last executing test programs: 5m39.352689569s ago: executing program 1 (id=2): syz_open_procfs(0xffffffffffffffff, &(0x7f0000007e40)='net/if_inet6\x00') ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'veth0_to_hsr\x00', {}, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x2000000000000013, &(0x7f0000001900)=ANY=[@ANYBLOB="ee24b860801b0d59d3216cdafaf227ad070605971d", @ANYRES64, @ANYRES8], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) ptrace$ARCH_SHSTK_DISABLE(0x1e, r3, 0x3, 0x5002) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="1800000065ba010000ee00000000000008111e00130000fd6095b9f8d66e84379d5bcc779063c4e8676c000881e4f71c3d0dbd7585650b9bd476f58708fb8645eb4595859947d25223d93c579bd9f424976aa6643b"], 0x18}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) ustat(0x801, &(0x7f0000000240)) 5m36.09844349s ago: executing program 1 (id=19): msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/85) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$SEG6(0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000100001042bbd7000000000000000ffff", @ANYRES32=0x0, @ANYBLOB], 0x34}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r5, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x2e}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c8d1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd700000000000040000"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) timer_settime(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0x61f1, 0x10000, 0x0, 0x1000001, 0x0, 0x0}, 0x0, &(0x7f0000000040), &(0x7f0000000000)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) 5m22.78666697s ago: executing program 0 (id=43): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private2, 0xb}, 0x1c) listen(r5, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r6, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) 5m21.290474984s ago: executing program 0 (id=46): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2], 0x70}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) 5m20.984853451s ago: executing program 32 (id=19): msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/85) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$SEG6(0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000100001042bbd7000000000000000ffff", @ANYRES32=0x0, @ANYBLOB], 0x34}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r5, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x2e}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c8d1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd700000000000040000"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) timer_settime(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0x61f1, 0x10000, 0x0, 0x1000001, 0x0, 0x0}, 0x0, &(0x7f0000000040), &(0x7f0000000000)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) 5m19.7899868s ago: executing program 0 (id=53): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5m17.631390401s ago: executing program 0 (id=58): bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) setsockopt$ax25_int(r4, 0x101, 0x6, &(0x7f0000000280)=0xfffffffa, 0x4) write$cgroup_subtree(r2, &(0x7f00000003c0)={[{0x2d, 'net'}, {0x2d, 'freezer'}, {0x2d, 'hugetlb'}, {0x2d, 'hugetlb'}, {0x2b, 'freezer'}, {0x2d, 'cpuacct'}]}, 0x32) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r5, 0x0) accept4$inet6(r3, 0x0, &(0x7f00000001c0), 0x100000) creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53049c4) syz_emit_ethernet(0x7e, &(0x7f0000000900)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x48, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x11, 0x0, 0x4, 0x0, 0x1, 0x40}, @hopopts={0x8, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) 5m11.062003098s ago: executing program 0 (id=75): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd86) 5m8.21519007s ago: executing program 0 (id=83): msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/85) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$SEG6(0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/212, 0xd4, 0xba) 4m52.151610909s ago: executing program 33 (id=83): msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/85) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$SEG6(0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/212, 0xd4, 0xba) 3m12.178042302s ago: executing program 4 (id=335): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(r0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000480)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000000)={&(0x7f0000000340)=[r3], 0x1}) 3m10.946692569s ago: executing program 4 (id=340): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) lseek(0xffffffffffffffff, 0xfffffffffffffffd, 0x0) readv(0xffffffffffffffff, &(0x7f0000000b40)=[{0x0}], 0x1) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x746280000, 0x82040) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0x1) 3m10.211087473s ago: executing program 4 (id=342): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$alg(0x26, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, 0x0, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x803, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3m8.892555974s ago: executing program 4 (id=347): r0 = gettid() wait4(r0, 0x0, 0x80000000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="34000000120028bb2adf908a5cb20000100000000c000000000000000000000014001d00fc0200"], 0x34}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x101402, 0x0) ioctl$COMEDI_INSNLIST(r5, 0x8008640b, &(0x7f0000000180)={0x1, &(0x7f0000000300)=[{0xa000005, 0x0, 0x0, 0x90001, 0x642f}]}) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000340)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0xffbf, 0x8, 0xfffffffd, 0x80000001, 0x0, 0xfffffffe, 0xfffffffd, 0xfffffffc, 0x0, 0x400006, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7fffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xffffffc7, 0x0, 0x4, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x68, 0x0, 0x20000000, 0x3, 0x7fff, 0x0, 0x800, 0x402, 0x0, 0x8, 0x4, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x408, 0x0, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}) sendmsg$nl_route_sched(r1, 0x0, 0x10000800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x40c}}, 0x0) 3m4.801171137s ago: executing program 4 (id=363): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, 0x0) 3m4.414260122s ago: executing program 4 (id=367): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x46) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xe, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000004c0)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x415a, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r4, &(0x7f0000000340), 0x0, 0x45833af92e4b38ff, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)={0x44, r5, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "417f7622318573d5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="356aea4009d36f775821bf602678ba44"}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000000) 2m49.066238841s ago: executing program 34 (id=367): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x46) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xe, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000004c0)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x415a, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r4, &(0x7f0000000340), 0x0, 0x45833af92e4b38ff, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)={0x44, r5, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "417f7622318573d5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="356aea4009d36f775821bf602678ba44"}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000000) 22.695902094s ago: executing program 2 (id=905): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008880)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000500)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x80000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0xa53, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xfffffdfd, 0x0, 0x0, 0x400}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) 21.288428609s ago: executing program 2 (id=908): socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$alg(0x26, 0x5, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x803, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 20.478660893s ago: executing program 2 (id=912): socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4ad8, &(0x7f0000000300)={0x0, 0x9824, 0x20, 0xffffffff, 0x145}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_io_uring_setup(0x1229, &(0x7f0000000200)={0x0, 0x4f5a, 0x10100, 0x3, 0xffffffed, 0x0, r4}, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000000)) socket$inet(0x2, 0x3, 0x5) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000500)="48000000140081fb7059ae08060c040002ff0f03900000000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40, 0x0) 17.802898896s ago: executing program 5 (id=922): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000006c0), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 17.495467807s ago: executing program 5 (id=924): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) fcntl$setlease(r3, 0x400, 0x1) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000580)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x17, 0x301, 0x70bd24, 0xfffffffc, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) listen(0xffffffffffffffff, 0xfffffffd) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r6}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a000, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r3) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000006fc0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x54, 0x4, 0x0, @empty, @loopback, {[@srh={0x6c, 0x4, 0x4, 0x2, 0x1, 0x20, 0x800, [@remote, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x5e}, @fragment={0x88, 0x0, 0x7f, 0x1, 0x0, 0x5, 0x65}, @dstopts={0x33}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x500}}}}}}}, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000400)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x16, 0x15, "fee8a2ab78fc979fd1e00d96f72000000ba89de2b7fb0000e6a180b8785d960001000000000041eb8109af0000000000000000002900", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f422741b13103e52f400003fe2000000000000000000000000000000002000", [0x8, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r7) 15.630819198s ago: executing program 2 (id=932): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2c) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2000}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$TIOCL_SETVESABLANK(r3, 0x560e, &(0x7f0000000140)) ioctl$VT_ACTIVATE(r3, 0x5606, 0x2) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) creat(&(0x7f0000000040)='./file0\x00', 0x4) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCL_BLANKSCREEN(r9, 0x541c, &(0x7f0000000000)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00ba8321ef0000001c0012800b0001006272bb638772c4f0f98d0b3b1000"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x4}}}]}, 0x3c}}, 0x4004000) 14.271172144s ago: executing program 2 (id=934): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) getrlimit(0xd, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 11.357626318s ago: executing program 5 (id=942): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}], 0x1, 0x41) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 9.867564143s ago: executing program 8 (id=945): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80000) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-aes-aesni)\x00'}, 0x58) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0xfff, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) listen(r1, 0x5) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80047601, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) move_pages(r5, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000100)=[0x0, 0x0], 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x30, 0x0, &(0x7f00000011c0)="b9ffddc10000000000000008888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}, 0x1, 0x0, 0x0, 0x44a839f4917e57a0}, 0x53ec5ff145b70a1b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4054) r7 = socket$nl_generic(0x10, 0x3, 0x10) mount$binderfs(0x0, &(0x7f0000000480)='./binderfs\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB]) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)="06ffc7583e038ced1ae250d26875150c7c82bfaafc591943aae6df3025f77027de2af74211d2f16ac47bbe38b77dda2ab2779687b6ed03c354dd5208feaeb6204d2b0922e1ef7751c3d5") r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001200)={0x28, r8, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000100}, 0x800) openat$tcp_congestion(0xffffff9c, &(0x7f0000002000), 0x1, 0x0) 9.83406273s ago: executing program 5 (id=946): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2c) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2000}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$TIOCL_SETVESABLANK(r3, 0x560e, &(0x7f0000000140)) ioctl$VT_ACTIVATE(r3, 0x5606, 0x2) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) creat(&(0x7f0000000040)='./file0\x00', 0x4) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCL_BLANKSCREEN(r9, 0x541c, &(0x7f0000000000)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00ba8321ef0000001c0012800b0001006272bb638772c4f0f98d0b3b1000"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x4}}}]}, 0x3c}}, 0x4004000) 6.470766078s ago: executing program 6 (id=949): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x7ffffffd) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000880)=""/91}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000200)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af24, &(0x7f0000000180)={0x1, 0x4}) 6.383672214s ago: executing program 8 (id=950): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000006c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 6.157362859s ago: executing program 5 (id=951): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00', @ANYRES16=r1, @ANYBLOB="020026bd7000ffdbdf25740000000c009074929e6899000a00a6ddb0a6b7"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xbb19, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x10}, 0x4e20, 0x3, 'lblc\x00', 0x1a, 0x40c, 0x6f}, 0x2c) sendmmsg$sock(r3, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000) 6.104115526s ago: executing program 7 (id=952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x15}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004000) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r2, &(0x7f00000001c0)='1', 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x7, 0x0, 0x0, 0xe, 0x2, 0x5}, 0x20) write$6lowpan_control(r1, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:10 2', 0x1b) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 5.988187394s ago: executing program 6 (id=953): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xd4f163e6ee09ede3, 0x4c033, 0xffffffffffffffff, 0x8000000) mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1) 5.84364658s ago: executing program 8 (id=955): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="0500130092848b000a00060008021100000100000600100080050000060012"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5.472439057s ago: executing program 6 (id=956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x3c}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) socket$tipc(0x1e, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010779865ca87006754467000000080006"], 0x40}}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 5.32288081s ago: executing program 3 (id=957): openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x40401, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x37, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_pidfd_open(0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 5.317556557s ago: executing program 7 (id=958): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}], 0x1, 0x41) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 5.156091097s ago: executing program 8 (id=959): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) read$FUSE(r0, &(0x7f0000005180)={0x2020}, 0x2020) r5 = getpgid(0x0) r6 = syz_pidfd_open(r5, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xff01, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r7 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f00000005c0)={0x80000000, 0x0, &(0x7f00000003c0)=[{}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r7, 0xc0347c03, &(0x7f00000001c0)={{r9, r8, 0x1, [0x0, 0xf7df]}, {r9, r10, 0x7, [0x6]}, 0x1, [0x8, 0x3df]}) r11 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) openat$ocfs2_control(0xffffff9c, 0x0, 0x210902, 0x0) getresgid(&(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0)) ioctl$EVIOCSKEYCODE_V2(r11, 0x40284504, &(0x7f0000000400)={0x1, 0x0, 0x80, 0x2ff, "b75fc47f994d6d4056b9b835c0a5dd0fcd70131cb9a8f007512701d3987e5821"}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r12) 4.258262948s ago: executing program 2 (id=960): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000011c0), 0x402, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) io_uring_enter(r3, 0x2000, 0xeed, 0x1, 0x0, 0x0) semget$private(0x0, 0x4000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)={0x4, {{0xa, 0x4e20, 0x6, @loopback}}}, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471", 0x36}], 0x1) open$dir(0x0, 0x1, 0x19d) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2002000000000000000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r4) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) 4.234333627s ago: executing program 6 (id=961): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x237}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x5) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0x2, 0x0) 4.060696914s ago: executing program 3 (id=962): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80000) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-aes-aesni)\x00'}, 0x58) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0xfff, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) listen(r1, 0x5) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80047601, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) move_pages(r5, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000100)=[0x0, 0x0], 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x30, 0x0, &(0x7f00000011c0)="b9ffddc10000000000000008888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}, 0x1, 0x0, 0x0, 0x44a839f4917e57a0}, 0x53ec5ff145b70a1b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4054) r7 = socket$nl_generic(0x10, 0x3, 