992022][T14543] Tainted: [L]=SOFTLOCKUP [ 800.992030][T14543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 800.992040][T14543] Call Trace: [ 800.992048][T14543] [ 800.992055][T14543] dump_stack_lvl+0x100/0x190 [ 800.992088][T14543] should_fail_ex.cold+0x5/0xa [ 800.992115][T14543] _copy_to_user+0x32/0xd0 [ 800.992141][T14543] simple_read_from_buffer+0xcb/0x170 [ 800.992168][T14543] proc_fail_nth_read+0x1af/0x230 [ 800.992196][T14543] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 800.992223][T14543] ? rw_verify_area+0xce/0x6d0 [ 800.992241][T14543] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 800.992266][T14543] vfs_read+0x1e4/0xb40 [ 800.992288][T14543] ? lock_acquire+0x1d1/0x380 [ 800.992309][T14543] ? __fget_files+0x34/0x3d0 [ 800.992334][T14543] ? __pfx_vfs_read+0x10/0x10 [ 800.992352][T14543] ? find_held_lock+0x2b/0x80 [ 800.992380][T14543] ? __fget_files+0x215/0x3d0 [ 800.992408][T14543] ? __fget_files+0x21f/0x3d0 [ 800.992440][T14543] ksys_read+0x12a/0x250 [ 800.992461][T14543] ? __pfx_ksys_read+0x10/0x10 [ 800.992489][T14543] do_syscall_64+0x123/0x790 [ 800.992512][T14543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.992531][T14543] RIP: 0033:0x7f8ba915e98e [ 800.992549][T14543] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 800.992566][T14543] RSP: 002b:00007f8ba9fbcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 800.992586][T14543] RAX: ffffffffffffffda RBX: 00007f8ba9fbd6c0 RCX: 00007f8ba915e98e [ 800.992599][T14543] RDX: 000000000000000f RSI: 00007f8ba9fbd0a0 RDI: 0000000000000004 [ 800.992611][T14543] RBP: 00007f8ba9fbd090 R08: 0000000000000000 R09: 0000000000000000 [ 800.992623][T14543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.992634][T14543] R13: 00007f8ba9426038 R14: 00007f8ba9425fa0 R15: 00007ffc278c8468 [ 800.992665][T14543] [ 801.673111][ T5610] Bluetooth: hci5: command 0x1003 tx timeout [ 801.677251][T11555] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 802.346549][ T9] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 802.506535][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 802.509951][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 802.510021][ T9] usb 2-1: New USB device found, idVendor=1608, idProduct=021b, bcdDevice=97.b3 [ 802.511524][ T9] usb 2-1: config 151 has an invalid interface number: 33 but max is 0 [ 802.511578][ T9] usb 2-1: config 151 has no interface number 0 [ 802.511655][ T9] usb 2-1: config 151 interface 33 has no altsetting 0 [ 802.515681][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.515718][ T9] usb 2-1: Product: syz [ 802.515748][ T9] usb 2-1: Manufacturer: syz [ 802.515778][ T9] usb 2-1: SerialNumber: syz [ 802.688296][T14571] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2356'. [ 803.461442][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.461525][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 804.182538][T14583] net_ratelimit: 20 callbacks suppressed [ 804.222091][T14583] lo speed is unknown, defaulting to 1000 [ 804.986510][T14588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2362'. [ 805.157275][T14591] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2361'. [ 806.835142][ T9] io_ti 2-1:151.33: required endpoints missing [ 806.946219][ T9] uvcvideo 2-1:151.33: Found multiple Units with ID 1 [ 806.948626][ T9] uvcvideo 2-1:151.33: Found UVC 0.0a device syz (1608:021b) [ 806.948736][ T9] uvcvideo 2-1:151.33: No valid video chain found. [ 806.953962][ T9] usb 2-1: USB disconnect, device number 84 [ 809.655910][T14620] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2371'. [ 811.451467][ T31] audit: type=1400 audit(1700000421.406:4506): avc: denied { write } for pid=14628 comm="syz.1.2373" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 811.511620][T14632] FAULT_INJECTION: forcing a failure. [ 811.511620][T14632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 811.511651][T14632] CPU: 1 UID: 0 PID: 14632 Comm: syz.1.2373 Tainted: G L syzkaller #0 PREEMPT(full) [ 811.511676][T14632] Tainted: [L]=SOFTLOCKUP [ 811.511683][T14632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 811.511693][T14632] Call Trace: [ 811.511701][T14632] [ 811.511708][T14632] dump_stack_lvl+0x100/0x190 [ 811.511740][T14632] should_fail_ex.cold+0x5/0xa [ 811.511766][T14632] _copy_to_user+0x32/0xd0 [ 811.511789][T14632] simple_read_from_buffer+0xcb/0x170 [ 811.511816][T14632] proc_fail_nth_read+0x1af/0x230 [ 811.511844][T14632] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 811.511869][T14632] ? rw_verify_area+0xce/0x6d0 [ 811.511886][T14632] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 811.511910][T14632] vfs_read+0x1e4/0xb40 [ 811.511930][T14632] ? lock_acquire+0x1d1/0x380 [ 811.511950][T14632] ? __fget_files+0x34/0x3d0 [ 811.511973][T14632] ? __pfx_vfs_read+0x10/0x10 [ 811.511991][T14632] ? find_held_lock+0x2b/0x80 [ 811.512017][T14632] ? __fget_files+0x215/0x3d0 [ 811.512050][T14632] ? __fget_files+0x21f/0x3d0 [ 811.512079][T14632] ksys_read+0x12a/0x250 [ 811.512099][T14632] ? __pfx_ksys_read+0x10/0x10 [ 811.512125][T14632] do_syscall_64+0x123/0x790 [ 811.512147][T14632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.512165][T14632] RIP: 0033:0x7f532e15e98e [ 811.512180][T14632] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 811.512197][T14632] RSP: 002b:00007f532f026fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 811.512214][T14632] RAX: ffffffffffffffda RBX: 00007f532f0276c0 RCX: 00007f532e15e98e [ 811.512226][T14632] RDX: 000000000000000f RSI: 00007f532f0270a0 RDI: 0000000000000006 [ 811.512236][T14632] RBP: 00007f532f027090 R08: 0000000000000000 R09: 0000000000000000 [ 811.512247][T14632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.512258][T14632] R13: 00007f532e426128 R14: 00007f532e426090 R15: 00007ffc1f6d4958 [ 811.512282][T14632] [ 812.068762][T14638] binder: 14637:14638 ioctl c0306201 200000000680 returned -14 [ 814.388995][T14658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2382'. [ 815.162720][ T31] audit: type=1326 audit(1700000425.107:4507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.2.2383" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f118999e159 code=0x0 [ 815.459255][ T9] hid_parser_main: 4 callbacks suppressed [ 815.459267][ T9] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 815.459291][ T9] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 815.459313][ T9] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 815.459325][ T9] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 815.459346][ T9] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 815.459359][ T9] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 815.462576][ T9] hid-generic 0000:0000:0000.005C: hidraw0: HID v0.00 Device [] on  [ 815.672753][T14671] fido_id[14671]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 815.696603][T14673] FAULT_INJECTION: forcing a failure. [ 815.696603][T14673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 815.696637][T14673] CPU: 1 UID: 0 PID: 14673 Comm: syz.4.2385 Tainted: G L syzkaller #0 PREEMPT(full) [ 815.696661][T14673] Tainted: [L]=SOFTLOCKUP [ 815.696667][T14673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 815.696678][T14673] Call Trace: [ 815.696684][T14673] [ 815.696691][T14673] dump_stack_lvl+0x100/0x190 [ 815.696723][T14673] should_fail_ex.cold+0x5/0xa [ 815.696747][T14673] _copy_from_user+0x2e/0xd0 [ 815.696769][T14673] copy_msghdr_from_user+0x9f/0x4c0 [ 815.696792][T14673] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 815.696816][T14673] ? __lock_acquire+0x5c0/0x1f40 [ 815.696842][T14673] ___sys_recvmsg+0xdd/0x1a0 [ 815.696862][T14673] ? __pfx____sys_recvmsg+0x10/0x10 [ 815.696884][T14673] ? lock_acquire+0x1d1/0x380 [ 815.696921][T14673] __x64_sys_recvmsg+0x19a/0x260 [ 815.696953][T14673] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 815.696991][T14673] do_syscall_64+0x123/0x790 [ 815.697012][T14673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.697029][T14673] RIP: 0033:0x7f8ba919e159 [ 815.697044][T14673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.697061][T14673] RSP: 002b:00007f8ba9f9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 815.697079][T14673] RAX: ffffffffffffffda RBX: 00007f8ba9426090 RCX: 00007f8ba919e159 [ 815.697091][T14673] RDX: 0000000000000020 RSI: 000020000000c1c0 RDI: 0000000000000003 [ 815.697102][T14673] RBP: 00007f8ba9f9c090 R08: 0000000000000000 R09: 0000000000000000 [ 815.697113][T14673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.697123][T14673] R13: 00007f8ba9426128 R14: 00007f8ba9426090 R15: 00007ffc278c8468 [ 815.697147][T14673] [ 816.288208][T14684] 9p: Bad value for 'wfdno' [ 816.314103][T14683] FAULT_INJECTION: forcing a failure. [ 816.314103][T14683] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 816.314136][T14683] CPU: 1 UID: 0 PID: 14683 Comm: syz.2.2389 Tainted: G L syzkaller #0 PREEMPT(full) [ 816.314164][T14683] Tainted: [L]=SOFTLOCKUP [ 816.314172][T14683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 816.314184][T14683] Call Trace: [ 816.314191][T14683] [ 816.314201][T14683] dump_stack_lvl+0x100/0x190 [ 816.314234][T14683] should_fail_ex.cold+0x5/0xa [ 816.314259][T14683] ? prepare_alloc_pages+0x16d/0x5b0 [ 816.314290][T14683] should_fail_alloc_page+0xeb/0x140 [ 816.314323][T14683] prepare_alloc_pages+0x1f0/0x5b0 [ 816.314351][T14683] ? is_bpf_text_address+0x25/0x1a0 [ 816.314384][T14683] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 816.314408][T14683] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 816.314435][T14683] ? is_bpf_text_address+0x94/0x1a0 [ 816.314462][T14683] ? kernel_text_address+0x8d/0x100 [ 816.314493][T14683] ? __kernel_text_address+0xd/0x30 [ 816.314512][T14683] ? unwind_get_return_address+0x59/0xa0 [ 816.314541][T14683] ? __lock_acquire+0x5c0/0x1f40 [ 816.314564][T14683] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 816.314593][T14683] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 816.314622][T14683] ? look_up_lock_class+0x64/0x120 [ 816.314645][T14683] ? register_lock_class+0x3f/0x7b0 [ 816.314670][T14683] ? find_held_lock+0x2b/0x80 [ 816.314700][T14683] ? ima_match_policy+0x8b8/0x23e0 [ 816.314733][T14683] ? __lock_acquire+0x5c0/0x1f40 [ 816.314758][T14683] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 816.314786][T14683] ? policy_nodemask+0xed/0x4f0 [ 816.314815][T14683] alloc_pages_mpol+0x201/0x550 [ 816.314846][T14683] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 816.314877][T14683] ? __lock_acquire+0x5c0/0x1f40 [ 816.314901][T14683] folio_alloc_mpol_noprof+0x36/0x260 [ 816.314921][T14683] vma_alloc_folio_noprof+0xed/0x1d0 [ 816.314944][T14683] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 816.314967][T14683] ? lock_acquire+0x1d1/0x380 [ 816.314988][T14683] ? is_bpf_text_address+0x25/0x1a0 [ 816.315022][T14683] do_anonymous_page+0xac9/0x2050 [ 816.315067][T14683] ? __pfx_do_anonymous_page+0x10/0x10 [ 816.315102][T14683] ? rcu_read_unlock+0x2d/0xb0 [ 816.315124][T14683] ? rcu_read_unlock+0x2d/0xb0 [ 816.315143][T14683] ? __pte_offset_map+0x179/0x310 [ 816.315169][T14683] __handle_mm_fault+0x1ff3/0x2f60 [ 816.315204][T14683] ? __pfx___handle_mm_fault+0x10/0x10 [ 816.315235][T14683] ? __pfx_mt_find+0x10/0x10 [ 816.315271][T14683] ? find_vma+0xbf/0x140 [ 816.315294][T14683] ? __pfx_find_vma+0x10/0x10 [ 816.315321][T14683] handle_mm_fault+0x363/0xa20 [ 816.315355][T14683] do_user_addr_fault+0x745/0x12f0 [ 816.315388][T14683] exc_page_fault+0x6f/0xd0 [ 816.315409][T14683] asm_exc_page_fault+0x26/0x30 [ 816.315429][T14683] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 816.315461][T14683] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 ff b1 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 816.315481][T14683] RSP: 0018:ffffc900071a7be8 EFLAGS: 00050206 [ 816.315500][T14683] RAX: 0000000000000001 RBX: 0000000000000d00 RCX: 0000000000000d00 [ 816.315513][T14683] RDX: 0000000000000001 RSI: ffff888035c6e000 RDI: 0000200000001240 [ 816.315527][T14683] RBP: 0000200000001240 R08: 0000000000000000 R09: ffffed1006b8dd9f [ 816.315540][T14683] R10: ffff888035c6ecff R11: 0000000000000000 R12: ffff888035c6e000 [ 816.315553][T14683] R13: 0000200000001f40 R14: 00007ffffffff000 R15: 0000000000000000 [ 816.315579][T14683] _copy_to_user+0xa4/0xd0 [ 816.315608][T14683] pagemap_read+0x51b/0x830 [ 816.315641][T14683] ? __pfx_pagemap_read+0x10/0x10 [ 816.315671][T14683] ? rw_verify_area+0xce/0x6d0 [ 816.315691][T14683] ? __pfx_pagemap_read+0x10/0x10 [ 816.315717][T14683] vfs_read+0x1e4/0xb40 [ 816.315740][T14683] ? lock_acquire+0x1d1/0x380 [ 816.315761][T14683] ? __fget_files+0x34/0x3d0 [ 816.315786][T14683] ? __pfx_vfs_read+0x10/0x10 [ 816.315806][T14683] ? find_held_lock+0x2b/0x80 [ 816.315835][T14683] ? __fget_files+0x215/0x3d0 [ 816.315863][T14683] ? __fget_files+0x215/0x3d0 [ 816.315893][T14683] ? __fget_files+0x21f/0x3d0 [ 816.315927][T14683] __x64_sys_pread64+0x1eb/0x250 [ 816.315950][T14683] ? __pfx___x64_sys_pread64+0x10/0x10 [ 816.315982][T14683] do_syscall_64+0x123/0x790 [ 816.316005][T14683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.316024][T14683] RIP: 0033:0x7f118999e159 [ 816.316041][T14683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.316066][T14683] RSP: 002b:00007f118a8d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 816.316089][T14683] RAX: ffffffffffffffda RBX: 00007f1189c25fa0 RCX: 00007f118999e159 [ 816.316103][T14683] RDX: 0000000000200000 RSI: 0000200000001240 RDI: 0000000000000003 [ 816.316115][T14683] RBP: 00007f1189a3506b R08: 0000000000000000 R09: 0000000000000000 ** 2 printk messages dropped ** [ 816.316164][T14683] [ 819.312526][T14706] net_ratelimit: 20 callbacks suppressed [ 819.559031][T14710] fuse: fd is not a fuse device [ 819.611321][T14713] netlink: 'syz.0.2398': attribute type 29 has an invalid length. [ 819.611657][T14712] netlink: 'syz.0.2398': attribute type 29 has an invalid length. [ 819.655251][ T5606] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 819.895993][ T5606] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 819.896971][ T5606] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 819.896994][ T5606] usb 2-1: config 0 has no interface number 0 [ 819.898932][ T5606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.898955][ T5606] usb 2-1: Product: syz [ 819.898970][ T5606] usb 2-1: Manufacturer: syz [ 819.898984][ T5606] usb 2-1: SerialNumber: syz [ 819.901573][ T5606] usb 2-1: config 0 descriptor?? [ 820.949278][ T5606] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 821.731961][T14712] IPv6: sit2: Disabled Multicast RS [ 821.849196][T14712] sit2: entered allmulticast mode [ 822.238756][T14733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2394'. [ 822.831185][ T31] audit: type=1326 audit(1700000432.787:4508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14734 comm="syz.3.2401" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f577cd9e159 code=0x0 [ 822.883740][ T5606] usb 2-1: USB disconnect, device number 85 ** 6087 printk messages dropped ** ** 86 printk messages dropped ** ** 120 printk messages dropped ** [ 824.347991][ T5606] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 824.348976][ T5606] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 824.349026][ T5606] usb 2-1: config 0 has no interface number 0 [ 824.354273][ T5606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.354292][ T5606] usb 2-1: Product: syz [ 824.354306][ T5606] usb 2-1: Manufacturer: syz [ 824.354320][ T5606] usb 2-1: SerialNumber: syz [ 824.360981][ T5606] usb 2-1: config 0 descriptor?? [ 824.517744][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 824.709208][ T5606] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 824.719722][ T5606] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 824.722564][ T5606] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 824.722616][ T5606] usb 2-1: media controller created [ 824.748811][ T9] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 824.794780][ T5606] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 824.795118][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 824.795140][ T9] usb 3-1: config 0 has no interface number 0 [ 825.058422][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.058555][ T9] usb 3-1: Product: syz [ 825.058653][ T9] usb 3-1: Manufacturer: syz [ 825.058816][ T9] usb 3-1: SerialNumber: syz [ 825.102175][T14758] FAULT_INJECTION: forcing a failure. [ 825.102175][T14758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 825.102203][T14758] CPU: 1 UID: 0 PID: 14758 Comm: syz.1.2405 Tainted: G L syzkaller #0 PREEMPT(full) [ 825.102227][T14758] Tainted: [L]=SOFTLOCKUP [ 825.102234][T14758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 825.102244][T14758] Call Trace: [ 825.102251][T14758] [ 825.102259][T14758] dump_stack_lvl+0x100/0x190 [ 825.102291][T14758] should_fail_ex.cold+0x5/0xa [ 825.102316][T14758] _copy_from_user+0x2e/0xd0 [ 825.102339][T14758] kstrtouint_from_user+0xd6/0x1d0 [ 825.102364][T14758] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 825.102395][T14758] ? lock_acquire+0x1d1/0x380 [ 825.102423][T14758] proc_fail_nth_write+0x83/0x220 [ 825.102448][T14758] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 825.102478][T14758] vfs_write+0x2aa/0x1050 [ 825.102499][T14758] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 825.102521][T14758] ? lock_acquire+0x1d1/0x380 [ 825.102539][T14758] ? __fget_files+0x34/0x3d0 [ 825.102564][T14758] ? __pfx_vfs_write+0x10/0x10 [ 825.102581][T14758] ? find_held_lock+0x2b/0x80 [ 825.102608][T14758] ? __fget_files+0x215/0x3d0 [ 825.102634][T14758] ? __fget_files+0x21f/0x3d0 [ 825.102664][T14758] ksys_write+0x12a/0x250 [ 825.102683][T14758] ? __pfx_ksys_write+0x10/0x10 [ 825.102709][T14758] do_syscall_64+0x123/0x790 [ 825.102731][T14758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.102750][T14758] RIP: 0033:0x7f532e15e98e [ 825.102764][T14758] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 825.102780][T14758] RSP: 002b:00007f532f026fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 ** 4149 printk messages dropped ** ** 100 printk messages dropped ** ** 47 printk messages dropped ** ** 89 printk messages dropped ** ** 26 printk messages dropped ** ** 109 printk messages dropped ** ** 58 printk messages dropped ** ** 6 printk messages dropped ** ** 57 printk messages dropped ** ** 12 printk messages dropped ** ** 15 printk messages dropped ** ** 109 printk messages dropped ** [ 826.247231][T14765] FAULT_INJECTION: forcing a failure. [ 826.247231][T14765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 826.247261][T14765] CPU: 1 UID: 0 PID: 14765 Comm: syz.1.2409 Tainted: G L syzkaller #0 PREEMPT(full) [ 826.247286][T14765] Tainted: [L]=SOFTLOCKUP [ 826.247293][T14765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 826.247304][T14765] Call Trace: [ 826.247312][T14765] [ 826.247341][T14765] dump_stack_lvl+0x100/0x190 [ 826.247373][T14765] should_fail_ex.cold+0x5/0xa [ 826.247400][T14765] _copy_to_iter+0x5a4/0x1720 [ 826.247428][T14765] ? __pfx__copy_to_iter+0x10/0x10 [ 826.247448][T14765] ? proc_single_show+0x179/0x1f0 [ 826.247472][T14765] ? single_next+0xd/0x40 [ 826.247490][T14765] ? single_stop+0x9/0x10 [ 826.247508][T14765] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 826.247540][T14765] seq_read_iter+0x691/0x1270 [ 826.247573][T14765] seq_read+0x344/0x4d0 [ 826.247596][T14765] ? __pfx_seq_read+0x10/0x10 [ 826.247623][T14765] ? avc_policy_seqno+0x9/0x20 [ 826.247648][T14765] ? selinux_file_permission+0x8f/0x6d0 [ 826.247676][T14765] ? rw_verify_area+0xce/0x6d0 [ 826.247694][T14765] ? __pfx_seq_read+0x10/0x10 [ 826.247717][T14765] vfs_read+0x1e4/0xb40 [ 826.247737][T14765] ? lock_acquire+0x1d1/0x380 [ 826.247758][T14765] ? __fget_files+0x34/0x3d0 [ 826.247783][T14765] ? __pfx_vfs_read+0x10/0x10 [ 826.247802][T14765] ? find_held_lock+0x2b/0x80 [ 826.247826][T14765] ? __fget_files+0x215/0x3d0 [ 826.247848][T14765] ? __fget_files+0x215/0x3d0 [ 826.247875][T14765] ? __fget_files+0x21f/0x3d0 [ 826.247906][T14765] __x64_sys_pread64+0x1eb/0x250 [ 826.247929][T14765] ? __pfx___x64_sys_pread64+0x10/0x10 [ 826.247958][T14765] do_syscall_64+0x123/0x790 [ 826.247980][T14765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.247999][T14765] RIP: 0033:0x7f532e19e159 [ 826.248014][T14765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.248031][T14765] RSP: 002b:00007f532f048028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 