last executing test programs: 6m40.153702438s ago: executing program 4 (id=1371): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ftruncate(r0, 0x100000001) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x5, r1}) 6m39.991024098s ago: executing program 4 (id=1372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) epoll_create1(0x0) syz_clone3(0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x100, 0x0, 0x0, 0x1, 0x0, @private=0xa010106, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x4, 0x4004, 0x65, 0x6, 0x4, 0x11, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}}}}}}}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r4}}, 0x30) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 6m39.762302682s ago: executing program 4 (id=1375): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x10000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2000, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) writev(r2, &(0x7f00000036c0)=[{&(0x7f00000033c0)="93", 0x1}], 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r5, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="300000000000000084000000010000000001fdff0080000009000000faffffffbaffffff09000000c4020000", @ANYRES32=0x0], 0x30, 0x4000840}, 0x40) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf5, 0x10, 0x5, 0x6, 0x7, 0x1, 0x4, 0x5, 0x6, 0x2000000008], 0x25000, 0x100400}) ioctl$KVM_RUN(r6, 0xae80, 0x0) fchown(r6, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000030801010000000000000000130000070500030006000000140004800800014000000006080002400000007e29cfe38fe73b133016f3f926902d050c127159ba55e98f55523cf22c5fb0056dd8b4192d037231"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x80) r9 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOC_STREAMS(r9, 0x8008551c, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r7, 0x4068aea3, &(0x7f00000000c0)) setuid(0xee00) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) 6m39.123324682s ago: executing program 4 (id=1376): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0xfffffffffffffffb, 0x400) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x186}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001880)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x7fffffff}}, './file0/file0\x00'}) ioctl$UFFDIO_POISON(r2, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000864000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) getpgid(0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x800, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="4e3a78f4a7fe3a4bb562e3dbd42bee833a34dcf183bbf70ec25f4443a1f7ec0ee7fabfef43bed9865b321fc94953b3590647f7e105cfa02dd33b12c58b7ee7bb4b05953e2dd41effbc9ce4ea8cd259585b06897812da7a16f3ca539e36ac525b309959e7b963d655cce738f93c52623ebf89164847d086b05c0e38a8368b809de1f30c1c010adba3a4bbd3fa4abfc0a7ebbcf2bf6db97557c9c9502f6ef614cbf6d2795ca183fa3faad10f1ccde688c4235efee6471a4ae19f5d92f703ddb96d651f"]) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="f00000001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e210002020000a03b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe80000000000000000000000000003f000000fe3200000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000001000000000000000000000000000043050000000000000400000000000000ffffffffffffff7f0000000000000000000000000000000000000000000000000000000028bd7000003500000a0000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x0) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x13, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000584d0000000000000000020018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffa702000008004000b703000008000000850000001c00000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 6m38.894370288s ago: executing program 4 (id=1379): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8a20}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_REMOTE={0x14, 0x18, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x4) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x73bf7ec52f0c3ae8) read(r2, &(0x7f0000000440)=""/247, 0x26) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000680)) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bff000/0x400000)=nil) r4 = semget(0x1, 0x4, 0x39c) semop(r4, &(0x7f0000000280)=[{0x3, 0x8001, 0x1000}, {0x0, 0x100, 0x800}], 0x2) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000640)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x1, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[r5, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x20, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x6, 0x35, &(0x7f0000000180)=""/53, 0x40f00, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x5}, 0x5c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) fstat(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, 0xffffffffffffffff, r7, 0x0, 0x60, 0x8}, 0x4000000008a1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x81}) tkill(r1, 0x7) 6m38.659412162s ago: executing program 4 (id=1381): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000000d00000000000515c6ebd2"], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="1401000020000100"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 6m15.901764856s ago: executing program 3 (id=1499): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB], 0x74}, 0x1, 0x100000000000000, 0x0, 0x4000000}, 0x20004804) 6m15.604826313s ago: executing program 3 (id=1501): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) r1 = socket$inet(0x2, 0x801, 0x0) listen(r1, 0x540) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7ffff000, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000140)={0x0, 0xc, 0x6, "052970c636f5"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000000)={0x40, 0x30, 0xc, "b9adb268867618153f4fd781"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m15.421648392s ago: executing program 3 (id=1503): r0 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) (fail_nth: 6) 6m15.221838171s ago: executing program 3 (id=1505): openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.pending_reads\x00', 0x40, 0x81) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r2, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) syz_emit_ethernet(0x41, &(0x7f0000000280)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0xb, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0xb, 0x0, @opaque="d4e0f9"}}}}}}, 0x0) r3 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) 6m14.677768835s ago: executing program 3 (id=1506): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvfrom(r2, &(0x7f0000000200)=""/229, 0xe5, 0x0, &(0x7f00000000c0)=@generic={0x1f, "c27b94d1f702650837c04408804bdfa10392d49e98f836ec2c175f91f7292033d6ee05ddaa2ff0f449f97387f8af47668ddd5461524a80d59f61df4d50b38a23b66e940d81e7d234766a448b1c0e5a21fee93f6007c0c77b4adb2e0ef344ad4b752a89de2838efd05a655c15c3a55678c07e7fab57aafcbe96c59b1e7499"}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8c100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000400)=""/102400, 0x19000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f000074b000/0x2000)=nil, 0x2000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000095c0)=ANY=[@ANYBLOB="7c3800002e00010325bd7000fcffffff06"], 0x387c}, 0x1, 0x0, 0x0, 0x448c3}, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) mmap$IORING_OFF_SQES(&(0x7f0000892000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x108) 6m14.397738635s ago: executing program 3 (id=1507): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7}]}}]}, 0x38}}, 0x4000000) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010009081000418e00000d04fcff", 0x58}], 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) shutdown(r0, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e3002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r6, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0004ae7c5f049a1dc470158b3802aef93c68390e28bd7000000000000009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x81) (async) fsetxattr(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="62747266732e2f6465762f6e756c6c623000706586968021b39a74ddb5d3abb938e17383129d7cc1864506defc344d69be032143bd9ac4b2e8b9ba9203e6c42401cea7fd62c54035431f7f0bcf7acfd3f63853c680b1159c024428b39237f3148de2e0ee3031695d277d502afb0664c26d0730eb44203d3f079d9a0dc926439374caaf42a9166f32c158b533a1b14488d381ee5befc8cc681bf7140d26c600a9a16284207655e468696ef8000c6a2482f50c75755589b815d6046deaa5ce02b0cbaebff88ae9dbd2bb1776a4b466350d55fbcbcba3598d35b8d1ddadc97a2d17c13ca63f603ab9e498c0"], &(0x7f0000000240)='@Z\x00', 0x3, 0x3) 5m59.290365809s ago: executing program 32 (id=1507): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7}]}}]}, 0x38}}, 0x4000000) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010009081000418e00000d04fcff", 0x58}], 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) shutdown(r0, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e3002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r6, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0004ae7c5f049a1dc470158b3802aef93c68390e28bd7000000000000009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x81) (async) fsetxattr(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="62747266732e2f6465762f6e756c6c623000706586968021b39a74ddb5d3abb938e17383129d7cc1864506defc344d69be032143bd9ac4b2e8b9ba9203e6c42401cea7fd62c54035431f7f0bcf7acfd3f63853c680b1159c024428b39237f3148de2e0ee3031695d277d502afb0664c26d0730eb44203d3f079d9a0dc926439374caaf42a9166f32c158b533a1b14488d381ee5befc8cc681bf7140d26c600a9a16284207655e468696ef8000c6a2482f50c75755589b815d6046deaa5ce02b0cbaebff88ae9dbd2bb1776a4b466350d55fbcbcba3598d35b8d1ddadc97a2d17c13ca63f603ab9e498c0"], &(0x7f0000000240)='@Z\x00', 0x3, 0x3) 2m58.370553062s ago: executing program 0 (id=1872): r0 = socket(0x200000000000011, 0x2, 0xd) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000540)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000074000000000000000000b7080000030000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018000000", @ANYRES32, @ANYBLOB="00000000d5160000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x5, 0x168, &(0x7f00000016c0)=""/4113}, 0x2c) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) (async) sendto$inet6(r4, &(0x7f0000000140)='{', 0x1, 0x4008041, &(0x7f0000000040)={0xa, 0x4e21, 0xff, @loopback, 0x1}, 0x1c) (async) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000180)) (async) r5 = socket(0x200000000000011, 0x2, 0x0) (async) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) (async) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) (async) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518b419bff8e"}, 0x14) (async) bind$packet(r0, &(0x7f0000000080)={0x11, 0xf7, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x7}}, 0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001000070d27bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2d88020060000000500012800b000100697036746e6c00004000028006000f0002000000060012004e22000008000100", @ANYRES32=0x0, @ANYBLOB="140003002001000000002f7f6e00000000000000000001060011004e24000008001400cc000000"], 0x70}, 0x1, 0x0, 0x0, 0x8050}, 0x40000) 2m57.753148238s ago: executing program 0 (id=1875): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000001a00)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) (async) socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r4, 0x5606, 0x4) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r1, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, r0, 0x0) 2m57.176605377s ago: executing program 0 (id=1876): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300ffffffff00000000070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f3c00128014000180090001006c6173740000000004000280140001800c000100636f756e74657200040002801000018008000100647570000400028008000340000001"], 0xc8}}, 0x20050800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x80, 0x7e, 0x1}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 2m56.956051424s ago: executing program 0 (id=1877): r0 = syz_usbip_server_init(0x1) write$usbip_server(r0, &(0x7f0000002680)=ANY=[@ANYBLOB="00000003"], 0x30) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000003000000000500000002000000e30000000b020000000000"], 0x0, 0x3e, 0x0, 0x1, 0x8}, 0x28) r1 = getpgrp(0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x1}, 0x2000000}], 0x2, 0x101, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) getpid() prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff1000/0xc000)=nil, 0xfffffffffffffcbb, 0x0) 2m56.169936223s ago: executing program 0 (id=1878): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000280)={0x6031, 0x4}) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xefc8, 0x1f480, 0x0, 0x332}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x20}}, 0x0) io_uring_enter(r3, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, &(0x7f00000001c0)={0x2, [0x0, 0x14a1, 0x4], [{0x2, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x200, 0x3, 0x1}, {0x8, 0x10001, 0x0, 0x1, 0x1, 0x1}, {0xff, 0xff, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x8001, 0x1, 0x1, 0x1}, {0x65, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x800, 0xac, 0x1, 0x0, 0x1}, {0x6a}, {0x80000000, 0x10, 0x1, 0x0, 0x0, 0x1}, {0x10fc, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x7, 0x0, 0x0, 0x0, 0x1}], 