0x10) mount$binderfs(0x0, &(0x7f0000000480)='./binderfs\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB]) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)="06ffc7583e038ced1ae250d26875150c7c82bfaafc591943aae6df3025f77027de2af74211d2f16ac47bbe38b77dda2ab2779687b6ed03c354dd5208feaeb6204d2b0922e1ef7751c3d5") r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001200)={0x28, r8, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000100}, 0x800) openat$tcp_congestion(0xffffff9c, &(0x7f0000002000), 0x1, 0x0) 3.995360596s ago: executing program 7 (id=963): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2c) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2000}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) write$tun(r4, &(0x7f0000000400)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @generic="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"}}, 0x10b) ioctl$TIOCL_SETVESABLANK(r3, 0x560e, &(0x7f0000000140)) ioctl$VT_ACTIVATE(r3, 0x5606, 0x2) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) creat(&(0x7f0000000040)='./file0\x00', 0x4) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCL_BLANKSCREEN(r8, 0x541c, &(0x7f0000000000)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00ba8321ef0000001c0012800b0001006272bb638772c4f0f98d0b3b1000"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x4}}}]}, 0x3c}}, 0x4004000) 1.88980347s ago: executing program 6 (id=964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8d50}]}}]}, 0x44}}, 0x20000000) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000640)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r9, 0x40}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)='\'', 0x14}], 0x1}, 0x4041) 1.672007675s ago: executing program 8 (id=965): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x7ffffffd) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000880)=""/91}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000200)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af24, &(0x7f0000000180)={0x1, 0x4}) 1.1747007s ago: executing program 8 (id=966): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0xf02, &(0x7f0000002100)={0x0, 0x191e}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f00000020c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x2, {0x3, 0x3, 0xbd16, 0x5, 0x8, 0x7f, {0x0, 0x5, 0x7, 0xbed8, 0x6, 0xf, 0xa734, 0x200, 0x7, 0xc890c63e415ce913, 0x101, r4, r5, 0xffff0000, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(0x0, &(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000440), 0x1204002, 0x0) io_uring_enter(r1, 0xf, 0x7929, 0x1, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000400)={0x24, &(0x7f00000001c0)={0x40, 0xa, 0x3, "a3c9af"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.124257265s ago: executing program 3 (id=967): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000006c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 974.846184ms ago: executing program 6 (id=968): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) syz_usb_control_io$hid(r0, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006) 809.345709ms ago: executing program 3 (id=969): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000040), 0x4) 779.41677ms ago: executing program 7 (id=970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x15}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004000) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x7, 0x0, 0x0, 0xe, 0x2, 0x5}, 0x20) write$6lowpan_control(r1, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:10 2', 0x1b) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 437.123216ms ago: executing program 7 (id=971): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="0500130092848b000a00060008021100000100000600100080050000060012"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 436.880744ms ago: executing program 3 (id=972): socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 182.277264ms ago: executing program 5 (id=973): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) getrlimit(0xd, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 83.003336ms ago: executing program 7 (id=974): openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x40401, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x37, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_pidfd_open(0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34383a391a0890e0878f0e1ac6e7049b073c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b33340d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 0s ago: executing program 3 (id=975): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}], 0x1, 0x41) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) kernel console output (not intermixed with test programs): devsim0 [ 232.718771][ T1166] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.718947][ T1166] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.718993][ T1166] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.719067][ T1166] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.727243][ T6991] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 232.734041][ T24] usb 44-1: SetAddress Request (2) to port 0 [ 232.734148][ T24] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 232.749120][ T6991] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 232.749827][ T6991] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 232.799178][ T6991] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 232.808076][ T6991] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 232.818270][ T6991] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 232.986211][ T7235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.293'. [ 233.193806][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.216189][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.432107][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.480324][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.625320][ T6991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.735515][ T6991] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.996017][ T1053] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.003266][ T1053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.063463][ T7242] xt_CT: You must specify a L4 protocol and not use inversions on it [ 234.466599][ T1053] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.473788][ T1053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.975136][ T7248] binder: Unknown parameter '' [ 235.190479][ T7258] netlink: 36 bytes leftover after parsing attributes in process `syz.6.297'. [ 235.908805][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.6.298'. [ 236.678680][ T6991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.484498][ T7288] loop2: detected capacity change from 0 to 40427 [ 237.539946][ T7288] F2FS-fs (loop2): invalid crc value [ 237.641985][ T5983] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 237.669687][ T7288] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 237.686599][ T7288] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 238.305688][ T7214] vhci_hcd: connection reset by peer [ 238.338390][ T1007] vhci_hcd vhci_hcd.5: stop threads [ 238.355137][ T5847] syz-executor: attempt to access beyond end of device [ 238.355137][ T5847] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 238.384521][ T1007] vhci_hcd vhci_hcd.5: release socket [ 238.391485][ T5983] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 238.415082][ T5983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.444873][ T5983] usb 7-1: Product: syz [ 238.446195][ T1007] vhci_hcd vhci_hcd.5: disconnect device [ 238.456874][ T24] usb 44-1: device descriptor read/8, error -110 [ 238.470853][ T5983] usb 7-1: Manufacturer: syz [ 238.474004][ T5847] CPU: 1 UID: 0 PID: 5847 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 238.474056][ T5847] Tainted: [L]=SOFTLOCKUP [ 238.474069][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 238.474093][ T5847] Call Trace: [ 238.474104][ T5847] [ 238.474117][ T5847] dump_stack_lvl+0x100/0x190 [ 238.474163][ T5847] f2fs_stop_checkpoint+0x600/0x9b0 [ 238.474219][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.474265][ T5847] ? errseq_set+0xe3/0x150 [ 238.474322][ T5847] ? errseq_set+0xe3/0x150 [ 238.474379][ T5847] f2fs_write_end_io+0xf59/0x1340 [ 238.474443][ T5847] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 238.474510][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.474564][ T5847] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 238.474624][ T5847] bio_endio+0x78f/0x8f0 [ 238.474672][ T5847] submit_bio_noacct+0x64c/0x2000 [ 238.474744][ T5847] f2fs_submit_write_bio+0x135/0x340 [ 238.474803][ T5847] __submit_merged_bio+0x331/0x780 [ 238.474871][ T5847] __submit_merged_write_cond+0x3fe/0x510 [ 238.474946][ T5847] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 238.475019][ T5847] ? __pfx___might_resched+0x10/0x10 [ 238.475069][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.475124][ T5847] f2fs_write_cache_pages+0x20e9/0x2630 [ 238.475188][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.475234][ T5847] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 238.475278][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.475324][ T5847] ? bpf_ksym_find+0x124/0x1c0 [ 238.475380][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.475424][ T5847] ? __kasan_check_byte+0x13/0x50 [ 238.475479][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.475527][ T5847] ? unwind_next_frame+0x3be/0x2090 [ 238.475582][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.475626][ T5847] ? rcu_is_watching+0x12/0xc0 [ 238.475679][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.475739][ T5847] ? bpf_ksym_find+0x124/0x1c0 [ 238.475847][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.475900][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.475944][ T5847] ? add_lock_to_list+0x99/0x110 [ 238.476004][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.476048][ T5847] ? rcu_is_watching+0x12/0xc0 [ 238.476108][ T5847] f2fs_write_data_pages+0x799/0x16d0 [ 238.476165][ T5847] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 238.476206][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.476261][ T5847] ? do_writepages+0x4b5/0x600 [ 238.476316][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.476366][ T5847] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 238.476413][ T5847] do_writepages+0x278/0x600 [ 238.476476][ T5847] ? __pfx_do_writepages+0x10/0x10 [ 238.476532][ T5847] ? do_raw_spin_unlock+0x145/0x1e0 [ 238.476585][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.476629][ T5847] ? _raw_spin_unlock+0x28/0x50 [ 238.476687][ T5847] filemap_writeback+0x22d/0x2e0 [ 238.476749][ T5847] ? __pfx_filemap_writeback+0x10/0x10 [ 238.476806][ T5847] ? check_noncircular+0x97/0x160 [ 238.476901][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.476945][ T5847] ? find_held_lock+0x2b/0x80 [ 238.477001][ T5847] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 238.477046][ T5847] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 238.477088][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.477145][ T5847] f2fs_sync_dirty_inodes+0x469/0x990 [ 238.477208][ T5847] block_operations+0x2a6/0xfc0 [ 238.477250][ T5847] ? __bfs+0x150/0x2a0 [ 238.477292][ T5847] ? __pfx_block_operations+0x10/0x10 [ 238.477336][ T5847] ? check_noncircular+0x97/0x160 [ 238.477425][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.477475][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.477519][ T5847] ? rcu_is_watching+0x12/0xc0 [ 238.477571][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.477624][ T5847] f2fs_write_checkpoint+0x582/0x5550 [ 238.477677][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.477721][ T5847] ? _raw_spin_unlock_irq+0x2e/0x50 [ 238.477771][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.477815][ T5847] ? __wait_for_common+0x1f3/0x4c0 [ 238.477872][ T5847] ? __pfx_schedule_timeout+0x10/0x10 [ 238.477934][ T5847] ? __pfx___wait_for_common+0x10/0x10 [ 238.477993][ T5847] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 238.478050][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.478094][ T5847] ? rcu_is_watching+0x12/0xc0 [ 238.478146][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.478190][ T5847] ? kthread_stop+0x280/0x640 [ 238.478234][ T5847] kill_f2fs_super+0x3f1/0x4a0 [ 238.478278][ T5847] ? __pfx_kill_f2fs_super+0x10/0x10 [ 238.478343][ T5847] ? lockdep_hardirqs_on+0x78/0x100 [ 238.478400][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.478446][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.478506][ T5847] deactivate_locked_super+0xc1/0x1b0 [ 238.478560][ T5847] deactivate_super+0xe7/0x110 [ 238.478614][ T5847] cleanup_mnt+0x21f/0x450 [ 238.478676][ T5847] task_work_run+0x150/0x240 [ 238.478724][ T5847] ? __pfx_task_work_run+0x10/0x10 [ 238.478772][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.478816][ T5847] ? rcu_is_watching+0x12/0xc0 [ 238.478876][ T5847] exit_to_user_mode_loop+0x100/0x4a0 [ 238.478926][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.478976][ T5847] do_syscall_64+0x706/0xf80 [ 238.479033][ T5847] ? irqentry_exit+0x117/0x790 [ 238.479095][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.479133][ T5847] RIP: 0033:0x7fe1d4f9e017 [ 238.479162][ T5847] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 238.479197][ T5847] RSP: 002b:00007ffdfb562e88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 238.479230][ T5847] RAX: 0000000000000000 RBX: 00007fe1d5032120 RCX: 00007fe1d4f9e017 [ 238.479253][ T5847] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdfb562f40 [ 238.479276][ T5847] RBP: 00007ffdfb562f40 R08: 00007ffdfb563f40 R09: 00000000ffffffff [ 238.479299][ T5847] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdfb563fd0 [ 238.479322][ T5847] R13: 00007fe1d5032120 R14: 000000000003a101 R15: 00007ffdfb564010 [ 238.479371][ T5847] [ 238.500209][ T5847] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 239.434868][ T5983] usb 7-1: SerialNumber: syz [ 240.392656][ T24] usb usb44-port1: attempt power cycle [ 241.013244][ T7307] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 241.022008][ T7307] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 241.033622][ T7307] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 241.090371][ T5983] usb 7-1: config 0 descriptor?? [ 241.176776][ T5983] usb 7-1: can't set config #0, error -71 [ 241.219159][ T5983] usb 7-1: USB disconnect, device number 2 [ 241.504831][ T6991] veth0_vlan: entered promiscuous mode [ 241.532793][ T24] usb usb44-port1: unable to enumerate USB device [ 241.578164][ T6991] veth1_vlan: entered promiscuous mode [ 241.879342][ T7322] netlink: 36 bytes leftover after parsing attributes in process `syz.6.310'. [ 242.019759][ T6991] veth0_macvtap: entered promiscuous mode [ 242.440095][ T6991] veth1_macvtap: entered promiscuous mode [ 242.879392][ T6991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.942608][ T6991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.983307][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.023121][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.061288][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.143572][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.066838][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.144734][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.325584][ T7357] loop4: detected capacity change from 0 to 7 [ 244.416591][ T7358] trusted_key: encrypted_key: keylen parameter is missing [ 244.511529][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 245.103416][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.144285][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.267487][ T29] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 245.340246][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.376162][ T29] usb 5-1: Product: syz [ 245.406892][ T29] usb 5-1: Manufacturer: syz [ 245.431435][ T29] usb 5-1: SerialNumber: syz [ 245.487821][ T29] usb 5-1: config 0 descriptor?? [ 245.602733][ T7375] netlink: 36 bytes leftover after parsing attributes in process `syz.6.323'. [ 245.725129][ T29] usb 5-1: USB disconnect, device number 3 [ 245.849721][ T6044] IPVS: starting estimator thread 0... [ 245.891216][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.310971][ T7386] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.815753][ T7381] IPVS: using max 22 ests per chain, 52800 per kthread [ 247.141058][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.325'. [ 247.324045][ T5939] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 247.508772][ T5939] usb 7-1: Using ep0 maxpacket: 8 [ 247.525162][ T5939] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 247.558060][ T5939] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 247.625896][ T5939] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 247.662778][ T5939] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 247.708505][ T5939] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.765497][ T5939] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 247.802957][ T5939] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.910957][ T7417] loop2: detected capacity change from 0 to 40427 [ 248.942992][ T7417] F2FS-fs (loop2): invalid crc value [ 249.060112][ T7417] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 249.076608][ T7417] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 249.093086][ T2053] usb 7-1: USB disconnect, device number 3 [ 250.151204][ T5847] syz-executor: attempt to access beyond end of device [ 250.151204][ T5847] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 250.196303][ T5847] CPU: 1 UID: 0 PID: 5847 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 250.196357][ T5847] Tainted: [L]=SOFTLOCKUP [ 250.196370][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 250.196392][ T5847] Call Trace: [ 250.196404][ T5847] [ 250.196417][ T5847] dump_stack_lvl+0x100/0x190 [ 250.196464][ T5847] f2fs_stop_checkpoint+0x600/0x9b0 [ 250.196527][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.196574][ T5847] ? errseq_set+0xe3/0x150 [ 250.196635][ T5847] ? errseq_set+0xe3/0x150 [ 250.196696][ T5847] f2fs_write_end_io+0xf59/0x1340 [ 250.196759][ T5847] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 250.196812][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.196855][ T5847] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 250.196901][ T5847] bio_endio+0x78f/0x8f0 [ 250.196940][ T5847] submit_bio_noacct+0x64c/0x2000 [ 250.196997][ T5847] f2fs_submit_write_bio+0x135/0x340 [ 250.197043][ T5847] __submit_merged_bio+0x331/0x780 [ 250.197097][ T5847] __submit_merged_write_cond+0x3fe/0x510 [ 250.197156][ T5847] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 250.197213][ T5847] ? __pfx___might_resched+0x10/0x10 [ 250.197252][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.197296][ T5847] f2fs_write_cache_pages+0x20e9/0x2630 [ 250.197351][ T5847] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 250.197385][ T5847] ? unwind_next_frame+0x3c8/0x2090 [ 250.197425][ T5847] ? exit_to_user_mode_loop+0x100/0x4a0 [ 250.197466][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.197499][ T5847] ? __kasan_check_byte+0x13/0x50 [ 250.197540][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.197575][ T5847] ? unwind_next_frame+0x3be/0x2090 [ 250.197614][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.197647][ T5847] ? rcu_is_watching+0x12/0xc0 [ 250.197687][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.197736][ T5847] ? bpf_ksym_find+0x124/0x1c0 [ 250.197828][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.197865][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.197899][ T5847] ? add_lock_to_list+0x99/0x110 [ 250.197945][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.197979][ T5847] ? rcu_is_watching+0x12/0xc0 [ 250.198026][ T5847] f2fs_write_data_pages+0x799/0x16d0 [ 250.198071][ T5847] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 250.198103][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.198149][ T5847] ? do_writepages+0x4b5/0x600 [ 250.198192][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.198231][ T5847] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 250.198268][ T5847] do_writepages+0x278/0x600 [ 250.198317][ T5847] ? __pfx_do_writepages+0x10/0x10 [ 250.198359][ T5847] ? do_raw_spin_unlock+0x145/0x1e0 [ 250.198400][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.198434][ T5847] ? _raw_spin_unlock+0x28/0x50 [ 250.198478][ T5847] filemap_writeback+0x22d/0x2e0 [ 250.198527][ T5847] ? __pfx_filemap_writeback+0x10/0x10 [ 250.198571][ T5847] ? check_noncircular+0x97/0x160 [ 250.198647][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.198682][ T5847] ? find_held_lock+0x2b/0x80 [ 250.198724][ T5847] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 250.198759][ T5847] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 250.198791][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.198836][ T5847] f2fs_sync_dirty_inodes+0x469/0x990 [ 250.198888][ T5847] block_operations+0x2a6/0xfc0 [ 250.198920][ T5847] ? __bfs+0x150/0x2a0 [ 250.198954][ T5847] ? __pfx_block_operations+0x10/0x10 [ 250.198988][ T5847] ? check_noncircular+0x97/0x160 [ 250.199063][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.199102][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.199136][ T5847] ? rcu_is_watching+0x12/0xc0 [ 250.199179][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.199220][ T5847] f2fs_write_checkpoint+0x582/0x5550 [ 250.199262][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.199295][ T5847] ? _raw_spin_unlock_irq+0x2e/0x50 [ 250.199334][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.199368][ T5847] ? __wait_for_common+0x1f3/0x4c0 [ 250.199411][ T5847] ? __pfx_schedule_timeout+0x10/0x10 [ 250.199455][ T5847] ? __pfx___wait_for_common+0x10/0x10 [ 250.199501][ T5847] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 250.199546][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.199580][ T5847] ? rcu_is_watching+0x12/0xc0 [ 250.199620][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.199653][ T5847] ? kthread_stop+0x280/0x640 [ 250.199688][ T5847] kill_f2fs_super+0x3f1/0x4a0 [ 250.199722][ T5847] ? __pfx_kill_f2fs_super+0x10/0x10 [ 250.199775][ T5847] ? lockdep_hardirqs_on+0x78/0x100 [ 250.199818][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.199853][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.199902][ T5847] deactivate_locked_super+0xc1/0x1b0 [ 250.199944][ T5847] deactivate_super+0xe7/0x110 [ 250.199985][ T5847] cleanup_mnt+0x21f/0x450 [ 250.200034][ T5847] task_work_run+0x150/0x240 [ 250.200071][ T5847] ? __pfx_task_work_run+0x10/0x10 [ 250.200108][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.200145][ T5847] ? rcu_is_watching+0x12/0xc0 [ 250.200192][ T5847] exit_to_user_mode_loop+0x100/0x4a0 [ 250.200225][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 250.200264][ T5847] do_syscall_64+0x706/0xf80 [ 250.200307][ T5847] ? irqentry_exit+0x117/0x790 [ 250.200356][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.200385][ T5847] RIP: 0033:0x7fe1d4f9e017 [ 250.200408][ T5847] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 250.200434][ T5847] RSP: 002b:00007ffdfb562e88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 250.200460][ T5847] RAX: 0000000000000000 RBX: 00007fe1d5032120 RCX: 00007fe1d4f9e017 [ 250.200477][ T5847] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdfb562f40 [ 250.200494][ T5847] RBP: 00007ffdfb562f40 R08: 00007ffdfb563f40 R09: 00000000ffffffff [ 250.200512][ T5847] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdfb563fd0 [ 250.200529][ T5847] R13: 00007fe1d5032120 R14: 000000000003cf5b R15: 00007ffdfb564010 [ 250.200570][ T5847] [ 250.786297][ T5847] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 251.098828][ T5939] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 251.212985][ T7442] xt_CT: You must specify a L4 protocol and not use inversions on it [ 251.277526][ T5939] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 251.287899][ T5939] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 251.302002][ T5939] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.311085][ T5939] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.330479][ T5939] usb 8-1: config 0 descriptor?? [ 251.339983][ T5939] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 251.612459][ T7437] Bluetooth: MGMT ver 1.23 [ 252.443895][ T7462] netlink: 24 bytes leftover after parsing attributes in process `syz.6.343'. [ 252.828161][ T7470] netlink: 36 bytes leftover after parsing attributes in process `syz.2.338'. [ 253.830187][ T7489] loop5: detected capacity change from 0 to 40427 [ 253.918194][ T7489] F2FS-fs (loop5): invalid crc value [ 254.017645][ T7489] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 254.034442][ T7489] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 255.071323][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.079378][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.279236][ T5848] syz-executor: attempt to access beyond end of device [ 255.279236][ T5848] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 255.389269][ T5848] CPU: 1 UID: 0 PID: 5848 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 255.389325][ T5848] Tainted: [L]=SOFTLOCKUP [ 255.389338][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 255.389360][ T5848] Call Trace: [ 255.389371][ T5848] [ 255.389384][ T5848] dump_stack_lvl+0x100/0x190 [ 255.389430][ T5848] f2fs_stop_checkpoint+0x600/0x9b0 [ 255.389487][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.389533][ T5848] ? errseq_set+0xe3/0x150 [ 255.389590][ T5848] ? errseq_set+0xe3/0x150 [ 255.389647][ T5848] f2fs_write_end_io+0xf59/0x1340 [ 255.389712][ T5848] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 255.389784][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.389850][ T5848] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 255.389916][ T5848] bio_endio+0x78f/0x8f0 [ 255.389966][ T5848] submit_bio_noacct+0x64c/0x2000 [ 255.390039][ T5848] f2fs_submit_write_bio+0x135/0x340 [ 255.390100][ T5848] __submit_merged_bio+0x331/0x780 [ 255.390169][ T5848] __submit_merged_write_cond+0x3fe/0x510 [ 255.390242][ T5848] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 255.390319][ T5848] ? __pfx___might_resched+0x10/0x10 [ 255.390371][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.390427][ T5848] f2fs_write_cache_pages+0x20e9/0x2630 [ 255.390495][ T5848] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 255.390540][ T5848] ? unwind_next_frame+0x3c8/0x2090 [ 255.390593][ T5848] ? exit_to_user_mode_loop+0x100/0x4a0 [ 255.390646][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.390692][ T5848] ? __kasan_check_byte+0x13/0x50 [ 255.390747][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.390794][ T5848] ? unwind_next_frame+0x3be/0x2090 [ 255.390846][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.390897][ T5848] ? rcu_is_watching+0x12/0xc0 [ 255.390951][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.391012][ T5848] ? bpf_ksym_find+0x124/0x1c0 [ 255.391122][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.391171][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.391216][ T5848] ? add_lock_to_list+0x99/0x110 [ 255.391278][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.391323][ T5848] ? rcu_is_watching+0x12/0xc0 [ 255.391387][ T5848] f2fs_write_data_pages+0x799/0x16d0 [ 255.391445][ T5848] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 255.391487][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.391542][ T5848] ? do_writepages+0x4b5/0x600 [ 255.391599][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.391650][ T5848] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 255.391698][ T5848] do_writepages+0x278/0x600 [ 255.391763][ T5848] ? __pfx_do_writepages+0x10/0x10 [ 255.391820][ T5848] ? do_raw_spin_unlock+0x145/0x1e0 [ 255.391874][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.391925][ T5848] ? _raw_spin_unlock+0x28/0x50 [ 255.391984][ T5848] filemap_writeback+0x22d/0x2e0 [ 255.392048][ T5848] ? __pfx_filemap_writeback+0x10/0x10 [ 255.392107][ T5848] ? check_noncircular+0x97/0x160 [ 255.392198][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.392243][ T5848] ? find_held_lock+0x2b/0x80 [ 255.392300][ T5848] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 255.392346][ T5848] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 255.392389][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.392447][ T5848] f2fs_sync_dirty_inodes+0x469/0x990 [ 255.392512][ T5848] block_operations+0x2a6/0xfc0 [ 255.392554][ T5848] ? __bfs+0x150/0x2a0 [ 255.392596][ T5848] ? __pfx_block_operations+0x10/0x10 [ 255.392641][ T5848] ? check_noncircular+0x97/0x160 [ 255.392731][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.392782][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.392828][ T5848] ? rcu_is_watching+0x12/0xc0 [ 255.392881][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.392937][ T5848] f2fs_write_checkpoint+0x582/0x5550 [ 255.392991][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.393037][ T5848] ? _raw_spin_unlock_irq+0x2e/0x50 [ 255.393089][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.393134][ T5848] ? __wait_for_common+0x1f3/0x4c0 [ 255.393193][ T5848] ? __pfx_schedule_timeout+0x10/0x10 [ 255.393249][ T5848] ? __pfx___wait_for_common+0x10/0x10 [ 255.393311][ T5848] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 255.393368][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.393414][ T5848] ? rcu_is_watching+0x12/0xc0 [ 255.393467][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.393512][ T5848] ? kthread_stop+0x280/0x640 [ 255.393557][ T5848] kill_f2fs_super+0x3f1/0x4a0 [ 255.393603][ T5848] ? __pfx_kill_f2fs_super+0x10/0x10 [ 255.393669][ T5848] ? lockdep_hardirqs_on+0x78/0x100 [ 255.393727][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.393774][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.393835][ T5848] deactivate_locked_super+0xc1/0x1b0 [ 255.393895][ T5848] deactivate_super+0xe7/0x110 [ 255.393949][ T5848] cleanup_mnt+0x21f/0x450 [ 255.394014][ T5848] task_work_run+0x150/0x240 [ 255.394062][ T5848] ? __pfx_task_work_run+0x10/0x10 [ 255.394111][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.394156][ T5848] ? rcu_is_watching+0x12/0xc0 [ 255.394216][ T5848] exit_to_user_mode_loop+0x100/0x4a0 [ 255.394261][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.394312][ T5848] do_syscall_64+0x706/0xf80 [ 255.394371][ T5848] ? irqentry_exit+0x117/0x790 [ 255.394435][ T5848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.394473][ T5848] RIP: 0033:0x7f107a99e017 [ 255.394502][ T5848] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 255.394538][ T5848] RSP: 002b:00007ffca8867bc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 255.394573][ T5848] RAX: 0000000000000000 RBX: 00007f107aa32120 RCX: 00007f107a99e017 [ 255.394597][ T5848] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca8867c80 [ 255.394620][ T5848] RBP: 00007ffca8867c80 R08: 00007ffca8868c80 R09: 00000000ffffffff [ 255.394644][ T5848] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffca8868d10 [ 255.394667][ T5848] R13: 00007f107aa32120 R14: 000000000003e260 R15: 00007ffca8868d50 [ 255.394717][ T5848] [ 256.107735][ T5848] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 256.417266][ T7514] netlink: 24 bytes leftover after parsing attributes in process `syz.2.357'. [ 256.853186][ T6044] usb 8-1: USB disconnect, device number 2 [ 257.105699][ T7526] netlink: 16 bytes leftover after parsing attributes in process `syz.7.362'. [ 257.708716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 257.950854][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 257.950873][ T30] audit: type=1326 audit(1777027113.766:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7547 comm="syz.5.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 258.214244][ T30] audit: type=1326 audit(1777027113.766:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7547 comm="syz.5.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 258.430240][ T30] audit: type=1326 audit(1777027113.766:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7547 comm="syz.5.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 258.498248][ T30] audit: type=1326 audit(1777027113.766:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7547 comm="syz.5.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 258.781166][ T30] audit: type=1326 audit(1777027113.766:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7547 comm="syz.5.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 258.820973][ T30] audit: type=1326 audit(1777027113.766:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7547 comm="syz.5.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 259.580855][ T30] audit: type=1326 audit(1777027113.766:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7547 comm="syz.5.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 260.117303][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.371'. [ 260.157213][ T30] audit: type=1326 audit(1777027113.766:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7547 comm="syz.5.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 260.189868][ T7567] netlink: 12 bytes leftover after parsing attributes in process `syz.5.371'. [ 260.342568][ T7570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.372'. [ 260.395993][ T7537] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 260.425909][ T7537] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 260.535917][ T7537] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 260.573077][ T7538] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 260.599480][ T7537] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 260.695205][ T7538] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 260.739070][ T7537] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 260.771845][ T7538] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 260.787626][ T7538] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 260.802968][ T7537] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 261.133522][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.373'. [ 261.841020][ T7537] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 262.861428][ T5158] Bluetooth: hci3: command 0x0c1a tx timeout [ 262.867507][ T5158] Bluetooth: hci1: command 0x0c1a tx timeout [ 263.026219][ T7537] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 263.295433][ T7538] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 263.518979][ T7538] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 263.571238][ T7538] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 263.834714][ T7538] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 264.933105][ T5158] Bluetooth: hci1: command 0x0c1a tx timeout [ 265.581429][ T5158] Bluetooth: hci6: command 0x0c1a tx timeout [ 267.649152][ T5158] Bluetooth: hci1: command 0x0c1a tx timeout [ 267.655357][ T5158] Bluetooth: hci6: command 0x0c1a tx timeout [ 268.068029][ T7537] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 268.081406][ T7537] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 268.110455][ T7537] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 268.176283][ T7537] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 268.200487][ T7629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.387'. [ 268.363867][ T7629] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 268.445561][ T7629] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 268.683213][ T7639] netlink: 20 bytes leftover after parsing attributes in process `syz.5.388'. [ 268.746249][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.5.388'. [ 268.892290][ T5946] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 269.095292][ T5946] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.138858][ T5946] usb 8-1: config 0 has no interfaces? [ 269.160749][ T5946] usb 8-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 269.183628][ T5946] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.314037][ T5946] usb 8-1: config 0 descriptor?? [ 269.549382][ T7640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.588497][ T7640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.683340][ T5946] usb 8-1: USB disconnect, device number 3 [ 272.762986][ T7683] binder: Unknown parameter '' [ 272.826110][ T7682] netlink: 'syz.7.402': attribute type 4 has an invalid length. [ 272.953473][ T7687] netlink: 'syz.7.402': attribute type 4 has an invalid length. [ 274.056811][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.150566][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.158575][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.406029][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.441162][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.458697][ T5158] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.466308][ T5158] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.473707][ T5158] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.484764][ T5158] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.495928][ T5158] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.824042][ T7704] smc: net device bond0 applied user defined pnetid SYZ2 [ 275.271223][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.5.410'. [ 275.303011][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.5.410'. [ 275.320202][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.5.410'. [ 275.351060][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.5.410'. [ 275.746066][ T7705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.406'. [ 276.538116][ T5158] Bluetooth: hci2: command tx timeout [ 277.780854][ T7697] chnl_net:caif_netlink_parms(): no params data found [ 277.998274][ T7755] binder: Unknown parameter '' [ 278.611867][ T5158] Bluetooth: hci2: command tx timeout [ 279.634677][ T7697] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.687123][ T7697] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.751586][ T7697] bridge_slave_0: entered allmulticast mode [ 279.786626][ T7697] bridge_slave_0: entered promiscuous mode [ 279.869834][ T7697] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.907654][ T7697] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.148669][ T7697] bridge_slave_1: entered allmulticast mode [ 280.157559][ T7697] bridge_slave_1: entered promiscuous mode [ 280.216908][ T7784] loop3: detected capacity change from 0 to 16 [ 280.244280][ T7697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.318805][ T7697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.691447][ T5158] Bluetooth: hci2: command tx timeout [ 280.937892][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.6.429'. [ 281.177983][ T7697] team0: Port device team_slave_0 added [ 281.495955][ T1053] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.640409][ T7697] team0: Port device team_slave_1 added [ 281.756354][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.6.434'. [ 281.827933][ T1053] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.861476][ T6044] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 281.914106][ T7825] netlink: 12 bytes leftover after parsing attributes in process `syz.5.432'. [ 282.019621][ T7697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.044946][ T7697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.055266][ T6044] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.103147][ T7697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.179979][ T6044] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.229744][ T6044] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 282.258453][ T7834] binder: Unknown parameter '' [ 282.268912][ T6044] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.287674][ T6044] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.310940][ T6044] usb 8-1: config 0 descriptor?? [ 282.554920][ T1053] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.619808][ T7697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.635172][ T7697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.677205][ T7697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.773139][ T5158] Bluetooth: hci2: command tx timeout [ 282.827609][ T1053] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.377816][ T7697] hsr_slave_0: entered promiscuous mode [ 283.390288][ T7697] hsr_slave_1: entered promiscuous mode [ 283.406117][ T7697] debugfs: 'hsr0' already exists in 'hsr' [ 283.420946][ T7860] loop3: detected capacity change from 0 to 16 [ 283.442599][ T7697] Cannot create hsr debugfs directory [ 283.738588][ T6044] usbhid 8-1:0.0: can't add hid device: -71 [ 283.771702][ T6044] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 283.837159][ T6044] usb 8-1: USB disconnect, device number 4 [ 283.921435][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 284.102411][ T9] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 284.152327][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.188056][ T9] usb 7-1: Product: syz [ 284.193520][ T9] usb 7-1: Manufacturer: syz [ 284.212241][ T9] usb 7-1: SerialNumber: syz [ 284.251471][ T9] usb 7-1: config 0 descriptor?? [ 284.268472][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.448'. [ 284.524775][ T1053] bridge_slave_1: left allmulticast mode [ 284.549930][ T9] usb 7-1: USB disconnect, device number 4 [ 284.560416][ T1053] bridge_slave_1: left promiscuous mode [ 284.596744][ T1053] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.673442][ T1053] bridge_slave_0: left allmulticast mode [ 284.690430][ T1053] bridge_slave_0: left promiscuous mode [ 284.713778][ T1053] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.842716][ T5868] udevd[5868]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.857287][ T7891] binder: Unknown parameter '' [ 284.875246][ T6044] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 285.061479][ T6044] usb 6-1: Using ep0 maxpacket: 8 [ 285.081971][ T6044] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 285.100319][ T6044] usb 6-1: config 0 has no interface number 0 [ 285.118595][ T6044] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 285.143794][ T6044] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 285.179960][ T6044] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 285.211394][ T6044] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 285.242661][ T6044] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 285.256291][ T6044] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.280188][ T6044] usb 6-1: config 0 descriptor?? [ 285.314068][ T6044] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 285.505066][ T1053] smc: removing net device bond0 with user defined pnetid SYZ2 [ 285.523831][ T1053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.526216][ T6044] usb 6-1: USB disconnect, device number 4 [ 285.555678][ T1053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.571046][ T6044] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 285.581875][ T1053] bond0 (unregistering): Released all slaves [ 285.647772][ T7905] smc: net device bond0 applied user defined pnetid SYZ2 [ 286.442448][ T1053] hsr_slave_0: left promiscuous mode [ 286.457658][ T1053] hsr_slave_1: left promiscuous mode [ 286.479238][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.523164][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.533176][ T2053] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 286.563310][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.596889][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.659256][ T1053] veth0_macvtap: left promiscuous mode [ 286.676183][ T1053] veth1_vlan: left promiscuous mode [ 286.687444][ T1053] veth0_vlan: left promiscuous mode [ 286.705044][ T2053] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.736950][ T2053] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.770912][ T2053] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 286.809283][ T2053] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 286.830023][ T2053] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.876688][ T2053] usb 8-1: config 0 descriptor?? [ 287.032771][ T29] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 287.228213][ T29] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 287.259882][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.284314][ T29] usb 6-1: Product: syz [ 287.308863][ T29] usb 6-1: Manufacturer: syz [ 287.321436][ T29] usb 6-1: SerialNumber: syz [ 287.337601][ T29] usb 6-1: config 0 descriptor?? [ 288.219094][ T29] usb 6-1: USB disconnect, device number 5 [ 288.371419][ T2053] usbhid 8-1:0.0: can't add hid device: -71 [ 288.379590][ T2053] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 288.402735][ T5868] udevd[5868]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.442846][ T2053] usb 8-1: USB disconnect, device number 5 [ 288.750215][ T1053] team0 (unregistering): Port device team_slave_1 removed [ 288.778792][ T1053] team0 (unregistering): Port device team_slave_0 removed [ 289.121038][ T5502] 8021q: adding VLAN 0 to HW filter on device eth9 [ 289.873710][ T7697] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 289.935273][ T7697] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 289.984089][ T7697] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 290.034838][ T7969] fuse: Bad value for 'fd' [ 290.150787][ T7697] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 290.225320][ T7697] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 290.301265][ T7697] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 290.327696][ T7697] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 290.394918][ T7697] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 293.056499][ T7999] autofs: Unknown parameter '' [ 293.212605][ T7697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.336061][ T7697] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.406362][ T1053] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.413575][ T1053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.545540][ T30] audit: type=1326 audit(1777027150.366:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8018 comm="syz.5.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 294.649542][ T30] audit: type=1326 audit(1777027150.386:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8018 comm="syz.5.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 294.651916][ T1053] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.678858][ T1053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.015780][ T30] audit: type=1326 audit(1777027150.396:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8018 comm="syz.5.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 295.087371][ T30] audit: type=1326 audit(1777027150.396:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8018 comm="syz.5.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 295.157882][ T5853] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 295.187641][ T8031] ceph: Path missing in source [ 296.002337][ T30] audit: type=1326 audit(1777027150.406:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8018 comm="syz.5.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 296.098080][ T5853] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.188171][ T5853] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.210266][ T30] audit: type=1326 audit(1777027150.406:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8018 comm="syz.5.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 296.236118][ T5853] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 296.273222][ T5853] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 296.303542][ T30] audit: type=1326 audit(1777027150.416:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8018 comm="syz.5.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 296.329343][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.6.488'. [ 296.348032][ T5853] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.390573][ T5853] usb 8-1: config 0 descriptor?? [ 297.540328][ T5853] usbhid 8-1:0.0: can't add hid device: -71 [ 297.556764][ T5853] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 297.586317][ T5853] usb 8-1: USB disconnect, device number 6 [ 297.589987][ T8049] fuse: Bad value for 'fd' [ 298.131604][ T6044] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 298.494427][ T6044] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 298.533704][ T6044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.567545][ T6044] usb 3-1: Product: syz [ 298.577104][ T6044] usb 3-1: Manufacturer: syz [ 298.598595][ T6044] usb 3-1: SerialNumber: syz [ 298.654985][ T6044] usb 3-1: config 0 descriptor?? [ 298.771990][ T7697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.901152][ T6044] usb 3-1: USB disconnect, device number 7 [ 300.011419][ T30] audit: type=1326 audit(1777027155.826:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.5.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 300.086785][ T5868] udevd[5868]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.101397][ T30] audit: type=1326 audit(1777027155.836:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.5.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 300.193567][ T30] audit: type=1326 audit(1777027155.836:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.5.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 300.202857][ T8085] smc: net device bond0 applied user defined pnetid SYZ2 [ 300.322124][ T30] audit: type=1326 audit(1777027155.836:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.5.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 300.517085][ T8092] autofs: Unknown parameter '' [ 300.665061][ T30] audit: type=1326 audit(1777027155.846:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.5.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 300.717455][ T8097] loop6: detected capacity change from 0 to 16 [ 300.927051][ T8101] fuse: Bad value for 'fd' [ 301.195662][ T7697] veth0_vlan: entered promiscuous mode [ 301.255324][ T7697] veth1_vlan: entered promiscuous mode [ 301.418011][ T7697] veth0_macvtap: entered promiscuous mode [ 301.474704][ T7697] veth1_macvtap: entered promiscuous mode [ 301.565752][ T7697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.645306][ T7697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.708522][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.742348][ T48] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.779886][ T8115] netlink: 12 bytes leftover after parsing attributes in process `syz.7.508'. [ 301.812563][ T5932] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 301.812827][ T48] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.871032][ T48] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.012741][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.059331][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.102667][ T5932] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 302.262786][ T6257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.326304][ T6257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.380741][ T5932] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 302.391509][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.402981][ T5932] usb 6-1: config 0 descriptor?? [ 302.527017][ T6257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.578282][ T6257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.839358][ T30] audit: type=1326 audit(1777027158.656:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.2.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d4f9cdd9 code=0x7ffc0000 [ 302.917654][ T30] audit: type=1326 audit(1777027158.656:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.2.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d4f9cdd9 code=0x7ffc0000 [ 302.957236][ T30] audit: type=1326 audit(1777027158.686:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.2.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fe1d4f9cdd9 code=0x7ffc0000 [ 303.087893][ T8143] autofs: Unknown parameter '' [ 303.138065][ T30] audit: type=1326 audit(1777027158.686:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.2.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d4f9cdd9 code=0x7ffc0000 [ 303.160504][ T30] audit: type=1326 audit(1777027158.696:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8134 comm="syz.2.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fe1d4f9cdd9 code=0x7ffc0000 [ 304.457036][ T5932] usbhid 6-1:0.0: can't add hid device: -71 [ 304.463130][ T5932] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 304.495095][ T5932] usb 6-1: USB disconnect, device number 6 [ 305.037860][ T8176] binder: Unknown parameter '' [ 305.210354][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.521'. [ 306.065912][ T8198] netlink: 36 bytes leftover after parsing attributes in process `syz.7.526'. [ 307.288472][ T8214] autofs: Unknown parameter '' [ 307.537195][ T8215] delete_channel: no stack [ 307.741405][ T5853] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 307.934769][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.936847][ T5502] 8021q: adding VLAN 0 to HW filter on device eth10 [ 307.969031][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.999790][ T5853] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 308.030770][ T5853] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 308.072202][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.115604][ T5853] usb 3-1: config 0 descriptor?? [ 309.024262][ T5853] usbhid 3-1:0.0: can't add hid device: -71 [ 309.055747][ T5853] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 309.104246][ T5853] usb 3-1: USB disconnect, device number 8 [ 310.165397][ T8261] binder: Unknown parameter '' [ 310.802728][ T8277] warning: `syz.2.545' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 312.131443][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 313.292418][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 314.288641][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 314.321402][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 314.549582][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 314.562176][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.577449][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 314.586797][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.523256][ T9] usb 3-1: usb_control_msg returned -71 [ 315.583206][ T9] usbtmc 3-1:16.0: can't read capabilities [ 315.715414][ T9] usb 3-1: USB disconnect, device number 9 [ 315.737206][ T8324] binder: Unknown parameter '' [ 316.459818][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.468016][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.513295][ T8355] netlink: 16 bytes leftover after parsing attributes in process `syz.7.569'. [ 317.583651][ T8353] loop5: detected capacity change from 0 to 16 [ 318.817035][ T8385] binder: Unknown parameter '' [ 319.745537][ T8408] virt_wifi0: entered promiscuous mode [ 319.759716][ T8408] virt_wifi0: entered allmulticast mode [ 320.387691][ T8421] loop7: detected capacity change from 0 to 16 [ 320.576939][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.585'. [ 320.770128][ T8432] binder: Unknown parameter '' [ 321.081202][ T8429] Unknown options in mask b7f2 [ 321.399027][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.590'. [ 323.141599][ T8465] autofs: Unknown parameter '' [ 324.796352][ T8491] netlink: 'syz.7.603': attribute type 39 has an invalid length. [ 325.474882][ T8502] xt_CT: You must specify a L4 protocol and not use inversions on it [ 326.109475][ T8503] autofs: Unknown parameter '' [ 326.473929][ T8500] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 326.487456][ T8509] netlink: 168 bytes leftover after parsing attributes in process `syz.8.606'. [ 327.350211][ T8521] could not allocate digest TFM handle [ 328.021475][ T8534] binder: Unknown parameter '' [ 328.273612][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.612'. [ 329.182926][ T8556] netlink: 48 bytes leftover after parsing attributes in process `syz.7.614'. [ 329.689860][ T5502] 8021q: adding VLAN 0 to HW filter on device eth11 [ 331.556139][ T8593] binder: Unknown parameter '' [ 332.361207][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.6.628'. [ 332.414982][ T8602] autofs: Unknown parameter '' [ 332.537638][ T8607] fuse: Bad value for 'fd' [ 333.542303][ T8628] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.747154][ T5502] 8021q: adding VLAN 0 to HW filter on device eth12 [ 334.331409][ T2053] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 334.482024][ T2053] usb 9-1: device descriptor read/64, error -71 [ 334.773763][ T2053] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 334.951598][ T2053] usb 