826.248049][T14765] RAX: ffffffffffffffda RBX: 00007f532e425fa0 RCX: 00007f532e19e159 [ 826.248061][T14765] RDX: 000000000000000f RSI: 0000200000000140 RDI: 0000000000000004 [ 826.248073][T14765] RBP: 00007f532f048090 R08: 0000000000000000 R09: 0000000000000000 [ 826.248083][T14765] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 826.248095][T14765] R13: 00007f532e426038 R14: 00007f532e425fa0 R15: 00007ffc1f6d4958 [ 826.248120][T14765] [ 826.467949][ T9] usb 3-1: config 0 descriptor?? [ 826.468877][T12187] IPVS: starting estimator thread 0... [ 826.471912][ T9] usb 3-1: can't set config #0, error -71 [ 826.494259][ T9] usb 3-1: USB disconnect, device number 72 [ 826.531387][T14772] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 826.574896][T14773] IPVS: using max 45 ests per chain, 108000 per kthread [ 826.701463][T14776] fuse: fd is not a fuse device [ 826.726346][ T5606] usb 2-1: USB disconnect, device number 86 [ 828.004343][T14784] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [130] [ 828.004366][T14784] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 828.004381][T14784] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 828.004392][T14784] One or more global auth toks could not properly register; rc = [-22] [ 828.004429][T14784] Error validating options; rc = [-22] [ 828.170923][T14774] netlink: 'syz.1.2411': attribute type 21 has an invalid length. [ 828.464741][ T5727] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 828.630233][ T5727] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 828.642780][ T5727] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 828.642862][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.657900][ T5727] usb 3-1: config 0 descriptor?? [ 828.715067][ T5727] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 831.441702][ T5606] usb 3-1: USB disconnect, device number 73 [ 831.532967][T14817] libceph: resolve 'y' (ret=-3): failed [ 831.679314][ T5610] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 831.695304][ T5610] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 831.697709][ T5610] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 831.721357][ T5610] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 831.732273][ T5610] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 833.633725][T14842] dummy0 (unregistering): left allmulticast mode [ 833.633745][T14842] dummy0 (unregistering): left promiscuous mode [ 833.633833][T14842] bridge1: port 1(dummy0) entered disabled state [ 833.824472][T11555] Bluetooth: hci5: command tx timeout [ 833.879058][T14818] lo speed is unknown, defaulting to 1000 [ 836.066834][T11555] Bluetooth: hci5: command tx timeout [ 838.144234][T11555] Bluetooth: hci5: command tx timeout [ 839.283274][T14818] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.294874][T14818] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.295046][T14818] bridge_slave_0: entered allmulticast mode [ 839.301928][T14818] bridge_slave_0: entered promiscuous mode [ 839.343457][T14818] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.343519][T14818] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.343672][T14818] bridge_slave_1: entered allmulticast mode [ 839.357963][T14818] bridge_slave_1: entered promiscuous mode [ 839.564744][T14887] net_ratelimit: 20 callbacks suppressed [ 839.754776][T14818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.779721][T14818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.924181][ T5727] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 840.048401][T14818] team0: Port device team_slave_0 added [ 840.085399][T14818] team0: Port device team_slave_1 added [ 840.107879][ T5727] usb 2-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice= 1.00 [ 840.111159][ T5727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.141181][ T5727] gspca_main: spca505-2.14.0 probing 0733:0430 [ 840.202311][T14818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.202321][T14818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.239435][T14818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.242826][T14818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.242837][T14818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.242857][T14818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.246578][T11555] Bluetooth: hci5: command tx timeout [ 841.528587][ T5727] gspca_spca505: reg write: error -110 [ 841.528634][ T5727] spca505 2-1:1.0: probe with driver spca505 failed with error -5 [ 841.642117][ T5720] usb 2-1: USB disconnect, device number 87 [ 841.762723][T14818] hsr_slave_0: entered promiscuous mode [ 841.784242][T14818] hsr_slave_1: entered promiscuous mode [ 841.784898][T14818] debugfs: 'hsr0' already exists in 'hsr' [ 841.784914][T14818] Cannot create hsr debugfs directory [ 844.595470][T14818] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 844.675839][T14818] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 844.677234][T14818] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 844.717869][T14818] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 844.718857][T14818] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 844.748809][T14818] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 844.749779][T14818] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 844.775819][T14818] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 844.818055][T14926] fuse: fd is not a fuse device [ 844.893189][T14818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.987087][T14818] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.041243][T12190] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.041327][T12190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.059755][T12185] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.059842][T12185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.492070][T14936] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2451'. [ 849.087326][ T5610] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 849.104662][ T5610] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 849.110391][ T5610] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 849.122326][ T5610] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 849.123823][ T5610] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 849.210890][T14956] net_ratelimit: 22 callbacks suppressed [ 851.263547][T11555] Bluetooth: hci6: command tx timeout [ 851.848840][T14957] lo speed is unknown, defaulting to 1000 [ 852.106551][T14818] 8021q: adding VLAN 0 to HW filter on device batadv0 ** 12625 printk messages dropped ** ** 414 printk messages dropped ** [ 853.432110][T11555] Bluetooth: hci6: command tx timeout [ 855.503427][T11555] Bluetooth: hci6: command tx timeout [ 856.072602][T15015] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2465'. [ 857.117592][T15024] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2466'. [ 857.178817][T14957] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.180698][T14957] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.180865][T14957] bridge_slave_0: entered allmulticast mode [ 857.206525][T14957] bridge_slave_0: entered promiscuous mode [ 857.220404][T14957] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.220490][T14957] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.220655][T14957] bridge_slave_1: entered allmulticast mode [ 857.238417][T14957] bridge_slave_1: entered promiscuous mode [ 857.461485][T14957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 857.499719][T14957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.603107][T11555] Bluetooth: hci6: command tx timeout [ 857.734866][T14818] veth0_vlan: entered promiscuous mode [ 857.774413][T14957] team0: Port device team_slave_0 added [ 857.777107][T14957] team0: Port device team_slave_1 added [ 857.839502][T14957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.839512][T14957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.839532][T14957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.841334][T14957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.841344][T14957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.841364][T14957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.105854][T14957] hsr_slave_0: entered promiscuous mode [ 859.106752][T14957] hsr_slave_1: entered promiscuous mode [ 859.107344][T14957] debugfs: 'hsr0' already exists in 'hsr' [ 859.107359][T14957] Cannot create hsr debugfs directory [ 859.112229][T14818] veth1_vlan: entered promiscuous mode [ 859.592626][T15039] net_ratelimit: 24 callbacks suppressed [ 860.799885][T15046] xt_CT: You must specify a L4 protocol and not use inversions on it [ 860.889388][T15048] fuse: fd is not a fuse device [ 860.958459][ T31] audit: type=1326 audit(1700000470.919:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15051 comm="syz.0.2473" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f548cf9e159 code=0x0 [ 862.505601][T14818] veth0_macvtap: entered promiscuous mode [ 862.976921][T15062] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2476'. [ 863.655824][T14818] veth1_macvtap: entered promiscuous mode [ 864.236447][T15069] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2474'. [ 864.653111][ T5606] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 864.709787][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.709872][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 864.902572][ T5606] usb 2-1: Using ep0 maxpacket: 32 [ 864.903292][ T5606] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 864.904250][ T5606] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 864.904270][ T5606] usb 2-1: config 0 has no interface number 0 [ 864.904303][ T5606] usb 2-1: config 0 interface 184 has no altsetting 0 [ 864.906270][ T5606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.906289][ T5606] usb 2-1: Product: syz [ 864.906304][ T5606] usb 2-1: Manufacturer: syz [ 864.906318][ T5606] usb 2-1: SerialNumber: syz [ 864.909516][ T5606] usb 2-1: config 0 descriptor?? [ 866.127797][ T5606] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 866.127822][ T5606] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 866.127841][ T5606] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 866.128030][ T5606] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 866.523785][ T31] audit: type=1800 audit(1700000476.490:4510): pid=15081 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2480" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 866.595997][T14818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 866.614625][T14957] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 866.708121][T14957] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 866.708747][T14957] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 866.766468][T14957] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 866.799211][T14957] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 866.887252][T14957] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 866.887857][T14957] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 866.937971][T14957] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 866.950292][T14818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.253950][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.263036][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.264406][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.265033][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.527622][T11270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.527634][T11270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.644484][T12190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.644496][T12190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.686927][T14957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.756615][T14957] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.777625][T11270] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.777701][T11270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.800605][T11270] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.800680][T11270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.819265][T15102] overlayfs: missing 'workdir' [ 867.854437][ T31] audit: type=1400 audit(1700000477.820:4511): avc: denied { mounton } for pid=14818 comm="syz-executor" path="/root/syzkaller.zsFurp/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 867.953278][ T31] audit: type=1400 audit(1700000477.920:4512): avc: denied { mounton } for pid=14818 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 868.315893][ T5606] usb 2-1: USB disconnect, device number 88 [ 870.382449][ T5720] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 870.454263][T14957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.532263][ T5720] usb 2-1: Using ep0 maxpacket: 32 [ 870.538693][ T5720] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 870.551365][ T5720] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 870.551388][ T5720] usb 2-1: config 0 has no interface number 0 [ 870.551423][ T5720] usb 2-1: config 0 interface 184 has no altsetting 0 [ 870.582496][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.582515][ T5720] usb 2-1: Product: syz [ 870.582529][ T5720] usb 2-1: Manufacturer: syz [ 870.582544][ T5720] usb 2-1: SerialNumber: syz [ 870.586471][ T5720] usb 2-1: config 0 descriptor?? [ 871.041251][ T5720] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 871.041275][ T5720] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 871.041293][ T5720] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 871.041492][ T5720] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 871.217988][T14957] veth0_vlan: entered promiscuous mode [ 872.128364][T14929] net_ratelimit: 208 callbacks suppressed [ 872.159130][T14957] veth1_vlan: entered promiscuous mode [ 872.384499][T14957] veth0_macvtap: entered promiscuous mode [ 872.387452][T14957] veth1_macvtap: entered promiscuous mode [ 872.471015][T14957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 872.528726][T14957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 873.700318][ T5800] usb 2-1: USB disconnect, device number 89 [ 874.022535][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.022837][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.022870][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.022901][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.228831][T15155] libceph: resolve 'y' (ret=-3): failed [ 874.534100][T15159] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2492'. [ 874.971024][T11270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.971035][T11270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.385681][T15164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47367 sclass=netlink_route_socket pid=15164 comm=syz.1.2495 [ 875.392373][T15164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47367 sclass=netlink_route_socket pid=15164 comm=syz.1.2495 [ 875.454390][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.454404][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.774052][ T31] audit: type=1400 audit(1700000485.740:4513): avc: denied { setopt } for pid=15165 comm="syz.3.2496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 875.853217][T15166] overlayfs: failed to clone upperpath [ 877.181910][ C0] net_ratelimit: 263 callbacks suppressed [ 877.855417][T15184] netlink: 'syz.5.2493': attribute type 32 has an invalid length. [ 877.986980][T15184] binder_alloc: binder_alloc_mmap_handler: 15183 200000ffd000-200001000000 already mapped failed -16 [ 878.008266][T15184] binder_alloc: 15183: binder_alloc_buf, no vma [ 879.019332][ T31] audit: type=1326 audit(1700000488.980:4514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15192 comm="syz.6.2499" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea5f99e159 code=0x0 [ 879.070259][T15196] fuse: fd is not a fuse device [ 879.395306][ T5606] hid-generic 0000:0000:0000.005D: unknown main item tag 0x0 [ 879.397470][ T5606] hid-generic 0000:0000:0000.005D: unknown main item tag 0x0 [ 879.398746][ T5606] hid-generic 0000:0000:0000.005D: unknown main item tag 0x0 [ 879.398767][ T5606] hid-generic 0000:0000:0000.005D: unknown main item tag 0x0 [ 879.398786][ T5606] hid-generic 0000:0000:0000.005D: unknown main item tag 0x0 [ 879.398805][ T5606] hid-generic 0000:0000:0000.005D: unknown main item tag 0x0 [ 879.463437][ T5606] hid-generic 0000:0000:0000.005D: hidraw0: HID v0.00 Device [] on  [ 880.005240][T15208] fido_id[15208]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 880.577305][T15222] tipc: Started in network mode [ 880.577319][T15222] tipc: Node identity 4, cluster identity 4711 [ 880.577336][T15222] tipc: Node number set to 4 [ 881.497040][ T5606] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 881.901005][ T5606] usb 6-1: device descriptor read/all, error -71 [ 882.395667][ T31] audit: type=1326 audit(1700000492.361:4515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15255 comm="syz.1.2515" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f532e19e159 code=0x0 [ 882.513993][ T5800] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 882.514014][ T5800] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 882.514045][ T5800] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 882.514065][ T5800] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 882.544584][ C1] net_ratelimit: 75 callbacks suppressed [ 882.564427][ T5800] hid-generic 0000:0000:0000.005E: hidraw0: HID v0.00 Device [] on  [ 883.008039][T15266] can0: slcan on ttyS3. [ 883.753118][T15269] FAULT_INJECTION: forcing a failure. [ 883.753118][T15269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 883.753149][T15269] CPU: 1 UID: 0 PID: 15269 Comm: syz.1.2519 Tainted: G L syzkaller #0 PREEMPT(full) [ 883.753173][T15269] Tainted: [L]=SOFTLOCKUP [ 883.753180][T15269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 883.753190][T15269] Call Trace: [ 883.753197][T15269] [ 883.753204][T15269] dump_stack_lvl+0x100/0x190 [ 883.753235][T15269] should_fail_ex.cold+0x5/0xa [ 883.753260][T15269] _copy_to_user+0x32/0xd0 [ 883.753283][T15269] vhost_vsock_dev_ioctl+0x296/0xb70 [ 883.753307][T15269] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 883.753332][T15269] ? selinux_file_ioctl+0x13b/0x290 [ 883.753353][T15269] ? selinux_file_ioctl+0xb6/0x290 [ 883.753376][T15269] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 883.753401][T15269] __x64_sys_ioctl+0x18e/0x210 [ 883.753423][T15269] do_syscall_64+0x123/0x790 [ 883.753445][T15269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.753463][T15269] RIP: 0033:0x7f532e19e159 [ 883.753478][T15269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.753494][T15269] RSP: 002b:00007f532f048028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 883.753512][T15269] RAX: ffffffffffffffda RBX: 00007f532e425fa0 RCX: 00007f532e19e159 [ 883.753524][T15269] RDX: 0000000000000000 RSI: 000000008008af26 RDI: 0000000000000003 [ 883.753534][T15269] RBP: 00007f532f048090 R08: 0000000000000000 R09: 0000000000000000 [ 883.753544][T15269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 883.753555][T15269] R13: 00007f532e426038 R14: 00007f532e425fa0 R15: 00007ffc1f6d4958 [ 883.753578][T15269] [ 883.895839][T15266] can0 (unregistered): slcan off ttyS3. [ 884.068736][T15261] fido_id[15261]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 884.225005][T15271] libceph: resolve 'y' (ret=-3): failed [ 884.296362][T15275] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2522'. [ 884.621609][ T5800] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 884.903915][ T5800] usb 2-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 884.904907][ T5800] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 884.906922][ T5800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.907005][ T5800] usb 2-1: Product: syz [ 884.907062][ T5800] usb 2-1: Manufacturer: syz [ 884.907122][ T5800] usb 2-1: SerialNumber: syz [ 885.089918][ T5800] keyspan 2-1:1.0: Keyspan 1 port adapter converter detected [ 885.091278][ T5800] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 885.316394][ T5800] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 885.318262][ T5800] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 82 [ 885.319575][ T5800] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 885.338362][ T5800] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 885.358937][ T5800] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 