0x40}) writev(r2, &(0x7f0000000a40)=[{&(0x7f0000000140)="c7e51aeeaf388588d1edeab17901fd7190f7df375f05b4f1b38c9f5d452d81d79384f39638e19dc0ac3b7e5f1534dd07c324b571aa", 0x35}], 0x1) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000002"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x8, 0x4, 0x2}, 0x8e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)={0x2c0, r10, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x25c, 0x8, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8001}]}, {0xcc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xa0, @remote, 0xc}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9d5b480e7e12c510b64dab2af1746c1adfd2d6d21d4af1d113d60c6a9c0204bc"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c8df037799dd102bc0104b77c62564dd659e87f453c7739199a49040a1df03e7"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x31, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e035068c2d69849fe4e7bb573c4e4168ce0b1d91850555457994348601c72f58"}]}, {0x178, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d3fd5a5dcf2270a4a6838f7b97612026633bd92f01f48d26c760de0eba9b5862"}, @WGPEER_A_ALLOWEDIPS={0xd0, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast1}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r11}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x8000}, 0x4) lseek(r4, 0xffffffffffffffb7, 0x1) close(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x701ca}}, 0x20}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r12 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r12, 0x40086602, &(0x7f0000000000)) 2m55.96079308s ago: executing program 0 (id=1879): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, 0x0, 0x801, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 2m40.069889965s ago: executing program 33 (id=1879): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, 0x0, 0x801, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 11.923941845s ago: executing program 1 (id=2163): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 11.665752926s ago: executing program 1 (id=2165): ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$igmp(0x2, 0x3, 0x2) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182c01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}, 0x2003}], 0x1, 0x40010002, 0x0) 10.63208092s ago: executing program 1 (id=2166): r0 = openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x1002, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000440)={0x20, 0xf, 0x1, 'l'}, 0x0, 0x0, 0x0, 0x0}) 8.855177461s ago: executing program 1 (id=2170): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@bridge_setlink={0x40, 0x13, 0xa2f, 0x70bd27, 0x0, {0x7, 0x0, 0x68, r2, 0x940, 0x27025}, [@IFLA_LINKINFO={0x20, 0x1a, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0xae0}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24044844}, 0x40000) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="ffff5abd6a473972e17f92963070aa728be0f1a8f1269dc41176eef772e94df41407c7d1a71df083c520690015bce81583eafeb74c747f32d54c903d2a317d761e497fa07a5484da639ad9869a795bbe80718b77ee9873277007e1c001e98710d2e881fda3d073cc57fa5e8615cbbf3f69ac86aa02f0fea8f26eb8c9fc5653b99a0d14421173691dfbc62fa205991c976d43c50a275e2518adf194ec2d95c2b49a36f1350fa33ffbf704834083be507223ee39a460a57cf6ac8cc985066ef71b21dcbf7a9f1ac2266a5a7d332689016d3c908003223dbae3b3f4127d950be924", 0xe0}, {&(0x7f0000000000)="6c37e59572639dbf479a03ed619354e32b77dade3824cb4298be2aca3191f9413334e2b8df46cd4bb4f6194b6bc255023a6447428161083e1742dbe24999cc8eec727b6f23ebdd5e599e21a6d4e67f11133362ecfa1cfe361149ce39145234e4b43af88a4c05c0dcdd9076205a35e19ed20821660768a2a0886ec09048c32364bd5b3c513b3c361ea62a63d064cc15fe89b13abe877c731c824ade92d63c3c96b63285f1d9e1c6d2a6751c553a9e", 0xae}], 0x2}}], 0x2, 0x400c0) 7.036581698s ago: executing program 2 (id=2173): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (fail_nth: 6) 6.767958261s ago: executing program 2 (id=2174): r0 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000006600)='/sys/fs/smackfs/access2\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x0, 0x0, 0x3}, 0x6e) close(0xffffffffffffffff) write$smackfs_access(r0, &(0x7f0000006640)={'}[{', 0x20, '', 0x20, 'a'}, 0x7) 5.489804096s ago: executing program 2 (id=2175): r0 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r0, @ANYRES64=r0], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) getresgid(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000113880)) socket(0x24, 0xa, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000113a80)={0x9, [], 0x10, "1b65868c827e2f"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x64}, [], {0x4, 0x12, 0x1, 0x1000000}}, 0x64}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc003, 0x1, 0x20002f7}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.01695759s ago: executing program 2 (id=2176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x8001, 0x6, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x101, 0x2, 0x1, 0x7, 0x4, 0x8, 0xfffbffff, 0x1, 0x1a445, 0x6, 0x40000003, 0x87, 0x2, 0xf27, 0x0, 0x3, 0x8, 0x7, 0x4000000, 0x4, 0x10000, 0xfffffff8]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @auto="a92a17aeb5c9bde0f3363c3c2f66c14f"}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x125042, 0x2c) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x8c, 0x4, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffff14d7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x36c}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20001010) timerfd_settime(r4, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, &(0x7f0000000180)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) 3.716319113s ago: executing program 1 (id=2177): syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28}, 0x48) 2.639682686s ago: executing program 2 (id=2178): r0 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000006600)='/sys/fs/smackfs/access2\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x0, 0x0, 0x3}, 0x6e) close(r4) write$smackfs_access(r0, &(0x7f0000006640)={'}[{', 0x20, '', 0x20, 'a'}, 0x7) 1.533297593s ago: executing program 2 (id=2179): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) r1 = syz_open_dev$radio(&(0x7f0000000940), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000040)={0x98f904, 0x2, @value=0x5}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x418, 0x220, 0x110, 0x0, 0x330, 0x330, 0x330, 0x4, &(0x7f00000001c0), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @loopback, @multicast2, 0x2, 0x7ffffffe}}}, {{@arp={@multicast1, @dev={0xac, 0x14, 0x14, 0x27}, 0xffffffff, 0xffffff00, 0xe, 0xc, {@mac=@multicast, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff]}}, 0x401, 0x200, 0x9, 0x1, 0x5, 0x13b, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x0, 0x100}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010101, @broadcast, 0x2, 0xfffffffe}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3) open_by_handle_at(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x0) getpgrp(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000340)=0x0) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40800, 0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xb, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002200000000000000000080071104b000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0xd, "faf98317e5b4140989fc8dbe43ea6acc96e3a2503dc3bd3ff87d5812ff010000000000000f35000000b50000000200", "32ffff26f7d31a74df2cfc06c89f3d9e234b30c50997d3bed109ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fc99a", "675237ff070008000100e4162e43ac61b7ad3300e8ffffffffffffff00", [0x6, 0xfffffdfffffffffe]}}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) r7 = socket(0x22, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xf7, 0x1}}]}, 0x2c}}, 0x20000000) 0s ago: executing program 1 (id=2180): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) r2 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000001580)={&(0x7f0000001180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001200)=""/83, 0x53}, {&(0x7f0000001280)=""/80, 0x50}, {&(0x7f0000001340)=""/162, 0xa2}, {&(0x7f0000001400)=""/39, 0x27}, {&(0x7f0000001440)=""/89, 0x59}], 0x5}, 0x40002100) sendmmsg$inet(r1, &(0x7f00000048c0)=[{{&(0x7f00000015c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002880)=[{&(0x7f0000001600)="da43cb89d108c1169d4541887b213f2e97c6f52e0a0692f4c7d29be09efd5b0a891175181161b66e14ff5e2758ccd10d97aba0e99d81f3e64ef9402bde2bfe4c14e0f8d867a73829fb80ba4aa35f0c4b6c2e6758396c98ab15ba5cdde1e56b2e68faad12f39b5efa9a1e180bc582dade3e00554cfb4b0b8b75b77525eab62e1f67798696de61517be59766711798378dc4861fb31a7e422932d87d6df1a6d66c4b7cb479300f4ddea53bb78e98f8fd6c639734ef8d65fc84203806a8c14ee2a3614da2335b14f1881de8afe050039aeb0bd75612a8d3b74e1bacc2", 0xdb}, {&(0x7f0000001700)="4fbcad2ab208f339bc014e75d390b06468a0c389d96e274ca0d2319b5116a86c4a6b4ffe784c206ec03306d139ef9ed6829218afc2e51a04409650cc2fd0d475e131bf6d3728498ec402db76db", 0x4d}, {&(0x7f0000001780)="ab4c36db8efa8c26bd74c092c06c7ddd9ef1ca865ce9ba98d4ec181b91507aef560c45e3e50723b18308ed3c80a61a3ad0df8b449f9439eed5c7702b90fad6a60f61e55f8710b7eacd0e7910f512ab46e9ad0fec68b8585d723799f5b69888a5733629486f9c2a5c92f1a0860bc2180a05d04743e6adbcdc21fcd45ab2f112fb9c4d6c86775aadece505fcf4c97475637b8193a7b4ef95a46b30d69cd8a70041486a958b5a2c88d779428ec2a5c815cc3dcac51218ce625b28231e2c678c73c5a4b7e603029e52fa968cfa8de99848a2f17bb9994d7416ecc75c2c2df4d55809adaf378f5c8125a48fc4664c35d00eb0390de6448112ed48a7b9607797522ae365a6111c0d5d8d299a231796072f91af1c993768eb261c7c79fa37e6be005ceefdf436e98c0d2180e92ad37393307d1fca304f116db610e5c7204e2ec4fbc8596967a58072aa9bcce29c9a0c0c2ef731b098735b7798726e58e20ed7384ede7c548158afd606394b44c130d92094c386f287172221d64363868d715ad1af22255572feaf9b201a558837b7313794d67e29044719996bf60ce6802315008ef64f41ba81e8f4b03ba030e0e84bc2c25d2e60afe31b22388eda535edaf434bc614c590250e4c5334da5845afb9c9a59334932ef349b7d33aea0d83cc7b21b8190450f5512ee88dada1270e79533d6b5233bac0efdd9c2b795172cacac162c86d4a99b45e43c5629e6a597c2652217169f79a012d0c3240196492ae899ea26b893f94fe02311d61272bc4eab9589fc666da7594df3ae35ac7ce2b3effc0d633206ffb2e2e011f688bb517c18ec7eff9970a98b28d5dda9bc385fcebd12758eb243a37ee773015504bf2fe21875ce44b52b7c6e1f07b498909e0e385cddc22a9b841992386bfd294588c76c73caf201ece9f204e1b79e44d50eef1df863472b0d3ae6e00f64cf2a5155c41a60911927abd5e0fd51a7eaa04d0dadd8c9d69ee34a68d1658af852b74d9520ccf3e5e5b64dc6671ca1453792810f6ea159b4ae8dad54cf979e76abf62b1f94a5d530912691e40bc7a2fdc6dd1e7f464347836ddad6f66ba5429a58064b8f0f59bb6f51de425212746157fd0bb9840ec8b5efcdaf8bdc43318616d36277fb2dd5257582826e5b857409797086edfe39197bd8895e55701a5691dc4f2f5a500ba61a3c32de71e2400d98276124e4d0630adc8f84d02a7cd6509d44e33a36e5d283e5541aa51f625f3cb64f5f28728039291aff34cfa1a32971a40893c2ba1087380ccf71f2a8ba4e49e149d9b43a2a50e8baa28fedc945525aaa612948dfa2f18bb7056f76233fea7f536adc689cbfaea72937c9680528296156017df0d998516f09a3f633a7d05b597dac1929fbb01bae3e4eb794d9731cda1b51e158acd797a5588beb42642c7ed4deb81016ec370615c9ea301f1de126c6488bf27618beaf272c9346303805571b885dbc909426e26d34afa40e408eac14c5451c30585e0969c4518927e2d40e33652294061117d4699dd8910413b46adb86f7014b60006f20aeaeae3f82901d29546b9e07c5717db8523069b8b21b7e85f2d57d8a0b89682670ffa79b70a41ce9206169e4d07f10bb1cd07ad23819b13f5fc726719a2fcfe4bfa3fb9b3d48fd7664533d3f3f9cc477351933a3f9a76c3129f340616f8ba668d538a2285e73d17b2f880be6803e71af9e2d9321b9c6bdd1f355c0e027cba2c71cf77c7f94819648690b9a0d8ee8d1ae4dcccd91b7c06293c47ad65eb1c31d8e783050a37ecb78fd91b996b7679cf49008a0b6f97c4b0c8d39aee2626cb15266a6e311dcf4fddf776d322b3f84c69778fdcb779099096be213db150925b5f2d5531a66f1d5a7ab4e5afcd89e40c7ff631d72df377cb26cadaa1018bf25a5bda99a2efe23e81f7b0dd84dd41fcba644b7a41c898536ee365fc3ac71ea96d4cb3828a30fab0bc58fdfddf0e0360f1a521e153eae3278b4d5a300f4c4e0e0fe5535309f53e92dbe8ebbb8d04d1370d4484abc4901510b579f8e52b38398904b42deb367f8a48639b504598b172432d39683f75a09cca534c36fbf12c241cb53c25703b9d2b38418037321527d326060f5bcc650c71d23bdf23b50fccd541e1520dd7ebebe754c060a44dd9e2e108901acd731071e1ae9d125225fbb01755a5828ac957817d93867cb5ff715167e221a587b9e704b16041e5f3579ea2305d7d636a01bf3fe1e61f463e98e2c0411b9416331240aaf3f64f181c6a03c548576d76d58ee09b44463fa864b65ba2704f72cba8693cb4d1c040fe5c498cac4edde7acd704aeb4cc18b8d09bfbc7f3d0610784200e8ccb14f39b8d95425f92139951883166f9f65900786e73ac594fad5f7b467f20dc2a3679e989915b2b91cad13e0f4f7f96b8883e22881f3faf1bb480a0e03940f1c1faac004bea7d9d61523ae9af906829ff67970c11ee3d128f793c1db0ede277e8b0bcc3657633b47c418613045b55fc2eb04662134578e8e3c0df1e28d56f6b162b81db83834371dff9e9b2f698110d32f7d8dba4c55aa6aa182b4cb08c6da299ad0a0f639beb5b8f53e4ac4e175731aefe0989b66c84013f8b1eda884836ce984b5dfc4882763658ab6d4d7cfdb6175ad2d0addef127f36f4bc216a6876f9a50231906f88bff9471d93b64992616aa5a7421ae48752f7c40a48b475f2ca3bc17be5cbf6701c9bd28963bb024e951a4ebd87f6e5063451fd986101957ca0894fd6e1427333924bdd54207bb45e01200ce58b8619a5716287d9e7545797991482f0be721887459f6bdb511dd6472c381ec82a6f4fe39b97ba0d243d00b80e4430d16e2d46651ed89508d79116113f7d7b67b9c95af11033885a35ecaa7a01fe6113f75c05b0870b1126cd5833c140beee56e8f1d3bd91bf4f42327131b361dc19a0d4b1502a0c686dac6dd576220b7facdc1ee9a36a5a1132ea569f4081a7c63a38139d8bd6b6c50e6816c70e8503412b5fd0bce90865c6927514b781ae01e3808f96ff30004ece81ac4e144917feee107f3b985bcf80d510c63fae0ec530d2b6bbac607a19003d1ac9e11eea160ebe39e0ddda2edffe499fe443a41e3373a0c98e227878aba770a5830e396eed6aa93d9439dcc9be994d72e24b4c363bf1cd6e29ea9b6bde3d3c2674b76122c8e28460447c4c7bd844c4dd