9-1: device descriptor read/64, error -71 [ 335.052348][ T8650] binder: Unknown parameter '' [ 335.073727][ T2053] usb usb9-port1: attempt power cycle [ 335.261474][ T5853] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 335.431659][ T2053] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 335.454847][ T5853] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.490657][ T5853] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.521804][ T2053] usb 9-1: device descriptor read/8, error -71 [ 335.531865][ T5853] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 335.577019][ T5853] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 335.607209][ T5853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.650018][ T8660] autofs: Unknown parameter '' [ 335.652646][ T5853] usb 7-1: config 0 descriptor?? [ 335.708889][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.645'. [ 335.761453][ T2053] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 335.792572][ T2053] usb 9-1: device descriptor read/8, error -71 [ 335.884164][ T8669] fuse: Bad value for 'fd' [ 335.912435][ T2053] usb usb9-port1: unable to enumerate USB device [ 336.324779][ T8680] netlink: 12 bytes leftover after parsing attributes in process `syz.5.649'. [ 336.526081][ T8678] loop2: detected capacity change from 0 to 40427 [ 336.551604][ T8678] F2FS-fs (loop2): invalid crc value [ 336.652834][ T8678] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 336.673685][ T5853] usbhid 7-1:0.0: can't add hid device: -71 [ 336.684519][ T8678] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 336.710240][ T5853] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 337.220630][ T5853] usb 7-1: USB disconnect, device number 5 [ 337.494753][ T5847] syz-executor: attempt to access beyond end of device [ 337.494753][ T5847] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 337.569717][ T5847] CPU: 1 UID: 0 PID: 5847 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 337.569774][ T5847] Tainted: [L]=SOFTLOCKUP [ 337.569787][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 337.569810][ T5847] Call Trace: [ 337.569822][ T5847] [ 337.569848][ T5847] dump_stack_lvl+0x100/0x190 [ 337.569896][ T5847] f2fs_stop_checkpoint+0x600/0x9b0 [ 337.569961][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.570008][ T5847] ? errseq_set+0xe3/0x150 [ 337.570071][ T5847] ? errseq_set+0xe3/0x150 [ 337.570129][ T5847] f2fs_write_end_io+0xf59/0x1340 [ 337.570196][ T5847] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 337.570266][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.570326][ T5847] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 337.570389][ T5847] bio_endio+0x78f/0x8f0 [ 337.570438][ T5847] submit_bio_noacct+0x64c/0x2000 [ 337.570513][ T5847] f2fs_submit_write_bio+0x135/0x340 [ 337.570575][ T5847] __submit_merged_bio+0x331/0x780 [ 337.570645][ T5847] __submit_merged_write_cond+0x3fe/0x510 [ 337.570718][ T5847] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 337.570792][ T5847] ? __pfx___might_resched+0x10/0x10 [ 337.570844][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.570901][ T5847] f2fs_write_cache_pages+0x20e9/0x2630 [ 337.570976][ T5847] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 337.571035][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.571081][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.571127][ T5847] ? __lock_acquire+0xd73/0x2630 [ 337.571197][ T5847] ? lock_acquire+0x1b1/0x370 [ 337.571242][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.571306][ T5847] ? ktime_get+0x1a4/0x320 [ 337.571389][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.571435][ T5847] ? mark_held_locks+0x40/0x70 [ 337.571480][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.571526][ T5847] ? rcu_is_watching+0x12/0xc0 [ 337.571588][ T5847] f2fs_write_data_pages+0x799/0x16d0 [ 337.571646][ T5847] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 337.571700][ T5847] ? do_writepages+0x4b5/0x600 [ 337.571759][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.571812][ T5847] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 337.571861][ T5847] do_writepages+0x278/0x600 [ 337.571933][ T5847] ? __pfx_do_writepages+0x10/0x10 [ 337.571991][ T5847] ? do_raw_spin_unlock+0x145/0x1e0 [ 337.572046][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.572091][ T5847] ? _raw_spin_unlock+0x28/0x50 [ 337.572151][ T5847] filemap_writeback+0x22d/0x2e0 [ 337.572215][ T5847] ? __pfx_filemap_writeback+0x10/0x10 [ 337.572275][ T5847] ? check_noncircular+0x97/0x160 [ 337.572365][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.572411][ T5847] ? find_held_lock+0x2b/0x80 [ 337.572469][ T5847] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 337.572515][ T5847] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 337.572560][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.572619][ T5847] f2fs_sync_dirty_inodes+0x469/0x990 [ 337.572685][ T5847] block_operations+0x2a6/0xfc0 [ 337.572728][ T5847] ? __bfs+0x150/0x2a0 [ 337.572770][ T5847] ? __pfx_block_operations+0x10/0x10 [ 337.572816][ T5847] ? check_noncircular+0x97/0x160 [ 337.572905][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.572963][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.573009][ T5847] ? rcu_is_watching+0x12/0xc0 [ 337.573062][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.573116][ T5847] f2fs_write_checkpoint+0x582/0x5550 [ 337.573170][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.573216][ T5847] ? _raw_spin_unlock_irq+0x2e/0x50 [ 337.573269][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.573315][ T5847] ? __wait_for_common+0x1f3/0x4c0 [ 337.573374][ T5847] ? __pfx_schedule_timeout+0x10/0x10 [ 337.573432][ T5847] ? __pfx___wait_for_common+0x10/0x10 [ 337.573494][ T5847] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 337.573551][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.573598][ T5847] ? rcu_is_watching+0x12/0xc0 [ 337.573651][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.573697][ T5847] ? kthread_stop+0x280/0x640 [ 337.573742][ T5847] kill_f2fs_super+0x3f1/0x4a0 [ 337.573789][ T5847] ? __pfx_kill_f2fs_super+0x10/0x10 [ 337.573855][ T5847] ? lockdep_hardirqs_on+0x78/0x100 [ 337.573914][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.573968][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.574029][ T5847] deactivate_locked_super+0xc1/0x1b0 [ 337.574086][ T5847] deactivate_super+0xe7/0x110 [ 337.574142][ T5847] cleanup_mnt+0x21f/0x450 [ 337.574207][ T5847] task_work_run+0x150/0x240 [ 337.574256][ T5847] ? __pfx_task_work_run+0x10/0x10 [ 337.574306][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.574351][ T5847] ? rcu_is_watching+0x12/0xc0 [ 337.574413][ T5847] exit_to_user_mode_loop+0x100/0x4a0 [ 337.574459][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.574510][ T5847] do_syscall_64+0x706/0xf80 [ 337.574569][ T5847] ? irqentry_exit+0x117/0x790 [ 337.574635][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.574679][ T5847] RIP: 0033:0x7fe1d4f9e017 [ 337.574708][ T5847] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 337.574747][ T5847] RSP: 002b:00007ffdfb562e88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 337.574783][ T5847] RAX: 0000000000000000 RBX: 00007fe1d5032120 RCX: 00007fe1d4f9e017 [ 337.574808][ T5847] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdfb562f40 [ 337.574832][ T5847] RBP: 00007ffdfb562f40 R08: 00007ffdfb563f40 R09: 00000000ffffffff [ 337.574856][ T5847] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdfb563fd0 [ 337.574881][ T5847] R13: 00007fe1d5032120 R14: 00000000000523e4 R15: 00007ffdfb564010 [ 337.574938][ T5847] [ 338.217745][ T5847] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 338.697001][ T8702] binder: Unknown parameter '' [ 338.862180][ T8706] xt_CT: You must specify a L4 protocol and not use inversions on it [ 339.822811][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.662'. [ 340.004368][ T9] IPVS: starting estimator thread 0... [ 340.056582][ T8725] fuse: Bad value for 'fd' [ 340.121490][ T8723] IPVS: using max 22 ests per chain, 52800 per kthread [ 340.424741][ T8730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.664'. [ 341.253398][ T8739] loop5: detected capacity change from 0 to 40427 [ 341.271857][ T8739] F2FS-fs (loop5): invalid crc value [ 341.394628][ T8739] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 341.408464][ T8739] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 342.350015][ T5848] syz-executor: attempt to access beyond end of device [ 342.350015][ T5848] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 342.548977][ T5848] CPU: 0 UID: 0 PID: 5848 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 342.549022][ T5848] Tainted: [L]=SOFTLOCKUP [ 342.549032][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 342.549048][ T5848] Call Trace: [ 342.549058][ T5848] [ 342.549069][ T5848] dump_stack_lvl+0x100/0x190 [ 342.549104][ T5848] f2fs_stop_checkpoint+0x600/0x9b0 [ 342.549148][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.549185][ T5848] ? errseq_set+0xe3/0x150 [ 342.549229][ T5848] ? errseq_set+0xe3/0x150 [ 342.549272][ T5848] f2fs_write_end_io+0xf59/0x1340 [ 342.549321][ T5848] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 342.549372][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.549414][ T5848] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 342.549460][ T5848] bio_endio+0x78f/0x8f0 [ 342.549497][ T5848] submit_bio_noacct+0x64c/0x2000 [ 342.549555][ T5848] f2fs_submit_write_bio+0x135/0x340 [ 342.549601][ T5848] __submit_merged_bio+0x331/0x780 [ 342.549653][ T5848] __submit_merged_write_cond+0x3fe/0x510 [ 342.549708][ T5848] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 342.549763][ T5848] ? __pfx___might_resched+0x10/0x10 [ 342.549803][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.549857][ T5848] f2fs_write_cache_pages+0x20e9/0x2630 [ 342.549907][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.549942][ T5848] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 342.549976][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.550011][ T5848] ? bpf_ksym_find+0x124/0x1c0 [ 342.550054][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.550088][ T5848] ? __kasan_check_byte+0x13/0x50 [ 342.550129][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.550164][ T5848] ? unwind_next_frame+0x3be/0x2090 [ 342.550207][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.550241][ T5848] ? rcu_is_watching+0x12/0xc0 [ 342.550283][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.550329][ T5848] ? bpf_ksym_find+0x124/0x1c0 [ 342.550411][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.550448][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.550482][ T5848] ? add_lock_to_list+0x99/0x110 [ 342.550527][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.550561][ T5848] ? rcu_is_watching+0x12/0xc0 [ 342.550606][ T5848] f2fs_write_data_pages+0x799/0x16d0 [ 342.550651][ T5848] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 342.550683][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.550724][ T5848] ? do_writepages+0x4b5/0x600 [ 342.550767][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.550805][ T5848] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 342.550841][ T5848] do_writepages+0x278/0x600 [ 342.550889][ T5848] ? __pfx_do_writepages+0x10/0x10 [ 342.550932][ T5848] ? do_raw_spin_unlock+0x145/0x1e0 [ 342.550972][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.551006][ T5848] ? _raw_spin_unlock+0x28/0x50 [ 342.551049][ T5848] filemap_writeback+0x22d/0x2e0 [ 342.551097][ T5848] ? __pfx_filemap_writeback+0x10/0x10 [ 342.551141][ T5848] ? check_noncircular+0x97/0x160 [ 342.551212][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.551247][ T5848] ? find_held_lock+0x2b/0x80 [ 342.551290][ T5848] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 342.551342][ T5848] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 342.551394][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.551464][ T5848] f2fs_sync_dirty_inodes+0x469/0x990 [ 342.551513][ T5848] block_operations+0x2a6/0xfc0 [ 342.551545][ T5848] ? __bfs+0x150/0x2a0 [ 342.551577][ T5848] ? __pfx_block_operations+0x10/0x10 [ 342.551611][ T5848] ? check_noncircular+0x97/0x160 [ 342.551678][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.551717][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.551750][ T5848] ? rcu_is_watching+0x12/0xc0 [ 342.551790][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.551830][ T5848] f2fs_write_checkpoint+0x582/0x5550 [ 342.551870][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.551904][ T5848] ? _raw_spin_unlock_irq+0x2e/0x50 [ 342.551945][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.551979][ T5848] ? __wait_for_common+0x1f3/0x4c0 [ 342.552023][ T5848] ? __pfx_schedule_timeout+0x10/0x10 [ 342.552065][ T5848] ? __pfx___wait_for_common+0x10/0x10 [ 342.552111][ T5848] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 342.552154][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.552191][ T5848] ? rcu_is_watching+0x12/0xc0 [ 342.552231][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.552265][ T5848] ? kthread_stop+0x280/0x640 [ 342.552299][ T5848] kill_f2fs_super+0x3f1/0x4a0 [ 342.552333][ T5848] ? __pfx_kill_f2fs_super+0x10/0x10 [ 342.552383][ T5848] ? lockdep_hardirqs_on+0x78/0x100 [ 342.552427][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.552461][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.552507][ T5848] deactivate_locked_super+0xc1/0x1b0 [ 342.552549][ T5848] deactivate_super+0xe7/0x110 [ 342.552590][ T5848] cleanup_mnt+0x21f/0x450 [ 342.552638][ T5848] task_work_run+0x150/0x240 [ 342.552674][ T5848] ? __pfx_task_work_run+0x10/0x10 [ 342.552710][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.552744][ T5848] ? rcu_is_watching+0x12/0xc0 [ 342.552790][ T5848] exit_to_user_mode_loop+0x100/0x4a0 [ 342.552824][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.552872][ T5848] do_syscall_64+0x706/0xf80 [ 342.552920][ T5848] ? irqentry_exit+0x117/0x790 [ 342.552968][ T5848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.552997][ T5848] RIP: 0033:0x7f107a99e017 [ 342.553020][ T5848] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 342.553047][ T5848] RSP: 002b:00007ffca8867bc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 342.553074][ T5848] RAX: 0000000000000000 RBX: 00007f107aa32120 RCX: 00007f107a99e017 [ 342.553092][ T5848] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca8867c80 [ 342.553109][ T5848] RBP: 00007ffca8867c80 R08: 00007ffca8868c80 R09: 00000000ffffffff [ 342.553127][ T5848] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffca8868d10 [ 342.553145][ T5848] R13: 00007f107aa32120 R14: 0000000000053623 R15: 00007ffca8868d50 [ 342.553187][ T5848] [ 343.399674][ T5848] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 343.689084][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.668'. [ 344.726410][ T8747] syz.6.667 (8747): drop_caches: 2 [ 345.225712][ T8777] netlink: 44 bytes leftover after parsing attributes in process `syz.3.677'. [ 345.297387][ T8780] netlink: 44 bytes leftover after parsing attributes in process `syz.3.677'. [ 345.310033][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.6.676'. [ 345.379973][ T8777] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.388737][ T8777] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.201747][ T29] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 346.801393][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 346.843766][ T29] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 346.903909][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.964684][ T29] usb 6-1: config 0 has no interface number 0 [ 347.023970][ T29] usb 6-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 347.099931][ T29] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 347.146147][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.198598][ T29] usb 6-1: config 0 descriptor?? [ 347.254296][ T29] uvcvideo 6-1:0.64: Found UVC 0.00 device (0bd3:0555) [ 347.289442][ T29] uvcvideo 6-1:0.64: No valid video chain found. [ 347.535875][ T8825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.686'. [ 347.568957][ C1] sd 0:0:1:0: [sda] tag#4811 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 347.579470][ C1] sd 0:0:1:0: [sda] tag#4811 CDB: Write(6) 0a 00 00 00 00 00 00 01 00 00 00 00 [ 348.035564][ T29] usb 6-1: USB disconnect, device number 7 [ 348.591896][ T8850] xt_CT: You must specify a L4 protocol and not use inversions on it [ 348.629621][ T8851] binder: Unknown parameter '' [ 349.049075][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.696'. [ 350.865887][ T8878] Unknown options in mask b7f2 [ 353.531116][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.7.705'. [ 354.511387][ T5939] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 354.667217][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 354.684479][ T5939] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 354.700442][ T5939] usb 4-1: New USB device found, idVendor=0408, idProduct=3001, bcdDevice= 0.00 [ 354.709935][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.722244][ T5939] usb 4-1: config 0 descriptor?? [ 354.883249][ T8924] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 354.979790][ C1] sd 0:0:1:0: [sda] tag#4823 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 354.990229][ C1] sd 0:0:1:0: [sda] tag#4823 CDB: Write(6) 0a 00 00 00 00 00 00 01 00 00 00 00 [ 355.015096][ T5939] usbhid 4-1:0.0: can't add hid device: -71 [ 355.031452][ T5939] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 355.130913][ T5939] usb 4-1: USB disconnect, device number 4 [ 355.232189][ T8929] loop4: detected capacity change from 0 to 7 [ 355.304040][ T8929] trusted_key: encrypted_key: keylen parameter is missing [ 356.601568][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.711'. [ 359.701044][ T8996] loop5: detected capacity change from 0 to 16 [ 360.646081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 361.219961][ T9010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.726'. [ 362.818859][ T9027] netlink: 'syz.7.730': attribute type 10 has an invalid length. [ 362.920777][ T9027] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 362.985280][ T9028] syzkaller0: entered promiscuous mode [ 363.014560][ T9028] syzkaller0: entered allmulticast mode [ 363.343542][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.733'. [ 364.762120][ T6044] IPVS: starting estimator thread 0... [ 364.824026][ T9081] netlink: 168 bytes leftover after parsing attributes in process `syz.3.742'. [ 364.862037][ T9080] IPVS: using max 22 ests per chain, 52800 per kthread [ 365.608580][ T9095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.745'. [ 366.003636][ T9105] syzkaller0: entered promiscuous mode [ 366.018586][ T9105] syzkaller0: entered allmulticast