83 [ 885.379241][ T5800] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 3 [ 885.718628][ T5800] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 885.754467][ T5800] usb 2-1: USB disconnect, device number 90 [ 885.796097][ T5800] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 885.796757][ T5800] keyspan 2-1:1.0: device disconnected [ 886.290614][ T31] audit: type=1326 audit(1700000496.251:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15296 comm="syz.3.2529" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f577cd9e159 code=0x0 [ 887.323466][ T5800] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 887.741470][ C0] net_ratelimit: 21 callbacks suppressed ** 3487 printk messages dropped ** [ 888.501796][ T5800] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 888.502792][ T5800] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.502818][ T5800] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.502840][ T5800] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 888.502890][ T5800] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.509163][ T5800] usb 6-1: config 0 descriptor?? [ 889.026461][T15313] libceph: resolve 'y' (ret=-3): failed [ 889.409927][ T5800] plantronics 0003:047F:FFFF.005F: item fetching failed at offset 1/15 [ 889.410438][ T5800] plantronics 0003:047F:FFFF.005F: parse failed [ 889.410512][ T5800] plantronics 0003:047F:FFFF.005F: probe with driver plantronics failed with error -22 [ 889.950218][ T5800] usb 6-1: USB disconnect, device number 4 [ 889.979489][ T31] audit: type=1326 audit(1700000499.941:4517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15314 comm="syz.3.2535" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f577cd9e159 code=0x0 [ 890.503613][T15322] netlink: 'syz.5.2538': attribute type 1 has an invalid length. [ 890.541985][T15322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 891.561955][T15339] lo speed is unknown, defaulting to 1000 [ 892.744594][ T5800] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 892.891887][ T5800] usb 2-1: device descriptor read/64, error -71 [ 893.101127][ C1] net_ratelimit: 69 callbacks suppressed [ 893.141117][ T5800] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 893.271134][ T5800] usb 2-1: device descriptor read/64, error -71 [ 893.392606][ T5800] usb usb2-port1: attempt power cycle [ 893.536223][ T31] audit: type=1326 audit(1700000503.501:4518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15363 comm="syz.5.2543" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d9e19e159 code=0x0 [ 893.751027][ T5800] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 893.772634][ T5800] usb 2-1: device descriptor read/8, error -71 [ 893.785806][ T5727] hid_parser_main: 2 callbacks suppressed [ 893.785820][ T5727] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 893.785849][ T5727] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 893.785871][ T5727] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 893.785883][ T5727] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 893.785904][ T5727] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 893.785916][ T5727] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 893.796902][ T5727] hid-generic 0000:0000:0000.0060: hidraw0: HID v0.00 Device [] on [ 894.130994][T15372] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 894.153151][ T5800] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 894.182237][ T5800] usb 2-1: device descriptor read/8, error -71 [ 894.866715][ T5800] usb usb2-port1: unable to enumerate USB device [ 894.916064][T15370] fido_id[15370]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 895.429563][ T31] audit: type=1400 audit(1700000505.391:4519): avc: denied { getopt } for pid=15373 comm="syz.5.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 898.597560][T14929] net_ratelimit: 44 callbacks suppressed [ 898.854569][ T31] audit: type=1400 audit(1700000508.821:4520): avc: denied { ioctl } for pid=15399 comm="syz.6.2554" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 899.453111][T15408] FAULT_INJECTION: forcing a failure. [ 899.453111][T15408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 899.453136][T15408] CPU: 1 UID: 0 PID: 15408 Comm: syz.1.2558 Tainted: G L syzkaller #0 PREEMPT(full) [ 899.453159][T15408] Tainted: [L]=SOFTLOCKUP [ 899.453164][T15408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 899.453174][T15408] Call Trace: [ 899.453181][T15408] [ 899.453187][T15408] dump_stack_lvl+0x100/0x190 [ 899.453218][T15408] should_fail_ex.cold+0x5/0xa [ 899.453241][T15408] _copy_from_user+0x2e/0xd0 [ 899.453262][T15408] blkdev_common_ioctl+0x314/0x2b80 [ 899.453289][T15408] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 899.453316][T15408] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 899.453339][T15408] ? do_vfs_ioctl+0x226/0x13e0 [ 899.453359][T15408] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 899.453376][T15408] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 899.453400][T15408] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 899.453424][T15408] ? __fget_files+0x34/0x3d0 [ 899.453454][T15408] blkdev_ioctl+0x43b/0x6f0 [ 899.453475][T15408] ? __pfx_blkdev_ioctl+0x10/0x10 [ 899.453496][T15408] ? selinux_file_ioctl+0x13b/0x290 [ 899.453516][T15408] ? selinux_file_ioctl+0xb6/0x290 [ 899.453539][T15408] ? __pfx_blkdev_ioctl+0x10/0x10 [ 899.453561][T15408] __x64_sys_ioctl+0x18e/0x210 [ 899.453582][T15408] do_syscall_64+0x123/0x790 [ 899.453602][T15408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.453620][T15408] RIP: 0033:0x7f532e19e159 [ 899.453635][T15408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 899.453651][T15408] RSP: 002b:00007f532f048028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 899.453672][T15408] RAX: ffffffffffffffda RBX: 00007f532e425fa0 RCX: 00007f532e19e159 [ 899.453683][T15408] RDX: 0000200000000000 RSI: 000000000000127f RDI: 0000000000000003 [ 899.453693][T15408] RBP: 00007f532f048090 R08: 0000000000000000 R09: 0000000000000000 [ 899.453704][T15408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 899.453713][T15408] R13: 00007f532e426038 R14: 00007f532e425fa0 R15: 00007ffc1f6d4958 [ 899.453736][T15408] [ 899.624425][ T5727] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 899.797319][ T5727] usb 6-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 899.800497][ T5727] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 899.800509][ T31] audit: type=1326 audit(1700000509.761:4521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15409 comm="syz.1.2559" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f532e19e159 code=0x0 [ 899.854824][ T5727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.854846][ T5727] usb 6-1: Product: syz [ 899.854855][ T5727] usb 6-1: Manufacturer: syz [ 899.854873][ T5727] usb 6-1: SerialNumber: syz [ 899.904057][ T5727] keyspan 6-1:1.0: Keyspan 1 port adapter converter detected [ 899.921464][ T5727] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 899.947515][ T5727] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 899.947636][ T5727] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 82 [ 899.947689][ T5727] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 899.947750][ T5727] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 899.947811][ T5727] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 83 [ 899.947873][ T5727] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 3 [ 899.967775][ T5727] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 900.030374][ T5606] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 900.030403][ T5606] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 900.030422][ T5606] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 900.030441][ T5606] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 900.030459][ T5606] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 900.030477][ T5606] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 900.091623][ T5606] hid-generic 0000:0000:0000.0061: hidraw0: HID v0.00 Device [] on [ 900.276524][ T5727] usb 6-1: USB disconnect, device number 5 [ 900.351101][ T5727] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 900.362223][ T5727] keyspan 6-1:1.0: device disconnected [ 902.082309][T15435] FAULT_INJECTION: forcing a failure. [ 902.082309][T15435] name failslab, interval 1, probability 0, space 0, times 0 [ 902.082335][T15435] CPU: 1 UID: 0 PID: 15435 Comm: syz.5.2564 Tainted: G L syzkaller #0 PREEMPT(full) [ 902.082360][T15435] Tainted: [L]=SOFTLOCKUP [ 902.082367][T15435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 902.082378][T15435] Call Trace: [ 902.082385][T15435] [ 902.082393][T15435] dump_stack_lvl+0x100/0x190 [ 902.082424][T15435] should_fail_ex.cold+0x5/0xa [ 902.082444][T15435] ? __netlink_lookup+0x652/0x900 [ 902.082469][T15435] should_failslab+0xc2/0x120 [ 902.082494][T15435] kmem_cache_alloc_noprof+0x92/0x6a0 [ 902.082516][T15435] ? skb_clone+0x190/0x400 [ 902.082546][T15435] skb_clone+0x190/0x400 [ 902.082572][T15435] netlink_deliver_tap+0xaed/0xcc0 [ 902.082601][T15435] netlink_unicast+0x62b/0x850 [ 902.082628][T15435] ? __pfx_netlink_unicast+0x10/0x10 [ 902.082658][T15435] netlink_sendmsg+0x8b0/0xda0 [ 902.082686][T15435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 902.082712][T15435] ? selinux_socket_sendmsg+0x198/0x2f0 [ 902.082739][T15435] ____sys_sendmsg+0xa4d/0xbe0 [ 902.082757][T15435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 902.082782][T15435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 902.082808][T15435] ? lock_acquire+0x1d1/0x380 [ 902.082829][T15435] ? get_pid_task+0x2a/0x250 [ 902.082855][T15435] ___sys_sendmsg+0x190/0x1e0 [ 902.082877][T15435] ? __pfx____sys_sendmsg+0x10/0x10 [ 902.082897][T15435] ? get_pid_task+0x106/0x250 [ 902.082931][T15435] ? find_held_lock+0x2b/0x80 [ 902.082981][T15435] __sys_sendmsg+0x160/0x210 [ 902.083007][T15435] ? __pfx___sys_sendmsg+0x10/0x10 [ 902.083046][T15435] do_syscall_64+0x123/0x790 [ 902.083069][T15435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.083088][T15435] RIP: 0033:0x7f2d9e19e159 [ 902.083104][T15435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.083122][T15435] RSP: 002b:00007f2d9f05e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.083141][T15435] RAX: ffffffffffffffda RBX: 00007f2d9e425fa0 RCX: 00007f2d9e19e159 [ 902.083153][T15435] RDX: 0000000004040140 RSI: 00002000000000c0 RDI: 0000000000000004 [ 902.083166][T15435] RBP: 00007f2d9f05e090 R08: 0000000000000000 R09: 0000000000000000 [ 902.083177][T15435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.083188][T15435] R13: 00007f2d9e426038 R14: 00007f2d9e425fa0 R15: 00007ffd1e90f828 [ 902.083213][T15435] [ 902.146879][T15434] fuse: Bad value for 'fd' [ 903.203588][ T5610] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 903.205366][ T5610] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 903.209229][ T5610] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 903.240305][ T5610] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 903.243689][ T5610] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 903.615367][T15452] syz_tun: entered allmulticast mode [ 903.778508][T15452] dvmrp6: entered allmulticast mode [ 903.807690][T15458] dvmrp6: left allmulticast mode [ 903.820385][ C1] net_ratelimit: 65 callbacks suppressed [ 904.632589][ T5720] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 904.675693][ T5602] syz_tun (unregistering): left allmulticast mode [ 904.675714][ T5602] syz_tun (unregistering): left promiscuous mode [ 904.675824][ T5602] bridge0: port 2(syz_tun) entered disabled state [ 904.766258][T15475] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2569'. [ 905.054207][ T5720] usb 2-1: device descriptor read/64, error -71 [ 905.281618][T11510] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 905.340859][T11555] Bluetooth: hci7: command tx timeout [ 905.374907][ T5720] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 905.440338][T11510] usb 7-1: Using ep0 maxpacket: 16 [ 905.441492][T11510] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 905.444758][T11510] usb 7-1: config 1 has an invalid interface descriptor of length 6, skipping [ 905.444794][T11510] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 905.444855][T11510] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 905.479750][T11510] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.479770][T11510] usb 7-1: Product: syz [ 905.479785][T11510] usb 7-1: Manufacturer: syz [ 905.479800][T11510] usb 7-1: SerialNumber: syz [ 905.520335][ T5720] usb 2-1: device descriptor read/64, error -71 [ 905.558851][T11510] usb 7-1: 0:2 : does not exist [ 905.709162][ T5720] usb usb2-port1: attempt power cycle [ 906.801850][ T5720] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 907.077397][ T5720] usb 2-1: device descriptor read/8, error -71 [ 907.146954][T11510] usb 7-1: USB disconnect, device number 2 [ 907.310442][ T5720] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 907.338493][ T5720] usb 2-1: device descriptor read/8, error -71 [ 907.421661][T11555] Bluetooth: hci7: command tx timeout [ 907.440627][ T5720] usb usb2-port1: unable to enumerate USB device [ 907.555460][T15450] syz_tun: left allmulticast mode [ 907.654291][T15444] lo speed is unknown, defaulting to 1000 [ 908.029395][T15489] FAULT_INJECTION: forcing a failure. [ 908.029395][T15489] name failslab, interval 1, probability 0, space 0, times 0 [ 908.029430][T15489] CPU: 1 UID: 0 PID: 15489 Comm: syz.6.2574 Tainted: G L syzkaller #0 PREEMPT(full) [ 908.029459][T15489] Tainted: [L]=SOFTLOCKUP [ 908.029468][T15489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 908.029480][T15489] Call Trace: [ 908.029486][T15489] [ 908.029495][T15489] dump_stack_lvl+0x100/0x190 [ 908.029530][T15489] should_fail_ex.cold+0x5/0xa [ 908.029557][T15489] should_failslab+0xc2/0x120 [ 908.029586][T15489] __kvmalloc_node_noprof+0x113/0x9b0 [ 908.029611][T15489] ? trace_contention_end+0x126/0x160 [ 908.029635][T15489] ? io_rsrc_data_alloc+0x2c/0xa0 [ 908.029660][T15489] io_rsrc_data_alloc+0x2c/0xa0 [ 908.029681][T15489] io_alloc_file_tables+0x27/0xb0 [ 908.029704][T15489] io_sqe_files_register+0x186/0x970 [ 908.029736][T15489] ? __pfx_io_sqe_files_register+0x10/0x10 [ 908.029783][T15489] __do_sys_io_uring_register+0xf69/0x1bc0 [ 908.029819][T15489] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 908.029844][T15489] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 908.029879][T15489] ? __x64_sys_futex+0x34f/0x4d0 [ 908.029906][T15489] ? __x64_sys_futex+0x358/0x4d0 [ 908.029935][T15489] ? xfd_validate_state+0x129/0x190 [ 908.029970][T15489] do_syscall_64+0x123/0x790 [ 908.029993][T15489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.030013][T15489] RIP: 0033:0x7fea5f99e159 [ 908.030030][T15489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.030047][T15489] RSP: 002b:00007fea608cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 908.030069][T15489] RAX: ffffffffffffffda RBX: 00007fea5fc25fa0 RCX: 00007fea5f99e159 [ 908.030079][T15489] RDX: 0000200000002d40 RSI: 0000000000000002 RDI: 0000000000000003 [ 908.030088][T15489] RBP: 00007fea5fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 908.030100][T15489] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 908.030111][T15489] R13: 00007fea5fc26038 R14: 00007fea5fc25fa0 R15: 00007ffe60925e28 [ 908.030134][T15489] [ 908.315808][ T5720] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 908.502522][ T5720] usb 7-1: unable to get BOS descriptor or descriptor too short [ 908.502562][ T5720] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 908.675688][ T5720] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 89, changing to 4 [ 908.675712][ T5720] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 0 [ 908.675757][ T5720] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 909.369253][T14929] net_ratelimit: 52 callbacks suppressed [ 909.500569][T11555] Bluetooth: hci7: command tx timeout [ 909.564283][ T5720] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.564302][ T5720] usb 7-1: Manufacturer: 쬮왮ｺꏀ뎒ꀧ꓀屶 [ 909.833406][ T5720] usb 7-1: low speed audio streaming not supported [ 909.833418][ T5720] usb 7-1: low speed audio streaming not supported [ 910.174695][ T5720] usb 7-1: USB disconnect, device number 3 [ 910.187884][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 910.201075][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 910.210903][ T13] bridge0: port 1(netdevsim0) entered disabled state [ 910.873893][ T159] Bluetooth: hci2: Frame reassembly failed (-84) [ 911.599518][ T5610] Bluetooth: hci7: command tx timeout [ 912.460835][T11555] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 912.947890][T15518] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2580'. [ 914.340033][T11510] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 914.500138][T11510] usb 7-1: Using ep0 maxpacket: 32 [ 914.501176][T11510] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 914.525499][T11510] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 914.525600][T11510] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 914.525652][T11510] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 914.525688][T11510] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 914.525727][T11510] usb 7-1: config 0 interface 0 has no altsetting 0 [ 914.525817][T11510] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.622451][T11510] usb 7-1: config 0 descriptor?? [ 914.699820][ C0] net_ratelimit: 15 callbacks suppressed [ 914.864885][T11510] usbhid 7-1:0.0: can't add hid device: -71 [ 914.865085][T11510] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 914.892067][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 914.895362][T11510] usb 7-1: USB disconnect, device number 4 [ 915.026009][ T31] audit: type=1400 audit(1700000524.992:4522): avc: denied { search } for pid=5267 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 915.026204][ T31] audit: type=1400 audit(1700000524.992:4523): avc: denied { search } for pid=5267 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 915.027764][ T31] audit: type=1400 audit(1700000524.992:4524): avc: denied { search } for pid=5267 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 915.104742][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 915.121499][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 915.121551][ T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 915.121571][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 915.121687][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 915.121727][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 915.202125][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 915.202143][ T9] usb 6-1: Product: syz [ 915.202170][ T9] usb 6-1: Manufacturer: syz [ 915.243652][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 915.243680][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 915.246535][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 915.246565][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 915.431494][ T13] ip6gretap0: left allmulticast mode [ 915.431512][ T13] ip6gretap0: left promiscuous mode [ 915.434601][ T13] bridge0: port 3(ip6gretap0) entered disabled state [ 915.480972][T11510] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 915.549866][ T31] audit: type=1400 audit(1700000525.522:4525): avc: denied { read } for pid=15547 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 915.550193][ T31] audit: type=1400 audit(1700000525.522:4526): avc: denied { read open } for pid=15547 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 915.550474][ T31] audit: type=1400 audit(1700000525.522:4527): avc: denied { getattr } for pid=15547 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 915.791381][ T31] audit: type=1400 audit(1700000525.762:4528): avc: denied { write } for pid=15546 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 915.791871][ T31] audit: type=1400 audit(1700000525.762:4529): avc: denied { add_name } for pid=15546 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 915.875701][T11510] usb 7-1: Using ep0 maxpacket: 32 [ 915.886120][T11510] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 915.901459][T11510] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.901577][T11510] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.901615][T11510] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 