71ecca60d62ff8ea6d01e249a30895b8f4a33dc11628aea9c1d9f415802bb2d36a008cf8091f0120e20551626fa3c950366e16e1a2736d87e5f51fddf8aa79c65a31db5cc8d05ddd9916edb07a9768d472f0cc6b383500d2921096d034fb345f006d49e4554a890bb8a8544006a5a1d64b4c86e4f5e169b13f9e34d2e26545011b59f954657cb4a3e37c89f41d4083c53011432102bfd412fd1c514c85abb96f0361191d10f12789e11f32d11a8438ca4e10038f83384ac1965448c742591335ccb78aa36d83f742efbfa162564364d455b91a74fa95e84df79800678b2bde6562a479a1e5e70fac6f25a86489b8e16a069895df97a59675b144ce22bed601466f282d54ed03a400461072bc9873174e402def19f6f17eb67164e6e97ef4062e1af538ba629f78848b034d28a7cc0907f3e6b4eafa292ce6ac681ff7d4d22aa3388bc5ae7ab6f65e46570ea722981555177807238801ef25080965d04c125276f9b0f0857a7c66d240c057fcee0d903d3792835a23d2c5f1c4810345503a2dfc0b37f701e6f3437da99ba3e45aed766bcf738dba95236b0b8cd54f4785dc8fc6f8a243f783dfd875e7af6d7b58ed1865dcd9d83c28909e03a7cac29c2c2cb72321ed5185374a7383d534df1e7e07677c4b93c610a6afae5613aca8aac81cd5d9e80d3ac975de1677e4f6c900b659ac8ab376ee909fd3f88fe8088078e45ec8a7a9b4a75a10695c522112bee722fbf0cb288d134462ab3d84de203e52bbe113fb91e44c238c96ba0cd9eadc9291ef9a893d536426240cdd0dbd67cd0cc1f53feb53401cf0dcc89855d047d4fe3511f99f5b9aad8d90ff173ada93d3e7ece7758741e2d8dd5280eb5c27eb5309d9e2cb4619377107ae282627ac35d5d727a1e0fb3ec38b8c7a24f3a8f616e473e91a8a646a22189975537b2872c9799c8ed3b4d19caacf568bf30105217985cadeedb102b6c40d7c2c84b16b857e7fa2778d4d19d225bd2d86b29b56acfb0bc941ce02026fa8d24667a1fcb3210907c283c30983d544e82b8d5b5392d39da0c6ea4be206eb2c2f3d884af1139435424fab6fc8afeccd94ff81c75cd9ae1ad99bfd1c2916b8ad442b935b2bf2a669d900413630bd83b33180c75aee2d437f8295961fb569b4ab5846b875e4b1a5d95267bd6f54fc2eb6f5490d34b84c3266cb56c4a25f4584e820b496723d4a999f6992d4375868c888ee9a9134005d4a4d4f6b5a0335b6b430fbcfced1365dc00ed5d1fddf10e53c51f1d3a626acb22bfa5e7da431a8d3e2f3ad86b6a60b9f11160db84613bec3ef30d093506bb2c18081719b35a328cc49a4cd57577a180a0f864ad1dd3063abb2a74a87f99357f12cdc7a6daf08cb84ab5680e1004ca360d8b0415c036fca0e3a66aab83aaa1ea54ec5ed61b0fa2fd8f663ff7d4ff966df6723e426a37a12daa92f23b21c61bfd8c302b19b3cc3d4a589c40abd8f20ca04a370b706c7b43f4b0409337b7507de012786885708a9b27c5049c4d72f76b001d9ec2a4bb26cf99e76ee75ce25cfecc8a86ed908c069fa08731c47951d05c3a155b3dfafb58d4a09fa2c43301ef2c55e5c58878b8ec50281f5dbcc5145cfb9de7e89a00b4c6dffc79b0053876589dd10479da066c098694e39a17716df84336a19f8061f72e31dfb14fee3894e4ffcdce7e51543ca3fb3195d9cbe609267a58d5453685d83ab2a6aae228220d842d740f5628f23b3a9777de324aef8af1fba032702b4a20e8f03094736e2fb06f3f49a76bc242a778ed3353052001f0cb5d3916ec7617b3464cbcc83c6b98a7050ff8759ededc214557cc89fb6ab5036cdcd455742a428288adda7cb46f1906f2b767700af3af8d4cab7aff3d64f9a1c71baff0a2e490c1b112c87c1387551338208839e7ab314979573e5caa52bfd1816e281fdebbe84788919e6d6071bc95c7ade72bb2e4edcccdfa302b63e57d78b4ae56cc83558c8c1bf828634275b94ab33fdfc5e011f372b02d7b473f3470cfc493b82e999045ed6159498042feb854b98d166d0e54fcbc2d228a1e434b379fc8b99967b5078e97a22a77ba14b36509593c5f0daa4bec261b961df9aa9f151f10fa0984ecb348d03c48eb3ced4f8541f5cd2e5fe858058d3b763e5fcf5bd99a1119305b184756a3e3551c26600e5508abe775312df63971f5d301570511e1005895a0e0ea3becbf378012e6fea3ea4e38ebff922d2b05330f30e88fd4c28f2dd138b4e27410b3d689fd8f1169d8e8a443a1609c4f78ff9064aea23eac1b6c44b996270a682a0578ea9701c15ee58475fd7efa683af86fb484c2ea2aae0c4abe9277f82e3733416910b2aa80ce9b9ccde694b0cf3508d6172743cd3cff9fe8b0a5b35d6e9884cd1a325a14da3e8c16cdbe911e3f1c2a1c4c8d01d08b44cc5098a0f392619af9405580ddb22cd2865d16cc2eaf5ee02dc07af7da39d566e9d7c204e7243797bb00b306080fcdfee3156dacf1fe735ef32f5256d12c85545ebd7d953c6ebde04a5f33cf1b377e4e07f0be89eed7bebc6c73fa9f14eae5f256078b8304bcba77a3de7424ac7df37f271f653dcc950719ec77274", 0x1000}, {&(0x7f0000002780)="531de3eec49e92e6fbd674bfe334fd56bfe0472ee6d1ae020b4b6b82cc3bd4084416bd9b3f17cc85d02673c45ed2166de9a44b27144a21bb5d9445b4ac0b7110d3c03e8f152c1c46e927d7af8525f3fae99c7134d6609e7f311d6c09e048ba1e7e5c83d63e9969553a3c5da8729efbfd0c444b320e12dfd4519d9de367160b6bf3cee6da82be6a0fcfb047194de1b6f40fd01522836981f555688c60e4fc10926125fff01c512eb22b47cb9ec63103d8c4b20248b01d4bd04498b2db0e0815f3f026fa2ea015520881394d080aba0517f840ca3770aab997d02dcf68c5649397ac975a7c", 0xe4}], 0x4, &(0x7f00000028c0)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0x7, 0xdb, [@multicast1]}, @timestamp={0x44, 0x8, 0x75, 0x0, 0x7, [0x9]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x2b, 0x0, 0x4, [0x3]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @rand_addr=0x64010102}}}, @ip_retopts={{0x84, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xd8, 0x3, 0xb, [{@multicast2, 0x700332a2}, {@broadcast, 0x400}]}, @rr={0x7, 0x1f, 0xc5, [@local, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x3c}, @remote, @rand_addr=0x64010101, @private=0xa010100]}, @generic={0x89, 0x9, "2c8cd733205a4b"}, @end, @timestamp={0x44, 0x14, 0xd, 0x0, 0x2, [0x0, 0x2, 0x6, 0xffffffff]}, @timestamp_prespec={0x44, 0x1c, 0x28, 0x3, 0x4, [{@empty, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@local, 0xa3}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x83}}], 0x108}}, {{&(0x7f0000002a00)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000003a80)=[{&(0x7f0000002a40)="95447ec09aa120716eff21a10951b97f1e33", 0x12}, {&(0x7f0000002a80)="084e9b513849cc7309a4224c5511816194116e6b3a2abefedacb8862872df5c3264fbf5f9b05cc5d6069a31f79a5821259a21c00deea6e1f7930fe082d7abfcace268ed4a322918dffdd0029c0afbb21158d595f3ca1ea6dd18e407420f665ba112cbf27107dc17fe779a926e0ddda7354c18f953609caab8b0ae91de0ec2ce01a9ca6a038fee706e098da2c71cdb84e16960530b45a766efc4508525fe8821e82d4935f66272d2378fff13077c3bd985e60611bdc0eff11171cf54c2084b945d2f773d16c0c1c4987c18c159582c1c9f4123c4cf78f1cd28b79dfcdbfc89f263bd3c517238533e886bf0285176d34a26a37473191c2ddb37661e0c2b28f4f053353fc80761414912f4ce81f33852e5ce35556a50b3d60c4b4d4dc93f60fa8528f647934d0cdc26a9635481fe4bc96c127d69121b008f5c6f3d65faf9d9acbf2789641bca5084df747bc9405fca293db6ffaf1c5d7c1e64ad872e04bbf433f279d45d6d0a6579b36ea4b777feef855ec3ac7d677440fb8c9a94fc103dd4bbb40a81255b1241e9089b3405b9a8d391c8bfd7ad5d34e72dfe21845baf800970cd1e8929ea9c4624bbd808b9450b50eae425bdda93b18a1f7e9315fc802861af10a6395c454789df5bed320b2c1bda30a1136c62400a9a02c76949e073d87fa717f1f9fa1a3c87ceff1a6077829d0ab2e08b0baf03226c8a1af03789d5dec7590385b13745a339694ae76b46e85a7a6c4a8959ea9fd30cccdf044c222ffd12dc9f97fe26b2fcecef7c482fe2a233dc7e2efb7c28cefd5582e817cfffb87a15ce0016a923550279ecb545e066ba32d5e356d13ea0541de46119eb1c6dac72ad74c9b2a0a4b290fa435efeffbbe365c41a5d4390cb110fb6456760172adfeade3bb7c3cfa26717c106d19334c6e3aa85f5d15e2c413339b933d09bab14889154d03eab18c4f78f5dfffdebf196e7aa7bcb9215f41f1db4aaed01c4bc1ffb5461ac8c06f1a04b9b8d920df62da85a8e0618d46ccf22afb5d434981c8bd3e93ade98425addd675cfe91a60d0e6fca780b4048871624cf56fe3febec37af5ad71252c9b0dd431a575953eb1aaff5a91520a90eef99bc2e506933a7abcb6c018f0961ec96a00970160a4c1554b2d0d8b78293f6bd0bbc2e63beeba0823d62cbe9ecdded1ec27dd9af740841b4417f8513f5d6fe4b39b1c4c612045141b63fc81e337c6368c10f6b7c55f3d841ea99e60e4c583430f180b057677068e9c4cc8eb44505943539b34182ddbdcfecab499292bb43a5e352cd1cd67972d760ef92fb0cd47452d6ab2481b93ce88a85c54eb6452ba82973e4a252273adb2ad7509f642ebee7e4576636129732e5e4ba67c241eead9c070387459149c871a3c92e24dd62f39ca1355921a44e19edccfcc12458cbcdca7481a083b0b5cede73bf53c967cb1017123019b4ce94b949fd6c77cb000fe5c095248d867e32f8513d1c7a77f82f2f12b471845e10a7ee5ff27bcc7e2dbf321472235dc40a19b637c2aaf2b90e60b1f313165dad5ff6e0aedc478ab58b9c951ae59dd9b3afff7816b8452ddfdc7189850e5a5ead0cf85da7b3c8f625c470c5f725f9076a0c9b4823e41c040d99b83c1652b3125db07e265e34eae7eeefcc7c28f44cf7c5a216da0b3f4ceca7d034ee9b450f75881e437545c736665b36296a09e165c0b1655fff4e873b4ba015e11c7844537e30cb61cb6fcb1ad30fd6c17064bc1e6418470dfc885ce62d15c1eed2691843feaeb70e59358bd6159d5e86c251b184f96d553fe157f686ad09ad6d19d1b4260deffba695cebc33d9c2440f87ca3972710b9018428966482d77804629ae81043f9240370c18309ff7ff1fd891bd598064ae596eea37e0bb390a11dba8b6392000c42108ab5d44d119bc321aa0fa7a293b2d035d36cc9a13f6e48c9dee5ecac3e0f30a08526331673bd7f4fd1b9774a8168dfe752c04537e34f8b4ced2b18ec503778117e85d7796edddc41b4b33d45d6f40c16f6ac6e1714cb3d7dca96946b7c9d075161f1cc080cb71bac50aede67ec13a4f3047c6877d752f7a6aa6ce72a2752b2dbb52d89071d432ae623a50a835d42e8832d133598fe761c31bc6049af5d1a59a25cacc75082fc0a77d31774c6b101a84318131967a6911aa33fa15285ca87b2692286cdcbcd5644fd816424499c860163682bfa60dd33df002f66c22a0a884a3c3fe2644ce0b6e652ee331b2094ad0db08a9afe15fc3d462137432f2b3a208fd735bb733a1df91d6dfa61d38d9a3b179f0e61e1c989a81884332b32a94dd09c1bca7333812dff6f4725e838358495f2503598f80abde3307240fd009f8062734ecd51e801ffc62b7e6e344d5eb8a0d91374eab086950fb3d760e5e49310bcf37a11d460d6c27d84f6cf68f071f6a79cfed2dd762ed5fa7e3444a1847452bcd32acd7fb8e7da23a9f3f61cbc8790d82c775de36f4947e6deaeb798c04bb9384adae91061e417dd62e4044bb5091ba73bb74310a1861af00f496187686c2f42e5ef9764867fdd6a03a143cdc7ae80e0eda26e0afa7285cea466b515b95c3c994c1e1a54eda791ca9ff6067b38a86b8f092a04b5a0d72e4cc5d3797fc74b0b701df353e3485f7fd225a256525b7ec20f848dfcb523de1ab8dffefb05a4346c99f580ebea351f55ade900f0e6b259ca06e2103460d7c6689603d1d21df87c2eb8997321b8a2f78abfe0b98e169516da760951f24b5dab92a0e3e609d1c65d5afac163c94937d21268315de708988845e0f2c6d6eb75a0450b3763dcbc152e813758222515e3f9dc554a4ffdbbfc05ed22a435eb12b7ac375560971f1ef91cbf18e99b0d355cde1724389351e4dea73fb54f3177573776bf455b2d7aa8a731a622f8adb91f18ae3d36ac6fe83fff547fc435fa6c0fdc5dc2d500ae1e3af7ff0143bc92dfe71217c5a0b4d80bcf99169f252c79315ffddc1dbe0c4c66501a85b2b52155d6cc1623c328b4a8eafe36784cb3c336066d5afee09a755553a8d825f67478a714ba80e1346fa661631f5f40ca6dfd5dace64b124334ae1877c300cce2044311f2a8adc87d5ee8f204ed3e9d193c79240e1fde9f34d0d1280cad31cf376a5d3f1d65757b94b00eee47dd5f60887299cfd5bb12b17a2aec747919b1e668d1fccd3a1a6ca3afa4426d4c14f1a9b483978dcb2d1091ed0cc78b4cfe4b7c7850716187d314a76252d3decb6c7db1cd983c6e75bdbbf1eddafba9894677ff54233f6105e82e09e4344c1a966b1aadd93311cb8b3f3dfe98bb6ae1117cb4421152ef037a14f7b6717cc906badab298d72dcb1a764f306a0ea45f6c60cc0b424ed9f01599934405b9809210882b59363cfe7c746678422123d2622620536a65cb32936a9a8ced2858e43bb9232b476906d426d6b21f3d06bfd8c66b771c7b8bea067c17b28a9decece33ab493a06b6c5bfb2e47d7a37fcc0543226261cc384a0d373fcd17566f5e715a73277a581c03decbf849f44143902474af09f3fc11bbfa8df375aa0ada685f633bed6b3b737bfd4af2312e11d0d539b376248b449120525df6b9466e24ab41ddc64591e20525f271b263bce57eb7585638dda091b9d8ac8efc05a7bd8fde6a2f28d2b221cebde046fa065c8b8863052b9828d6ab89abd5315546e16f291a43d30b58ad0d829164b588da1621b12f1be203e825b3e761a1b0b8d85fd32d478e4737a1514f634b079e1b776cd119f35b04be0cb93f5d0f5925ac25937f168f57c0325a561fb7da29f12cff7a76eab00d698259e41b1a58bcc376f6cdc43702b774b0d23b10230aa1068fbd77a066ab9af92fa104be262e217d40f503edd742e4c9ec1d60a84484fdd06d363a62455fe8e6bfd6c0528e127847730d047532780fdad60219433cdc29f7eba06bf52d2dad0d8ba3a06c086580305cf4d9dbda4e2422a58b11b9e1ba5ccb8204c9150d597c22f5c2e2d3a14c904fb0dfd932511367574480ab0ff2424b365ec1b0ba6f0a0956a3a1fc6408279fed043420c92f38175798e44dc8454e2f6ccf2074020116170b6e4856f889faf1d62710ad3ad92381efb0df549365b4f9ee2f3e861bd50b1279e0b0f7c94eb77e370f216f9adb0e37971f4477d3ed36327af12764c17dbf3ac2b143c70a61c93d1904a714623d5c2cd6704d24a6a3e17677ddfd45fe2e35a706e1219e466261e4a11c1950bbb6103c3d09b7cc6de4631c9df1a77d461efb2556e01c70cb0e0fb7813b07c3179aae4424afd2f217bb94f6af2e251c417be250c6464d1e84df16e2960fae3af9d20a00d7c22f441bd85450ae7824985997ef815695074749f3eee19c88996b38737eb3ff4a702b0ee780188889a5111cc285880661387ccccbecd04ebc08dc9b22ce7d35340eed7fd00562821e3245f19e68eb9d8c1438dee897ac2616058e98ad42e3dd41003a6c1e7c6cb449d3f61be22189cacd51611e6c0243f5e3c6ec15ea4f3a4b5ca2d2b6772f0e684d5bacf7fdd039dfcfe5e0017fc26797b1d2869ddbb182362b5e4159abc67ec5e32ac8c581593e30be96011c0855a22f402dd06345bc7ceeb8326101816a0ff02878fa7abf0114ea49c2f7196d3d98c8c3852683c576cb57b1462c28a53800e480a58eadc79807d67e83ee1c6068586d95ebf94344336701a8716d319f802d7253875e91a57d033078d6dd7a39f9c1a1a37c126fac8ca97d73f5bf9bdef1cf5ec2c30ba0885c5563c61ac2a9115fc78b859e1a4394c2605e188a7ba9a8e5d4cbef17fdf9b8cfcc08e8e46ae5e55035cf76f80e204fc28b81189dde1a8945632e3aef1a9be21965e9a033d3dba8aebc1d841306572f5988ce4b68515350b748a2b7a4815b2ff395ddfd5916eaee170c129c6e14dc201537c2b40dbe254faf3f26b835d497a3f2ccf08e7246db449dac95e6805591f90348ef00133966c10233c16dd649a57e68266dafaffbafc8ffa10f218813c578e6a8342eb196e45fafa889f02856a43300397cab88509de1d251058b9517cc09f46e7813933a920dd6e0365aebea2788fb3a483336b7cfa37421399ba43304b1d1aa0cf84544b1dd5687c35910c2215ac1e38989e4b0cd9b86830a6695daa65edc70f536c8327e3e180ee5b0a1df9635e598a6ab371f5ac09b8be46a2a11d003c9a79e282cf0333a360ebde40f51a60fc12910986fe7d2097ad1fbc796178e0a9608b059cb42bb6bc12745c2a52fd8dca76fe9f6b8352d4030f5f4ab943fa419ad38d9dcdac8f6e050992a54e25fa3350ba2b3e6fcdc96ccfbd5553c46ce81da87d01df0b8ee6547b151e679dcac47b372de06406121a57914f8179859fc23f4a8a38310826672ded757ee5ade8001a5b2b6682a0eb316b6c7476a6c86b63265c53664dafcd1fc5460a83420546a991548252d1e24af32e7b00630642b4f2fd405d9e27a94484939a37459b2861ee205c6bbe3cfff6ea1ff661f5b588fa497982619a4dfb61d56059c7b03bff543924e66a2ff8924e492e6967594d1a9f523c99cf731281878aedaee0ddf6bb8cbb74d070a206505a72a3d0be7b229f67efe32b94e9d0647fbb6c3c8c9a4bed346afea6ff9dedb1c64541b234cbcd3dcf8c4ab3d0578647261de0324fce51c998df873e5b611be47b0be472610002263029f75c09cbb51b51765dc301a003446d2a09b40617041c4949713f3dee5f97023cba13c41197ea1c4825cc1b7bfcc19a52c278a8690dc276d4489dae9f44c6faaa026dd757a75d83402c5e5fe0f90411e6a3522b5b4e721c8169a010", 0x1000}], 