mode [ 366.392600][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.754'. [ 366.835058][ T9123] netlink: 168 bytes leftover after parsing attributes in process `syz.3.759'. [ 367.012418][ T5853] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 367.094600][ T9132] netlink: 4 bytes leftover after parsing attributes in process `syz.6.760'. [ 367.172331][ T5853] usb 3-1: Using ep0 maxpacket: 32 [ 367.206946][ T5853] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 367.247480][ T5853] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 367.296266][ T5853] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 367.323930][ T9140] netlink: 44 bytes leftover after parsing attributes in process `syz.8.764'. [ 367.333230][ T5853] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 367.853175][ T5853] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 367.881195][ T5853] usb 3-1: config 0 interface 0 has no altsetting 0 [ 367.894718][ T5853] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 367.983965][ T5853] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 368.027538][ T5853] usb 3-1: Product: syz [ 368.041878][ T5853] usb 3-1: Manufacturer: syz [ 368.057560][ T5853] usb 3-1: SerialNumber: syz [ 368.124771][ T5853] usb 3-1: config 0 descriptor?? [ 368.165161][ T5853] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 368.209875][ T5853] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 368.419141][ T9121] ldusb 3-1:0.0: Couldn't submit interrupt_in_urb -90 [ 368.721846][ T29] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 368.891382][ T29] usb 9-1: Using ep0 maxpacket: 8 [ 368.920590][ T29] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 368.952013][ T29] usb 9-1: config 0 has no interface number 0 [ 368.983815][ T29] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 369.018838][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.034025][ T29] usb 9-1: Product: syz [ 369.038280][ T29] usb 9-1: Manufacturer: syz [ 369.044063][ T29] usb 9-1: SerialNumber: syz [ 369.059592][ T29] usb 9-1: config 0 descriptor?? [ 369.071181][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.7.774'. [ 369.124694][ T9165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.770'. [ 369.383644][ T9171] netlink: 168 bytes leftover after parsing attributes in process `syz.7.776'. [ 369.937665][ T6044] usb 3-1: USB disconnect, device number 10 [ 370.027228][ T6044] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 370.641075][ T9193] xt_CT: You must specify a L4 protocol and not use inversions on it [ 372.752894][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 372.948585][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.987556][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.025563][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 373.076953][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 373.109946][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.180211][ T9] usb 3-1: config 0 descriptor?? [ 373.974336][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.7.788'. [ 374.135893][ T29] uvcvideo 9-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 374.261328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 374.291318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 374.311322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 374.371318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 374.397484][ T29] uvcvideo 9-1:0.31: Entity type for entity Output 32774 was not initialized! [ 374.407529][ T29] uvcvideo 9-1:0.31: Failed to create links for entity 5 [ 374.414666][ T29] uvcvideo 9-1:0.31: Failed to register entities (-22). [ 374.533377][ T9223] ceph: Path missing in source [ 376.784952][ T9227] netlink: 168 bytes leftover after parsing attributes in process `syz.3.790'. [ 376.995011][ T5853] usb 9-1: USB disconnect, device number 6 [ 377.036959][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 377.068415][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 377.161471][ T9] usb 3-1: USB disconnect, device number 11 [ 377.529909][ T9242] netlink: 12 bytes leftover after parsing attributes in process `syz.7.792'. [ 377.613917][ T9244] xt_CT: You must specify a L4 protocol and not use inversions on it [ 377.903431][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.925869][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.563823][ T9248] loop3: detected capacity change from 0 to 40427 [ 378.577235][ T9248] F2FS-fs (loop3): invalid crc value [ 378.698246][ T9248] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 378.710684][ T9248] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 378.745723][ T9265] autofs: Unknown parameter '' [ 378.950937][ T9262] fuse: Unknown parameter 'user_id00000000000000000000' [ 379.488404][ T9274] ceph: Path missing in source [ 381.366645][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.6.804'. [ 381.485707][ T9281] netlink: 4 bytes leftover after parsing attributes in process `syz.8.805'. [ 381.666116][ T6044] IPVS: starting estimator thread 0... [ 381.892277][ T9289] IPVS: using max 30 ests per chain, 72000 per kthread [ 382.012473][ T6044] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 382.068235][ T9266] ipip0: entered promiscuous mode [ 382.105268][ T9266] ipip0: entered allmulticast mode [ 382.201603][ T6044] usb 8-1: Using ep0 maxpacket: 8 [ 382.267851][ T6044] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 382.304177][ T6044] usb 8-1: config 0 has no interface number 0 [ 382.365216][ T6044] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 382.384557][ T6044] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.393686][ T5849] syz-executor: attempt to access beyond end of device [ 382.393686][ T5849] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 382.408114][ T5983] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 382.424190][ T6044] usb 8-1: Product: syz [ 382.427016][ T5849] CPU: 1 UID: 0 PID: 5849 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 382.427074][ T5849] Tainted: [L]=SOFTLOCKUP [ 382.427087][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 382.427109][ T5849] Call Trace: [ 382.427120][ T5849] [ 382.427134][ T5849] dump_stack_lvl+0x100/0x190 [ 382.427180][ T5849] f2fs_stop_checkpoint+0x600/0x9b0 [ 382.427243][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.427289][ T5849] ? errseq_set+0xe3/0x150 [ 382.427346][ T5849] ? errseq_set+0xe3/0x150 [ 382.427404][ T5849] f2fs_write_end_io+0xf59/0x1340 [ 382.427470][ T5849] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 382.427538][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.427621][ T5849] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 382.427682][ T5849] bio_endio+0x78f/0x8f0 [ 382.427732][ T5849] submit_bio_noacct+0x64c/0x2000 [ 382.427805][ T5849] f2fs_submit_write_bio+0x135/0x340 [ 382.427865][ T5849] __submit_merged_bio+0x331/0x780 [ 382.427933][ T5849] __submit_merged_write_cond+0x3fe/0x510 [ 382.428006][ T5849] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 382.428080][ T5849] ? __pfx___might_resched+0x10/0x10 [ 382.428132][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.428187][ T5849] f2fs_write_cache_pages+0x20e9/0x2630 [ 382.428260][ T5849] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 382.428305][ T5849] ? unwind_next_frame+0x3c8/0x2090 [ 382.428359][ T5849] ? exit_to_user_mode_loop+0x100/0x4a0 [ 382.428415][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.428462][ T5849] ? __kasan_check_byte+0x13/0x50 [ 382.428517][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.428563][ T5849] ? unwind_next_frame+0x3be/0x2090 [ 382.428614][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.428658][ T5849] ? rcu_is_watching+0x12/0xc0 [ 382.428712][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.428773][ T5849] ? bpf_ksym_find+0x124/0x1c0 [ 382.428885][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.428934][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.428978][ T5849] ? add_lock_to_list+0x99/0x110 [ 382.429039][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.429084][ T5849] ? rcu_is_watching+0x12/0xc0 [ 382.429145][ T5849] f2fs_write_data_pages+0x799/0x16d0 [ 382.429208][ T5849] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 382.429250][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.429305][ T5849] ? do_writepages+0x4b5/0x600 [ 382.429362][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.429412][ T5849] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 382.429460][ T5849] do_writepages+0x278/0x600 [ 382.429524][ T5849] ? __pfx_do_writepages+0x10/0x10 [ 382.429580][ T5849] ? do_raw_spin_unlock+0x145/0x1e0 [ 382.429633][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.429678][ T5849] ? _raw_spin_unlock+0x28/0x50 [ 382.429736][ T5849] filemap_writeback+0x22d/0x2e0 [ 382.429801][ T5849] ? __pfx_filemap_writeback+0x10/0x10 [ 382.429871][ T5849] ? check_noncircular+0x97/0x160 [ 382.429964][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.430008][ T5849] ? find_held_lock+0x2b/0x80 [ 382.430065][ T5849] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 382.430110][ T5849] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 382.430153][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.430217][ T5849] f2fs_sync_dirty_inodes+0x469/0x990 [ 382.430282][ T5849] block_operations+0x2a6/0xfc0 [ 382.430324][ T5849] ? __bfs+0x150/0x2a0 [ 382.430367][ T5849] ? __pfx_block_operations+0x10/0x10 [ 382.430412][ T5849] ? check_noncircular+0x97/0x160 [ 382.430503][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.430555][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.430600][ T5849] ? rcu_is_watching+0x12/0xc0 [ 382.430652][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.430705][ T5849] f2fs_write_checkpoint+0x582/0x5550 [ 382.430759][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.430804][ T5849] ? _raw_spin_unlock_irq+0x2e/0x50 [ 382.430855][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.430900][ T5849] ? __wait_for_common+0x1f3/0x4c0 [ 382.430958][ T5849] ? __pfx_schedule_timeout+0x10/0x10 [ 382.431015][ T5849] ? __pfx___wait_for_common+0x10/0x10 [ 382.431077][ T5849] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 382.431134][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.431179][ T5849] ? rcu_is_watching+0x12/0xc0 [ 382.431235][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.431281][ T5849] ? kthread_stop+0x280/0x640 [ 382.431325][ T5849] kill_f2fs_super+0x3f1/0x4a0 [ 382.431371][ T5849] ? __pfx_kill_f2fs_super+0x10/0x10 [ 382.431437][ T5849] ? lockdep_hardirqs_on+0x78/0x100 [ 382.431496][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.431541][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.431603][ T5849] deactivate_locked_super+0xc1/0x1b0 [ 382.431658][ T5849] deactivate_super+0xe7/0x110 [ 382.431712][ T5849] cleanup_mnt+0x21f/0x450 [ 382.431776][ T5849] task_work_run+0x150/0x240 [ 382.431824][ T5849] ? __pfx_task_work_run+0x10/0x10 [ 382.431873][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.431917][ T5849] ? rcu_is_watching+0x12/0xc0 [ 382.431977][ T5849] exit_to_user_mode_loop+0x100/0x4a0 [ 382.432022][ T5849] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.432074][ T5849] do_syscall_64+0x706/0xf80 [ 382.432131][ T5849] ? irqentry_exit+0x117/0x790 [ 382.432199][ T5849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.432239][ T5849] RIP: 0033:0x7f1ba799e017 [ 382.432268][ T5849] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 382.432304][ T5849] RSP: 002b:00007ffed1c130a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 382.432339][ T5849] RAX: 0000000000000000 RBX: 00007f1ba7a32120 RCX: 00007f1ba799e017 [ 382.432363][ T5849] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed1c13160 [ 382.432386][ T5849] RBP: 00007ffed1c13160 R08: 00007ffed1c14160 R09: 00000000ffffffff [ 382.432410][ T5849] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed1c141f0 [ 382.432434][ T5849] R13: 00007f1ba7a32120 R14: 000000000005c882 R15: 00007ffed1c14230 [ 382.432484][ T5849] [ 382.645350][ T5849] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 382.753340][ T6044] usb 8-1: Manufacturer: syz [ 383.034247][ T6044] usb 8-1: SerialNumber: syz [ 383.065106][ T5983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.077158][ T5983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.097745][ T5983] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 383.118953][ T6044] usb 8-1: config 0 descriptor?? [ 383.158366][ T5983] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 383.219999][ T5983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.252103][ T5983] usb 3-1: config 0 descriptor?? [ 384.335838][ T5983] usbhid 3-1:0.0: can't add hid device: -71 [ 384.360656][ T5983] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 384.431249][ T5983] usb 3-1: USB disconnect, device number 12 [ 387.247855][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.814'. [ 387.500085][ T9324] autofs: Unknown parameter '' [ 388.212961][ T6044] uvcvideo 8-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 388.229980][ T6044] uvcvideo 8-1:0.31: Entity type for entity Output 32774 was not initialized! [ 388.273672][ T6044] uvcvideo 8-1:0.31: Failed to create links for entity 5 [ 388.461064][ T6044] uvcvideo 8-1:0.31: Failed to register entities (-22). [ 388.567246][ T9341] ceph: Path missing in source [ 391.622093][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.5.823'. [ 391.662793][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 391.662816][ T30] audit: type=1326 audit(1777027247.476:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.2.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d4f9cdd9 code=0x7ffc0000 [ 391.846154][ T9364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.825'. [ 391.907280][ T30] audit: type=1326 audit(1777027247.476:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.2.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d4f9cdd9 code=0x7ffc0000 [ 392.601321][ T30] audit: type=1326 audit(1777027247.496:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.2.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fe1d4f9cdd9 code=0x7ffc0000 [ 392.745979][ T30] audit: type=1326 audit(1777027247.496:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.2.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d4f9cdd9 code=0x7ffc0000 [ 392.929354][ T30] audit: type=1326 audit(1777027247.496:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.2.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fe1d4f9cdd9 code=0x7ffc0000 [ 393.044964][ T30] audit: type=1326 audit(1777027247.496:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.2.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d4f9cdd9 code=0x7ffc0000 [ 393.196382][ T30] audit: type=1326 audit(1777027247.586:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.2.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe1d4f9cdd9 code=0x7ffc0000 [ 393.321526][ T30] audit: type=1326 audit(1777027247.586:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.2.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d4f9cdd9 code=0x7ffc0000 [ 393.416409][ T30] audit: type=1326 audit(1777027247.586:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.2.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1d4f9cdd9 code=0x7ffc0000 [ 393.503582][ T30] audit: type=1326 audit(1777027247.586:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.2.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d4f9cdd9 code=0x7ffc0000 [ 393.601498][ T5853] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 393.773747][ T5853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.828838][ T5853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.878269][ T5853] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 393.943404][ T5853] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 393.998370][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.077465][ T5853] usb 6-1: config 0 descriptor?? [ 394.192648][ T29] usb 8-1: USB disconnect, device number 7 [ 394.514204][ T9391] fuse: Unknown parameter 'user_id00000000000000000000' [ 394.771315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 394.871319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 394.997399][ T9394] loop8: detected capacity change from 0 to 40427 [ 395.076980][ T9394] F2FS-fs (loop8): invalid crc value [ 395.181854][ T9394] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 395.199158][ T9394] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 395.920250][ T7697] syz-executor: attempt to access beyond end of device [ 395.920250][ T7697] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 396.020524][ T7697] CPU: 0 UID: 0 PID: 7697 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 396.020579][ T7697] Tainted: [L]=SOFTLOCKUP [ 396.020593][ T7697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 396.020614][ T7697] Call Trace: [ 396.020626][ T7697] [ 396.020639][ T7697] dump_stack_lvl+0x100/0x190 [ 396.020677][ T7697] f2fs_stop_checkpoint+0x600/0x9b0 [ 396.020732][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.020777][ T7697] ? errseq_set+0xe3/0x150 [ 396.020824][ T7697] ? errseq_set+0xe3/0x150 [ 396.020876][ T7697] f2fs_write_end_io+0xf59/0x1340 [ 396.020940][ T7697] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 396.020993][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.021049][ T7697] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 396.021105][ T7697] bio_endio+0x78f/0x8f0 [ 396.021142][ T7697] submit_bio_noacct+0x64c/0x2000 [ 396.021219][ T7697] f2fs_submit_write_bio+0x135/0x340 [ 396.021276][ T7697] __submit_merged_bio+0x331/0x780 [ 396.021349][ T7697] __submit_merged_write_cond+0x3fe/0x510 [ 396.021424][ T7697] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 396.021500][ T7697] ? __pfx___might_resched+0x10/0x10 [ 396.021553][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.021609][ T7697] f2fs_write_cache_pages+0x20e9/0x2630 [ 396.021675][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.021724][ T7697] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 396.021770][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.021818][ T7697] ? bpf_ksym_find+0x124/0x1c0 [ 396.021879][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.021925][ T7697] ? __kasan_check_byte+0x13/0x50 [ 396.021980][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.022027][ T7697] ? unwind_next_frame+0x3be/0x2090 [ 396.022082][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.022128][ T7697] ? rcu_is_watching+0x12/0xc0 [ 396.022183][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.022250][ T7697] ? bpf_ksym_find+0x124/0x1c0 [ 396.022363][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.022414][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.022456][ T7697] ? add_lock_to_list+0x99/0x110 [ 396.022507][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.022546][ T7697] ? rcu_is_watching+0x12/0xc0 [ 396.022607][ T7697] f2fs_write_data_pages+0x799/0x16d0 [ 396.022655][ T7697] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 396.022689][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.022745][ T7697] ? do_writepages+0x4b5/0x600 [ 396.022795][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.022835][ T7697] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 396.022884][ T7697] do_writepages+0x278/0x600 [ 396.022942][ T7697] ? __pfx_do_writepages+0x10/0x10 [ 396.022987][ T7697] ? do_raw_spin_unlock+0x145/0x1e0 [ 396.023042][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.023084][ T7697] ? _raw_spin_unlock+0x28/0x50 [ 396.023129][ T7697] filemap_writeback+0x22d/0x2e0 [ 396.023192][ T7697] ? __pfx_filemap_writeback+0x10/0x10 [ 396.023292][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.023338][ T7697] ? find_held_lock+0x2b/0x80 [ 396.023391][ T7697] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 396.023425][ T7697] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 396.023464][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.023522][ T7697] f2fs_sync_dirty_inodes+0x469/0x990 [ 396.023574][ T7697] block_operations+0x2a6/0xfc0 [ 396.023611][ T7697] ? __bfs+0x150/0x2a0 [ 396.023654][ T7697] ? __pfx_block_operations+0x10/0x10 [ 396.023695][ T7697] ? check_noncircular+0x97/0x160 [ 396.023774][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.023829][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.023869][ T7697] ? rcu_is_watching+0x12/0xc0 [ 396.023911][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.023965][ T7697] f2fs_write_checkpoint+0x582/0x5550 [ 396.024014][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.024048][ T7697] ? _raw_spin_unlock_irq+0x2e/0x50 [ 396.024098][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.024141][ T7697] ? __wait_for_common+0x1f3/0x4c0 [ 396.024188][ T7697] ? __pfx_schedule_timeout+0x10/0x10 [ 396.024246][ T7697] ? __pfx___wait_for_common+0x10/0x10 [ 396.024303][ T7697] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 396.024348][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.024390][ T7697] ? rcu_is_watching+0x12/0xc0 [ 396.024441][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.024479][ T7697] ? kthread_stop+0x280/0x640 [ 396.024513][ T7697] kill_f2fs_super+0x3f1/0x4a0 [ 396.024560][ T7697] ? __pfx_kill_f2fs_super+0x10/0x10 [ 396.024621][ T7697] ? lockdep_hardirqs_on+0x78/0x100 [ 396.024665][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.024712][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.024769][ T7697] deactivate_locked_super+0xc1/0x1b0 [ 396.024812][ T7697] deactivate_super+0xe7/0x110 [ 396.024866][ T7697] cleanup_mnt+0x21f/0x450 [ 396.024925][ T7697] task_work_run+0x150/0x240 [ 396.024962][ T7697] ? __pfx_task_work_run+0x10/0x10 [ 396.025011][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.025054][ T7697] ? rcu_is_watching+0x12/0xc0 [ 396.025102][ T7697] exit_to_user_mode_loop+0x100/0x4a0 [ 396.025142][ T7697] ? srso_alias_return_thunk+0x5/0xfbef5 [ 396.025198][ T7697] do_syscall_64+0x706/0xf80 [ 396.025247][ T7697] ? irqentry_exit+0x117/0x790 [ 396.025302][ T7697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.025341][ T7697] RIP: 0033:0x7f0f4e19e017 [ 396.025369][ T7697] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 396.025398][ T7697] RSP: 002b:00007ffcbf10c1a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 396.025425][ T7697] RAX: 0000000000000000 RBX: 00007f0f4e232120 RCX: 00007f0f4e19e017 [ 396.025449][ T7697] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcbf10c260 [ 396.025473][ T7697] RBP: 00007ffcbf10c260 R08: 00007ffcbf10d260 R09: 00000000ffffffff [ 396.025496][ T7697] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcbf10d2f0 [ 396.025519][ T7697] R13: 00007f0f4e232120 R14: 0000000000060a19 R15: 00007ffcbf10d330 [ 396.025559][ T7697] [ 396.668056][ T9391] ipip0: entered promiscuous mode [ 396.673638][ T9391] ipip0: entered allmulticast mode [ 396.931305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 397.337747][ T7697] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 397.685086][ T5853] usbhid 6-1:0.0: can't add hid device: -71 [ 397.718455][ T5853] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 397.791737][ T5853] usb 6-1: USB disconnect, device number 8 [ 399.784462][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.842'. [ 399.850330][ T9439] fuse: Bad value for 'fd' [ 400.512286][ T9447] xt_CT: You must specify a L4 protocol and not use inversions on it [ 402.607175][ T9459] netlink: 384 bytes leftover after parsing attributes in process `syz.7.848'. [ 402.944516][ T9461] loop2: detected capacity change from 0 to 40427 [ 402.962842][ T9461] F2FS-fs (loop2): invalid crc value [ 403.056733][ T9461] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 403.079113][ T9461] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 403.737560][ T5847] syz-executor: attempt to access beyond end of device [ 403.737560][ T5847] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 403.833871][ T5847] CPU: 1 UID: 0 PID: 5847 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 403.833929][ T5847] Tainted: [L]=SOFTLOCKUP [ 403.833943][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 403.833971][ T5847] Call Trace: [ 403.833982][ T5847] [ 403.833996][ T5847] dump_stack_lvl+0x100/0x190 [ 403.834043][ T5847] f2fs_stop_checkpoint+0x600/0x9b0 [ 403.834105][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.834152][ T5847] ? errseq_set+0xe3/0x150 [ 403.834211][ T5847] ? errseq_set+0xe3/0x150 [ 403.834269][ T5847] f2fs_write_end_io+0xf59/0x1340 [ 403.834336][ T5847] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 403.834405][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.834465][ T5847] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 403.834515][ T5847] bio_endio+0x78f/0x8f0 [ 403.834552][ T5847] submit_bio_noacct+0x64c/0x2000 [ 403.834606][ T5847] f2fs_submit_write_bio+0x135/0x340 [ 403.834652][ T5847] __submit_merged_bio+0x331/0x780 [ 403.834704][ T5847] __submit_merged_write_cond+0x3fe/0x510 [ 403.834758][ T5847] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 403.834814][ T5847] ? __pfx___might_resched+0x10/0x10 [ 403.834853][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.834894][ T5847] f2fs_write_cache_pages+0x20e9/0x2630 [ 403.834943][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.834982][ T5847] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 403.835016][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.835051][ T5847] ? bpf_ksym_find+0x124/0x1c0 [ 403.835094][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.835128][ T5847] ? __kasan_check_byte+0x13/0x50 [ 403.835168][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.835203][ T5847] ? unwind_next_frame+0x3be/0x2090 [ 403.835243][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.835277][ T5847] ? rcu_is_watching+0x12/0xc0 [ 403.835318][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.835363][ T5847] ? bpf_ksym_find+0x124/0x1c0 [ 403.835445][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.835482][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.835516][ T5847] ? add_lock_to_list+0x99/0x110 [ 403.835561][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.835595][ T5847] ? rcu_is_watching+0x12/0xc0 [ 403.835641][ T5847] f2fs_write_data_pages+0x799/0x16d0 [ 403.835684][ T5847] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 403.835715][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.835757][ T5847] ? do_writepages+0x4b5/0x600 [ 403.835799][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.835838][ T5847] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 403.835874][ T5847] do_writepages+0x278/0x600 [ 403.835922][ T5847] ? __pfx_do_writepages+0x10/0x10 [ 403.835967][ T5847] ? do_raw_spin_unlock+0x145/0x1e0 [ 403.836007][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.836041][ T5847] ? _raw_spin_unlock+0x28/0x50 [ 403.836084][ T5847] filemap_writeback+0x22d/0x2e0 [ 403.836132][ T5847] ? __pfx_filemap_writeback+0x10/0x10 [ 403.836176][ T5847] ? check_noncircular+0x97/0x160 [ 403.836244][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.836278][ T5847] ? find_held_lock+0x2b/0x80 [ 403.836320][ T5847] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 403.836354][ T5847] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 403.836387][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.836430][ T5847] f2fs_sync_dirty_inodes+0x469/0x990 [ 403.836478][ T5847] block_operations+0x2a6/0xfc0 [ 403.836510][ T5847] ? __bfs+0x150/0x2a0 [ 403.836542][ T5847] ? __pfx_block_operations+0x10/0x10 [ 403.836576][ T5847] ? check_noncircular+0x97/0x160 [ 403.836643][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.836681][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.836715][ T5847] ? rcu_is_watching+0x12/0xc0 [ 403.836754][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.836794][ T5847] f2fs_write_checkpoint+0x582/0x5550 [ 403.836835][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.836868][ T5847] ? _raw_spin_unlock_irq+0x2e/0x50 [ 403.836907][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.836941][ T5847] ? __wait_for_common+0x1f3/0x4c0 [ 403.836989][ T5847] ? __pfx_schedule_timeout+0x10/0x10 [ 403.837031][ T5847] ? __pfx___wait_for_common+0x10/0x10 [ 403.837077][ T5847] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 403.837120][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.837154][ T5847] ? rcu_is_watching+0x12/0xc0 [ 403.837193][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.837227][ T5847] ? kthread_stop+0x280/0x640 [ 403.837260][ T5847] kill_f2fs_super+0x3f1/0x4a0 [ 403.837294][ T5847] ? __pfx_kill_f2fs_super+0x10/0x10 [ 403.837344][ T5847] ? lockdep_hardirqs_on+0x78/0x100 [ 403.837387][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.837422][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.837468][ T5847] deactivate_locked_super+0xc1/0x1b0 [ 403.837510][ T5847] deactivate_super+0xe7/0x110 [ 403.837551][ T5847] cleanup_mnt+0x21f/0x450 [ 403.837599][ T5847] task_work_run+0x150/0x240 [ 403.837634][ T5847] ? __pfx_task_work_run+0x10/0x10 [ 403.837671][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.837705][ T5847] ? rcu_is_watching+0x12/0xc0 [ 403.837750][ T5847] exit_to_user_mode_loop+0x100/0x4a0 [ 403.837784][ T5847] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.837823][ T5847] do_syscall_64+0x706/0xf80 [ 403.837865][ T5847] ? irqentry_exit+0x117/0x790 [ 403.837913][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.837942][ T5847] RIP: 0033:0x7fe1d4f9e017 [ 403.837968][ T5847] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 403.837996][ T5847] RSP: 002b:00007ffdfb562e88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 403.838023][ T5847] RAX: 0000000000000000 RBX: 00007fe1d5032120 RCX: 00007fe1d4f9e017 [ 403.838041][ T5847] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdfb562f40 [ 403.838058][ T5847] RBP: 00007ffdfb562f40 R08: 00007ffdfb563f40 R09: 00000000ffffffff [ 403.838076][ T5847] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdfb563fd0 [ 403.838093][ T5847] R13: 00007fe1d5032120 R14: 000000000006269e R15: 00007ffdfb564010 [ 403.838131][ T5847] [ 404.692580][ T5847] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 405.701943][ T2053] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 405.913646][ T2053] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.974081][ T2053] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.036586][ T2053] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 406.130688][ T2053] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 406.188036][ T2053] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.260055][ T2053] usb 9-1: config 0 descriptor?? [ 406.797267][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.859'. [ 407.226446][ T2053] usbhid 9-1:0.0: can't add hid device: -71 [ 407.265915][ T2053] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 407.334127][ T2053] usb 9-1: USB disconnect, device number 7 [ 407.612271][ T9520] binder: Unknown parameter '' [ 407.949453][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 407.949480][ T30] audit: type=1326 audit(1777027263.766:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9530 comm="syz.5.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 408.014078][ T30] audit: type=1326 audit(1777027263.816:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9530 comm="syz.5.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 408.094359][ T30] audit: type=1326 audit(1777027263.816:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9530 comm="syz.5.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 408.143304][ T30] audit: type=1326 audit(1777027263.816:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9530 comm="syz.5.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 408.245236][ T30] audit: type=1326 audit(1777027263.816:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9530 comm="syz.5.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 408.362252][ T30] audit: type=1326 audit(1777027263.816:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9530 comm="syz.5.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 409.365663][ T30] audit: type=1326 audit(1777027263.816:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9530 comm="syz.5.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 409.390094][ T30] audit: type=1326 audit(1777027263.816:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9530 comm="syz.5.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 409.741771][ T30] audit: type=1326 audit(1777027263.816:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9530 comm="syz.5.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 409.993990][ T30] audit: type=1326 audit(1777027263.826:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9530 comm="syz.5.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f107a99cdd9 code=0x7ffc0000 [ 412.007680][ T9576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.878'. [ 412.101374][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 412.264379][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.317394][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.370461][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 412.392602][ T9580] mmap: syz.3.881 (9580) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 412.407974][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 412.433382][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.483801][ T10] usb 6-1: config 0 descriptor?? [ 413.022586][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 413.022652][ T30] audit: type=1326 audit(1777027268.846:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9572 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f1ba799cdd9 code=0x7ffc0000 [ 413.317127][ T9592] binder: Unknown parameter '' [ 414.469154][ T30] audit: type=1326 audit(1777027270.286:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9626 comm="syz.8.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4e19cdd9 code=0x7ffc0000 [ 414.536243][ T9629] netlink: 12 bytes leftover after parsing attributes in process `syz.6.886'. [ 414.577097][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 414.595313][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 414.598751][ T30] audit: type=1326 audit(1777027270.286:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9626 comm="syz.8.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f0f4e19cdd9 code=0x7ffc0000 [ 414.635700][ T10] usb 6-1: USB disconnect, device number 9 [ 414.721407][ T30] audit: type=1326 audit(1777027270.286:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9626 comm="syz.8.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4e19cdd9 code=0x7ffc0000 [ 414.830824][ T30] audit: type=1326 audit(1777027270.286:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9626 comm="syz.8.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4e19cdd9 code=0x7ffc0000 [ 415.339010][ T9639] syzkaller1: entered promiscuous mode [ 415.424272][ T9639] syzkaller1: entered allmulticast mode [ 415.641709][ T9645] fuse: Bad value for 'fd' [ 415.685017][ T9648] binder: Unknown parameter '' [ 416.980672][ T9662] loop8: detected capacity change from 0 to 16 [ 417.915525][ T9677] netlink: 12 bytes leftover after parsing attributes in process `syz.5.899'. [ 417.988619][ T30] audit: type=1800 audit(1777027273.806:133): pid=9673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.896" name="memory.events" dev="tmpfs" ino=570 res=0 errno=0 [ 419.801967][ T801] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 420.006671][ T801] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.079562][ T801] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.191416][ T801] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 420.310586][ T801] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 420.480394][ T801] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.667409][ T801] usb 9-1: config 0 descriptor?? [ 421.578422][ T9733] binder: Unknown parameter '' [ 421.603679][ T801] usbhid 9-1:0.0: can't add hid device: -71 [ 421.634850][ T801] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 421.763934][ T801] usb 9-1: USB disconnect, device number 8 [ 422.490644][ T9752] netlink: 12 bytes leftover after parsing attributes in process `syz.7.915'. [ 422.871420][ T5939] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 423.050593][ T5939] usb 7-1: Using ep0 maxpacket: 32 [ 423.101951][ T5939] usb 7-1: config 0 has no interfaces? [ 423.131451][ T5939] usb 7-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32 [ 423.162961][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.210393][ T5939] usb 7-1: Product: syz [ 423.228092][ T5939] usb 7-1: Manufacturer: syz [ 423.246040][ T5939] usb 7-1: SerialNumber: syz [ 423.292275][ T5939] usb 7-1: config 0 descriptor?? [ 423.598972][ T6044] usb 7-1: USB disconnect, device number 6 [ 425.473181][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.7.927'. [ 426.187621][ T9800] binder: Unknown parameter '' [ 426.221445][ T29] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 426.413863][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.452705][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.488909][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 426.547791][ T29] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 426.579211][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.609332][ T9807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.932'. [ 426.635834][ T29] usb 9-1: config 0 descriptor?? [ 427.606685][ T29] usbhid 9-1:0.0: can't add hid device: -71 [ 427.647355][ T29] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 427.753934][ T29] usb 9-1: USB disconnect, device number 9 [ 