915.901649][T11510] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 915.901687][T11510] usb 7-1: config 0 interface 0 has no altsetting 0 [ 915.901774][T11510] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.932748][T11510] usb 7-1: config 0 descriptor?? [ 916.162332][T15560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.162885][T15560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.290358][ T31] audit: type=1400 audit(1700000526.232:4530): avc: denied { read write } for pid=15533 comm="syz.5.2584" name="cdc-wdm0" dev="devtmpfs" ino=3842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 916.328824][ T31] audit: type=1400 audit(1700000526.272:4531): avc: denied { open } for pid=15533 comm="syz.5.2584" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 916.410026][T15523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=255 sclass=netlink_route_socket pid=15523 comm=syz.6.2581 [ 916.663984][ T9] usb 6-1: USB disconnect, device number 6 [ 916.790484][T15565] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2581'. [ 917.055286][ T13] team0: Port device xfrm0 removed [ 917.445263][ T13] batman_adv: batadv0: Removing interface: gretap1 [ 917.935749][T15572] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2590'. [ 917.969092][ T25] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 918.621761][ T25] usb 6-1: unable to get BOS descriptor or descriptor too short [ 918.621798][ T25] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 918.623803][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 918.623841][ T25] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 918.623862][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 918.623879][ T25] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 918.627117][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.627136][ T25] usb 6-1: Product: syz [ 918.627150][ T25] usb 6-1: Manufacturer: syz [ 918.627165][ T25] usb 6-1: SerialNumber: syz [ 918.704671][ T25] usb 6-1: config 0 descriptor?? [ 918.724215][T15569] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 918.742760][ C1] usb 6-1: NFC: Urb failure (status -71) [ 918.744093][ T25] usb 6-1: NFC: Unable to get FW version [ 918.746203][ T25] pn533_usb 6-1:0.0: probe with driver pn533_usb failed with error -90 [ 919.175158][T11555] Bluetooth: latency 65520 > 499 [ 919.262120][ T13] bond0 (unregistering): Released all slaves [ 919.314923][ T13] bond1 (unregistering): Released all slaves [ 919.580682][T15565] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2581'. [ 919.611228][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1 [ 919.980727][ C1] net_ratelimit: 24 callbacks suppressed [ 920.011226][ T13] : left promiscuous mode [ 920.178240][T15584] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 920.294467][T11510] usbhid 7-1:0.0: can't add hid device: -71 [ 920.294616][T11510] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 920.341765][T11510] usb 7-1: USB disconnect, device number 5 [ 921.660252][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 921.660277][ T31] audit: type=1400 audit(1700000531.283:4534): avc: denied { read write } for pid=15587 comm="syz.6.2595" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 921.660338][ T31] audit: type=1400 audit(1700000531.313:4535): avc: denied { open } for pid=15587 comm="syz.6.2595" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 921.660400][ T31] audit: type=1400 audit(1700000531.333:4536): avc: denied { ioctl } for pid=15587 comm="syz.6.2595" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 921.661921][T11555] Bluetooth: hci5: command tx timeout [ 921.731889][ T5800] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 921.770748][ T1222] usb 6-1: USB disconnect, device number 7 [ 921.929642][ T5800] usb 2-1: Using ep0 maxpacket: 16 [ 921.930185][ T5800] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 921.932218][ T5800] usb 2-1: config index 0 descriptor too short (expected 8192, got 56) [ 921.932240][ T5800] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 921.932258][ T5800] usb 2-1: config 0 has no interfaces? [ 921.933284][ T5800] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 921.933302][ T5800] usb 2-1: Manufacturer: syz [ 922.008298][ T5800] usb 2-1: config 0 descriptor?? [ 922.098024][ T13] tipc: Disabling bearer [ 922.114567][ T13] tipc: Left network mode [ 922.251625][ T5800] usb 2-1: USB disconnect, device number 99 [ 922.612542][ T50] Bluetooth: hci2: Frame reassembly failed (-84) [ 922.612720][ T50] Bluetooth: hci2: Frame reassembly failed (-84) [ 922.612839][ T50] Bluetooth: hci2: Frame reassembly failed (-84) [ 922.612961][ T50] Bluetooth: hci2: Frame reassembly failed (-84) [ 924.619385][T11555] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 925.019272][T14929] net_ratelimit: 14 callbacks suppressed [ 925.146073][T15444] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.146277][T15444] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.146566][T15444] bridge_slave_0: entered allmulticast mode [ 925.206644][T15444] bridge_slave_0: entered promiscuous mode [ 925.271378][T15444] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.271449][T15444] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.271648][T15444] bridge_slave_1: entered allmulticast mode [ 925.272858][T15444] bridge_slave_1: entered promiscuous mode [ 925.597389][ T31] audit: type=1326 audit(1700000535.553:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15623 comm="syz.5.2601" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d9e19e159 code=0x0 [ 925.631751][ T31] audit: type=1400 audit(1700000535.593:4538): avc: denied { write } for pid=15602 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 925.733047][ T31] audit: type=1400 audit(1700000535.693:4539): avc: denied { write } for pid=15629 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 925.923260][T15098] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 925.923314][T15098] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 925.923347][T15098] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 925.923378][T15098] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 925.923410][T15098] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 925.923443][T15098] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 925.944182][T15098] hid-generic 0000:0000:0000.0062: hidraw0: HID v0.00 Device [] on [ 926.143953][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.143994][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.512805][T15444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 926.517824][ T5267] 8021q: adding VLAN 0 to HW filter on device eth2 [ 926.570430][T15444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 928.292638][T15444] team0: Port device team_slave_0 added [ 928.337830][T15444] team0: Port device team_slave_1 added [ 930.176075][T15444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 930.176092][T15444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.176105][T15444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 930.177519][T15444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 930.177535][T15444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.177548][T15444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 930.299000][ C1] net_ratelimit: 39 callbacks suppressed [ 931.839566][ T31] audit: type=1400 audit(1700000541.793:4540): avc: denied { write } for pid=15642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 932.257183][ T13] hsr_slave_0: left promiscuous mode [ 932.278304][ T13] hsr_slave_1: left promiscuous mode [ 932.411606][ T31] audit: type=1400 audit(1700000542.373:4541): avc: denied { write } for pid=15669 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 932.812071][T15674] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2613'. [ 934.710293][ T5720] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 935.048743][ T5720] usb 2-1: Using ep0 maxpacket: 16 [ 935.050097][ T5720] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 935.270707][ T5720] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 935.270735][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 935.272812][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.272831][ T5720] usb 2-1: Product: syz [ 935.272845][ T5720] usb 2-1: Manufacturer: syz [ 935.272859][ T5720] usb 2-1: SerialNumber: syz [ 935.277103][ T5720] usb 2-1: config 0 descriptor?? [ 935.339488][ T5720] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 935.339514][ T5720] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 936.011912][ T5720] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 936.013394][ T5720] em28xx 2-1:0.0: Config register raw data: 0x3f [ 936.013413][ T5720] em28xx 2-1:0.0: I2S Audio (3 sample rate(s)) [ 936.013427][ T5720] em28xx 2-1:0.0: No AC97 audio processor [ 936.138555][ C1] net_ratelimit: 40 callbacks suppressed [ 936.421283][T15693] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2614'. [ 939.444786][T15703] null_blk: disk nullb1 created [ 939.647849][T15444] hsr_slave_0: entered promiscuous mode [ 939.661468][T15444] hsr_slave_1: entered promiscuous mode [ 939.663512][ T5267] 8021q: adding VLAN 0 to HW filter on device eth3 [ 940.111874][ T5800] usb 2-1: USB disconnect, device number 100 [ 941.418604][ C1] net_ratelimit: 16 callbacks suppressed [ 941.630096][ T31] audit: type=1400 audit(1700000550.774:4542): avc: denied { listen } for pid=15713 comm="syz.6.2620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 941.699514][T15719] lo speed is unknown, defaulting to 1000 [ 942.028407][ T5800] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 942.192058][ T5800] usb 7-1: Using ep0 maxpacket: 8 [ 942.195189][ T5800] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 942.202122][ T5800] usb 7-1: config 0 has no interfaces? [ 942.204473][ T5800] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.204491][ T5800] usb 7-1: Product: syz [ 942.204504][ T5800] usb 7-1: Manufacturer: syz [ 942.204517][ T5800] usb 7-1: SerialNumber: syz [ 942.227453][ T5800] usb 7-1: config 0 descriptor?? [ 942.602872][ T13] IPVS: stop unused estimator thread 0... [ 943.541486][ T5800] usb 7-1: USB disconnect, device number 6 [ 944.607075][ T31] audit: type=1326 audit(1700000554.564:4543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15740 comm="syz.6.2624" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea5f99e159 code=0x0 [ 944.767173][ T31] audit: type=1400 audit(1700000554.724:4544): avc: denied { write } for pid=15726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 946.541011][T15091] net_ratelimit: 47 callbacks suppressed [ 946.957734][ T31] audit: type=1400 audit(1700000556.914:4545): avc: denied { write } for pid=15752 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 951.580859][T11509] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 951.675621][T15093] net_ratelimit: 16 callbacks suppressed [ 951.808153][T11509] usb 7-1: device descriptor read/64, error -71 [ 953.347683][T11509] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 953.387709][ T31] audit: type=1400 audit(1700000563.354:4546): avc: denied { write } for pid=15769 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 953.487672][T11509] usb 7-1: device descriptor read/64, error -71 [ 953.598517][T11509] usb usb7-port1: attempt power cycle [ 954.069259][ T31] audit: type=1400 audit(1700000564.035:4547): avc: denied { write } for pid=15792 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 954.549859][T15804] input: syz0 as /devices/virtual/input/input94 [ 956.248911][ T5720] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 956.400550][ T5720] usb 7-1: Using ep0 maxpacket: 8 [ 956.401237][ T5720] usb 7-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 956.402122][ T5720] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 956.402139][ T5720] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 956.404128][ T5720] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.404147][ T5720] usb 7-1: Product: syz [ 956.404161][ T5720] usb 7-1: Manufacturer: syz [ 956.404176][ T5720] usb 7-1: SerialNumber: syz [ 956.417318][T15444] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 956.570527][T15444] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 956.571610][T15444] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 956.697740][ C1] net_ratelimit: 18 callbacks suppressed [ 956.788631][T15444] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 956.791897][T15444] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 956.870191][T15444] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 956.904618][T15444] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 956.953753][T15444] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 957.013744][T15831] xt_CT: You must specify a L4 protocol and not use inversions on it [ 957.183635][T15444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.260102][T15444] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.296360][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.296466][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.340977][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.341055][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.345682][ T31] audit: type=1400 audit(1700000567.305:4548): avc: denied { write } for pid=15810 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 958.215687][ T31] audit: type=1400 audit(1700000568.165:4549): avc: denied { write } for pid=15838 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 958.940691][ T5610] Bluetooth: hci5: command 0x0406 tx timeout [ 959.121593][T15444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 959.436242][T15444] veth0_vlan: entered promiscuous mode [ 959.495575][T15444] veth1_vlan: entered promiscuous mode [ 959.702697][T15444] veth0_macvtap: entered promiscuous mode [ 959.746071][T15444] veth1_macvtap: entered promiscuous mode [ 959.797668][ T31] audit: type=1400 audit(1700000569.755:4550): avc: denied { write } for pid=15847 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 959.911521][T15444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 959.967041][T15444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 960.138590][T12190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.138941][T12190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.139004][T12190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.139049][T12190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.332062][ T31] audit: type=1400 audit(1700000570.295:4551): avc: denied { write } for pid=15866 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 960.664243][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.664271][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.999709][T12185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.999742][T12185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.739915][ C0] net_ratelimit: 149 callbacks suppressed [ 963.419765][ T31] audit: type=1400 audit(1700000573.385:4552): avc: denied { write } for pid=15872 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 963.491827][ T5610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 963.499489][ T5610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 963.502135][ T5610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 963.505622][ T5610] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 963.508802][ T5610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 965.169525][ T31] audit: type=1400 audit(1700000575.135:4553): avc: denied { write } for pid=15893 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 965.582187][T11555] Bluetooth: hci2: command tx timeout [ 966.145868][ T31] audit: type=1400 audit(1700000576.105:4554): avc: denied { write } for pid=15899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 966.191588][T12185] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.323880][ T31] audit: type=1400 audit(1700000576.285:4555): avc: denied { write } for pid=15916 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 966.358019][T15888] lo speed is unknown, defaulting to 1000 [ 966.634273][T12185] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.854711][T12185] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.867495][ C1] net_ratelimit: 132 callbacks suppressed [ 967.231943][T12185] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.791930][T11555] Bluetooth: hci2: command tx timeout [ 969.191079][ T5610] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 969.193746][ T5610] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 969.194717][ T5610] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 969.196031][ T5610] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 969.197024][ T5610] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 970.856861][T11555] Bluetooth: hci2: command tx timeout [ 970.920794][T12185] bridge_slave_1: left allmulticast mode [ 970.920811][T12185] bridge_slave_1: left promiscuous mode [ 970.920986][T12185] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.001809][T12185] bridge_slave_0: left allmulticast mode [ 971.001821][T12185] bridge_slave_0: left promiscuous mode [ 971.005518][T12185] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.256624][T11555] Bluetooth: hci7: command tx timeout [ 971.976564][ C0] net_ratelimit: 46 callbacks suppressed [ 972.307265][ T31] audit: type=1400 audit(1700000582.276:4556): avc: denied { write } for pid=15940 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 972.648517][ T31] audit: type=1400 audit(1700000582.616:4557): avc: denied { write } for pid=15955 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 972.819213][T15958] FAULT_INJECTION: forcing a failure. [ 972.819213][T15958] name failslab, interval 1, probability 0, space 0, times 0 [ 972.819243][T15958] CPU: 1 UID: 0 PID: 15958 Comm: syz.1.2648 Tainted: G L syzkaller #0 PREEMPT(full) [ 972.819267][T15958] Tainted: [L]=SOFTLOCKUP [ 972.819274][T15958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 972.819284][T15958] Call Trace: [ 972.819291][T15958] [ 972.819298][T15958] dump_stack_lvl+0x100/0x190 [ 972.819329][T15958] should_fail_ex.cold+0x5/0xa [ 972.819355][T15958] should_failslab+0xc2/0x120 [ 972.819379][T15958] __kmalloc_noprof+0xfc/0x840 [ 972.819399][T15958] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 972.819419][T15958] ? fuse_readdir_uncached+0x215/0x1c00 [ 972.819457][T15958] fuse_readdir_uncached+0x215/0x1c00 [ 972.819476][T15958] ? arch_stack_walk+0xa6/0xf0 [ 972.819506][T15958] ? __lock_acquire+0x5c0/0x1f40 [ 972.819526][T15958] ? _parse_integer_limit+0x1ac/0x220 [ 972.819553][T15958] ? __pfx_fuse_readdir_uncached+0x10/0x10 [ 972.819573][T15958] ? _kstrtoull+0x144/0x200 [ 972.819597][T15958] ? __pfx__kstrtoull+0x10/0x10 [ 972.819620][T15958] ? look_up_lock_class+0x64/0x120 [ 972.819641][T15958] ? register_lock_class+0x3f/0x7b0 [ 972.819661][T15958] ? __might_fault+0xc5/0x140 [ 972.819684][T15958] ? __lock_acquire+0x5c0/0x1f40 [ 972.819703][T15958] ? look_up_lock_class+0x55/0x120 [ 972.819721][T15958] ? register_lock_class+0x3f/0x7b0 [ 972.819761][T15958] ? lock_acquire+0x1d1/0x380 [ 972.819779][T15958] ? iterate_dir+0x18b/0xae0 ** 19 printk messages dropped ** [ 972.820192][T15958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 ** 259 printk messages dropped ** ** 22 printk messages dropped ** ** 105 printk messages dropped ** ** 5 printk messages dropped ** [ 972.946656][T11555] Bluetooth: hci2: command tx timeout [ 973.034491][T12185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 973.104734][T12185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 973.111086][T12185] bond0 (unregistering): Released all slaves [ 973.289514][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1 [ 973.340525][T11555] Bluetooth: hci7: command tx timeout [ 974.327494][T11555] Bluetooth: hci6: command 0x0406 tx timeout ** 444 printk messages dropped ** [ 975.037779][T11555] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 975.043286][T11555] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 975.062715][T11555] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 975.064114][T11555] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 975.064981][T11555] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 975.446416][ T5610] Bluetooth: hci7: command tx timeout [ 