0x2, &(0x7f0000003ac0)=[@ip_tos_int={{0x14}}, @ip_retopts={{0x58, 0x0, 0x7, {[@cipso={0x86, 0x47, 0xffffffffffffffff, [{0x7, 0x6, "a7379927"}, {0x5, 0x9, "1c64b97d8be0ae"}, {0x1, 0x12, "f23e797d192c52d2043ff2856a20698c"}, {0x5, 0x7, "2b3b6e279d"}, {0x6, 0xa, "ef3d52a77dfd81c2"}, {0x6, 0x9, "d98f713f275a9b"}, {0x0, 0x6, "c27d9b01"}]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x928}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0x64010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0xc0}}, {{&(0x7f0000003b80)={0x2, 0x7, @empty}, 0x10, &(0x7f0000003dc0)=[{&(0x7f0000003bc0)="09ed1252b498710d0be2be1a65bd4ed46a400cb3b848ff0584b49918b29490073011637d1a3c", 0x26}, {&(0x7f0000003c00)}, {&(0x7f0000003c40)="3fbcdbed95064537ba51e5d9513053ed6ac12efbbc9916c67426f00fe9b4b2a466ec2e8e20530a67dc5970fd7fbe7706b70dda9c67", 0x35}, {&(0x7f0000003c80)="661fd04854d3319ce12d1c5663b8d83fbf8e912d890b90d7451d7e14a8f1624f9688d9a8599026c8639e189acce367db1ff2c986fc09ad26b0360c695bbe9fceb31f69e928007310bcfeba583e8e65fcec01901cfa755da1fa290c34454dae3f1d45ba6eaa00027b07783bfffd9bb127e8f0d1b33c85a83258", 0x79}, {&(0x7f0000003d00)="c1f4afe558ba08138e1befaa753d73ccba1750bc928229800777e851fcad5b698cc5bd8e3e5e8b806dc180e0a9e623bdbaf2be77d17005ae9aa62dac4ecfbcf5d4072dbe7afe8ab2395082d7e73ede44d88898aaa3381d249a047d2fce1f441a48f7212ab2c536583b5232791e94b88a04884e3118eb84b4118ab8f71290f6", 0x7f}, {&(0x7f0000003d80)="5827b025cab03a6d1e0e09f3c7ed60793d3296ae459c64d0cff33633ef95feccc69ab693d72fdc285056d1f01fecec0099bfd3d7b43807", 0x37}], 0x6, &(0x7f0000003e40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x1a}, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x83}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0xb0}}, {{&(0x7f0000003f00)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000004280)=[{&(0x7f0000003f40)}, {&(0x7f0000003f80)="34ad6dbb284dae5dda20c6e2a5805c23fb678d1f620a0dbfceba13445942810f223dd487ebdacbec172ab6a697cd60ceafa226822521e77adae92ae5da1bcdaad644e82682ab27119e9724254c53c9266e0d1a29828213938fe7765eb61530746f16673b66d186db0d1262747cb67b9429bab0bbc27816da02ca89f89096d0a41db560656024a2eb1170b02b4f65d385d0a399fbf8ffc4f6576f88fa7bc7ca050fb01220859c440380ec9c6d285f3016bb1800ebdc8502c70ee6c4e69eedb9def01809d862bed1900e32689edb280d6bad035fb2d878954878c417b3778fd3db230b0b1e3af3d7b6e61bf25a9e2957", 0xef}, {&(0x7f0000004080)="84c84f8977428e8c8601846514745bdb87e0be9c80050e77f5afe060ca839f6abad717e6ed7d10fa8ab00aa6f36ce0fa22e55ef17009accf4a303fce9f22094c4a08cc38880a0a5de5255098cfdcd628dd2680c1d30e63cbbadd215fc3ff02b90067e8775a0d6958a037b46843749bac81e7e39ad2d0251211f7662dfe82711d72d0c72c8f151a6b9ee2e13d365b3d10de6d76b4378eac", 0x97}, {&(0x7f0000004140)="9236c47cf3ec71553a685260650ffb62659fe7aa6d0f81ddd380986f9a8f8cac947f44f9d32ff42c697cbe6eb64522f5a87b92aa344fd18b", 0x38}, {&(0x7f0000004180)="34dff96b78f829a5b0f0810eec6e9917f94034fd19d948471b74a1ca4c1351b5c7de270ab317485ec71256faa01d07b9726d7af22236c779aecd09b770b4502337156541bf08bdef404ea51df2a7e7ce5afdafd35f454556c008b4db8c24e5f892c47a1d46524ae8d15aa8d15de4d418fc6bd9e568f763a11a29bdf3e21dbf318db76387b914fb900c4b1c1a9640a9b0573a8caf11fb7e4ff7ad6f7528b596d4352e303a46b7108c3edc29cbe4f1f15aa08a39566b39e73d20c045a45eab9318a73fd11135af420be6fd6493048e5d2f1177d7", 0xd3}], 0x5, &(0x7f0000004300)=ANY=[@ANYBLOB="1400000000000000000000000100000007000000000000001c00"/40, @ANYRES32=r3, @ANYBLOB="0a010100ac14141700000000140000000000000000000000010000000000000000000000340000000000000000000000070000004424ff430a01010100000007ac1414bb0000fa20ac14140a000000050a0101020000000200000000140000000000000000000000020000000100000000000000"], 0xa0}}, {{&(0x7f00000043c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000004680)=[{&(0x7f0000004400)="94f6b617311dd94cdfacc29cdf58577d7fb17877dd8d664eaf8852b103c36766b304b92d7157db2e95d526260cdc65c70c51bc8aff175d3384914e5fbab2ae85436c9401bf1a3e650b1f296fece8d2fdd833c1afbece2f3b8f71c602ee6267468d0fa313e52fb8e045ecab7c6c38fe0e29d561fb0670d4699639d90a476d0a4e7097349e230424f762cd7e1fe20fdb8b13c5616c92dc31b57a0a165fe255c143fb6a5b6fe44998c1eab1f9a26101396f1c9e33b7393a68075470c04865d1830b32878d0573361ffb9bdbe1804ccd425281473b95ec4acea18332d345c1afd7a720d86370ea386553c4eb65573c2740eb7043e446", 0xf4}, {&(0x7f0000004500)="14b604c0dc209d6c51e1fdfad0c27f81fe9096141112849759e4f9c9eaf62a8951450851738c606644ec19c872b8128a7f28f8d06e25a48eb47905b9810c99618e46dd33ed3862d606e4140b2ff8790a806a4b0bfc2dc3691f3a938fcb17245bfe6ec90e69bd9205c4a4c0021bac6da28f80d5c8860aa33df46b720836d75f4dfe3290d57cd7150a5cf3fdee5e66df563c60fadbf3330460ed6b30c8c256878bde0c5d5e8b6afe2972cbbd75b9a61e8b43b0f9590e0d52cbeaf9913e909d1484de79fa", 0xc3}, {&(0x7f0000004600)="8acc1d610ef9d4417391d3413bade108ab76e2b7c5a03445454855abdee7c87db16047e0df764c0cc3a279f4e3136e059dc2caa883525468746ead09f3b1bb10c460454c57560c9df38a07d67cf874ed5b08c84fd156c652db3a1faab5a5d075f7902a5deb39a0e95f1c85600ed614d9de47d655fc9ef1dba972d6fed5c6", 0x7e}], 0x3, &(0x7f00000046c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @broadcast}}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0xca, [@rand_addr=0x64010102, @local, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @empty, @rand_addr=0x64010100, @remote, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x2c, 0xc9, 0x3, 0x9, [{@multicast2, 0x4101}, {@private=0xa010102, 0x8}, {@multicast1, 0x5}, {@empty, 0x4d}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @timestamp_addr={0x44, 0x14, 0x31, 0x1, 0x6, [{@broadcast, 0x6}, {@multicast1, 0x101}]}, @noop, @timestamp_prespec={0x44, 0x24, 0xc0, 0x3, 0xe, [{@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4}, {@broadcast, 0x1}, {@empty, 0x8498}]}, @end, @lsrr={0x83, 0x1b, 0xd4, [@empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010102]}, @end, @end]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x84, 0x0, 0x7, {[@end, @lsrr={0x83, 0xf, 0x11, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local]}, @timestamp_prespec={0x44, 0xc, 0x61, 0x3, 0x3, [{@local, 0xfffffff6}]}, @noop, @cipso={0x86, 0x57, 0x3, [{0x5, 0xc, "92e44ae841ac70d82584"}, {0x2, 0x3, "d4"}, {0x0, 0xb, "c02bb9df806780447d"}, {0x7, 0xd, "c536e9cb49ac38925b600c"}, {0x6, 0x9, "a9a819a12a66da"}, {0x1, 0x3, "05"}, {0x7, 0xb, "275aa0a04ebf7ada8c"}, {0x1, 0xd, "3d21e80e78faaf00661741"}, {0x6, 0x4, "81b5"}, {0x2, 0x2}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x1d0}}], 0x5, 0x20000400) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x20, 0x1412, 0x400, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4090}, 0x20000000) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) kernel console output (not intermixed with test programs): 812.752370][ T10] usb 2-1: config 0 has no interface number 0 [ 812.752521][ T10] usb 2-1: config 0 interface 162 has no altsetting 0 [ 812.786316][ T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=46.57 [ 812.786351][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.786375][ T10] usb 2-1: Product: syz [ 812.786391][ T10] usb 2-1: Manufacturer: syz [ 812.786418][ T10] usb 2-1: SerialNumber: syz [ 812.792913][ T12] team0 (unregistering): Port device team_slave_1 removed [ 812.818864][ T10] usb 2-1: config 0 descriptor?? [ 812.978090][ T10] adutux 2-1:0.162: interrupt endpoints not found [ 813.186927][T12173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.187627][T12173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.216877][ T9] usb 2-1: USB disconnect, device number 99 [ 813.354524][ T12] team0 (unregistering): Port device team_slave_0 removed [ 814.345774][T12183] CIFS: Unable to determine destination address [ 815.740195][T12186] CIFS: Unable to determine destination address [ 817.120805][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 817.120880][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 817.502172][T12192] fuse: Bad value for 'user_id' [ 817.502189][T12192] fuse: Bad value for 'user_id' [ 817.860875][T12193] 9pnet_virtio: no channels available for device syz [ 818.669921][ T45] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 818.820011][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 818.846199][ T45] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 818.846231][ T45] usb 2-1: config 0 has no interface number 0 [ 818.852379][ T45] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 818.852465][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.852520][ T45] usb 2-1: Product: syz [ 818.852563][ T45] usb 2-1: Manufacturer: syz [ 818.852605][ T45] usb 2-1: SerialNumber: syz [ 818.932039][ T45] usb 2-1: config 0 descriptor?? [ 818.962257][ T45] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 819.069516][T12202] FAULT_INJECTION: forcing a failure. [ 819.069516][T12202] name failslab, interval 1, probability 0, space 0, times 0 [ 819.069559][T12202] CPU: 1 UID: 0 PID: 12202 Comm: syz.2.2002 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 819.069596][T12202] Tainted: [L]=SOFTLOCKUP [ 819.069604][T12202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 819.069618][T12202] Call Trace: [ 819.069628][T12202] [ 819.069638][T12202] dump_stack_lvl+0xe8/0x150 [ 819.069675][T12202] should_fail_ex+0x46b/0x600 [ 819.069705][T12202] should_failslab+0xa8/0x100 [ 819.069741][T12202] __kmalloc_noprof+0xdf/0x7c0 [ 819.069770][T12202] ? tomoyo_check_unix_address+0x167/0x7f0 [ 819.069792][T12202] ? tomoyo_encode2+0x27f/0x530 [ 819.069820][T12202] tomoyo_encode2+0x27f/0x530 [ 819.069849][T12202] tomoyo_check_unix_address+0x3d9/0x7f0 [ 819.069889][T12202] ? tomoyo_check_unix_address+0x167/0x7f0 [ 819.069913][T12202] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 819.069952][T12202] ? __lock_acquire+0x6b5/0x2cf0 [ 819.069987][T12202] tomoyo_socket_bind_permission+0x1ae/0x290 [ 819.070022][T12202] security_socket_bind+0xc0/0x280 [ 819.070055][T12202] __sys_bind_socket+0x28/0xc0 [ 819.070091][T12202] io_bind+0x95/0x1b0 [ 819.070120][T12202] __io_issue_sqe+0x180/0x4b0 [ 819.070157][T12202] ? io_file_get_normal+0xec/0x2d0 [ 819.070182][T12202] io_issue_sqe+0x165/0x1060 [ 819.070219][T12202] ? _copy_from_user+0x94/0xb0 [ 819.070253][T12202] io_submit_sqes+0xbf3/0x2130 [ 819.070307][T12202] __se_sys_io_uring_enter+0x2fd/0x2bd0 [ 819.070343][T12202] ? do_raw_spin_lock+0x12b/0x2f0 [ 819.070391][T12202] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 819.070413][T12202] ? lockdep_hardirqs_on+0x7a/0x110 [ 819.070444][T12202] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 819.070474][T12202] ? rt_mutex_slowunlock+0x1cb/0x300 [ 819.070498][T12202] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 819.070534][T12202] ? fput+0xa0/0xd0 [ 819.070557][T12202] ? ksys_write+0x248/0x270 [ 819.070588][T12202] ? __pfx_ksys_write+0x10/0x10 [ 819.070629][T12202] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 819.070657][T12202] do_syscall_64+0xe2/0xf80 [ 819.070688][T12202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.070711][T12202] ? trace_irq_disable+0x37/0x100 [ 819.070740][T12202] ? clear_bhb_loop+0x60/0xb0 [ 819.070768][T12202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.070792][T12202] RIP: 0033:0x7f6282a2aeb9 [ 819.070813][T12202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.070834][T12202] RSP: 002b:00007f6280c86028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 819.070859][T12202] RAX: ffffffffffffffda RBX: 00007f6282ca5fa0 RCX: 00007f6282a2aeb9 [ 819.070884][T12202] RDX: 0000000000004fce RSI: 0000000008402219 RDI: 0000000000000000 [ 819.070900][T12202] RBP: 00007f6280c86090 R08: 0000000000000000 R09: 0000000000000000 [ 819.070915][T12202] R10: 000000000000003b R11: 0000000000000246 R12: 0000000000000001 [ 819.070930][T12202] R13: 00007f6282ca6038 R14: 00007f6282ca5fa0 R15: 00007ffec73d54b8 [ 819.070968][T12202] [ 819.246352][T12196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.251820][T12196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.447769][T10138] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 819.462308][T10138] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 819.463989][T10138] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 819.466773][T10138] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 819.467784][T10138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 820.189000][ T9] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 820.630292][ T9] usb 3-1: device descriptor read/64, error -71 [ 820.910143][ T9] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 821.060047][ T9] usb 3-1: device descriptor read/64, error -71 [ 821.170267][ T9] usb usb3-port1: attempt power cycle [ 821.569565][ T45] usb 2-1: qt2_attach - failed to power on unit: -71 [ 821.570079][ T45] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 821.570144][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 821.570885][ T5807] Bluetooth: hci5: command tx timeout [ 821.580401][ T45] usb 2-1: USB disconnect, device number 100 [ 821.610481][ T9] usb 3-1: device descriptor read/8, error -71 [ 821.869913][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 821.890973][ T9] usb 3-1: device descriptor read/8, error -71 [ 822.020361][ T9] usb usb3-port1: unable to enumerate USB device [ 822.237797][T11792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.062512][T12219] FAULT_INJECTION: forcing a failure. [ 823.062512][T12219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.062553][T12219] CPU: 0 UID: 0 PID: 12219 Comm: syz.1.2006 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 