428.531638][ T29] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 428.711587][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 428.789370][ T29] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.889958][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 429.007525][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 429.133119][ T29] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 429.293206][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 429.385774][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 429.794677][ T29] usb 8-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 429.848854][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 429.900079][ T29] usb 8-1: Product: syz [ 429.971917][ T29] usb 8-1: Manufacturer: syz [ 430.023123][ T29] usb 8-1: SerialNumber: syz [ 430.362585][ T29] usb 8-1: config 0 descriptor?? [ 430.841682][ T9865] netlink: 4 bytes leftover after parsing attributes in process `syz.5.942'. [ 432.508871][ T9879] binder: Unknown parameter '' [ 432.609642][ T9882] netlink: 12 bytes leftover after parsing attributes in process `syz.5.946'. [ 435.416354][ T29] usb 8-1: can't set config #0, error -110 [ 435.699807][ T29] usb 8-1: USB disconnect, device number 8 [ 437.261008][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027178400: rx timeout, send abort [ 437.761188][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027179000: rx timeout, send abort [ 437.770372][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027178400: abort rx timeout. Force session deactivation [ 437.921608][ T6044] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 438.269488][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027179000: abort rx timeout. Force session deactivation [ 439.131326][ T6044] usb 9-1: Using ep0 maxpacket: 16 [ 439.139419][ T6044] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 439.148474][ T6044] usb 9-1: config 0 has no interface number 0 [ 439.156177][ T6044] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 439.167176][ T6044] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 439.951824][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.953694][ T6044] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 439.959663][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.967465][ T6044] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 440.050396][ T6044] usb 9-1: Product: syz [ 440.074253][ T6044] usb 9-1: SerialNumber: syz [ 440.142108][ T6044] usb 9-1: config 0 descriptor?? [ 440.159673][ T9931] binder: Unknown parameter '' [ 440.188130][ T6044] usb 9-1: can't set config #0, error -71 [ 440.230341][ T6044] usb 9-1: USB disconnect, device number 10 [ 440.246033][ T9932] netlink: 12 bytes leftover after parsing attributes in process `syz.7.963'. [ 440.307442][ T9933] syzkaller0: entered promiscuous mode [ 440.349133][ T9933] syzkaller0: entered allmulticast mode [ 441.123737][ T5853] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 441.294435][ T9950] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 441.311466][ T24] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 441.356742][ T5853] usb 9-1: Using ep0 maxpacket: 8 [ 441.380541][ T5853] usb 9-1: config 2 has an invalid interface number: 31 but max is 0 [ 441.408994][ T5853] usb 9-1: config 2 has no interface number 0 [ 441.437040][ T5853] usb 9-1: config 2 interface 31 has no altsetting 0 [ 441.473835][ T5853] usb 9-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 441.504853][ T24] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 441.518468][ T5853] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.536784][ T24] usb 7-1: config 0 has no interface number 0 [ 441.556174][ T5853] usb 9-1: Product: syz [ 441.581145][ T24] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 441.596147][ T5853] usb 9-1: Manufacturer: syz [ 441.613147][ T5853] usb 9-1: SerialNumber: syz [ 441.637559][ T24] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 441.702640][ T24] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 441.715997][ T9954] binder_alloc: 9953: binder_alloc_buf, no vma [ 441.746513][ T24] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 441.774860][ T24] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 441.808663][ T24] usb 7-1: Product: syz [ 441.824858][ T24] usb 7-1: SerialNumber: syz [ 441.877225][ T24] usb 7-1: config 0 descriptor?? [ 441.945402][ T24] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 442.000259][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input7 [ 442.151143][ T24] ------------[ cut here ]------------ [ 442.151238][ T24] URB ffff88807927b000 submitted while active [ 442.151339][ T24] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x15fa/0x1910, CPU#1: kworker/1:0/24 [ 442.151431][ T24] Modules linked in: [ 442.151527][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.151587][ T24] Tainted: [L]=SOFTLOCKUP [ 442.151640][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 442.152107][ T24] Workqueue: usb_hub_wq hub_event [ 442.152195][ T24] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 442.152272][ T24] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 7d 40 b3 fa 48 8d 3d 16 1b 93 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 442.152355][ T24] RSP: 0018:ffffc900001e6e50 EFLAGS: 00010283 [ 442.152392][ T24] RAX: 00000000000611bc RBX: ffff88807927b000 RCX: ffffc9001d90f000 [ 442.152422][ T24] RDX: 0000000000100000 RSI: ffff88807927b000 RDI: ffffffff90e94460 [ 442.152452][ T24] RBP: ffff888054f65700 R08: 0000000000000000 R09: fffffbfff21b8a0a [ 442.152518][ T24] R10: ffffc900001e6ed8 R11: 0000000000000000 R12: ffff88807ed2c8a0 [ 442.152548][ T24] R13: ffff88807ed2c810 R14: ffff88807ed2c850 R15: ffff88804e9922e0 [ 442.152582][ T24] FS: 0000000000000000(0000) GS:ffff8881243dd000(0000) knlGS:0000000000000000 [ 442.152621][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 442.152718][ T24] CR2: 00007fe49f60f010 CR3: 0000000026589000 CR4: 0000000000350ef0 [ 442.152747][ T24] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 442.152775][ T24] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 442.152803][ T24] Call Trace: [ 442.152818][ T24] [ 442.152872][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.152953][ T24] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 442.153057][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.153111][ T24] ? __pm_runtime_resume+0xc3/0x170 [ 442.153201][ T24] cm109_input_open+0x273/0x420 [ 442.153258][ T24] ? __pfx_cm109_input_open+0x10/0x10 [ 442.153305][ T24] input_open_device+0x24c/0x3d0 [ 442.153418][ T24] kbd_connect+0x124/0x180 [ 442.153476][ T24] input_attach_handler.isra.0+0x177/0x1e0 [ 442.153572][ T24] input_register_device.cold+0x139/0x375 [ 442.153644][ T24] cm109_usb_probe+0x128d/0x17f0 [ 442.153750][ T24] usb_probe_interface+0x303/0x8f0 [ 442.153814][ T24] ? __pfx_usb_probe_interface+0x10/0x10 [ 442.153913][ T24] really_probe+0x241/0xa60 [ 442.153988][ T24] __driver_probe_device+0x22e/0x480 [ 442.154095][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.154155][ T24] driver_probe_device+0x4c/0x1b0 [ 442.154271][ T24] __device_attach_driver+0x1df/0x340 [ 442.154345][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 442.154454][ T24] bus_for_each_drv+0x159/0x1e0 [ 442.154513][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 442.154610][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.154664][ T24] ? lockdep_hardirqs_on+0x78/0x100 [ 442.154767][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.154821][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 442.154930][ T24] __device_attach+0x1e4/0x4d0 [ 442.155000][ T24] ? __pfx___device_attach+0x10/0x10 [ 442.155108][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.155162][ T24] ? do_raw_spin_unlock+0x145/0x1e0 [ 442.155265][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.155328][ T24] device_initial_probe+0xaf/0xd0 [ 442.155411][ T24] bus_probe_device+0x64/0x160 [ 442.155478][ T24] device_add+0x1210/0x1950 [ 442.155568][ T24] ? __pfx_device_add+0x10/0x10 [ 442.155613][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.155722][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.155783][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.155887][ T24] usb_set_configuration+0xd97/0x1c60 [ 442.155970][ T24] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 442.156077][ T24] usb_generic_driver_probe+0xa1/0xe0 [ 442.156149][ T24] usb_probe_device+0xef/0x400 [ 442.156240][ T24] ? __pfx_usb_probe_device+0x10/0x10 [ 442.156295][ T24] really_probe+0x241/0xa60 [ 442.156416][ T24] __driver_probe_device+0x22e/0x480 [ 442.156485][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.156581][ T24] driver_probe_device+0x4c/0x1b0 [ 442.156654][ T24] __device_attach_driver+0x1df/0x340 [ 442.156765][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 442.156835][ T24] bus_for_each_drv+0x159/0x1e0 [ 442.156932][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 442.156991][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.157082][ T24] ? lockdep_hardirqs_on+0x78/0x100 [ 442.157149][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.157245][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 442.157317][ T24] __device_attach+0x1e4/0x4d0 [ 442.157426][ T24] ? __pfx___device_attach+0x10/0x10 [ 442.157499][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.157590][ T24] ? do_raw_spin_unlock+0x145/0x1e0 [ 442.157653][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.157752][ T24] device_initial_probe+0xaf/0xd0 [ 442.157796][ T24] bus_probe_device+0x64/0x160 [ 442.157901][ T24] device_add+0x1210/0x1950 [ 442.157954][ T24] ? __pfx_device_add+0x10/0x10 [ 442.158036][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.158089][ T24] ? add_device_randomness+0xb7/0xf0 [ 442.158197][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.158267][ T24] usb_new_device.cold+0x685/0x115c [ 442.158371][ T24] ? __entry_text_end+0x1020b6/0x1020b9 [ 442.158423][ T24] ? do_raw_spin_lock+0x128/0x260 [ 442.158520][ T24] ? __pfx_usb_new_device+0x10/0x10 [ 442.158571][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.158659][ T24] ? mark_held_locks+0x40/0x70 [ 442.158720][ T24] hub_event+0x314d/0x4af0 [ 442.158848][ T24] ? __pfx_hub_event+0x10/0x10 [ 442.158895][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.158983][ T24] ? assoc_array_insert+0x2810/0x32c0 [ 442.159047][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.159142][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.159199][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.159292][ T24] ? rcu_is_watching+0x12/0xc0 [ 442.159355][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.159455][ T24] process_one_work+0xa0e/0x1980 [ 442.159533][ T24] ? __pfx_process_one_work+0x10/0x10 [ 442.159623][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.159693][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.159793][ T24] worker_thread+0x5ef/0xe50 [ 442.159866][ T24] ? kthread+0x13a/0x450 [ 442.159949][ T24] ? __pfx_worker_thread+0x10/0x10 [ 442.160000][ T24] kthread+0x370/0x450 [ 442.160046][ T24] ? __pfx_kthread+0x10/0x10 [ 442.160134][ T24] ret_from_fork+0x72b/0xd50 [ 442.160190][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 442.160287][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.160341][ T24] ? __switch_to+0x800/0x1100 [ 442.160440][ T24] ? __switch_to_asm+0x39/0x70 [ 442.160500][ T24] ? __pfx_kthread+0x10/0x10 [ 442.160589][ T24] ret_from_fork_asm+0x1a/0x30 [ 442.160674][ T24] [ 442.160698][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 442.160728][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.160786][ T24] Tainted: [L]=SOFTLOCKUP [ 442.160801][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 442.160829][ T24] Workqueue: usb_hub_wq hub_event [ 442.160872][ T24] Call Trace: [ 442.160886][ T24] [ 442.160901][ T24] dump_stack_lvl+0x100/0x190 [ 442.160947][ T24] vpanic+0x552/0x970 [ 442.160988][ T24] ? __pfx_vpanic+0x10/0x10 [ 442.161044][ T24] panic+0xd1/0xe0 [ 442.161084][ T24] ? __pfx_panic+0x10/0x10 [ 442.161148][ T24] check_panic_on_warn.cold+0x19/0x34 [ 442.161196][ T24] ? usb_submit_urb+0x15fa/0x1910 [ 442.161264][ T24] __warn.cold+0x191/0x328 [ 442.161314][ T24] __report_bug+0x296/0x3d0 [ 442.161375][ T24] ? usb_submit_urb+0x15fa/0x1910 [ 442.161444][ T24] ? __pfx___report_bug+0x10/0x10 [ 442.161502][ T24] ? irqentry_exit+0x246/0x790 [ 442.161566][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.161618][ T24] ? lockdep_hardirqs_on+0x78/0x100 [ 442.161698][ T24] ? usb_submit_urb+0x15fd/0x1910 [ 442.161773][ T24] report_bug_entry+0xe1/0x290 [ 442.161836][ T24] ? usb_submit_urb+0x15fd/0x1910 [ 442.161901][ T24] handle_bug+0x1cd/0x2a0 [ 442.161947][ T24] exc_invalid_op+0x17/0x50 [ 442.161993][ T24] asm_exc_invalid_op+0x1a/0x20 [ 442.162034][ T24] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 442.162101][ T24] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 7d 40 b3 fa 48 8d 3d 16 1b 93 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 442.162143][ T24] RSP: 0018:ffffc900001e6e50 EFLAGS: 00010283 [ 442.162175][ T24] RAX: 00000000000611bc RBX: ffff88807927b000 RCX: ffffc9001d90f000 [ 442.162205][ T24] RDX: 0000000000100000 RSI: ffff88807927b000 RDI: ffffffff90e94460 [ 442.162238][ T24] RBP: ffff888054f65700 R08: 0000000000000000 R09: fffffbfff21b8a0a [ 442.162266][ T24] R10: ffffc900001e6ed8 R11: 0000000000000000 R12: ffff88807ed2c8a0 [ 442.162294][ T24] R13: ffff88807ed2c810 R14: ffff88807ed2c850 R15: ffff88804e9922e0 [ 442.162350][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.162403][ T24] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 442.162465][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.162518][ T24] ? __pm_runtime_resume+0xc3/0x170 [ 442.162568][ T24] cm109_input_open+0x273/0x420 [ 442.162615][ T24] ? __pfx_cm109_input_open+0x10/0x10 [ 442.162661][ T24] input_open_device+0x24c/0x3d0 [ 442.162730][ T24] kbd_connect+0x124/0x180 [ 442.162784][ T24] input_attach_handler.isra.0+0x177/0x1e0 [ 442.162841][ T24] input_register_device.cold+0x139/0x375 [ 442.162910][ T24] cm109_usb_probe+0x128d/0x17f0 [ 442.162976][ T24] usb_probe_interface+0x303/0x8f0 [ 442.163038][ T24] ? __pfx_usb_probe_interface+0x10/0x10 [ 442.163096][ T24] really_probe+0x241/0xa60 [ 442.163169][ T24] __driver_probe_device+0x22e/0x480 [ 442.163240][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.163297][ T24] driver_probe_device+0x4c/0x1b0 [ 442.163368][ T24] __device_attach_driver+0x1df/0x340 [ 442.163440][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 442.163508][ T24] bus_for_each_drv+0x159/0x1e0 [ 442.163566][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 442.163622][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.163674][ T24] ? lockdep_hardirqs_on+0x78/0x100 [ 442.163740][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.163791][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 442.163861][ T24] __device_attach+0x1e4/0x4d0 [ 442.163930][ T24] ? __pfx___device_attach+0x10/0x10 [ 442.164000][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.164051][ T24] ? do_raw_spin_unlock+0x145/0x1e0 [ 442.164111][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.164171][ T24] device_initial_probe+0xaf/0xd0 [ 442.164214][ T24] bus_probe_device+0x64/0x160 [ 442.164285][ T24] device_add+0x1210/0x1950 [ 442.164336][ T24] ? __pfx_device_add+0x10/0x10 [ 442.164379][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.164434][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.164487][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.164552][ T24] usb_set_configuration+0xd97/0x1c60 [ 442.164630][ T24] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 442.164698][ T24] usb_generic_driver_probe+0xa1/0xe0 [ 442.164767][ T24] usb_probe_device+0xef/0x400 [ 442.164815][ T24] ? __pfx_usb_probe_device+0x10/0x10 [ 442.164867][ T24] really_probe+0x241/0xa60 [ 442.164939][ T24] __driver_probe_device+0x22e/0x480 [ 442.165005][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.165063][ T24] driver_probe_device+0x4c/0x1b0 [ 442.165133][ T24] __device_attach_driver+0x1df/0x340 [ 442.165205][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 442.165278][ T24] bus_for_each_drv+0x159/0x1e0 [ 442.165335][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 442.165392][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.165444][ T24] ? lockdep_hardirqs_on+0x78/0x100 [ 442.165509][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.165560][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 442.165629][ T24] __device_attach+0x1e4/0x4d0 [ 442.165699][ T24] ? __pfx___device_attach+0x10/0x10 [ 442.165769][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.165819][ T24] ? do_raw_spin_unlock+0x145/0x1e0 [ 442.165879][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.165939][ T24] device_initial_probe+0xaf/0xd0 [ 442.165982][ T24] bus_probe_device+0x64/0x160 [ 442.166047][ T24] device_add+0x1210/0x1950 [ 442.166098][ T24] ? __pfx_device_add+0x10/0x10 [ 442.166142][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.166194][ T24] ? add_device_randomness+0xb7/0xf0 [ 442.166267][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.166330][ T24] usb_new_device.cold+0x685/0x115c [ 442.166394][ T24] ? __entry_text_end+0x1020b6/0x1020b9 [ 442.166444][ T24] ? do_raw_spin_lock+0x128/0x260 [ 442.166502][ T24] ? __pfx_usb_new_device+0x10/0x10 [ 442.166550][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.166601][ T24] ? mark_held_locks+0x40/0x70 [ 442.166658][ T24] hub_event+0x314d/0x4af0 [ 442.166750][ T24] ? __pfx_hub_event+0x10/0x10 [ 442.166794][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.166846][ T24] ? assoc_array_insert+0x2810/0x32c0 [ 442.166906][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.166961][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.167017][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.167068][ T24] ? rcu_is_watching+0x12/0xc0 [ 442.167128][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.167189][ T24] process_one_work+0xa0e/0x1980 [ 442.167268][ T24] ? __pfx_process_one_work+0x10/0x10 [ 442.167319][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.167387][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.167447][ T24] worker_thread+0x5ef/0xe50 [ 442.167519][ T24] ? kthread+0x13a/0x450 [ 442.167561][ T24] ? __pfx_worker_thread+0x10/0x10 [ 442.167611][ T24] kthread+0x370/0x450 [ 442.167654][ T24] ? __pfx_kthread+0x10/0x10 [ 442.167704][ T24] ret_from_fork+0x72b/0xd50 [ 442.167756][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 442.167808][ T24] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.167860][ T24] ? __switch_to+0x800/0x1100 [ 442.167918][ T24] ? __switch_to_asm+0x39/0x70 [ 442.167975][ T24] ? __pfx_kthread+0x10/0x10 [ 442.168025][ T24] ret_from_fork_asm+0x1a/0x30 [ 442.168107][ T24] [ 442.168407][ T24] Kernel Offset: disabled