976.609879][T15888] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.609981][T15888] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.610149][T15888] bridge_slave_0: entered allmulticast mode [ 976.644366][T15888] bridge_slave_0: entered promiscuous mode [ 976.784332][T15888] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.784416][T15888] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.784580][T15888] bridge_slave_1: entered allmulticast mode [ 976.841524][T15888] bridge_slave_1: entered promiscuous mode [ 976.858465][T15925] lo speed is unknown, defaulting to 1000 [ 977.176489][ T5610] Bluetooth: hci8: command tx timeout [ 977.340411][ C1] net_ratelimit: 57 callbacks suppressed [ 977.497357][ T5610] Bluetooth: hci7: command tx timeout [ 977.956416][ T5720] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 978.136400][ T5720] usb 6-1: unable to get BOS descriptor or descriptor too short [ 978.136530][ T5720] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 978.160319][ T5720] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 978.160406][ T5720] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 978.160589][ T5720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 978.160631][ T5720] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 978.241292][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.241390][ T5720] usb 6-1: Product: syz [ 978.241420][ T5720] usb 6-1: Manufacturer: syz [ 978.241551][ T5720] usb 6-1: SerialNumber: syz [ 978.303782][ T5720] usb 6-1: config 0 descriptor?? [ 978.312176][T15993] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 978.349945][ C1] usb 6-1: NFC: Urb failure (status -71) [ 978.383081][ T5720] usb 6-1: NFC: Unable to get FW version [ 978.398368][ T5720] pn533_usb 6-1:0.0: probe with driver pn533_usb failed with error -90 [ 978.570549][ T5610] Bluetooth: latency 65520 > 499 [ 979.030285][T12185] hsr_slave_0: left promiscuous mode [ 979.033083][T12185] hsr_slave_1: left promiscuous mode [ 979.034619][T12185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 979.052732][T12185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 979.093758][T12185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 979.093789][T12185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 979.256211][ T5610] Bluetooth: hci8: command tx timeout [ 979.323928][ T31] audit: type=1400 audit(1700000589.286:4558): avc: denied { write } for pid=15984 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 979.501987][ T31] audit: type=1400 audit(1700000589.466:4559): avc: denied { write } for pid=16013 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 979.669860][T12185] veth1_macvtap: left promiscuous mode [ 979.669904][T12185] veth0_macvtap: left promiscuous mode [ 979.669983][T12185] veth1_vlan: left promiscuous mode [ 979.670049][T12185] veth0_vlan: left promiscuous mode [ 980.522872][ T5720] usb 6-1: USB disconnect, device number 8 [ 980.522891][ T5720] usb 6-1: unregistering device [ 980.522906][ T5720] usb 6-1: unregistering interface 6-1:0.0 [ 980.522920][ T5720] device: 'ep_04': device_unregister [ 980.522969][ T5720] kernfs runtime_status: removing ** replaying previous printk message ** [ 980.522969][ T5720] kernfs runtime_status: removing [ 980.523037][ T5720] kernfs control: removing [ 980.523126][ T5720] kernfs runtime_suspended_time: removing [ 980.525532][T15993] kernfs module: removing [ 980.525598][T15993] kernfs gadget:raw-gadget.1: removing [ 980.525644][T15993] kobject: 'raw-gadget.1' (ffff888037b99400): kobject_cleanup, parent ffff888024287450 [ 980.525662][T15993] kobject: 'raw-gadget.1' (ffff888037b99400): auto cleanup kobject_del [ 980.525674][T15993] kobject: 'raw-gadget.1' (ffff888037b99400): auto cleanup 'remove' event [ 980.525687][T15993] kobject: 'raw-gadget.1' (ffff888037b99400): kobject_uevent_env [ 980.525723][T15993] kobject: 'raw-gadget.1' (ffff888037b99400): fill_kobj_path: path = '/bus/gadget/drivers/raw-gadget.1' [ 980.525855][T15993] kernfs raw-gadget.1: removing [ 980.525880][T15993] kobject: 'raw-gadget.1' (ffff888037b99400): calling ktype release [ 980.525893][T15993] driver: 'raw-gadget.1': driver_release [ 980.525914][T15993] kobject: 'raw-gadget.1': free name [ 980.527202][ T5720] kernfs runtime_active_time: removing [ 980.527253][ T5720] kernfs autosuspend_delay_ms: removing [ 980.527318][ T5720] kernfs power: removing [ 980.527365][ T5720] kernfs uevent: removing [ 980.527411][ T5720] kernfs bLength: removing [ 980.527450][ T5720] kernfs bEndpointAddress: removing [ 980.527488][ T5720] kernfs bmAttributes: removing [ 980.527536][ T5720] kernfs bInterval: removing [ 980.527572][ T5720] kernfs wMaxPacketSize: removing [ 980.527608][ T5720] kernfs interval: removing [ 980.527644][ T5720] kernfs type: removing [ 980.527679][ T5720] kernfs direction: removing [ 980.527711][ T5720] PM: Removing info for No Bus:ep_04 [ 980.527731][ T5720] kobject: 'ep_04' (ffff88805819b010): kobject_uevent_env [ 980.527744][ T5720] kobject: 'ep_04' (ffff88805819b010): kobject_uevent_env: filter function caused the event to drop! [ 980.527762][ T5720] kernfs ep_04: removing [ 980.527797][ T5720] kobject: 'ep_04' (ffff88805819b010): kobject_cleanup, parent 0000000000000000 [ 980.527814][ T5720] kobject: 'ep_04' (ffff88805819b010): calling ktype release [ 980.527846][ T5720] kobject: 'ep_04': free name [ 980.527865][ T5720] device: 'ep_88': device_unregister [ 980.527911][ T5720] kernfs runtime_status: removing [ 980.527949][ T5720] kernfs control: removing [ 980.527986][ T5720] kernfs runtime_suspended_time: removing [ 980.528025][ T5720] kernfs runtime_active_time: removing [ 980.528062][ T5720] kernfs autosuspend_delay_ms: removing [ 980.528124][ T5720] kernfs power: removing [ 980.528163][ T5720] kernfs uevent: removing [ 980.528206][ T5720] kernfs bLength: removing [ 980.528243][ T5720] kernfs bEndpointAddress: removing [ 980.528279][ T5720] kernfs bmAttributes: removing [ 980.528315][ T5720] kernfs bInterval: removing [ 980.528350][ T5720] kernfs wMaxPacketSize: removing [ 980.528392][ T5720] kernfs interval: removing [ 980.528428][ T5720] kernfs type: removing [ 980.528464][ T5720] kernfs direction: removing [ 980.528496][ T5720] PM: Removing info for No Bus:ep_88 [ 980.528510][ T5720] kobject: 'ep_88' (ffff88808184e010): kobject_uevent_env [ 980.528523][ T5720] kobject: 'ep_88' (ffff88808184e010): kobject_uevent_env: filter function caused the event to drop! [ 980.528543][ T5720] kernfs ep_88: removing [ 980.528576][ T5720] kobject: 'ep_88' (ffff88808184e010): kobject_cleanup, parent 0000000000000000 [ 980.528592][ T5720] kobject: 'ep_88' (ffff88808184e010): calling ktype release [ 980.528623][ T5720] kobject: 'ep_88': free name [ 980.529196][T12185] veth1_virt_wifi (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 980.529220][T12185] net veth1_virt_wifi: siw: event 18 [ 980.529312][T14672] cb->arg bucket: 993702, t ffffc9001d400000 n 0000000000000000 [ 980.529328][T14672] cb->arg bucket: 993703, t ffffc9001d400000 n 0000000000000000 [ 980.529340][T14672] cb->arg bucket: 993704, t ffffc9001d400000 n 0000000000000000 [ 980.529353][T14672] cb->arg bucket: 993705, t ffffc9001d400000 n 0000000000000000 [ 980.529371][T14672] cb->arg bucket: 993706, t ffffc9001d400000 n 0000000000000000 [ 980.529384][T14672] cb->arg bucket: 993707, t ffffc9001d400000 n 0000000000000000 [ 980.529396][T14672] cb->arg bucket: 993708, t ffffc9001d400000 n 0000000000000000 [ 980.529409][T14672] cb->arg bucket: 993709, t ffffc9001d400000 n 0000000000000000 [ 980.529421][T14672] cb->arg bucket: 993710, t ffffc9001d400000 n 0000000000000000 [ 980.529434][T14672] cb->arg bucket: 993711, t ffffc9001d400000 n 0000000000000000 [ 980.529446][T14672] cb->arg bucket: 993712, t ffffc9001d400000 n 0000000000000000 [ 980.529459][T14672] cb->arg bucket: 993713, t ffffc9001d400000 n 0000000000000000 [ 980.529471][T14672] cb->arg bucket: 993714, t ffffc9001d400000 n 0000000000000000 [ 980.529484][T14672] cb->arg bucket: 993715, t ffffc9001d400000 n 0000000000000000 [ 980.529496][T14672] cb->arg bucket: 993716, t ffffc9001d400000 n 0000000000000000 [ 980.529509][T14672] cb->arg bucket: 993717, t ffffc9001d400000 n 0000000000000000 [ 980.529522][T14672] cb->arg bucket: 993718, t ffffc9001d400000 n 0000000000000000 [ 980.529534][T14672] cb->arg bucket: 993719, t ffffc9001d400000 n 0000000000000000 [ 980.529547][T14672] cb->arg bucket: 993720, t ffffc9001d400000 n 0000000000000000 [ 980.529559][T14672] cb->arg bucket: 993721, t ffffc9001d400000 n 0000000000000000 [ 980.529572][T14672] cb->arg bucket: 993722, t ffffc9001d400000 n 0000000000000000 [ 980.529584][T14672] cb->arg bucket: 993723, t ffffc9001d400000 n 0000000000000000 [ 980.529597][T14672] cb->arg bucket: 993724, t ffffc9001d400000 n 0000000000000000 [ 980.529610][T14672] cb->arg bucket: 993725, t ffffc9001d400000 n 0000000000000000 [ 980.529622][T14672] cb->arg bucket: 993726, t ffffc9001d400000 n 0000000000000000 [ 980.529635][T14672] cb->arg bucket: 993727, t ffffc9001d400000 n 0000000000000000 [ 980.529647][T14672] cb->arg bucket: 993728, t ffffc9001d400000 n 0000000000000000 [ 980.529660][T14672] cb->arg bucket: 993729, t ffffc9001d400000 n 0000000000000000 [ 980.529672][T14672] cb->arg bucket: 993730, t ffffc9001d400000 n 0000000000000000 [ 980.529685][T14672] cb->arg bucket: 993731, t ffffc9001d400000 n 0000000000000000 [ 980.529698][T14672] cb->arg bucket: 993732, t ffffc9001d400000 n 0000000000000000 [ 980.529710][T14672] cb->arg bucket: 993733, t ffffc9001d400000 n 0000000000000000 [ 980.529723][T14672] cb->arg bucket: 993734, t ffffc9001d400000 n 0000000000000000 [ 980.529735][T14672] cb->arg bucket: 993735, t ffffc9001d400000 n 0000000000000000 [ 980.529748][T14672] cb->arg bucket: 993736, t ffffc9001d400000 n 0000000000000000 [ 980.529761][T14672] cb->arg bucket: 993737, t ffffc9001d400000 n 0000000000000000 [ 980.529773][T14672] cb->arg bucket: 993738, t ffffc9001d400000 n 0000000000000000 [ 980.529786][T14672] cb->arg bucket: 993739, t ffffc9001d400000 n 0000000000000000 [ 980.529798][T14672] cb->arg bucket: 993740, t ffffc9001d400000 n 0000000000000000 [ 980.529811][T14672] cb->arg bucket: 993741, t ffffc9001d400000 n 0000000000000000 [ 980.529824][T14672] cb->arg bucket: 993742, t ffffc9001d400000 n 0000000000000000 [ 980.529837][T14672] cb->arg bucket: 993743, t ffffc9001d400000 n 0000000000000000 [ 980.529849][T14672] cb->arg bucket: 993744, t ffffc9001d400000 n 0000000000000000 [ 980.529862][T14672] cb->arg bucket: 993745, t ffffc9001d400000 n 0000000000000000 [ 980.529875][T14672] cb->arg bucket: 993746, t ffffc9001d400000 n 0000000000000000 [ 980.529887][T14672] cb->arg bucket: 993747, t ffffc9001d400000 n 0000000000000000 [ 980.529900][T14672] cb->arg bucket: 993748, t ffffc9001d400000 n 0000000000000000 [ 980.529912][T14672] cb->arg bucket: 993749, t ffffc9001d400000 n 0000000000000000 [ 980.529925][T14672] cb->arg bucket: 993750, t ffffc9001d400000 n 0000000000000000 [ 980.529937][T14672] cb->arg bucket: 993751, t ffffc9001d400000 n 0000000000000000 [ 980.529950][T14672] cb->arg bucket: 993752, t ffffc9001d400000 n 0000000000000000 [ 980.529962][T14672] cb->arg bucket: 993753, t ffffc9001d400000 n 0000000000000000 [ 980.529975][T14672] cb->arg bucket: 993754, t ffffc9001d400000 n 0000000000000000 [ 980.529987][T14672] cb->arg bucket: 993755, t ffffc9001d400000 n 0000000000000000 [ 980.530000][T14672] cb->arg bucket: 993756, t ffffc9001d400000 n 0000000000000000 [ 980.530012][T14672] cb->arg bucket: 993757, t ffffc9001d400000 n 0000000000000000 [ 980.530025][T14672] cb->arg bucket: 993758, t ffffc9001d400000 n 0000000000000000 [ 980.530038][T14672] cb->arg bucket: 993759, t ffffc9001d400000 n 0000000000000000 [ 980.530050][T14672] cb->arg bucket: 993760, t ffffc9001d400000 n 0000000000000000 [ 980.530063][T14672] cb->arg bucket: 993761, t ffffc9001d400000 n 0000000000000000 [ 980.530076][T14672] cb->arg bucket: 993762, t ffffc9001d400000 n 0000000000000000 [ 980.530089][T14672] cb->arg bucket: 993763, t ffffc9001d400000 n 0000000000000000 [ 980.530101][T14672] cb->arg bucket: 993764, t ffffc9001d400000 n 0000000000000000 [ 980.530114][T14672] cb->arg bucket: 993765, t ffffc9001d400000 n 0000000000000000 [ 980.530126][T14672] cb->arg bucket: 993766, t ffffc9001d400000 n 0000000000000000 [ 980.530139][T14672] cb->arg bucket: 993767, t ffffc9001d400000 n 0000000000000000 [ 980.530151][T14672] cb->arg bucket: 993768, t ffffc9001d400000 n 0000000000000000 [ 980.530164][T14672] cb->arg bucket: 993769, t ffffc9001d400000 n 0000000000000000 [ 980.530176][T14672] cb->arg bucket: 993770, t ffffc9001d400000 n 0000000000000000 [ 980.530189][T14672] cb->arg bucket: 993771, t ffffc9001d400000 n 0000000000000000 [ 980.530202][T14672] cb->arg bucket: 993772, t ffffc9001d400000 n 0000000000000000 [ 980.530214][T14672] cb->arg bucket: 993773, t ffffc9001d400000 n 0000000000000000 [ 980.530227][T14672] cb->arg bucket: 993774, t ffffc9001d400000 n 0000000000000000 [ 980.530241][T14672] cb->arg bucket: 993775, t ffffc9001d400000 n 0000000000000000 [ 980.530253][T14672] cb->arg bucket: 993776, t ffffc9001d400000 n 0000000000000000 [ 980.530266][T14672] cb->arg bucket: 993777, t ffffc9001d400000 n 0000000000000000 [ 980.530278][T14672] cb->arg bucket: 993778, t ffffc9001d400000 n 0000000000000000 [ 980.530291][T14672] cb->arg bucket: 993779, t ffffc9001d400000 n 0000000000000000 [ 980.530303][T14672] cb->arg bucket: 993780, t ffffc9001d400000 n 0000000000000000 [ 980.530316][T14672] cb->arg bucket: 993781, t ffffc9001d400000 n 0000000000000000 [ 980.530328][T14672] cb->arg bucket: 993782, t ffffc9001d400000 n 0000000000000000 [ 980.530340][T14672] cb->arg bucket: 993783, t ffffc9001d400000 n 0000000000000000 [ 980.530353][T14672] cb->arg bucket: 993784, t ffffc9001d400000 n 0000000000000000 [ 980.530370][T14672] cb->arg bucket: 993785, t ffffc9001d400000 n 0000000000000000 [ 980.530382][T14672] cb->arg bucket: 993786, t ffffc9001d400000 n 0000000000000000 [ 980.530395][T14672] cb->arg bucket: 993787, t ffffc9001d400000 n 0000000000000000 [ 980.530407][T14672] cb->arg bucket: 993788, t ffffc9001d400000 n 0000000000000000 [ 980.530420][T14672] cb->arg bucket: 993789, t ffffc9001d400000 n 0000000000000000 [ 980.530433][T14672] cb->arg bucket: 993790, t ffffc9001d400000 n 0000000000000000 [ 980.530445][T14672] cb->arg bucket: 993791, t ffffc9001d400000 n 0000000000000000 [ 980.530458][T14672] cb->arg bucket: 993792, t ffffc9001d400000 n 0000000000000000 [ 980.530470][T14672] cb->arg bucket: 993793, t ffffc9001d400000 n 0000000000000000 [ 980.530483][T14672] cb->arg bucket: 993794, t ffffc9001d400000 n 0000000000000000 [ 980.530495][T14672] cb->arg bucket: 993795, t ffffc9001d400000 n 0000000000000000 [ 980.530508][T14672] cb->arg bucket: 993796, t ffffc9001d400000 n 0000000000000000 [ 980.530520][T14672] cb->arg bucket: 993797, t ffffc9001d400000 n 0000000000000000 [ 980.530533][T14672] cb->arg bucket: 993798, t ffffc9001d400000 n 0000000000000000 [ 980.530545][T14672] cb->arg bucket: 993799, t ffffc9001d400000 n 0000000000000000 [ 980.530558][T14672] cb->arg bucket: 993800, t ffffc9001d400000 n 0000000000000000 [ 980.530570][T14672] cb->arg bucket: 993801, t ffffc9001d400000 n 0000000000000000 [ 980.530583][T14672] cb->arg bucket: 993802, t ffffc9001d400000 n 0000000000000000 [ 980.530605][T14672] cb->arg bucket: 993803, t ffffc9001d400000 n 0000000000000000 [ 980.530618][T14672] cb->arg bucket: 993804, t ffffc9001d400000 n 0000000000000000 [ 980.530631][T14672] cb->arg bucket: 993805, t ffffc9001d400000 n 0000000000000000 [ 980.530643][T14672] cb->arg bucket: 993806, t ffffc9001d400000 n 0000000000000000 [ 980.530656][T14672] cb->arg bucket: 993807, t ffffc9001d400000 n 0000000000000000 [ 980.530668][T14672] cb->arg bucket: 993808, t ffffc9001d400000 n 0000000000000000 [ 980.530681][T14672] cb->arg bucket: 993809, t ffffc9001d400000 n 0000000000000000 [ 980.530694][T14672] cb->arg bucket: 993810, t ffffc9001d400000 n 0000000000000000 [ 980.530706][T14672] cb->arg bucket: 993811, t ffffc9001d400000 n 0000000000000000 [ 980.530719][T14672] cb->arg bucket: 993812, t ffffc9001d400000 n 0000000000000000 [ 980.530732][T14672] cb->arg bucket: 993813, t ffffc9001d400000 n 0000000000000000 [ 980.530744][T14672] cb->arg bucket: 993814, t ffffc9001d400000 n 0000000000000000 [ 980.530757][T14672] cb->arg bucket: 993815, t ffffc9001d400000 n 0000000000000000 [ 980.530769][T14672] cb->arg bucket: 993816, t ffffc9001d400000 n 0000000000000000 [ 980.534012][T14672] cb->arg bucket: 993817, t ffffc9001d400000 n 0000000000000000 [ 980.534030][T14672] cb->arg bucket: 993818, t ffffc9001d400000 n 0000000000000000 [ 980.534043][T14672] cb->arg bucket: 993819, t ffffc9001d400000 n 0000000000000000 [ 980.534058][T14672] cb->arg bucket: 993820, t ffffc9001d400000 n 0000000000000000 [ 980.534073][T14672] cb->arg bucket: 993821, t ffffc9001d400000 n 0000000000000000 [ 980.534088][T14672] cb->arg bucket: 993822, t ffffc9001d400000 n 0000000000000000 [ 980.534102][T14672] cb->arg bucket: 993823, t ffffc9001d400000 n 0000000000000000 [ 980.534118][T14672] cb->arg bucket: 993824, t ffffc9001d400000 n 0000000000000000 [ 980.534132][T14672] cb->arg bucket: 993825, t ffffc9001d400000 n 0000000000000000 [ 980.534147][T14672] cb->arg bucket: 993826, t ffffc9001d400000 n 0000000000000000 [ 980.534161][T14672] cb->arg bucket: 993827, t ffffc9001d400000 n 0000000000000000 [ 980.534176][T14672] cb->arg bucket: 993828, t ffffc9001d400000 n 0000000000000000 [ 980.534190][T14672] cb->arg bucket: 993829, t ffffc9001d400000 n 0000000000000000 [ 980.534204][T14672] cb->arg bucket: 993830, t ffffc9001d400000 n 0000000000000000 [ 980.534219][T14672] cb->arg bucket: 993831, t ffffc9001d400000 n 0000000000000000 [ 980.534234][T14672] cb->arg bucket: 993832, t ffffc9001d400000 n 0000000000000000 [ 980.534248][T14672] cb->arg bucket: 993833, t ffffc9001d400000 n 0000000000000000 [ 980.534263][T14672] cb->arg bucket: 993834, t ffffc9001d400000 n 0000000000000000 [ 980.534278][T14672] cb->arg bucket: 993835, t ffffc9001d400000 n 0000000000000000 [ 980.534293][T14672] cb->arg bucket: 993836, t ffffc9001d400000 n 0000000000000000 [ 980.534308][T14672] cb->arg bucket: 993837, t ffffc9001d400000 n 0000000000000000 [ 980.534323][T14672] cb->arg bucket: 993838, t ffffc9001d400000 n 0000000000000000 [ 980.534338][T14672] cb->arg bucket: 993839, t ffffc9001d400000 n 0000000000000000 [ 980.534352][T14672] cb->arg bucket: 993840, t ffffc9001d400000 n 0000000000000000 [ 980.534373][T14672] cb->arg bucket: 993841, t ffffc9001d400000 n 0000000000000000 [ 980.534388][T14672] cb->arg bucket: 993842, t ffffc9001d400000 n 0000000000000000 [ 980.534402][T14672] cb->arg bucket: 993843, t ffffc9001d400000 n 0000000000000000 [ 980.534416][T14672] cb->arg bucket: 993844, t ffffc9001d400000 n 0000000000000000 [ 980.534431][T14672] cb->arg bucket: 993845, t ffffc9001d400000 n 0000000000000000 [ 980.534445][T14672] cb->arg bucket: 993846, t ffffc9001d400000 n 0000000000000000 [ 980.534459][T14672] cb->arg bucket: 993847, t ffffc9001d400000 n 0000000000000000 [ 980.534474][T14672] cb->arg bucket: 993848, t ffffc9001d400000 n 0000000000000000 [ 980.534488][T14672] cb->arg bucket: 993849, t ffffc9001d400000 n 0000000000000000 [ 980.534503][T14672] cb->arg bucket: 993850, t ffffc9001d400000 n 0000000000000000 [ 980.534517][T14672] cb->arg bucket: 993851, t ffffc9001d400000 n 0000000000000000 [ 980.534532][T14672] cb->arg bucket: 993852, t ffffc9001d400000 n 0000000000000000 [ 980.534547][T14672] cb->arg bucket: 993853, t ffffc9001d400000 n 0000000000000000 [ 980.534561][T14672] cb->arg bucket: 993854, t ffffc9001d400000 n 0000000000000000 [ 980.534576][T14672] cb->arg bucket: 993855, t ffffc9001d400000 n 0000000000000000 [ 980.534590][T14672] cb->arg bucket: 993856, t ffffc9001d400000 n 0000000000000000 [ 980.534603][T14672] cb->arg bucket: 993857, t ffffc9001d400000 n 0000000000000000 [ 980.534616][T14672] cb->arg bucket: 993858, t ffffc9001d400000 n 0000000000000000 [ 980.534630][T14672] cb->arg bucket: 993859, t ffffc9001d400000 n 0000000000000000 [ 980.534642][T14672] cb->arg bucket: 993860, t ffffc9001d400000 n 0000000000000000 [ 980.535039][T15993] sctp: sctp_close: sk:ffff88804fcaf1c0, timeout:0 [ 980.535064][T15993] sctp: sctp_destroy_sock: sk:ffff88804fcaf1c0 [ 980.535471][T14672] cb->arg bucket: 993861, t ffffc9001d400000 n 0000000000000000 [ 980.535487][T14672] cb->arg bucket: 993862, t ffffc9001d400000 n 0000000000000000 [ 980.535500][T14672] cb->arg bucket: 993863, t ffffc9001d400000 n 0000000000000000 [ 980.535513][T14672] cb->arg bucket: 993864, t ffffc9001d400000 n 0000000000000000 [ 980.535527][T14672] cb->arg bucket: 993865, t ffffc9001d400000 n 0000000000000000 [ 980.535541][T14672] cb->arg bucket: 993866, t ffffc9001d400000 n 0000000000000000 [ 980.535553][T14672] cb->arg bucket: 993867, t ffffc9001d400000 n 0000000000000000 [ 980.535566][T14672] cb->arg bucket: 993868, t ffffc9001d400000 n 0000000000000000 [ 980.535580][T14672] cb->arg bucket: 993869, t ffffc9001d400000 n 0000000000000000 [ 980.535593][T14672] cb->arg bucket: 993870, t ffffc9001d400000 n 0000000000000000 [ 980.535606][T14672] cb->arg bucket: 993871, t ffffc9001d400000 n 0000000000000000 [ 980.535619][T14672] cb->arg bucket: 993872, t ffffc9001d400000 n 0000000000000000 [ 980.535633][T14672] cb->arg bucket: 993873, t ffffc9001d400000 n 0000000000000000 [ 980.535646][T14672] cb->arg bucket: 993874, t ffffc9001d400000 n 0000000000000000 [ 980.535659][T14672] cb->arg bucket: 993875, t ffffc9001d400000 n 0000000000000000 [ 980.535672][T14672] cb->arg bucket: 993876, t ffffc9001d400000 n 0000000000000000 [ 980.535684][T14672] cb->arg bucket: 993877, t ffffc9001d400000 n 0000000000000000 [ 980.535698][T14672] cb->arg bucket: 993878, t ffffc9001d400000 n 0000000000000000 [ 980.535713][T14672] cb->arg bucket: 993879, t ffffc9001d400000 n 0000000000000000 [ 980.535726][T14672] cb->arg bucket: 993880, t ffffc9001d400000 n 0000000000000000 [ 980.535740][T14672] cb->arg bucket: 993881, t ffffc9001d400000 n 0000000000000000 [ 980.535752][T14672] cb->arg bucket: 993882, t ffffc9001d400000 n 0000000000000000 [ 980.535766][T14672] cb->arg bucket: 993883, t ffffc9001d400000 n 0000000000000000 [ 980.535779][T14672] cb->arg bucket: 993884, t ffffc9001d400000 n 0000000000000000 [ 980.535792][T14672] cb->arg bucket: 993885, t ffffc9001d400000 n 0000000000000000 [ 980.535805][T14672] cb->arg bucket: 993886, t ffffc9001d400000 n 0000000000000000 [ 980.535818][T14672] cb->arg bucket: 993887, t ffffc9001d400000 n 0000000000000000 [ 980.535831][T14672] cb->arg bucket: 993888, t ffffc9001d400000 n 0000000000000000 [ 980.535844][T14672] cb->arg bucket: 993889, t ffffc9001d400000 n 0000000000000000 [ 980.535856][T14672] cb->arg bucket: 993890, t ffffc9001d400000 n 0000000000000000 [ 980.535870][T14672] cb->arg bucket: 993891, t ffffc9001d400000 n 0000000000000000 [ 980.535882][T14672] cb->arg bucket: 993892, t ffffc9001d400000 n 0000000000000000 [ 980.535896][T14672] cb->arg bucket: 993893, t ffffc9001d400000 n 0000000000000000 [ 980.535909][T14672] cb->arg bucket: 993894, t ffffc9001d400000 n 0000000000000000 [ 980.535921][T14672] cb->arg bucket: 993895, t ffffc9001d400000 n 0000000000000000 [ 980.535935][T14672] cb->arg bucket: 993896, t ffffc9001d400000 n 0000000000000000 [ 980.535947][T14672] cb->arg bucket: 993897, t ffffc9001d400000 n 0000000000000000 [ 980.535961][T14672] cb->arg bucket: 993898, t ffffc9001d400000 n 0000000000000000 [ 980.535975][T14672] cb->arg bucket: 993899, t ffffc9001d400000 n 0000000000000000 [ 980.536791][ T32] INFO: task syz.2.2425:14826 blocked for more than 143 seconds. [ 980.536810][ T32] Tainted: G L syzkaller #0 [ 980.536821][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 980.536829][ T32] task:syz.2.2425 state:D stack:28312 pid:14826 tgid:14823 ppid:5607 task_flags:0x400140 flags:0x00080002 [ 980.536887][ T32] Call Trace: [ 980.536894][ T32] [ 980.536906][ T32] __schedule+0x1259/0x6920 [ 980.536939][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 980.536967][ T32] ? do_raw_spin_lock+0x128/0x260 [ 980.536999][ T32] ? __pfx___schedule+0x10/0x10 [ 980.537024][ T32] ? find_held_lock+0x2b/0x80 [ 980.537052][ T32] ? schedule+0x225/0x2c0 [ 980.537082][ T32] schedule+0xdd/0x2c0 [ 980.537107][ T32] schedule_preempt_disabled+0x13/0x30 [ 980.537135][ T32] __mutex_lock+0xccb/0x1bd0 [ 980.537155][ T32] ? nfnetlink_rcv_msg+0x8ad/0x11e0 [ 980.537178][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 980.537203][ T32] ? net_generic+0x25/0x2a0 [ 980.537231][ T32] ? find_held_lock+0x2b/0x80 [ 980.537258][ T32] ? nfnetlink_rcv_msg+0x87b/0x11e0 [ 980.537274][ T32] ? nfnetlink_rcv_msg+0x87b/0x11e0 [ 980.537296][ T32] ? nfnetlink_rcv_msg+0x8ad/0x11e0 [ 980.537312][ T32] nfnetlink_rcv_msg+0x8ad/0x11e0 [ 980.537336][ T32] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 980.537352][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 980.537397][ T32] ? avc_has_perm_noaudit+0x145/0x470 [ 980.537429][ T32] netlink_rcv_skb+0x159/0x420 [ 980.537450][ T32] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 980.537468][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 980.537499][ T32] ? ns_capable+0xd2/0xf0 [ 980.537519][ T32] nfnetlink_rcv+0x1b3/0x440 [ 980.537543][ T32] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 980.537567][ T32] ? netlink_deliver_tap+0x1ae/0xcc0 [ 980.537591][ T32] netlink_unicast+0x585/0x850 [ 980.537615][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 980.537642][ T32] netlink_sendmsg+0x8b0/0xda0 [ 980.537667][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 980.537690][ T32] ? selinux_socket_sendmsg+0x198/0x2f0 [ 980.537713][ T32] ____sys_sendmsg+0xa4d/0xbe0 [ 980.537730][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 980.537752][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 980.537780][ T32] ___sys_sendmsg+0x190/0x1e0 [ 980.537799][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 980.537818][ T32] ? futex_wait+0x11e/0x370 [ 980.537855][ T32] ? find_held_lock+0x2b/0x80 [ 980.537893][ T32] __sys_sendmsg+0x160/0x210 [ 980.537916][ T32] ? __pfx___sys_sendmsg+0x10/0x10 [ 980.537950][ T32] do_syscall_64+0x123/0x790 [ 980.537970][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.537987][ T32] RIP: 0033:0x7f118999e159 [ 980.538001][ T32] RSP: 002b:00007f118a8d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 980.538017][ T32] RAX: ffffffffffffffda RBX: 00007f1189c25fa0 RCX: 00007f118999e159 [ 980.538028][ T32] RDX: 0000000000048810 RSI: 0000200000000140 RDI: 0000000000000003 [ 980.538039][ T32] RBP: 00007f1189a3506b R08: 0000000000000000 R09: 0000000000000000 [ 980.538048][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 980.538059][ T32] R13: 00007f1189c26038 R14: 00007f1189c25fa0 R15: 00007fff894411d8 [ 980.538082][ T32] [ 980.539736][T12185] kernfs rps_cpus: removing [ 980.539899][ T5720] kernfs power: removing [ 980.539949][ T5720] kernfs uevent: removing [ 980.539991][ T5720] kernfs bInterfaceNumber: removing [ 980.540032][ T5720] kernfs bAlternateSetting: removing [ 980.540071][ T5720] kernfs bNumEndpoints: removing [ 980.540108][ T5720] kernfs bInterfaceClass: removing [ 980.540147][ T5720] kernfs bInterfaceSubClass: removing [ 980.540185][ T5720] kernfs bInterfaceProtocol: removing [ 980.540223][ T5720] kernfs modalias: removing [ 980.540260][ T5720] kernfs supports_autosuspend: removing [ 980.540297][ T5720] kernfs authorized: removing [ 980.540367][ T5720] kernfs subsystem: removing [ 980.540419][ T5720] kernfs 6-1:0.0: removing [ 980.540454][ T5720] bus: 'usb': remove device 6-1:0.0 [ 980.540466][ T5720] PM: Removing info for usb:6-1:0.0 [ 980.540489][ T5720] kobject: '6-1:0.0' (ffff888058199078): kobject_uevent_env [ 980.540523][ T5720] kobject: '6-1:0.0' (ffff888058199078): fill_kobj_path: path = '/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0' [ 980.540675][ T5720] kernfs 6-1:0.0: removing [ 980.540700][ T5720] kobject: '6-1:0.0' (ffff888058199078): kobject_cleanup, parent 0000000000000000 [ 980.540716][ T5720] kobject: '6-1:0.0' (ffff888058199078): calling ktype release [ 980.540748][ T5720] kobject: '6-1:0.0': free name [ 980.540772][ T5720] usb 6-1: usb_disable_device nuking all URBs [ 980.540798][ T5720] kernfs port: removing [ 980.540836][ T5720] kernfs device: removing [ 980.540867][ T5720] device: 'ep_00': device_unregister [ 980.540916][ T5720] kernfs runtime_status: removing [ 980.540954][ T5720] kernfs control: removing [ 980.540991][ T5720] kernfs runtime_suspended_time: removing [ 980.541031][ T5720] kernfs runtime_active_time: removing [ 980.541067][ T5720] kernfs autosuspend_delay_ms: removing [ 980.541142][ T5720] kernfs power: removing [ 980.541180][ T5720] kernfs uevent: removing [ 980.541229][ T5720] kernfs bLength: removing [ 980.541266][ T5720] kernfs bEndpointAddress: removing [ 980.541607][T14672] cb->arg bucket: 993900, t ffffc9001d400000 n 0000000000000000 [ 980.541622][T14672] cb->arg bucket: 993901, t ffffc9001d400000 n 0000000000000000 [ 980.541635][T14672] cb->arg bucket: 993902, t ffffc9001d400000 n 0000000000000000 [ 980.541647][T14672] cb->arg bucket: 993903, t ffffc9001d400000 n 0000000000000000 [ 980.541660][T14672] cb->arg bucket: 993904, t ffffc9001d400000 n 0000000000000000 [ 980.541673][T14672] cb->arg bucket: 993905, t ffffc9001d400000 n 0000000000000000 [ 980.541685][T14672] cb->arg bucket: 993906, t ffffc9001d400000 n 0000000000000000 [ 980.541698][T14672] cb->arg bucket: 993907, t ffffc9001d400000 n 0000000000000000 [ 980.541710][T14672] cb->arg bucket: 993908, t ffffc9001d400000 n 0000000000000000 [ 980.541723][T14672] cb->arg bucket: 993909, t ffffc9001d400000 n 0000000000000000 [ 980.541735][T14672] cb->arg bucket: 993910, t ffffc9001d400000 n 0000000000000000 [ 980.541748][T14672] cb->arg bucket: 993911, t ffffc9001d400000 n 0000000000000000 [ 980.541760][T14672] cb->arg bucket: 993912, t ffffc9001d400000 n 0000000000000000 [ 980.541773][T14672] cb->arg bucket: 993913, t ffffc9001d400000 n 0000000000000000 [ 980.541785][T14672] cb->arg bucket: 993914, t ffffc9001d400000 n 0000000000000000 [ 980.541798][T14672] cb->arg bucket: 993915, t ffffc9001d400000 n 0000000000000000 [ 980.541811][T14672] cb->arg bucket: 993916, t ffffc9001d400000 n 0000000000000000 [ 980.541823][T14672] cb->arg bucket: 993917, t ffffc9001d400000 n 0000000000000000 [ 980.541835][T14672] cb->arg bucket: 993918, t ffffc9001d400000 n 0000000000000000 [ 980.541848][T14672] cb->arg bucket: 993919, t ffffc9001d400000 n 0000000000000000 [ 980.541860][T14672] cb->arg bucket: 993920, t ffffc9001d400000 n 0000000000000000 [ 980.541873][T14672] cb->arg bucket: 993921, t ffffc9001d400000 n 0000000000000000 [ 980.541885][T14672] cb->arg bucket: 993922, t ffffc9001d400000 n 0000000000000000 [ 980.541898][T14672] cb->arg bucket: 993923, t ffffc9001d400000 n 0000000000000000 [ 980.541910][T14672] cb->arg bucket: 993924, t ffffc9001d400000 n 0000000000000000 [ 980.541923][T14672] cb->arg bucket: 993925, t ffffc9001d400000 n 0000000000000000 [ 980.541935][T14672] cb->arg bucket: 993926, t ffffc9001d400000 n 0000000000000000 [ 980.541948][T14672] cb->arg bucket: 993927, t ffffc9001d400000 n 0000000000000000 [ 980.541961][T14672] cb->arg bucket: 993928, t ffffc9001d400000 n 0000000000000000 [ 980.541973][T14672] cb->arg bucket: 993929, t ffffc9001d400000 n 0000000000000000 [ 980.541986][T14672] cb->arg bucket: 993930, t ffffc9001d400000 n 0000000000000000 [ 980.541998][T14672] cb->arg bucket: 993931, t ffffc9001d400000 n 0000000000000000 [ 980.542011][T14672] cb->arg bucket: 993932, t ffffc9001d400000 n 0000000000000000 [ 980.542023][T14672] cb->arg bucket: 993933, t ffffc9001d400000 n 0000000000000000 [ 980.542036][T14672] cb->arg bucket: 993934, t ffffc9001d400000 n 0000000000000000 [ 980.542048][T14672] cb->arg bucket: 993935, t ffffc9001d400000 n 0000000000000000 [ 980.542061][T14672] cb->arg bucket: 993936, t ffffc9001d400000 n 0000000000000000 [ 980.542074][T14672] cb->arg bucket: 993937, t ffffc9001d400000 n 0000000000000000 [ 980.542087][T14672] cb->arg bucket: 993938, t ffffc9001d400000 n 0000000000000000 [ 980.542099][T14672] cb->arg bucket: 993939, t ffffc9001d400000 n 0000000000000000 [ 980.542112][T14672] cb->arg bucket: 993940, t ffffc9001d400000 n 0000000000000000 [ 980.542124][T14672] cb->arg bucket: 993941, t ffffc9001d400000 n 0000000000000000 [ 980.542137][T14672] cb->arg bucket: 993942, t ffffc9001d400000 n 0000000000000000 [ 980.542150][T14672] cb->arg bucket: 993943, t ffffc9001d400000 n 0000000000000000 [ 980.542162][T14672] cb->arg bucket: 993944, t ffffc9001d400000 n 0000000000000000 [ 980.542175][T14672] cb->arg bucket: 993945, t ffffc9001d400000 n 0000000000000000 [ 980.542188][T14672] cb->arg bucket: 993946, t ffffc9001d400000 n 0000000000000000 [ 980.542201][T14672] cb->arg bucket: 993947, t ffffc9001d400000 n 0000000000000000 [ 980.542216][T14672] cb->arg bucket: 993948, t ffffc9001d400000 n 0000000000000000 [ 980.542230][T14672] cb->arg bucket: 993949, t ffffc9001d400000 n 0000000000000000 [ 980.542244][T14672] cb->arg bucket: 993950, t ffffc9001d400000 n 0000000000000000 [ 980.542259][T14672] cb->arg bucket: 993951, t ffffc9001d400000 n 0000000000000000 [ 980.542274][T14672] cb->arg bucket: 993952, t ffffc9001d400000 n 0000000000000000 [ 980.542288][T14672] cb->arg bucket: 993953, t ffffc9001d400000 n 0000000000000000 [ 980.542303][T14672] cb->arg bucket: 993954, t ffffc9001d400000 n 0000000000000000 [ 980.542317][T14672] cb->arg bucket: 993955, t ffffc9001d400000 n 0000000000000000 [ 980.542332][T14672] cb->arg bucket: 993956, t ffffc9001d400000 n 0000000000000000 [ 980.542347][T14672] cb->arg bucket: 993957, t ffffc9001d400000 n 0000000000000000 [ 980.542366][T14672] cb->arg bucket: 993958, t ffffc9001d400000 n 0000000000000000 [ 980.542381][T14672] cb->arg bucket: 993959, t ffffc9001d400000 n 0000000000000000 [ 980.542395][T14672] cb->arg bucket: 993960, t ffffc9001d400000 n 0000000000000000 [ 980.542409][T14672] cb->arg bucket: 993961, t ffffc9001d400000 n 0000000000000000 [ 980.542424][T14672] cb->arg bucket: 993962, t ffffc9001d400000 n 0000000000000000 [ 980.542438][T14672] cb->arg bucket: 993963, t ffffc9001d400000 n 0000000000000000 [ 980.542452][T14672] cb->arg bucket: 993964, t ffffc9001d400000 n 0000000000000000 [ 980.542466][T14672] cb->arg bucket: 993965, t ffffc9001d400000 n 0000000000000000 [ 980.542481][T14672] cb->arg bucket: 993966, t ffffc9001d400000 n 0000000000000000 [ 980.542495][T14672] cb->arg bucket: 993967, t ffffc9001d400000 n 0000000000000000 [ 980.542509][T14672] cb->arg bucket: 993968, t ffffc9001d400000 n 0000000000000000 [ 980.542524][T14672] cb->arg bucket: 993969, t ffffc9001d400000 n 0000000000000000 [ 980.542538][T14672] cb->arg bucket: 993970, t ffffc9001d400000 n 0000000000000000 [ 980.542553][T14672] cb->arg bucket: 993971, t ffffc9001d400000 n 0000000000000000 [ 980.542567][T14672] cb->arg bucket: 993972, t ffffc9001d400000 n 0000000000000000 [ 980.542581][T14672] cb->arg bucket: 993973, t ffffc9001d400000 n 0000000000000000 [ 980.542595][T14672] cb->arg bucket: 993974, t ffffc9001d400000 n 0000000000000000 [ 980.542608][T14672] cb->arg bucket: 993975, t ffffc9001d400000 n 0000000000000000 [ 980.542622][T14672] cb->arg bucket: 993976, t ffffc9001d400000 n 0000000000000000 [ 980.542635][T14672] cb->arg bucket: 993977, t ffffc9001d400000 n 0000000000000000 [ 980.542647][T14672] cb->arg bucket: 993978, t ffffc9001d400000 n 0000000000000000 [ 980.542661][T14672] cb->arg bucket: 993979, t ffffc9001d400000 n 0000000000000000 [ 980.542673][T14672] cb->arg bucket: 993980, t ffffc9001d400000 n 0000000000000000 [ 980.542687][T14672] cb->arg bucket: 993981, t ffffc9001d400000 n 0000000000000000 [ 980.542700][T14672] cb->arg bucket: 993982, t ffffc9001d400000 n 0000000000000000 [ 980.542714][T14672] cb->arg bucket: 993983, t ffffc9001d400000 n 0000000000000000 [ 980.542727][T14672] cb->arg bucket: 993984, t ffffc9001d400000 n 0000000000000000 [ 980.542741][T14672] cb->arg bucket: 993985, t ffffc9001d400000 n 0000000000000000 [ 980.542755][T14672] cb->arg bucket: 993986, t ffffc9001d400000 n 0000000000000000 [ 980.542779][T14672] cb->arg bucket: 993987, t ffffc9001d400000 n 0000000000000000 [ 980.542792][T14672] cb->arg bucket: 993988, t ffffc9001d400000 n 0000000000000000 [ 980.542805][T14672] cb->arg bucket: 993989, t ffffc9001d400000 n 0000000000000000 [ 980.542819][T14672] cb->arg bucket: 993990, t ffffc9001d400000 n 0000000000000000 [ 980.542832][T14672] cb->arg bucket: 993991, t ffffc9001d400000 n 0000000000000000 [ 980.542846][T14672] cb->arg bucket: 993992, t ffffc9001d400000 n 0000000000000000 [ 980.542860][T14672] cb->arg bucket: 993993, t ffffc9001d400000 n 0000000000000000 [ 980.542873][T14672] cb->arg bucket: 993994, t ffffc9001d400000 n 0000000000000000 [ 980.542888][T14672] cb->arg bucket: 993995, t ffffc9001d400000 n 0000000000000000 [ 980.542902][T14672] cb->arg bucket: 993996, t ffffc9001d400000 n 0000000000000000 [ 980.542916][T14672] cb->arg bucket: 993997, t ffffc9001d400000 n 0000000000000000 [ 980.542930][T14672] cb->arg bucket: 993998, t ffffc9001d400000 n 0000000000000000 [ 980.542944][T14672] cb->arg bucket: 993999, t ffffc9001d400000 n 0000000000000000 [ 980.542958][T14672] cb->arg bucket: 994000, t ffffc9001d400000 n 0000000000000000 [ 980.542972][T14672] cb->arg bucket: 994001, t ffffc9001d400000 n 0000000000000000 [ 980.542986][T14672] cb->arg bucket: 994002, t ffffc9001d400000 n 0000000000000000 [ 980.543000][T14672] cb->arg bucket: 994003, t ffffc9001d400000 n 0000000000000000 [ 980.543014][T14672] cb->arg bucket: 994004, t ffffc9001d400000 n 0000000000000000 [ 980.543028][T14672] cb->arg bucket: 994005, t ffffc9001d400000 n 0000000000000000 [ 980.543042][T14672] cb->arg bucket: 994006, t ffffc9001d400000 n 0000000000000000 [ 980.543057][T14672] cb->arg bucket: 994007, t ffffc9001d400000 n 0000000000000000 [ 980.543452][ T32] [ 980.543452][ T32] Showing all locks held in the system: [ 980.543462][ T32] locks held by kworker/u8:1/13: 4, last CPU#0: [ 980.543477][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 980.543535][ T32] #1: ffffc90000127d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 980.543590][ T32] #2: ffff8880348f7258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 980.543646][ T32] #3: ffff888036fa14e0 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1c7/0xd20 [ 980.543698][ T32] locks held by pr/ttyS0/16: 1, last CPU#0: [ 980.543711][ T32] #0: ffffffff8edd88b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 980.543770][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 980.543783][ T32] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 980.543836][ T32] locks held by kworker/u8:3/50: 3, on CPU#1: [ 980.543848][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 980.543898][ T32] #1: ffffc90000ba7d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 980.543946][ T32] #2: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 980.544020][ T32] locks held by dhcpcd/5267: 1, on CPU#1: [ 980.544032][ T32] #0: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x1bd/0x1f10 [ 980.544078][ T32] locks held by getty/5365: 2, on CPU#1: [ 980.544089][ T32] #0: ffff8880373d40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 980.544129][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 980.544172][ T32] locks held by kworker/1:5/5720: 7, last CPU#1: [ 980.544183][ T32] #0: ffff888024691140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 980.544227][ T32] #1: ffffc900046cfd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 980.544271][ T32] #2: ffff88802b0fb1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 980.544314][ T32] #3: ffff88807ab801d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 980.544363][ T32] #4: ffff88801d2c72a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x49/0x120 [ 980.544403][ T32] #5: ffff88801d2c7180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x51/0x120 [ 980.544441][ T32] #6: ffff88801d2c7210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: __kernfs_remove+0x183/0xb80 [ 980.544481][ T32] locks held by kworker/u8:27/12185: 6, on CPU#1: [ 980.544493][ T32] #0: ffff88801d2e0940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 980.544536][ T32] #1: ffffc9000325fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 980.544581][ T32] #2: ffffffff90cbbf48 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 980.544617][ T32] #3: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x92/0x890 [ 980.544661][ T32] #4: ffff88801d2c72a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x49/0x120 [ 980.544699][ T32] #5: ffff88801d2c7180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x51/0x120 [ 980.544739][ T32] locks held by syz.4.2385/14672: 3, last CPU#1: [ 980.544750][ T32] #0: ffffffff9be09f20 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 [ 