823.062584][T12219] Tainted: [L]=SOFTLOCKUP [ 823.062592][T12219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 823.062606][T12219] Call Trace: [ 823.062615][T12219] [ 823.062624][T12219] dump_stack_lvl+0xe8/0x150 [ 823.062662][T12219] should_fail_ex+0x46b/0x600 [ 823.062693][T12219] _copy_to_user+0x31/0xb0 [ 823.062727][T12219] simple_read_from_buffer+0xe1/0x170 [ 823.062768][T12219] proc_fail_nth_read+0x1be/0x230 [ 823.062800][T12219] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 823.062834][T12219] ? rw_verify_area+0x2ac/0x4e0 [ 823.062861][T12219] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 823.062891][T12219] vfs_read+0x212/0xa70 [ 823.062928][T12219] ? __pfx_vfs_read+0x10/0x10 [ 823.062958][T12219] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 823.062989][T12219] ? lockdep_hardirqs_on+0x7a/0x110 [ 823.063019][T12219] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 823.063050][T12219] ? mutex_lock_nested+0x152/0x1d0 [ 823.063073][T12219] ? fdget_pos+0x252/0x320 [ 823.063104][T12219] ksys_read+0x156/0x270 [ 823.063136][T12219] ? __pfx_ksys_read+0x10/0x10 [ 823.063164][T12219] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 823.063208][T12219] do_syscall_64+0xe2/0xf80 [ 823.063245][T12219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.063267][T12219] ? trace_irq_disable+0x37/0x100 [ 823.063297][T12219] ? clear_bhb_loop+0x60/0xb0 [ 823.063326][T12219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.063349][T12219] RIP: 0033:0x7f9402b3b78e [ 823.063370][T12219] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 823.063390][T12219] RSP: 002b:00007f9400dcdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 823.063414][T12219] RAX: ffffffffffffffda RBX: 00007f9400dce6c0 RCX: 00007f9402b3b78e [ 823.063431][T12219] RDX: 000000000000000f RSI: 00007f9400dce0a0 RDI: 0000000000000004 [ 823.063452][T12219] RBP: 00007f9400dce090 R08: 0000000000000000 R09: 0000000000000000 [ 823.063467][T12219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.063482][T12219] R13: 00007f9402df6038 R14: 00007f9402df5fa0 R15: 00007ffd7e548878 [ 823.063517][T12219] [ 823.259843][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 823.429798][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 823.432156][ T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 823.432186][ T10] usb 3-1: config 0 has no interface number 0 [ 823.436933][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 823.436966][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.436992][ T10] usb 3-1: Product: syz [ 823.437009][ T10] usb 3-1: Manufacturer: syz [ 823.437026][ T10] usb 3-1: SerialNumber: syz [ 823.495159][ T10] usb 3-1: config 0 descriptor?? [ 823.499656][ T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 823.629922][ T5807] Bluetooth: hci5: command tx timeout [ 823.730174][T12231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2007'. [ 823.765012][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 823.840492][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 824.187241][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 824.201454][ T807] usb 3-1: USB disconnect, device number 4 [ 824.228507][ T807] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 824.279190][ T807] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 824.308295][ T807] quatech2 3-1:0.51: device disconnected [ 824.439409][T12239] fuse: Bad value for 'fd' [ 826.096851][ T5807] Bluetooth: hci5: command tx timeout [ 826.165565][T11854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 826.468025][T11854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 826.494866][ T37] kauditd_printk_skb: 1584 callbacks suppressed [ 826.494887][ T37] audit: type=1326 audit(1770573909.945:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12255 comm="syz.2.2011" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6282a2aeb9 code=0x0 [ 826.883269][T11854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 826.959372][T11854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 826.992364][T12203] chnl_net:caif_netlink_parms(): no params data found [ 828.103145][ T5807] Bluetooth: hci5: command tx timeout [ 828.489955][ T5785] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 828.621305][ T5785] usb 3-1: device descriptor read/64, error -71 [ 828.647130][T11792] veth0_vlan: entered promiscuous mode [ 828.656460][T12203] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.656593][T12203] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.656835][T12203] bridge_slave_0: entered allmulticast mode [ 828.683440][T12203] bridge_slave_0: entered promiscuous mode [ 828.860582][ T5785] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 828.892877][T12203] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.893087][T12203] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.893329][T12203] bridge_slave_1: entered allmulticast mode [ 828.895752][T12203] bridge_slave_1: entered promiscuous mode [ 828.989995][ T5785] usb 3-1: device descriptor read/64, error -71 [ 829.065438][T12307] Mount JFS Failure: -5 [ 829.065452][T12307] jfs_mount failed w/return code = -5 [ 829.100510][ T5785] usb usb3-port1: attempt power cycle [ 829.213137][T12203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.320788][T11792] veth1_vlan: entered promiscuous mode [ 829.326806][T12203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.460809][ T5785] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 829.480898][ T5785] usb 3-1: device descriptor read/8, error -71 [ 829.720010][ T5785] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 829.740613][ T5785] usb 3-1: device descriptor read/8, error -71 [ 829.850404][ T5785] usb usb3-port1: unable to enumerate USB device [ 829.852914][T12203] team0: Port device team_slave_0 added [ 829.876286][ T12] bridge_slave_1: left allmulticast mode [ 829.876309][ T12] bridge_slave_1: left promiscuous mode [ 829.876489][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.755131][ T12] bridge_slave_0: left allmulticast mode [ 830.755164][ T12] bridge_slave_0: left promiscuous mode [ 830.756763][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.460277][ T8336] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 831.589889][ T8336] usb 3-1: device descriptor read/64, error -71 [ 831.836410][ T8336] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 831.980863][ T8336] usb 3-1: device descriptor read/64, error -71 [ 832.092427][ T8336] usb usb3-port1: attempt power cycle [ 832.429794][ T8336] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 832.450806][ T8336] usb 3-1: device descriptor read/8, error -71 [ 832.706336][ T8336] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 832.752877][ T8336] usb 3-1: device descriptor read/8, error -71 [ 832.800994][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 832.860324][ T8336] usb usb3-port1: unable to enumerate USB device [ 832.889451][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 832.913190][ T12] bond0 (unregistering): Released all slaves [ 832.946563][T12203] team0: Port device team_slave_1 added [ 833.041081][T12203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.041096][T12203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.041117][T12203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.052267][T12203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.052284][T12203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.052308][T12203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.313510][T12203] hsr_slave_0: entered promiscuous mode [ 833.314593][T12203] hsr_slave_1: entered promiscuous mode [ 833.315307][T12203] debugfs: 'hsr0' already exists in 'hsr' [ 833.315327][T12203] Cannot create hsr debugfs directory [ 833.347891][T11792] veth0_macvtap: entered promiscuous mode [ 833.500738][ T12] hsr_slave_0: left promiscuous mode [ 833.540452][ T12] hsr_slave_1: left promiscuous mode [ 833.541476][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 833.593445][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.853053][T12340] fuse: Bad value for 'fd' [ 835.060905][ T12] team0 (unregistering): Port device team_slave_1 removed [ 835.341098][ T12] team0 (unregistering): Port device team_slave_0 removed [ 837.215989][T10138] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 837.237197][T10138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 837.249291][T10138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 837.257901][T10138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 837.258658][T10138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 837.819377][T12334] batadv_slave_0: entered promiscuous mode [ 837.999961][T12337] batadv_slave_0: left promiscuous mode [ 838.200354][T12361] block nbd1: NBD_DISCONNECT [ 838.800672][ T8336] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 839.020875][ T8336] usb 2-1: Using ep0 maxpacket: 8 [ 839.255563][ T8336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 839.255698][ T8336] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x3C, changing to 0xC [ 839.255796][ T8336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 48235, setting to 64 [ 839.255901][ T8336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 839.255991][ T8336] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 839.256318][ T8336] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 839.256412][ T8336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.384338][ T5807] Bluetooth: hci3: command tx timeout [ 839.413640][ T823] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 839.496366][ T8336] usb 2-1: config 0 descriptor?? [ 839.521853][ T8336] hub 2-1:0.0: bad descriptor, ignoring hub [ 839.521883][ T8336] hub 2-1:0.0: probe with driver hub failed with error -5 [ 839.599912][ T823] usb 3-1: device descriptor read/64, error -71 [ 839.879983][ T823] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 839.884246][ T8336] usb 2-1: USB disconnect, device number 101 [ 839.928176][T11854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 840.041041][ T823] usb 3-1: device descriptor read/64, error -71 [ 840.151753][ T823] usb usb3-port1: attempt power cycle [ 840.243795][T11854] 8021q: adding VLAN 0 to HW filter on device team0 [ 840.489881][ T823] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 840.526202][ T823] usb 3-1: device descriptor read/8, error -71 [ 840.790432][ T823] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 840.800016][ T9] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 840.826022][ T823] usb 3-1: device descriptor read/8, error -71 [ 840.844635][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.844857][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 840.930650][ T823] usb usb3-port1: unable to enumerate USB device [ 840.930841][ T9] usb 2-1: device descriptor read/64, error -71 [ 841.155447][ T6447] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.155606][ T6447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.176142][ T9] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 841.320978][ T9] usb 2-1: device descriptor read/64, error -71 [ 841.441031][ T9] usb usb2-port1: attempt power cycle [ 841.462199][ T5807] Bluetooth: hci3: command tx timeout [ 841.736678][T12355] chnl_net:caif_netlink_parms(): no params data found [ 841.790021][ T9] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 841.823405][ T9] usb 2-1: device descriptor read/8, error -71 [ 842.060026][ T9] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 842.081791][ T9] usb 2-1: device descriptor read/8, error -71 [ 842.138393][T12385] fuse: Bad value for 'fd' [ 842.200384][ T9] usb usb2-port1: unable to enumerate USB device [ 842.341540][T10138] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 842.369170][T10138] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 842.373608][T10138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 842.430707][T10138] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 842.457440][T10138] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 843.838389][ T5807] Bluetooth: hci3: command tx timeout [ 844.059200][T12355] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.059335][T12355] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.059638][T12355] bridge_slave_0: entered allmulticast mode [ 844.085007][T12355] bridge_slave_0: entered promiscuous mode [ 844.147189][T12355] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.147403][T12355] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.147632][T12355] bridge_slave_1: entered allmulticast mode [ 844.175771][T12355] bridge_slave_1: entered promiscuous mode [ 844.182939][T12203] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 844.246468][T12203] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 844.280953][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 844.340251][T12203] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 844.377929][T12355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.382002][T12203] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 844.445658][T12355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.481752][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 844.481784][ T10] usb 3-1: config 0 has no interface number 0 [ 844.481832][ T10] usb 3-1: too many endpoints for config 0 interface 55 altsetting 62: 52, using maximum allowed: 30 [ 844.481872][ T10] usb 3-1: config 