980.544788][ T32] #1: ffff8880217f36e8 (nlk_cb_mutex-NETFILTER){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990 [ 980.544829][ T32] #2: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: hash_ipportip4_list+0x2b5/0x14c0 [ 980.544865][ T32] locks held by syz.2.2425/14826: 1, on CPU#1: [ 980.544877][ T32] #0: ffffffff9be09f20 (nfnl_subsys_ipset [ 980.547512][T14672] cb->arg bucket: 994008, t ffffc9001d400000 n 0000000000000000 [ 980.547530][T14672] cb->arg bucket: 994009, t ffffc9001d400000 n 0000000000000000 [ 980.547543][T14672] cb->arg bucket: 994010, t ffffc9001d400000 n 0000000000000000 [ 980.547556][T14672] cb->arg bucket: 994011, t ffffc9001d400000 n 0000000000000000 [ 980.547569][T14672] cb->arg bucket: 994012, t ffffc9001d400000 n 0000000000000000 [ 980.547582][T14672] cb->arg bucket: 994013, t ffffc9001d400000 n 0000000000000000 [ 980.547594][T14672] cb->arg bucket: 994014, t ffffc9001d400000 n 0000000000000000 [ 980.547607][T14672] cb->arg bucket: 994015, t ffffc9001d400000 n 0000000000000000 [ 980.547619][T14672] cb->arg bucket: 994016, t ffffc9001d400000 n 0000000000000000 [ 980.547632][T14672] cb->arg bucket: 994017, t ffffc9001d400000 n 0000000000000000 [ 980.547644][T14672] cb->arg bucket: 994018, t ffffc9001d400000 n 0000000000000000 [ 980.547657][T14672] cb->arg bucket: 994019, t ffffc9001d400000 n 0000000000000000 [ 980.547669][T14672] cb->arg bucket: 994020, t ffffc9001d400000 n 0000000000000000 [ 980.547682][T14672] cb->arg bucket: 994021, t ffffc9001d400000 n 0000000000000000 [ 980.547695][T14672] cb->arg bucket: 994022, t ffffc9001d400000 n 0000000000000000 [ 980.547708][T14672] cb->arg bucket: 994023, t ffffc9001d400000 n 0000000000000000 [ 980.547720][T14672] cb->arg bucket: 994024, t ffffc9001d400000 n 0000000000000000 [ 980.547732][T14672] cb->arg bucket: 994025, t ffffc9001d400000 n 0000000000000000 [ 980.547745][T14672] cb->arg bucket: 994026, t ffffc9001d400000 n 0000000000000000 [ 980.547757][T14672] cb->arg bucket: 994027, t ffffc9001d400000 n 0000000000000000 [ 980.547770][T14672] cb->arg bucket: 994028, t ffffc9001d400000 n 0000000000000000 [ 980.547782][T14672] cb->arg bucket: 994029, t ffffc9001d400000 n 0000000000000000 [ 980.547795][T14672] cb->arg bucket: 994030, t ffffc9001d400000 n 0000000000000000 [ 980.547808][T14672] cb->arg bucket: 994031, t ffffc9001d400000 n 0000000000000000 [ 980.547820][T14672] cb->arg bucket: 994032, t ffffc9001d400000 n 0000000000000000 [ 980.547833][T14672] cb->arg bucket: 994033, t ffffc9001d400000 n 0000000000000000 [ 980.547845][T14672] cb->arg bucket: 994034, t ffffc9001d400000 n 0000000000000000 [ 980.547858][T14672] cb->arg bucket: 994035, t ffffc9001d400000 n 0000000000000000 [ 980.547870][T14672] cb->arg bucket: 994036, t ffffc9001d400000 n 0000000000000000 [ 980.547882][T14672] cb->arg bucket: 994037, t ffffc9001d400000 n 0000000000000000 [ 980.547895][T14672] cb->arg bucket: 994038, t ffffc9001d400000 n 0000000000000000 [ 980.547907][T14672] cb->arg bucket: 994039, t ffffc9001d400000 n 0000000000000000 [ 980.547920][T14672] cb->arg bucket: 994040, t ffffc9001d400000 n 0000000000000000 [ 980.547932][T14672] cb->arg bucket: 994041, t ffffc9001d400000 n 0000000000000000 [ 980.547945][T14672] cb->arg bucket: 994042, t ffffc9001d400000 n 0000000000000000 [ 980.547957][T14672] cb->arg bucket: 994043, t ffffc9001d400000 n 0000000000000000 [ 980.547970][T14672] cb->arg bucket: 994044, t ffffc9001d400000 n 0000000000000000 [ 980.547982][T14672] cb->arg bucket: 994045, t ffffc9001d400000 n 0000000000000000 [ 980.547995][T14672] cb->arg bucket: 994046, t ffffc9001d400000 n 0000000000000000 [ 980.548007][T14672] cb->arg bucket: 994047, t ffffc9001d400000 n 0000000000000000 [ 980.548020][T14672] cb->arg bucket: 994048, t ffffc9001d400000 n 0000000000000000 [ 980.548033][T14672] cb->arg bucket: 994049, t ffffc9001d400000 n 0000000000000000 [ 980.548045][T14672] cb->arg bucket: 994050, t ffffc9001d400000 n 0000000000000000 [ 980.548058][T14672] cb->arg bucket: 994051, t ffffc9001d400000 n 0000000000000000 [ 980.548070][T14672] cb->arg bucket: 994052, t ffffc9001d400000 n 0000000000000000 [ 980.548082][T14672] cb->arg bucket: 994053, t ffffc9001d400000 n 0000000000000000 [ 980.548095][T14672] cb->arg bucket: 994054, t ffffc9001d400000 n 0000000000000000 [ 980.548107][T14672] cb->arg bucket: 994055, t ffffc9001d400000 n 0000000000000000 [ 980.548119][T14672] cb->arg bucket: 994056, t ffffc9001d400000 n 0000000000000000 [ 980.548132][T14672] cb->arg bucket: 994057, t ffffc9001d400000 n 0000000000000000 [ 980.548145][T14672] cb->arg bucket: 994058, t ffffc9001d400000 n 0000000000000000 [ 980.548158][T14672] cb->arg bucket: 994059, t ffffc9001d400000 n 0000000000000000 [ 980.548170][T14672] cb->arg bucket: 994060, t ffffc9001d400000 n 0000000000000000 [ 980.548183][T14672] cb->arg bucket: 994061, t ffffc9001d400000 n 0000000000000000 [ 980.548196][T14672] cb->arg bucket: 994062, t ffffc9001d400000 n 0000000000000000 [ 980.548208][T14672] cb->arg bucket: 994063, t ffffc9001d400000 n 0000000000000000 [ 980.548221][T14672] cb->arg bucket: 994064, t ffffc9001d400000 n 0000000000000000 [ 980.548234][T14672] cb->arg bucket: 994065, t ffffc9001d400000 n 0000000000000000 [ 980.548246][T14672] cb->arg bucket: 994066, t ffffc9001d400000 n 0000000000000000 [ 980.548259][T14672] cb->arg bucket: 994067, t ffffc9001d400000 n 0000000000000000 [ 980.548271][T14672] cb->arg bucket: 994068, t ffffc9001d400000 n 0000000000000000 [ 980.548284][T14672] cb->arg bucket: 994069, t ffffc9001d400000 n 0000000000000000 [ 980.548297][T14672] cb->arg bucket: 994070, t ffffc9001d400000 n 0000000000000000 [ 980.548309][T14672] cb->arg bucket: 994071, t ffffc9001d400000 n 0000000000000000 [ 980.548322][T14672] cb->arg bucket: 994072, t ffffc9001d400000 n 0000000000000000 [ 980.548334][T14672] cb->arg bucket: 994073, t ffffc9001d400000 n 0000000000000000 [ 980.548347][T14672] cb->arg bucket: 994074, t ffffc9001d400000 n 0000000000000000 [ 980.548365][T14672] cb->arg bucket: 994075, t ffffc9001d400000 n 0000000000000000 [ 980.548377][T14672] cb->arg bucket: 994076, t ffffc9001d400000 n 0000000000000000 [ 980.548390][T14672] cb->arg bucket: 994077, t ffffc9001d400000 n 0000000000000000 [ 980.548402][T14672] cb->arg bucket: 994078, t ffffc9001d400000 n 0000000000000000 [ 980.548415][T14672] cb->arg bucket: 994079, t ffffc9001d400000 n 0000000000000000 [ 980.548427][T14672] cb->arg bucket: 994080, t ffffc9001d400000 n 0000000000000000 [ 980.548440][T14672] cb->arg bucket: 994081, t ffffc9001d400000 n 0000000000000000 [ 980.548453][T14672] cb->arg bucket: 994082, t ffffc9001d400000 n 0000000000000000 [ 980.548465][T14672] cb->arg bucket: 994083, t ffffc9001d400000 n 0000000000000000 [ 980.548478][T14672] cb->arg bucket: 994084, t ffffc9001d400000 n 0000000000000000 [ 980.548491][T14672] cb->arg bucket: 994085, t ffffc9001d400000 n 0000000000000000 [ 980.548504][T14672] cb->arg bucket: 994086, t ffffc9001d400000 n 0000000000000000 [ 980.548516][T14672] cb->arg bucket: 994087, t ffffc9001d400000 n 0000000000000000 [ 980.548529][T14672] cb->arg bucket: 994088, t ffffc9001d400000 n 0000000000000000 [ 980.548541][T14672] cb->arg bucket: 994089, t ffffc9001d400000 n 0000000000000000 [ 980.548554][T14672] cb->arg bucket: 994090, t ffffc9001d400000 n 0000000000000000 [ 980.548566][T14672] cb->arg bucket: 994091, t ffffc9001d400000 n 0000000000000000 [ 980.548579][T14672] cb->arg bucket: 994092, t ffffc9001d400000 n 0000000000000000 [ 980.548592][T14672] cb->arg bucket: 994093, t ffffc9001d400000 n 0000000000000000 [ 980.548604][T14672] cb->arg bucket: 994094, t ffffc9001d400000 n 0000000000000000 [ 980.548617][T14672] cb->arg bucket: 994095, t ffffc9001d400000 n 0000000000000000 [ 980.548629][T14672] cb->arg bucket: 994096, t ffffc9001d400000 n 0000000000000000 [ 980.548642][T14672] cb->arg bucket: 994097, t ffffc9001d400000 n 0000000000000000 [ 980.548654][T14672] cb->arg bucket: 994098, t ffffc9001d400000 n 0000000000000000 [ 980.548667][T14672] cb->arg bucket: 994099, t ffffc9001d400000 n 0000000000000000 [ 980.548680][T14672] cb->arg bucket: 994100, t ffffc9001d400000 n 0000000000000000 [ 980.548692][T14672] cb->arg bucket: 994101, t ffffc9001d400000 n 0000000000000000 [ 980.548705][T14672] cb->arg bucket: 994102, t ffffc9001d400000 n 0000000000000000 [ 980.548718][T14672] cb->arg bucket: 994103, t ffffc9001d400000 n 0000000000000000 [ 980.548730][T14672] cb->arg bucket: 994104, t ffffc9001d400000 n 0000000000000000 [ 980.548742][T14672] cb->arg bucket: 994105, t ffffc9001d400000 n 0000000000000000 [ 980.548755][T14672] cb->arg bucket: 994106, t ffffc9001d400000 n 0000000000000000 [ 980.548767][T14672] cb->arg bucket: 994107, t ffffc9001d400000 n 0000000000000000 [ 980.548780][T14672] cb->arg bucket: 994108, t ffffc9001d400000 n 0000000000000000 [ 980.548792][T14672] cb->arg bucket: 994109, t ffffc9001d400000 n 0000000000000000 [ 980.548805][T14672] cb->arg bucket: 994110, t ffffc9001d400000 n 0000000000000000 [ 980.548817][T14672] cb->arg bucket: 994111, t ffffc9001d400000 n 0000000000000000 [ 980.548830][T14672] cb->arg bucket: 994112, t ffffc9001d400000 n 0000000000000000 [ 980.548842][T14672] cb->arg bucket: 994113, t ffffc9001d400000 n 0000000000000000 [ 980.548855][T14672] cb->arg bucket: 994114, t ffffc9001d400000 n 0000000000000000 [ 980.548867][T14672] cb->arg bucket: 994115, t ffffc9001d400000 n 0000000000000000 [ 980.548880][T14672] cb->arg bucket: 994116, t ffffc9001d400000 n 0000000000000000 [ 980.548892][T14672] cb->arg bucket: 994117, t ffffc9001d400000 n 0000000000000000 [ 980.550004][T14672] cb->arg bucket: 994118, t ffffc9001d400000 n 0000000000000000 [ 980.550020][T14672] cb->arg bucket: 994119, t ffffc9001d400000 n 0000000000000000 [ 980.550035][T14672] cb->arg bucket: 994120, t ffffc9001d400000 n 0000000000000000 [ 980.550049][T14672] cb->arg bucket: 994121, t ffffc9001d400000 n 0000000000000000 [ 980.550063][T14672] cb->arg bucket: 994122, t ffffc9001d400000 n 0000000000000000 [ 980.550077][T14672] cb->arg bucket: 994123, t ffffc9001d400000 n 0000000000000000 [ 980.550092][T14672] cb->arg bucket: 994124, t ffffc9001d400000 n 0000000000000000 [ 980.550106][T14672] cb->arg bucket: 994125, t ffffc9001d400000 n 0000000000000000 [ 980.550121][T14672] cb->arg bucket: 994126, t ffffc9001d400000 n 0000000000000000 [ 980.550135][T14672] cb->arg bucket: 994127, t ffffc9001d400000 n 0000000000000000 [ 980.550149][T14672] cb->arg bucket: 994128, t ffffc9001d400000 n 0000000000000000 [ 980.550164][T14672] cb->arg bucket: 994129, t ffffc9001d400000 n 0000000000000000 [ 980.550179][T14672] cb->arg bucket: 994130, t ffffc9001d400000 n 0000000000000000 [ 980.550193][T14672] cb->arg bucket: 994131, t ffffc9001d400000 n 0000000000000000 [ 980.550208][T14672] cb->arg bucket: 994132, t ffffc9001d400000 n 0000000000000000 [ 980.550223][T14672] cb->arg bucket: 994133, t ffffc9001d400000 n 0000000000000000 [ 980.550237][T14672] cb->arg bucket: 994134, t ffffc9001d400000 n 0000000000000000 [ 980.550251][T14672] cb->arg bucket: 994135, t ffffc9001d400000 n 0000000000000000 [ 980.550265][T14672] cb->arg bucket: 994136, t ffffc9001d400000 n 0000000000000000 [ 980.550279][T14672] cb->arg bucket: 994137, t ffffc9001d400000 n 0000000000000000 [ 980.550294][T14672] cb->arg bucket: 994138, t ffffc9001d400000 n 0000000000000000 [ 980.550307][T14672] cb->arg bucket: 994139, t ffffc9001d400000 n 0000000000000000 [ 980.550321][T14672] cb->arg bucket: 994140, t ffffc9001d400000 n 0000000000000000 [ 980.550335][T14672] cb->arg bucket: 994141, t ffffc9001d400000 n 0000000000000000 [ 980.550348][T14672] cb->arg bucket: 994142, t ffffc9001d400000 n 0000000000000000 [ 980.550385][T14672] cb->arg bucket: 994143, t ffffc9001d400000 n 0000000000000000 [ 980.550399][T14672] cb->arg bucket: 994144, t ffffc9001d400000 n 0000000000000000 [ 980.550412][T14672] cb->arg bucket: 994145, t ffffc9001d400000 n 0000000000000000 [ 980.550426][T14672] cb->arg bucket: 994146, t ffffc9001d400000 n 0000000000000000 [ 980.550440][T14672] cb->arg bucket: 994147, t ffffc9001d400000 n 0000000000000000 [ 980.550453][T14672] cb->arg bucket: 994148, t ffffc9001d400000 n 0000000000000000 [ 980.550466][T14672] cb->arg bucket: 994149, t ffffc9001d400000 n 0000000000000000 [ 980.550478][T14672] cb->arg bucket: 994150, t ffffc9001d400000 n 0000000000000000 [ 980.550491][T14672] cb->arg bucket: 994151, t ffffc9001d400000 n 0000000000000000 [ 980.550504][T14672] cb->arg bucket: 994152, t ffffc9001d400000 n 0000000000000000 [ 980.550517][T14672] cb->arg bucket: 994153, t ffffc9001d400000 n 0000000000000000 [ 980.550529][T14672] cb->arg bucket: 994154, t ffffc9001d400000 n 0000000000000000 [ 980.550542][T14672] cb->arg bucket: 994155, t ffffc9001d400000 n 0000000000000000 [ 980.550555][T14672] cb->arg bucket: 994156, t ffffc9001d400000 n 0000000000000000 [ 980.550567][T14672] cb->arg bucket: 994157, t ffffc9001d400000 n 0000000000000000 [ 980.550580][T14672] cb->arg bucket: 994158, t ffffc9001d400000 n 0000000000000000 [ 980.550592][T14672] cb->arg bucket: 994159, t ffffc9001d400000 n 0000000000000000 [ 980.550605][T14672] cb->arg bucket: 994160, t ffffc9001d400000 n 0000000000000000 [ 980.550617][T14672] cb->arg bucket: 994161, t ffffc9001d400000 n 0000000000000000 [ 980.550630][T14672] cb->arg bucket: 994162, t ffffc9001d400000 n 0000000000000000 [ 980.550642][T14672] cb->arg bucket: 994163, t ffffc9001d400000 n 0000000000000000 [ 980.550665][T14672] cb->arg bucket: 994164, t ffffc9001d400000 n 0000000000000000 [ 980.550678][T14672] cb->arg bucket: 994165, t ffffc9001d400000 n 0000000000000000 [ 980.550691][T14672] cb->arg bucket: 994166, t ffffc9001d400000 n 0000000000000000 [ 980.550703][T14672] cb->arg bucket: 994167, t ffffc9001d400000 n 0000000000000000 [ 980.550715][T14672] cb->arg bucket: 994168, t ffffc9001d400000 n 0000000000000000 [ 980.550728][T14672] cb->arg bucket: 994169, t ffffc9001d400000 n 0000000000000000 [ 980.550740][T14672] cb->arg bucket: 994170, t ffffc9001d400000 n 0000000000000000 [ 980.550753][T14672] cb->arg bucket: 994171, t ffffc9001d400000 n 0000000000000000 [ 980.550765][T14672] cb->arg bucket: 994172, t ffffc9001d400000 n 0000000000000000 [ 980.550777][T14672] cb->arg bucket: 994173, t ffffc9001d400000 n 0000000000000000 [ 980.550790][T14672] cb->arg bucket: 994174, t ffffc9001d400000 n 0000000000000000 [ 980.550803][T14672] cb->arg bucket: 994175, t ffffc9001d400000 n 0000000000000000 [ 980.550815][T14672] cb->arg bucket: 994176, t ffffc9001d400000 n 0000000000000000 [ 980.550828][T14672] cb->arg bucket: 994177, t ffffc9001d400000 n 0000000000000000 [ 980.550840][T14672] cb->arg bucket: 994178, t ffffc9001d400000 n 0000000000000000 [ 980.550853][T14672] cb->arg bucket: 994179, t ffffc9001d400000 n 0000000000000000 [ 980.550866][T14672] cb->arg bucket: 994180, t ffffc9001d400000 n 0000000000000000 [ 980.550878][T14672] cb->arg bucket: 994181, t ffffc9001d400000 n 0000000000000000 [ 980.550890][T14672] cb->arg bucket: 994182, t ffffc9001d400000 n 0000000000000000 [ 980.550903][T14672] cb->arg bucket: 994183, t ffffc9001d400000 n 0000000000000000 [ 980.550915][T14672] cb->arg bucket: 994184, t ffffc9001d400000 n 0000000000000000 [ 980.550927][T14672] cb->arg bucket: 994185, t ffffc9001d400000 n 0000000000000000 [ 980.550940][T14672] cb->arg bucket: 994186, t ffffc9001d400000 n 0000000000000000 [ 980.550952][T14672] cb->arg bucket: 994187, t ffffc9001d400000 n 0000000000000000 [ 980.550965][T14672] cb->arg bucket: 994188, t ffffc9001d400000 n 0000000000000000 [ 980.550977][T14672] cb->arg bucket: 994189, t ffffc9001d400000 n 0000000000000000 [ 980.550990][T14672] cb->arg bucket: 994190, t ffffc9001d400000 n 0000000000000000 [ 980.551003][T14672] cb->arg bucket: 994191, t ffffc9001d400000 n 0000000000000000 [ 980.551016][T14672] cb->arg bucket: 994192, t ffffc9001d400000 n 0000000000000000 [ 980.551028][T14672] cb->arg bucket: 994193, t ffffc9001d400000 n 0000000000000000 [ 980.551135][ T5720] kernfs bmAttributes: removing [ 980.551178][ T5720] kernfs bInterval: removing [ 980.551217][ T5720] kernfs wMaxPacketSize: removing [ 980.551256][ T5720] kernfs interval: removing [ 980.551294][ T5720] kernfs type: removing [ 980.551333][ T5720] kernfs direction: removing [ 980.551373][ T5720] PM: Removing info for No Bus:ep_00 [ 980.551395][ T5720] kobject: 'ep_00' (ffff888079a03010): kobject_uevent_env [ 980.551409][ T5720] kobject: 'ep_00' (ffff888079a03010): kobject_uevent_env: filter function caused the event to drop! [ 980.551429][ T5720] kernfs ep_00: removing [ 980.551466][ T5720] kobject: 'ep_00' (ffff888079a03010): kobject_cleanup, parent 0000000000000000 [ 980.551482][ T5720] kobject: 'ep_00' (ffff888079a03010): calling ktype release [ 980.551513][ T5720] kobject: 'ep_00': free name [ 980.551581][ T5720] kernfs autosuspend: removing [ 980.551622][ T5720] kernfs level: removing [ 980.551660][ T5720] kernfs connected_duration: removing [ 980.551699][ T5720] kernfs active_duration: removing [ 980.551742][ T5720] kernfs persist: removing [ 980.551819][ T5720] kernfs runtime_status: removing [ 980.551857][ T5720] kernfs control: removing [ 980.551894][ T5720] kernfs runtime_suspended_time: removing [ 980.551931][ T5720] kernfs runtime_active_time: removing [ 980.551966][ T5720] kernfs autosuspend_delay_ms: removing [ 980.552042][ T5720] kernfs power: removing [ 980.552121][T12185] kernfs rps_flow_cnt: removing [ 980.552167][T12185] kobject: 'rx-1' (ffff888083fe0950): kobject_cleanup, parent ffff88803478ef50 [ 980.552182][T12185] kobject: 'rx-1' (ffff888083fe0950): auto cleanup kobject_del [ 980.552192][T12185] kobject: 'rx-1' (ffff888083fe0950): auto cleanup 'remove' event [ 980.552203][T12185] kobject: 'rx-1' (ffff888083fe0950): kobject_uevent_env [ 980.552215][T12185] kobject: 'rx-1' (ffff888083fe0950): kobject_uevent_env: uevent_suppress caused the event to drop! [ 980.552521][ T32] ){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 [ 980.552556][ T32] locks held by syz.6.2635/15794: 1, on CPU#0: [ 980.552579][ T32] #0: ffffffff9be09f20 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 [ 980.552617][ T32] locks held by syz.6.2635/15796: 1, on CPU#0: [ 980.552628][ T32] #0: ffffffff9be09f20 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 [ 980.552665][ T32] locks held by syz.3.2640/15846: 1, on CPU#0: [ 980.552676][ T32] #0: ffffffff9be09f20 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 [ 980.552712][ T32] locks held by syz.3.2640/15853: 1, on CPU#1: [ 980.552723][ T32] #0: ffffffff9be09f20 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 [ 980.552759][ T32] locks held by syz-executor/15888: 1, on CPU#0: [ 980.552771][ T32] #0: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xac3/0x2620 [ 980.552815][ T32] locks held by syz-executor/15925: 5, on CPU#1: [ 980.552826][ T32] #0: ffffffff90cbbf48 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 980.552862][ T32] #1: ffffffff908e3168 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x28c/0x590 [ 980.552905][ T32] #2: ffffffff908e2ee8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2ff/0x590 [ 980.552947][ T32] #3: ffff88807a1d9020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x820 [ 980.552989][ T32] #4: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x128/0xb80 [ 980.553029][ T32] locks held by udevd/15926: 1, last CPU#1: [ 980.553040][ T32] #0: ffffffff8f90af38 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x169/0x3c0 [ 980.553082][ T32] locks held by syz-executor/15969: 1, on CPU#1: [ 980.553093][ T32] #0: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x31c/0x18c0 [ 980.553137][ T32] locks held by syz.1.2654/16002: 1, on CPU#0: [ 980.553149][ T32] #0: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x23d/0x4880 [ 980.553190][ T32] locks held by syz.1.2654/16003: 1, on CPU#1: [ 980.553201][ T32] #0: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 980.553240][ T32] locks held by syz.1.2654/16007: 1, on CPU#1: [ 980.553252][ T32] #0: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 980.553295][ T32] locks held by syz.1.2654/16011: 1, on CPU#0: [ 980.553307][ T32] #0: ffffffff90cd4b40 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 980.553352][ T32] [ 980.553360][ T32] ============================================= [ 980.553360][ T32] [ 980.553368][ T32] NMI backtrace for cpu 1 [ 980.553381][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 980.553402][ T32] Tainted: [L]=SOFTLOCKUP [ 980.553407][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 980.553417][ T32] Call Trace: [ 980.553423][ T32] [ 980.553429][ T32] dump_stack_lvl+0x100/0x190 [ 980.553454][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 980.553479][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 980.553498][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 980.553523][ T32] sys_info+0x141/0x190 [ 980.553543][ T32] watchdog+0xcb1/0x1030 [ 980.553566][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 980.553590][ T32] ? __pfx_watchdog+0x10/0x10 [ 980.553610][ T32] ? __kthread_parkme+0x18f/0x230 [ 980.553632][ T32] ? kthread+0x13a/0x450 [ 980.553652][ T32] ? __pfx_watchdog+0x10/0x10 [ 980.553670][ T32] kthread+0x373/0x450 [ 980.553690][ T32] ? __pfx_kthread+0x10/0x10 [ 980.553713][ T32] ret_from_fork+0x730/0xd60 [ 980.553732][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 980.553750][ T32] ? __switch_to+0x800/0x10f0 [ 980.553772][ T32] ? __pfx_kthread+0x10/0x10 [ 980.553795][ T32] ret_from_fork_asm+0x1a/0x30 [ 980.553826][ T32] [ 980.553832][ T32] Sending NMI from CPU 1 to CPUs 0: [ 980.553860][ C0] NMI backtrace for cpu 0 [ 980.553872][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 980.553891][ C0] Tainted: [L]=SOFTLOCKUP [ 980.553896][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 980.553904][ C0] RIP: 0010:io_serial_in+0x87/0xb0 [ 980.553924][ C0] Code: a4 5a fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c e9 bd 06 24 06 e8 08 0e ce fc eb a2 e8 91 0e [ 980.553936][ C0] RSP: 0018:ffffc90000157958 EFLAGS: 00000002 [ 980.553948][ C0] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 980.553958][ C0] RDX: 00000000000003fd RSI: ffffffff85b1a070 RDI: ffffffff9bc75f60 [ 980.553967][ C0] RBP: ffffffff9bc75f20 R08: 0000000000000001 R09: 000000000000001f [ 980.553977][ C0] R10: 0000000000000000 R11: 205d303237355420 R12: 0000000000000000 [ 980.553985][ C0] R13: 0000000000000020 R14: fffffbfff378ec41 R15: dffffc0000000000 [ 980.554008][ C0] FS: 0000000000000000(0000) GS:ffff888123b4f000(0000) knlGS:0000000000000000 [ 980.554024][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 980.554035][ C0] CR2: 00007fa0fc04ae9c CR3: 00000000370d7000 CR4: 00000000003526f0 [ 980.554044][ C0] Call Trace: [ 980.554049][ C0] [ 980.554055][ C0] wait_for_lsr+0x13a/0x210 [ 980.554075][ C0] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 980.554095][ C0] __serial8250_console_fifo_write+0xa5/0x290 [ 980.554113][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 980.554130][ C0] serial8250_console_write+0xf46/0x1330 [ 980.554146][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 980.554159][ C0] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 980.554176][ C0] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 980.554194][ C0] nbcon_emit_next_record+0x8f7/0xa70 [ 980.554210][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 980.554225][ C0] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 980.554238][ C0] ? do_raw_spin_lock+0xb0/0x260 [ 980.554259][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 980.554277][ C0] ? _raw_spin_lock_irqsave+0x42/0x60 [ 980.554297][ C0] nbcon_emit_one+0x1a8/0x2b0 [ 980.554311][ C0] ? __pfx_nbcon_emit_one+0x10/0x10 [ 980.554328][ C0] nbcon_kthread_func+0x613/0x7d0 [ 980.554343][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 980.554360][ C0] ? __kthread_parkme+0x18f/0x230 [ 980.554377][ C0] ? kthread+0x13a/0x450 [ 980.554394][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 980.554408][ C0] kthread+0x373/0x450 [ 980.554425][ C0] ? __pfx_kthread+0x10/0x10 [ 980.554444][ C0] ret_from_fork+0x730/0xd60 [ 980.554458][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 980.554474][ C0] ? __switch_to+0x800/0x10f0 [ 980.554492][ C0] ? __pfx_kthread+0x10/0x10 [ 980.554511][ C0] ret_from_fork_asm+0x1a/0x30 [ 980.554529][ C0] [ 980.554865][T12185] kernfs rx-1: removing [ 980.554906][T12185] kobject: 'rx-1' (ffff888083fe0950): calling ktype release [ 980.554926][T12185] kobject: 'rx-1': free name [ 980.554951][T12185] kernfs rps_cpus: removing [ 980.554988][T12185] kernfs rps_flow_cnt: removing [ 980.555019][T12185] kobject: 'rx-0' (ffff888083fe0850): kobject_cleanup, parent ffff88803478ef50 [ 980.555033][T12185] kobject: 'rx-0' (ffff888083fe0850): auto cleanup kobject_del [ 980.555044][T12185] kobject: 'rx-0' (ffff888083fe0850): auto cleanup 'remove' event [ 980.555055][T12185] kobject: 'rx-0' (ffff888083fe0850): kobject_uevent_env [ 980.555066][T12185] kobject: 'rx-0' (ffff888083fe0850): kobject_uevent_env: uevent_suppress caused the event to drop! [ 980.555083][T12185] kernfs rx-0: removing [ 980.555113][T12185] kobject: 'rx-0' (ffff888083fe0850): calling ktype release [ 980.555131][T12185] kobject: 'rx-0': free name [ 980.555153][T12185] kernfs tx_timeout: removing [ 980.555190][T12185] kernfs traffic_class: removing [ 980.555226][T12185] kernfs xps_cpus: removing [ 980.555261][T12185] kernfs xps_rxqs: removing [ 980.555296][T12185] kernfs tx_maxrate: removing [ 980.555327][T12185] kobject: 'tx-1' (ffff88802d1991e0): kobject_cleanup, parent ffff88803478ef50 [ 980.555341][T12185] kobject: 'tx-1' (ffff88802d1991e0): auto cleanup kobject_del [ 980.555352][T12185] kobject: 'tx-1' (ffff88802d1991e0): auto cleanup 'remove' event [ 980.555368][T12185] kobject: 'tx-1' (ffff88802d1991e0): kobject_uevent_env [ 980.555379][T12185] kobject: 'tx-1' (ffff88802d1991e0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 980.555396][T12185] kernfs tx-1: removing [ 980.555428][T12185] kobject: 'tx-1' (ffff88802d1991e0): calling ktype release [ 980.555446][T12185] kobject: 'tx-1': free name [ 980.555468][T12185] kernfs tx_timeout: removing [ 980.555503][T12185] kernfs traffic_class: removing [ 980.555539][T12185] kernfs xps_cpus: removing [ 980.555574][T12185] kernfs xps_rxqs: removing [ 980.555609][T12185] kernfs tx_maxrate: removing [ 980.555638][T12185] kobject: 'tx-0' (ffff88802d199020): kobject_cleanup, parent ffff88803478ef50 [ 980.555652][T12185] kobject: 'tx-0' (ffff88802d199020): auto cleanup kobject_del [ 980.555663][T12185] kobject: 'tx-0' (ffff88802d199020): auto cleanup 'remove' event [ 980.555673][T12185] kobject: 'tx-0' (ffff88802d199020): kobject_uevent_env [ 980.555684][T12185] kobject: 'tx-0' (ffff88802d199020): kobject_uevent_env: uevent_suppress caused the event to drop! [ 980.555701][T12185] kernfs tx-0: removing [ 980.555734][T12185] kobject: 'tx-0' (ffff88802d199020): calling ktype release [ 980.555754][T12185] kobject: 'tx-0': free name [ 980.555779][T12185] kernfs queues: removing [ 980.555814][T12185] kobject: 'queues' (ffff88803478ef50): kobject_cleanup, parent 0000000000000000 [ 980.555830][T12185] kobject: 'queues' (ffff88803478ef50): calling ktype release [ 980.555842][T12185] kobject: 'queues' (ffff88803478ef50): kset_release [ 980.555865][T12185] kobject: 'queues': free name [ 980.555911][T12185] kernfs runtime_status: removing [ 980.555952][T12185] kernfs control: removing [ 980.556036][T12185] kernfs runtime_suspended_time: removing [ 980.556078][T12185] kernfs runtime_active_time: removing [ 980.556119][T12185] kernfs autosuspend_delay_ms: removing [ 980.556727][T12185] kernfs power: removing [ 980.556777][T12185] kernfs subsystem: removing [ 980.556816][T12185] kernfs veth1_virt_wifi: removing [ 980.557608][T14672] cb->arg bucket: 994194, t ffffc9001d400000 n 0000000000000000 [ 980.557624][T14672] cb->arg bucket: 994195, t ffffc9001d400000 n 0000000000000000 [ 980.557637][T14672] cb->arg bucket: 994196, t ffffc9001d400000 n 0000000000000000 [ 980.557650][T14672] cb->arg bucket: 994197, t ffffc9001d400000 n 0000000000000000 [ 980.557663][T14672] cb->arg bucket: 994198, t ffffc9001d400000 n 0000000000000000 [ 980.557675][T14672] cb->arg bucket: 994199, t ffffc9001d400000 n 0000000000000000 [ 980.557688][T14672] cb->arg bucket: 994200, t ffffc9001d400000 n 0000000000000000 [ 980.557701][T14672] cb->arg bucket: 994201, t ffffc9001d400000 n 0000000000000000 [ 980.557713][T14672] cb->arg bucket: 994202, t ffffc9001d400000 n 0000000000000000 [ 980.557726][T14672] cb->arg bucket: 994203, t ffffc9001d400000 n 0000000000000000 [ 980.557739][T14672] cb->arg bucket: 994204, t ffffc9001d400000 n 0000000000000000 [ 980.557751][T14672] cb->arg bucket: 994205, t ffffc9001d400000 n 0000000000000000 [ 980.557764][T14672] cb->arg bucket: 994206, t ffffc9001d400000 n 0000000000000000 [ 980.557777][T14672] cb->arg bucket: 994207, t ffffc9001d400000 n 0000000000000000 [ 980.557789][T14672] cb->arg bucket: 994208, t ffffc9001d400000 n 0000000000000000 [ 980.557802][T14672] cb->arg bucket: 994209, t ffffc9001d400000 n 0000000000000000 [ 980.557814][T14672] cb->arg bucket: 994210, t ffffc9001d400000 n 0000000000000000 [ 980.557827][T14672] cb->arg bucket: 994211, t ffffc9001d400000 n 0000000000000000 [ 980.557839][T14672] cb->arg bucket: 994212, t ffffc9001d400000 n 0000000000000000 [ 980.557852][T14672] cb->arg bucket: 994213, t ffffc9001d400000 n 0000000000000000 [ 980.557864][T14672] cb->arg bucket: 994214, t ffffc9001d400000 n 0000000000000000 [ 980.557877][T14672] cb->arg bucket: 994215, t ffffc9001d400000 n 0000000000000000 [ 980.557889][T14672] cb->arg bucket: 994216, t ffffc9001d400000 n 0000000000000000 [ 980.557902][T14672] cb->arg bucket: 994217, t ffffc9001d400000 n 0000000000000000 [ 980.557914][T14672] cb->arg bucket: 994218, t ffffc9001d400000 n 0000000000000000 [ 980.557927][T14672] cb->arg bucket: 994219, t ffffc9001d400000 n 0000000000000000 [ 980.557939][T14672] cb->arg bucket: 994220, t ffffc9001d400000 n 0000000000000000 [ 980.557952][T14672] cb->arg bucket: 994221, t ffffc9001d400000 n 0000000000000000 [ 980.557964][T14672] cb->arg bucket: 994222, t ffffc9001d400000 n 0000000000000000 [ 980.557977][T14672] cb->arg bucket: 994223, t ffffc9001d400000 n 0000000000000000 [ 980.557990][T14672] cb->arg bucket: 994224, t ffffc9001d400000 n 0000000000000000 [ 980.558002][T14672] cb->arg bucket: 994225, t ffffc9001d400000 n 0000000000000000 [ 980.558015][T14672] cb->arg bucket: 994226, t ffffc9001d400000 n 0000000000000000 [ 980.558028][T14672] cb->arg bucket: 994227, t ffffc9001d400000 n 0000000000000000 [ 980.558040][T14672] cb->arg bucket: 994228, t ffffc9001d400000 n 0000000000000000 [ 980.558053][T14672] cb->arg bucket: 994229, t ffffc9001d400000 n 0000000000000000 [ 980.558066][T14672] cb->arg bucket: 994230, t ffffc9001d400000 n 0000000000000000 [ 980.558078][T14672] cb->arg bucket: 994231, t ffffc9001d400000 n 0000000000000000 [ 980.558091][T14672] cb->arg bucket: 994232, t ffffc9001d400000 n 0000000000000000 [ 980.558104][T14672] cb->arg bucket: 994233, t ffffc9001d400000 n 0000000000000000 [ 980.558116][T14672] cb->arg bucket: 994234, t ffffc9001d400000 n 0000000000000000 [ 980.558128][T14672] cb->arg bucket: 994235, t ffffc9001d400000 n 0000000000000000 [ 980.558141][T14672] cb->arg bucket: 994236, t ffffc9001d400000 n 0000000000000000 [ 980.558154][T14672] cb->arg bucket: 994237, t ffffc9001d400000 n 0000000000000000 [ 980.558166][T14672] cb->arg bucket: 994238, t ffffc9001d400000 n 0000000000000000 [ 980.558179][T14672] cb->arg bucket: 994239, t ffffc9001d400000 n 0000000000000000 [ 980.558191][T14672] cb->arg bucket: 994240, t ffffc9001d400000 n 0000000000000000 [ 980.558204][T14672] cb->arg bucket: 994241, t ffffc9001d400000 n 0000000000000000 [ 980.558217][T14672] cb->arg bucket: 994242, t ffffc9001d400000 n 0000000000000000 [ 980.558229][T14672] cb->arg bucket: 994243, t ffffc9001d400000 n 0000000000000000 [ 980.558242][T14672] cb->arg bucket: 994244, t ffffc9001d400000 n 0000000000000000 [ 980.558254][T14672] cb->arg bucket: 994245, t ffffc9001d400000 n 0000000000000000 [ 980.558267][T14672] cb->arg bucket: 994246, t ffffc9001d400000 n 0000000000000000 [ 980.558279][T14672] cb->arg bucket: 994247, t ffffc9001d400000 n 0000000000000000 [ 980.558292][T14672] cb->arg bucket: 994248, t ffffc9001d400000 n 0000000000000000 [ 980.558304][T14672] cb->arg bucket: 994249, t ffffc9001d400000 n 0000000000000000 [ 980.558317][T14672] cb->arg bucket: 994250, t ffffc9001d400000 n 0000000000000000 [ 980.558329][T14672] cb->arg bucket: 994251, t ffffc9001d400000 n 0000000000000000 [ 980.558353][T14672] cb->arg bucket: 994252, t ffffc9001d400000 n 0000000000000000 [ 980.558371][T14672] cb->arg bucket: 994253, t ffffc9001d400000 n 0000000000000000 [ 980.558384][T14672] cb->arg bucket: 994254, t ffffc9001d400000 n 0000000000000000 [ 980.558397][T14672] cb->arg bucket: 994255, t ffffc9001d400000 n 0000000000000000 [ 980.558409][T14672] cb->arg bucket: 994256, t ffffc9001d400000 n 0000000000000000 [ 980.558422][T14672] cb->arg bucket: 994257, t ffffc9001d400000 n 0000000000000000 [ 980.558434][T14672] cb->arg bucket: 994258, t ffffc9001d400000 n 0000000000000000 [ 980.558447][T14672] cb->arg bucket: 994259, t ffffc9001d400000 n 0000000000000000 [ 980.558459][T14672] cb->arg bucket: 994260, t ffffc9001d400000 n 0000000000000000 [ 980.558472][T14672] cb->arg bucket: 994261, t ffffc9001d400000 n 0000000000000000 [ 980.558484][T14672] cb->arg bucket: 994262, t ffffc9001d400000 n 0000000000000000 [ 980.558497][T14672] cb->arg bucket: 994263, t ffffc9001d400000 n 0000000000000000 [ 980.558510][T14672] cb->arg bucket: 994264, t ffffc9001d400000 n 0000000000000000 [ 980.558522][T14672] cb->arg bucket: 994265, t ffffc9001d400000 n 0000000000000000 [ 980.558535][T14672] cb->arg bucket: 994266, t ffffc9001d400000 n 0000000000000000 [ 980.558547][T14672] cb->arg bucket: 994267, t ffffc9001d400000 n 0000000000000000 [ 980.558560][T14672] cb->arg bucket: 994268, t ffffc9001d400000 n 0000000000000000 [ 980.558572][T14672] cb->arg bucket: 994269, t ffffc9001d400000 n 0000000000000000 [ 980.558585][T14672] cb->arg bucket: 994270, t ffffc9001d400000 n 0000000000000000 [ 980.558597][T14672] cb->arg bucket: 994271, t ffffc9001d400000 n 0000000000000000 [ 980.558610][T14672] cb->arg bucket: 994272, t ffffc9001d400000 n 0000000000000000 [ 980.558623][T14672] cb->arg bucket: 994273, t ffffc9001d400000 n 0000000000000000 [ 980.558636][T14672] cb->arg bucket: 994274, t ffffc9001d400000 n 0000000000000000 [ 980.558649][T14672] cb->arg bucket: 994275, t ffffc9001d400000 n 0000000000000000 [ 980.558662][T14672] cb->arg bucket: 994276, t ffffc9001d400000 n 0000000000000000 [ 980.558674][T14672] cb->arg bucket: 994277, t ffffc9001d400000 n 0000000000000000 [ 980.558687][T14672] cb->arg bucket: 994278, t ffffc9001d400000 n 0000000000000000 [ 980.558700][T14672] cb->arg bucket: 994279, t ffffc9001d400000 n 0000000000000000 [ 980.558712][T14672] cb->arg bucket: 994280, t ffffc9001d400000 n 0000000000000000 [ 980.558725][T14672] cb->arg bucket: 994281, t ffffc9001d400000 n 0000000000000000 [ 980.558738][T14672] cb->arg bucket: 994282, t ffffc9001d400000 n 0000000000000000 [ 980.558750][T14672] cb->arg bucket: 994283, t ffffc9001d400000 n 0000000000000000 [ 980.558763][T14672] cb->arg bucket: 994284, t ffffc9001d400000 n 0000000000000000 [ 980.558776][T14672] cb->arg bucket: 994285, t ffffc9001d400000 n 0000000000000000 [ 980.558788][T14672] cb->arg bucket: 994286, t ffffc9001d400000 n 0000000000000000 [ 980.558800][T14672] cb->arg bucket: 994287, t ffffc9001d400000 n 0000000000000000 [ 980.558813][T14672] cb->arg bucket: 994288, t ffffc9001d400000 n 0000000000000000 [ 980.558826][T14672] cb->arg bucket: 994289, t ffffc9001d400000 n 0000000000000000 [ 980.558838][T14672] cb->arg bucket: 994290, t ffffc9001d400000 n 0000000000000000 [ 980.558850][T14672] cb->arg bucket: 994291, t ffffc9001d400000 n 0000000000000000 [ 980.558863][T14672] cb->arg bucket: 994292, t ffffc9001d400000 n 0000000000000000 [ 980.558876][T14672] cb->arg bucket: 994293, t ffffc9001d400000 n 0000000000000000 [ 980.558888][T14672] cb->arg bucket: 994294, t ffffc9001d400000 n 0000000000000000 [ 980.558900][T14672] cb->arg bucket: 994295, t ffffc9001d400000 n 0000000000000000 [ 980.558913][T14672] cb->arg bucket: 994296, t ffffc9001d400000 n 0000000000000000 [ 980.558926][T14672] cb->arg bucket: 994297, t ffffc9001d400000 n 0000000000000000 [ 980.558938][T14672] cb->arg bucket: 994298, t ffffc9001d400000 n 0000000000000000 [ 980.558951][T14672] cb->arg bucket: 994299, t ffffc9001d400000 n 0000000000000000 [ 980.558963][T14672] cb->arg bucket: 994300, t ffffc9001d400000 n 0000000000000000 [ 980.558976][T14672] cb->arg bucket: 994301, t ffffc9001d400000 n 0000000000000000 [ 980.558989][T14672] cb->arg bucket: 994302, t ffffc9001d400000 n 0000000000000000 [ 980.559001][T14672] cb->arg bucket: 994303, t ffffc9001d400000 n 0000000000000000 [ 980.559013][T14672] cb->arg bucket: 994304, t ffffc9001d400000 n 0000000000000000 [ 980.559026][T14672] cb->arg bucket: 994305, t ffffc9001d400000 n 0000000000000000 [ 980.559038][T14672] cb->arg bucket: 994306, t ffffc9001d400000 n 0000000000000000 [ 980.559051][T14672] cb->arg bucket: 994307, t ffffc9001d400000 n 0000000000000000 [ 980.559063][T14672] cb->arg bucket: 994308, t ffffc9001d400000 n 0000000000000000 [ 980.559076][T14672] cb->arg bucket: 994309, t ffffc9001d400000 n 0000000000000000 [ 980.559088][T14672] cb->arg bucket: 994310, t ffffc9001d400000 n 0000000000000000 [ 980.559196][T12185] kernfs uevent: removing [ 980.559254][T12185] kernfs rx_packets: removing [ 980.559294][T12185] kernfs tx_packets: removing [ 980.559331][T12185] kernfs rx_bytes: removing [ 980.559395][T12185] kernfs tx_bytes: removing [ 980.559433][T12185] kernfs rx_errors: removing [ 980.559470][T12185] kernfs tx_errors: removing [ 980.559506][T12185] kernfs rx_dropped: removing [ 980.559544][T12185] kernfs tx_dropped: removing [ 980.559580][T12185] kernfs multicast: removing [ 980.559618][T12185] kernfs collisions: removing [ 980.559654][T12185] kernfs rx_length_errors: removing [ 980.559691][T12185] kernfs rx_over_errors: removing [ 980.559729][T12185] kernfs rx_crc_errors: removing [ 980.559766][T12185] kernfs rx_frame_errors: removing [ 980.559804][T12185] kernfs rx_fifo_errors: removing [ 980.559841][T12185] kernfs rx_missed_errors: removing [ 980.559879][T12185] kernfs tx_aborted_errors: removing [ 980.559917][T12185] kernfs tx_carrier_errors: removing [ 980.559953][T12185] kernfs tx_fifo_errors: removing [ 980.559991][T12185] kernfs tx_heartbeat_errors: removing [ 980.560028][T12185] kernfs tx_window_errors: removing [ 980.560076][T12185] kernfs rx_compressed: removing [ 980.560113][T12185] kernfs tx_compressed: removing [ 980.560150][T12185] kernfs rx_nohandler: removing [ 980.560186][T12185] kernfs statistics: removing [ 980.560236][T12185] kernfs netdev_group: removing [ 980.560274][T12185] kernfs type: removing [ 980.560314][T12185] kernfs dev_id: removing [ 980.560351][T12185] kernfs dev_port: removing [ 980.560392][T12185] kernfs iflink: removing [ 980.560429][T12185] kernfs ifindex: removing [ 980.560466][T12185] kernfs name_assign_type: removing [ 980.560504][T12185] kernfs addr_assign_type: removing [ 980.560541][T12185] kernfs addr_len: removing [ 980.560578][T12185] kernfs link_mode: removing [ 980.560614][T12185] kernfs address: removing [ 980.560657][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 987.736424][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 987.747115][ T32] Tainted: [L]=SOFTLOCKUP [ 987.751449][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 987.761498][ T32] Call Trace: [ 987.764772][ T32] [ 987.767701][ T32] dump_stack_lvl+0x100/0x190 [ 987.772394][ T32] vpanic+0x553/0x970 [ 987.776381][ T32] ? __pfx_vpanic+0x10/0x10 [ 987.780885][ T32] panic+0xd1/0xe0 [ 987.784606][ T32] ? __pfx_panic+0x10/0x10 [ 987.789022][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 987.795186][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 987.801340][ T32] ? watchdog.cold+0x1ec/0x234 [ 987.806106][ T32] watchdog.cold+0x1fd/0x234 [ 987.810698][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 987.816510][ T32] ? __pfx_watchdog+0x10/0x10 [ 987.821191][ T32] ? __kthread_parkme+0x18f/0x230 [ 987.826219][ T32] ? kthread+0x13a/0x450 [ 987.830470][ T32] ? __pfx_watchdog+0x10/0x10 [ 987.835174][ T32] kthread+0x373/0x450 [ 987.839246][ T32] ? __pfx_kthread+0x10/0x10 [ 987.843852][ T32] ret_from_fork+0x730/0xd60 [ 987.848446][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 987.853564][ T32] ? __switch_to+0x800/0x10f0 [ 987.858245][ T32] ? __pfx_kthread+0x10/0x10 [ 987.862839][ T32] ret_from_fork_asm+0x1a/0x30 [ 987.867636][ T32] [ 988.124975][ T32] Kernel Offset: disabled [ 988.129298][ T32] Rebooting in 86400 seconds..