0 interface 55 altsetting 62 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 844.481901][ T10] usb 3-1: config 0 interface 55 has no altsetting 0 [ 844.484599][ T10] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 844.484640][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.484663][ T10] usb 3-1: Product: syz [ 844.484678][ T10] usb 3-1: Manufacturer: syz [ 844.484698][ T10] usb 3-1: SerialNumber: syz [ 844.534412][ T10] usb 3-1: config 0 descriptor?? [ 844.579835][ T5807] Bluetooth: hci0: command tx timeout [ 844.606888][ T12] bridge_slave_1: left allmulticast mode [ 844.606912][ T12] bridge_slave_1: left promiscuous mode [ 844.607341][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.711391][ T12] bridge_slave_0: left allmulticast mode [ 844.711418][ T12] bridge_slave_0: left promiscuous mode [ 844.711697][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.810998][ T10] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 844.817910][ T10] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 844.817931][ T10] sq905c 3-1:0.55: Get version command failed [ 844.818006][ T10] sq905c 3-1:0.55: probe with driver sq905c failed with error -71 [ 844.833360][ T10] usb 3-1: USB disconnect, device number 17 [ 845.022228][T12402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 845.861773][ T5807] Bluetooth: hci3: command tx timeout [ 846.047617][T12415] nvme_fabrics: missing parameter 'transport=%s' [ 846.047639][T12415] nvme_fabrics: missing parameter 'nqn=%s' [ 846.259960][ T5785] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 846.389934][ T5785] usb 2-1: device descriptor read/64, error -71 [ 846.672084][ T5807] Bluetooth: hci0: command tx timeout [ 846.672297][ T5785] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 846.828714][ T5785] usb 2-1: device descriptor read/64, error -71 [ 846.930180][ T5785] usb usb2-port1: attempt power cycle [ 846.950601][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 847.032339][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 847.053061][ T12] bond0 (unregistering): Released all slaves [ 847.279846][ T5785] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 847.311190][ T5785] usb 2-1: device descriptor read/8, error -71 [ 847.381712][T12355] team0: Port device team_slave_0 added [ 847.422119][T12355] team0: Port device team_slave_1 added [ 847.461191][T12424] program syz.2.2036 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 847.560033][ T5785] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 847.582902][ T12] hsr_slave_0: left promiscuous mode [ 847.583141][ T5785] usb 2-1: device descriptor read/8, error -71 [ 847.620112][ T12] hsr_slave_1: left promiscuous mode [ 847.621150][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.647219][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.693451][ T5785] usb usb2-port1: unable to enumerate USB device [ 847.728773][ T12] veth0_macvtap: left promiscuous mode [ 847.729129][ T12] veth1_vlan: left promiscuous mode [ 847.729295][ T12] veth0_vlan: left promiscuous mode [ 848.736396][ T5807] Bluetooth: hci4: unexpected event for opcode 0x0428 [ 848.738920][ T5807] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 848.741144][ T5807] Bluetooth: hci0: command tx timeout [ 848.984910][T12441] fuse: Bad value for 'fd' [ 850.142556][ T5785] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 850.272941][ T5785] usb 2-1: device descriptor read/64, error -71 [ 850.510003][ T5785] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 850.561029][ T12] team0 (unregistering): Port device team_slave_1 removed [ 850.639978][ T5785] usb 2-1: device descriptor read/64, error -71 [ 850.780546][ T5785] usb usb2-port1: attempt power cycle [ 850.840091][ T5807] Bluetooth: hci0: command tx timeout [ 850.890716][ T12] team0 (unregistering): Port device team_slave_0 removed [ 851.157281][ T5785] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 851.181512][ T5785] usb 2-1: device descriptor read/8, error -71 [ 851.441327][ T5785] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 851.460595][ T5785] usb 2-1: device descriptor read/8, error -71 [ 851.572303][ T5785] usb usb2-port1: unable to enumerate USB device [ 852.839090][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2046'. [ 853.209897][ T8336] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 853.367813][T12355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.367829][T12355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.367851][T12355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.396995][ T8336] usb 2-1: unable to get BOS descriptor or descriptor too short [ 853.441947][ T8336] usb 2-1: config 1 has an invalid interface number: 181 but max is 1 [ 853.441981][ T8336] usb 2-1: config 1 has no interface number 1 [ 853.442029][ T8336] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 853.442051][ T8336] usb 2-1: too many endpoints for config 1 interface 181 altsetting 19: 189, using maximum allowed: 30 [ 853.442080][ T8336] usb 2-1: config 1 interface 181 altsetting 19 has 0 endpoint descriptors, different from the interface descriptor's value: 189 [ 853.442101][ T8336] usb 2-1: config 1 interface 0 has no altsetting 0 [ 853.442115][ T8336] usb 2-1: config 1 interface 181 has no altsetting 0 [ 853.444613][ T8336] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 853.444645][ T8336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.444661][ T8336] usb 2-1: Product: syz [ 853.444672][ T8336] usb 2-1: Manufacturer: syz [ 853.444683][ T8336] usb 2-1: SerialNumber: syz [ 853.557724][T12355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 853.557744][T12355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.557775][T12355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 853.724971][T12458] FAULT_INJECTION: forcing a failure. [ 853.724971][T12458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.725000][T12458] CPU: 1 UID: 0 PID: 12458 Comm: syz.2.2050 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 853.725026][T12458] Tainted: [L]=SOFTLOCKUP [ 853.725032][T12458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 853.725042][T12458] Call Trace: [ 853.725049][T12458] [ 853.725057][T12458] dump_stack_lvl+0xe8/0x150 [ 853.725086][T12458] should_fail_ex+0x46b/0x600 [ 853.725108][T12458] _copy_to_user+0x31/0xb0 [ 853.725133][T12458] simple_read_from_buffer+0xe1/0x170 [ 853.725162][T12458] proc_fail_nth_read+0x1be/0x230 [ 853.725186][T12458] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 853.725209][T12458] ? rw_verify_area+0x2ac/0x4e0 [ 853.725235][T12458] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 853.725257][T12458] vfs_read+0x212/0xa70 [ 853.725284][T12458] ? __pfx_vfs_read+0x10/0x10 [ 853.725305][T12458] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 853.725329][T12458] ? lockdep_hardirqs_on+0x7a/0x110 [ 853.725351][T12458] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 853.725373][T12458] ? mutex_lock_nested+0x152/0x1d0 [ 853.725390][T12458] ? fdget_pos+0x252/0x320 [ 853.725411][T12458] ksys_read+0x156/0x270 [ 853.725433][T12458] ? __pfx_ksys_read+0x10/0x10 [ 853.725462][T12458] do_syscall_64+0xe2/0xf80 [ 853.725484][T12458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.725501][T12458] ? trace_irq_disable+0x37/0x100 [ 853.725522][T12458] ? clear_bhb_loop+0x60/0xb0 [ 853.725542][T12458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.725558][T12458] RIP: 0033:0x7f62829eb78e [ 853.725574][T12458] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 853.725588][T12458] RSP: 002b:00007f6280c85fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 853.725606][T12458] RAX: ffffffffffffffda RBX: 00007f6280c866c0 RCX: 00007f62829eb78e [ 853.725619][T12458] RDX: 000000000000000f RSI: 00007f6280c860a0 RDI: 0000000000000006 [ 853.725629][T12458] RBP: 00007f6280c86090 R08: 0000000000000000 R09: 0000000000000000 [ 853.725639][T12458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.725648][T12458] R13: 00007f6282ca6038 R14: 00007f6282ca5fa0 R15: 00007ffec73d54b8 [ 853.725674][T12458] [ 854.009111][T12452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.022420][T12452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.028286][T12452] netlink: 'syz.1.2048': attribute type 1 has an invalid length. [ 854.062252][ T8336] smsusb:smsusb_probe: board id=8, interface number 0 [ 854.067007][ T8336] smsusb:smsusb_probe: board id=8, interface number 181 [ 854.082508][ T8336] usb 2-1: USB disconnect, device number 114 [ 854.101031][T12371] udevd[12371]: setting owner of /dev/bus/usb/002/114 to uid=0, gid=0 failed: No such file or directory [ 854.248380][T12355] hsr_slave_0: entered promiscuous mode [ 854.249457][T12355] hsr_slave_1: entered promiscuous mode [ 854.252241][T12355] debugfs: 'hsr0' already exists in 'hsr' [ 854.252316][T12355] Cannot create hsr debugfs directory [ 855.151387][T12473] CIFS: Unable to determine destination address [ 855.910006][ T807] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 856.044730][T12387] chnl_net:caif_netlink_parms(): no params data found [ 856.059915][T12476] libceph: resolve '0.' (ret=-3): failed [ 856.139884][ T807] usb 3-1: device descriptor read/64, error -71 [ 856.380305][ T807] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 856.523730][T12493] program syz.1.2056 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 856.534446][ T807] usb 3-1: device descriptor read/64, error -71 [ 856.590418][T12495] FAULT_INJECTION: forcing a failure. [ 856.590418][T12495] name failslab, interval 1, probability 0, space 0, times 0 [ 856.590460][T12495] CPU: 0 UID: 0 PID: 12495 Comm: syz.1.2057 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 856.590502][T12495] Tainted: [L]=SOFTLOCKUP [ 856.590511][T12495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 856.590525][T12495] Call Trace: [ 856.590534][T12495] [ 856.590544][T12495] dump_stack_lvl+0xe8/0x150 [ 856.590581][T12495] should_fail_ex+0x46b/0x600 [ 856.590609][T12495] ? alloc_empty_file+0x55/0x1d0 [ 856.590632][T12495] should_failslab+0xa8/0x100 [ 856.590666][T12495] ? alloc_empty_file+0x55/0x1d0 [ 856.590687][T12495] kmem_cache_alloc_noprof+0x83/0x6a0 [ 856.590724][T12495] alloc_empty_file+0x55/0x1d0 [ 856.590746][T12495] path_openat+0x12a/0x3e70 [ 856.590780][T12495] ? try_to_take_rt_mutex+0x840/0xb00 [ 856.590822][T12495] ? __lock_acquire+0x6b5/0x2cf0 [ 856.590853][T12495] ? __lock_acquire+0x6b5/0x2cf0 [ 856.590877][T12495] ? __pfx_path_openat+0x10/0x10 [ 856.590902][T12495] ? kasan_save_track+0x4f/0x80 [ 856.590929][T12495] ? kasan_save_track+0x3e/0x80 [ 856.590953][T12495] ? __kasan_slab_alloc+0x6c/0x80 [ 856.590980][T12495] ? kmem_cache_alloc_noprof+0x188/0x6a0 [ 856.591008][T12495] ? getname_flags+0xb7/0x540 [ 856.591038][T12495] ? do_sys_openat2+0xca/0x220 [ 856.591074][T12495] ? do_raw_spin_lock+0x12b/0x2f0 [ 856.591121][T12495] do_filp_open+0x22d/0x490 [ 856.591162][T12495] ? __pfx_do_filp_open+0x10/0x10 [ 856.591183][T12495] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 856.591220][T12495] ? alloc_fd+0x64e/0x6c0 [ 856.591252][T12495] do_sys_openat2+0x12f/0x220 [ 856.591271][T12495] ? __pfx_do_sys_openat2+0x10/0x10 [ 856.591288][T12495] ? ksys_write+0x248/0x270 [ 856.591311][T12495] ? __pfx_ksys_write+0x10/0x10 [ 856.591340][T12495] __x64_sys_creat+0x8f/0xc0 [ 856.591360][T12495] do_syscall_64+0xe2/0xf80 [ 856.591382][T12495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.591398][T12495] ? trace_irq_disable+0x37/0x100 [ 856.591420][T12495] ? clear_bhb_loop+0x60/0xb0 [ 856.591440][T12495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.591457][T12495] RIP: 0033:0x7f9402b7aeb9 [ 856.591473][T12495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.591493][T12495] RSP: 002b:00007f9400dce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 856.591510][T12495] RAX: ffffffffffffffda RBX: 00007f9402df5fa0 RCX: 00007f9402b7aeb9 [ 856.591522][T12495] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000200000000000 [ 856.591533][T12495] RBP: 00007f9400dce090 R08: 0000000000000000 R09: 0000000000000000 [ 856.591543][T12495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 856.591552][T12495] R13: 00007f9402df6038 R14: 00007f9402df5fa0 R15: 00007ffd7e548878 [ 856.591577][T12495] [ 856.670044][ T807] usb usb3-port1: attempt power cycle [ 856.869170][ T5807] Bluetooth: hci4: unexpected event for opcode 0x0428 [ 857.027155][T12203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.099908][ T807] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 857.120746][ T807] usb 3-1: device descriptor read/8, error -71 [ 857.137142][T12387] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.137335][T12387] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.137672][T12387] bridge_slave_0: entered allmulticast mode [ 857.161640][T12387] bridge_slave_0: entered promiscuous mode [ 857.359859][ T807] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 857.394735][ T807] usb 3-1: device descriptor read/8, error -71 [ 857.482536][T12387] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.482705][T12387] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.482892][T12387] bridge_slave_1: entered allmulticast mode [ 857.484746][T12387] bridge_slave_1: entered promiscuous mode [ 857.500527][ T807] usb usb3-port1: unable to enumerate USB device [ 857.669914][ T807] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 857.831823][ T807] usb 2-1: Using ep0 maxpacket: 8 [ 857.845417][ T807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 857.845445][ T807] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x3C, changing to 0xC [ 857.845465][ T807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 48235, setting to 64 [ 857.845485][ T807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 857.845502][ T807] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 857.845532][ T807] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 857.845549][ T807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.849308][ T807] usb 2-1: config 0 descriptor?? [ 857.933778][ T807] hub 2-1:0.0: bad descriptor, ignoring hub [ 857.933822][ T807] hub 2-1:0.0: probe with driver hub failed with error -5 [ 857.996826][T12387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.026647][T12387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.290754][ T9] usb 2-1: USB disconnect, device number 115 [ 858.452696][T12510] CIFS: Unable to determine destination address [ 859.273947][T12518] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 859.612510][T12387] team0: Port device team_slave_0 added [ 859.636213][T12203] 8021q: adding VLAN 0 to HW filter on device team0 [ 859.694647][T12387] team0: Port device team_slave_1 added [ 860.429901][ T45] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 860.559923][ T45] usb 3-1: device descriptor read/64, error -71 [ 860.787393][ T6440] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.799908][ T45] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 860.818852][ T6440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.826436][T12387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 860.826489][T12387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.826566][T12387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 860.877385][T12387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 860.877408][T12387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.877441][T12387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.935301][ T6440] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.935444][ T6440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 860.954618][ T45] usb 3-1: device descriptor read/64, error -71 [ 861.060233][ T45] usb usb3-port1: attempt power cycle [ 861.226661][T12387] hsr_slave_0: entered promiscuous mode [ 861.227663][T12387] hsr_slave_1: entered promiscuous mode [ 861.228382][T12387] debugfs: 'hsr0' already exists in 'hsr' [ 861.228408][T12387] Cannot create hsr debugfs directory [ 861.332695][T12355] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 861.370491][ T8336] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 861.399851][ T45] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 861.401720][T12355] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 861.421436][ T45] usb 3-1: device descriptor read/8, error -71 [ 861.500983][ T8336] usb 2-1: device descriptor read/64, error -71 [ 861.629294][T12355] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 861.659869][ T45] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 861.681477][ T45] usb 3-1: device descriptor read/8, error -71 [ 861.692638][T12355] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 861.739896][ T8336] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 861.790735][ T45] usb usb3-port1: unable to enumerate USB device [ 861.871040][ T8336] usb 2-1: device descriptor read/64, error -71 [ 861.980208][ T8336] usb usb2-port1: attempt power cycle [ 862.027111][ T12] bridge_slave_1: left allmulticast mode [ 862.027144][ T12] bridge_slave_1: left promiscuous mode [ 862.027428][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.081400][ T12] bridge_slave_0: left allmulticast mode [ 862.081424][ T12] bridge_slave_0: left promiscuous mode [ 862.081612][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.319861][ T8336] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 862.341813][ T8336] usb 2-1: device descriptor read/8, error -71 [ 862.600242][ T8336] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 862.624468][ T8336] usb 2-1: device descriptor read/8, error -71 [ 862.744563][ T8336] usb usb2-port1: unable to enumerate USB device [ 863.323784][T12549] CIFS: Unable to determine destination address [ 864.326735][T12554] nvme_fabrics: missing parameter 'transport=%s' [ 864.326750][T12554] nvme_fabrics: missing parameter 'nqn=%s' [ 864.599881][ T45] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 864.948203][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.055098][ T45] usb 2-1: config index 0 descriptor too short (expected 65069, got 45) [ 865.055128][ T45] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 865.055147][ T45] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 865.055165][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.055181][ T45] usb 2-1: config 0 has no interfaces? [ 865.055210][ T45] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 865.055233][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.208057][ T45] usb 2-1: config 0 descriptor?? [ 865.250651][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 865.292593][ T12] bond0 (unregistering): Released all slaves [ 865.320064][T11574] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 865.427132][ T807] usb 2-1: USB disconnect, device number 120 [ 865.498759][T11574] usb 3-1: device descriptor read/64, error -71 [ 865.729937][T11574] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 865.783117][ T12] hsr_slave_0: left promiscuous mode [ 865.820115][ T12] hsr_slave_1: left promiscuous mode [ 865.820924][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 865.850806][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 865.860277][T11574] usb 3-1: device descriptor read/64, error -71 [ 865.970623][T11574] usb usb3-port1: attempt power cycle [ 866.072696][ T37] audit: type=1326 audit(1770573949.525:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12568 comm="syz.1.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 866.072892][ T37] audit: type=1326 audit(1770573949.525:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12568 comm="syz.1.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 866.073599][ T37] audit: type=1326 audit(1770573949.525:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12568 comm="syz.1.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 866.074019][ T37] audit: type=1326 audit(1770573949.525:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12568 comm="syz.1.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 866.074268][ T37] audit: type=1326 audit(1770573949.525:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12568 comm="syz.1.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 866.074323][ T37] audit: type=1326 audit(1770573949.525:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12568 comm="syz.1.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 866.074625][ T37] audit: type=1326 audit(1770573949.525:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12568 comm="syz.1.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 866.075016][ T37] audit: type=1326 audit(1770573949.525:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12568 comm="syz.1.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 866.075307][ T37] audit: type=1326 audit(1770573949.525:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12568 comm="syz.1.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 866.075814][ T37] audit: type=1326 audit(1770573949.525:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12568 comm="syz.1.2080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 866.340314][T11574] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 866.361623][T11574] usb 3-1: device descriptor read/8, error -71 [ 866.610017][T11574] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 866.692851][T11574] usb 3-1: device descriptor read/8, error -71 [ 866.817121][T11574] usb usb3-port1: unable to enumerate USB device [ 867.350582][T12573] CIFS: Unable to determine destination address [ 868.374178][T12578] nvme_fabrics: missing parameter 'transport=%s' [ 868.374198][T12578] nvme_fabrics: missing parameter 'nqn=%s' [ 868.434515][ T12] team0 (unregistering): Port device team_slave_1 removed [ 868.549878][ T45] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 868.612985][ T12] team0 (unregistering): Port device team_slave_0 removed [ 868.670056][ T8336] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 868.740689][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 868.741311][ T45] usb 2-1: not running at top speed; connect to a high speed hub [ 868.742615][ T45] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 868.742643][ T45] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 868.742674][ T45] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 868.742699][ T45] usb 2-1: config 129 has no interface number 0 [ 868.742715][ T45] usb 2-1: config 129 has no interface number 1 [ 868.742774][ T45] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 868.742804][ T45] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 868.742856][ T45] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 868.742901][ T45] usb 2-1: config 129 interface 135 has no altsetting 0 [ 868.742921][ T45] usb 2-1: config 129 interface 5 has no altsetting 0 [ 868.785541][ T45] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 868.785629][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.785685][ T45] usb 2-1: Product: syz [ 868.785738][ T45] usb 2-1: Manufacturer: syz [ 868.785781][ T45] usb 2-1: SerialNumber: syz [ 868.799820][ T8336] usb 3-1: device descriptor read/64, error -71 [ 869.068927][ T8336] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 869.210013][ T8336] usb 3-1: device descriptor read/64, error -71 [ 869.320327][ T8336] usb usb3-port1: attempt power cycle [ 869.670139][ T8336] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 869.691155][ T8336] usb 3-1: device descriptor read/8, error -71 [ 869.939878][ T8336] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 869.961381][ T8336] usb 3-1: device descriptor read/8, error -71 [ 870.079601][ T8336] usb usb3-port1: unable to enumerate USB device [ 871.480150][ T45] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 871.480213][ T45] usb 2-1: MIDIStreaming interface descriptor not found [ 871.509201][T12584] FAULT_INJECTION: forcing a failure. [ 871.509201][T12584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 871.509253][T12584] CPU: 1 UID: 0 PID: 12584 Comm: syz.1.2085 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 871.509290][T12584] Tainted: [L]=SOFTLOCKUP [ 871.509299][T12584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 871.509313][T12584] Call Trace: [ 871.509322][T12584] [ 871.509332][T12584] dump_stack_lvl+0xe8/0x150 [ 871.509369][T12584] should_fail_ex+0x46b/0x600 [ 871.509406][T12584] _copy_to_user+0x31/0xb0 [ 871.509440][T12584] simple_read_from_buffer+0xe1/0x170 [ 871.509481][T12584] proc_fail_nth_read+0x1be/0x230 [ 871.509514][T12584] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 871.509545][T12584] ? rw_verify_area+0x2ac/0x4e0 [ 871.509573][T12584] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 871.509602][T12584] vfs_read+0x212/0xa70 [ 871.509640][T12584] ? __pfx_vfs_read+0x10/0x10 [ 871.509679][T12584] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 871.509712][T12584] ? lockdep_hardirqs_on+0x7a/0x110 [ 871.509744][T12584] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 871.509775][T12584] ? mutex_lock_nested+0x152/0x1d0 [ 871.509798][T12584] ? fdget_pos+0x252/0x320 [ 871.509829][T12584] ksys_read+0x156/0x270 [ 871.509860][T12584] ? __pfx_ksys_read+0x10/0x10 [ 871.509901][T12584] do_syscall_64+0xe2/0xf80 [ 871.509932][T12584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.509955][T12584] ? trace_irq_disable+0x37/0x100 [ 871.509986][T12584] ? clear_bhb_loop+0x60/0xb0 [ 871.510014][T12584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.510037][T12584] RIP: 0033:0x7f9402b3b78e [ 871.510058][T12584] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 871.510078][T12584] RSP: 002b:00007f9400dcdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 871.510102][T12584] RAX: ffffffffffffffda RBX: 00007f9400dce6c0 RCX: 00007f9402b3b78e [ 871.510120][T12584] RDX: 000000000000000f RSI: 00007f9400dce0a0 RDI: 0000000000000003 [ 871.510134][T12584] RBP: 00007f9400dce090 R08: 0000000000000000 R09: 0000000000000000 [ 871.510147][T12584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 871.510161][T12584] R13: 00007f9402df6038 R14: 00007f9402df5fa0 R15: 00007ffd7e548878 [ 871.510197][T12584] [ 871.909880][ T45] usb 2-1: USB disconnect, device number 121 [ 872.113644][ T37] kauditd_printk_skb: 473 callbacks suppressed [ 872.113670][ T37] audit: type=1326 audit(1770573955.565:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12592 comm="syz.1.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 872.113728][ T37] audit: type=1326 audit(1770573955.565:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12592 comm="syz.1.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 872.115442][ T37] audit: type=1326 audit(1770573955.565:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12592 comm="syz.1.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 872.115508][ T37] audit: type=1326 audit(1770573955.565:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12592 comm="syz.1.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 872.115565][ T37] audit: type=1326 audit(1770573955.565:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12592 comm="syz.1.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 872.116376][ T37] audit: type=1326 audit(1770573955.565:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12592 comm="syz.1.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9402b1c2d9 code=0x7ffc0000 [ 872.116835][ T37] audit: type=1326 audit(1770573955.565:4119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12592 comm="syz.1.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9402b1c2d9 code=0x7ffc0000 [ 872.117506][ T37] audit: type=1326 audit(1770573955.565:4120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12592 comm="syz.1.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9402b1c2d9 code=0x7ffc0000 [ 872.119279][ T37] audit: type=1326 audit(1770573955.565:4121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12592 comm="syz.1.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9402b1c2d9 code=0x7ffc0000 [ 872.285020][ T37] audit: type=1326 audit(1770573955.655:4122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12592 comm="syz.1.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9402b1c2d9 code=0x7ffc0000 [ 873.114178][T12597] udevd[12597]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 873.925149][T12603] CIFS: Unable to determine destination address [ 874.962452][T12608] fuse: Bad value for 'fd' [ 875.064016][T12611] netlink: 'syz.1.2092': attribute type 1 has an invalid length. [ 875.064034][T12611] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2092'. [ 875.064056][T12611] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2092'. [ 875.064069][T12611] netlink: 'syz.1.2092': attribute type 1 has an invalid length. [ 875.064080][T12611] netlink: 634 bytes leftover after parsing attributes in process `syz.1.2092'. [ 875.566469][T12611] FAULT_INJECTION: forcing a failure. [ 875.566469][T12611] name failslab, interval 1, probability 0, space 0, times 0 [ 875.566511][T12611] CPU: 1 UID: 0 PID: 12611 Comm: syz.1.2092 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 875.566542][T12611] Tainted: [L]=SOFTLOCKUP [ 875.566550][T12611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 875.566564][T12611] Call Trace: [ 875.566574][T12611] [ 875.566584][T12611] dump_stack_lvl+0xe8/0x150 [ 875.566620][T12611] should_fail_ex+0x46b/0x600 [ 875.566650][T12611] ? __alloc_skb+0x1d7/0x390 [ 875.566683][T12611] should_failslab+0xa8/0x100 [ 875.566717][T12611] ? __alloc_skb+0x1d7/0x390 [ 875.566747][T12611] kmem_cache_alloc_node_noprof+0x8a/0x6d0 [ 875.566776][T12611] ? lockdep_hardirqs_on+0x7a/0x110 [ 875.566811][T12611] ? __alloc_skb+0x193/0x390 [ 875.566844][T12611] __alloc_skb+0x1d7/0x390 [ 875.566881][T12611] netlink_ack+0x146/0xa50 [ 875.566904][T12611] ? __pfx_genl_rcv_msg+0x10/0x10 [ 875.566929][T12611] ? __pfx_ref_tracker_free+0x10/0x10 [ 875.566956][T12611] netlink_rcv_skb+0x2b6/0x4b0 [ 875.566985][T12611] ? __pfx_genl_rcv_msg+0x10/0x10 [ 875.567005][T12611] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 875.567043][T12611] ? netlink_deliver_tap+0x2e/0x1b0 [ 875.567068][T12611] ? netlink_deliver_tap+0x2e/0x1b0 [ 875.567096][T12611] genl_rcv+0x28/0x40 [ 875.567113][T12611] netlink_unicast+0x831/0x9f0 [ 875.567142][T12611] ? __pfx_netlink_unicast+0x10/0x10 [ 875.567164][T12611] ? __alloc_skb+0x193/0x390 [ 875.567192][T12611] ? netlink_sendmsg+0x650/0xb40 [ 875.567215][T12611] ? skb_put+0x11b/0x210 [ 875.567235][T12611] netlink_sendmsg+0x813/0xb40 [ 875.567267][T12611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 875.567299][T12611] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 875.567329][T12611] ____sys_sendmsg+0xa4e/0xac0 [ 875.567349][T12611] ? __might_fault+0xaf/0x130 [ 875.567382][T12611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 875.567409][T12611] ? import_iovec+0x73/0xa0 [ 875.567436][T12611] ___sys_sendmsg+0x2a5/0x360 [ 875.567455][T12611] ? __lock_acquire+0x6b5/0x2cf0 [ 875.567479][T12611] ? __pfx____sys_sendmsg+0x10/0x10 [ 875.567528][T12611] ? __fget_files+0x2a/0x420 [ 875.567544][T12611] ? __fget_files+0x3a6/0x420 [ 875.567570][T12611] __x64_sys_sendmsg+0x1c3/0x2a0 [ 875.567592][T12611] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 875.567620][T12611] ? __pfx_ksys_write+0x10/0x10 [ 875.567653][T12611] do_syscall_64+0xe2/0xf80 [ 875.567677][T12611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.567695][T12611] ? trace_irq_disable+0x37/0x100 [ 875.567720][T12611] ? clear_bhb_loop+0x60/0xb0 [ 875.567741][T12611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.567759][T12611] RIP: 0033:0x7f9402b7aeb9 [ 875.567776][T12611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.567799][T12611] RSP: 002b:00007f9400dce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 875.567819][T12611] RAX: ffffffffffffffda RBX: 00007f9402df5fa0 RCX: 00007f9402b7aeb9 [ 875.567833][T12611] RDX: 000000000000c000 RSI: 00002000000008c0 RDI: 0000000000000003 [ 875.567845][T12611] RBP: 00007f9400dce090 R08: 0000000000000000 R09: 0000000000000000 [ 875.567857][T12611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.567867][T12611] R13: 00007f9402df6038 R14: 00007f9402df5fa0 R15: 00007ffd7e548878 [ 875.567895][T12611] [ 876.028330][T12615] FAULT_INJECTION: forcing a failure. [ 876.028330][T12615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 876.028456][T12615] CPU: 1 UID: 0 PID: 12615 Comm: syz.1.2093 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 876.028490][T12615] Tainted: [L]=SOFTLOCKUP [ 876.028499][T12615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 876.028513][T12615] Call Trace: [ 876.028523][T12615] [ 876.028534][T12615] dump_stack_lvl+0xe8/0x150 [ 876.028572][T12615] should_fail_ex+0x46b/0x600 [ 876.028603][T12615] _copy_to_user+0x31/0xb0 [ 876.028637][T12615] bpf_test_finish+0x53c/0x6b0 [ 876.028675][T12615] ? __pfx____migrate_enable+0x10/0x10 [ 876.028702][T12615] ? __pfx_bpf_test_finish+0x10/0x10 [ 876.028759][T12615] bpf_prog_test_run_flow_dissector+0x478/0x610 [ 876.028809][T12615] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 876.028845][T12615] ? __fget_files+0x2a/0x420 [ 876.028873][T12615] ? __fget_files+0x2a/0x420 [ 876.028901][T12615] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 876.028936][T12615] bpf_prog_test_run+0x2cd/0x340 [ 876.028975][T12615] __sys_bpf+0x5cb/0x920 [ 876.029010][T12615] ? __pfx___sys_bpf+0x10/0x10 [ 876.029039][T12615] ? rt_mutex_slowunlock+0x1cb/0x300 [ 876.029083][T12615] ? ksys_write+0x248/0x270 [ 876.029115][T12615] ? __pfx_ksys_write+0x10/0x10 [ 876.029152][T12615] __x64_sys_bpf+0x7c/0x90 [ 876.029182][T12615] do_syscall_64+0xe2/0xf80 [ 876.029214][T12615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.029237][T12615] ? trace_irq_disable+0x37/0x100 [ 876.029267][T12615] ? clear_bhb_loop+0x60/0xb0 [ 876.029296][T12615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.029319][T12615] RIP: 0033:0x7f9402b7aeb9 [ 876.029341][T12615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.029362][T12615] RSP: 002b:00007f9400dce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 876.029386][T12615] RAX: ffffffffffffffda RBX: 00007f9402df5fa0 RCX: 00007f9402b7aeb9 [ 876.029404][T12615] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 876.029418][T12615] RBP: 00007f9400dce090 R08: 0000000000000000 R09: 0000000000000000 [ 876.029432][T12615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.029445][T12615] R13: 00007f9402df6038 R14: 00007f9402df5fa0 R15: 00007ffd7e548878 [ 876.029481][T12615] [ 877.493637][ T37] kauditd_printk_skb: 598 callbacks suppressed [ 877.493658][ T37] audit: type=1326 audit(1770573960.945:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12619 comm="syz.1.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 877.532594][ T37] audit: type=1326 audit(1770573960.985:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12619 comm="syz.1.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 877.532662][ T37] audit: type=1326 audit(1770573960.985:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12619 comm="syz.1.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 877.539176][ T37] audit: type=1326 audit(1770573960.985:4724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12619 comm="syz.1.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 877.539547][ T37] audit: type=1326 audit(1770573960.985:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12619 comm="syz.1.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 877.698448][ T37] audit: type=1326 audit(1770573961.145:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12619 comm="syz.1.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9402b1c2d9 code=0x7ffc0000 [ 877.698821][ T37] audit: type=1326 audit(1770573961.145:4727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12619 comm="syz.1.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 877.794182][ T37] audit: type=1326 audit(1770573961.205:4728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12619 comm="syz.1.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9402b1c2d9 code=0x7ffc0000 [ 877.794250][ T37] audit: type=1326 audit(1770573961.205:4729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12619 comm="syz.1.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9402b1c2d9 code=0x7ffc0000 [ 877.794302][ T37] audit: type=1326 audit(1770573961.205:4730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12619 comm="syz.1.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9402b1c2d9 code=0x7ffc0000 [ 878.247201][T12203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 878.739138][T12630] CIFS: Unable to determine destination address [ 880.015341][T12355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 880.151971][T12355] 8021q: adding VLAN 0 to HW filter on device team0 [ 880.209249][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.209411][ T5979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 880.378728][ T2207] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.378886][ T2207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 880.413766][T10138] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 880.507042][T12644] fuse: Bad value for 'fd' [ 880.514607][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.514891][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 880.562852][T10138] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 880.568994][T10138] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 880.583909][T10138] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 880.591524][T10138] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 881.503353][T12647] netlink: 'syz.1.2100': attribute type 1 has an invalid length. [ 881.503381][T12647] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2100'. [ 881.503399][T12647] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2100'. [ 881.503415][T12647] netlink: 'syz.1.2100': attribute type 1 has an invalid length. [ 881.503431][T12647] netlink: 634 bytes leftover after parsing attributes in process `syz.1.2100'. [ 882.190605][T12387] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 882.257957][T12387] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 883.025372][ T5807] Bluetooth: hci1: command tx timeout [ 883.648884][T12387] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 883.810242][T12387] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 883.856715][ T37] kauditd_printk_skb: 256 callbacks suppressed [ 883.856737][ T37] audit: type=1326 audit(1770573967.305:4987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12660 comm="syz.1.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 883.857295][ T37] audit: type=1326 audit(1770573967.305:4988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12660 comm="syz.1.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 883.858244][ T37] audit: type=1326 audit(1770573967.305:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12660 comm="syz.1.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 883.858615][ T37] audit: type=1326 audit(1770573967.305:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12660 comm="syz.1.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 883.858902][ T37] audit: type=1326 audit(1770573967.305:4991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12660 comm="syz.1.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 883.869764][ T37] audit: type=1326 audit(1770573967.305:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12660 comm="syz.1.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9402b1c2d9 code=0x7ffc0000 [ 883.869822][ T37] audit: type=1326 audit(1770573967.315:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12660 comm="syz.1.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9402b1c2d9 code=0x7ffc0000 [ 883.869869][ T37] audit: type=1326 audit(1770573967.315:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12660 comm="syz.1.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9402b1c2d9 code=0x7ffc0000 [ 883.869918][ T37] audit: type=1326 audit(1770573967.315:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12660 comm="syz.1.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9402b1c2d9 code=0x7ffc0000 [ 883.869965][ T37] audit: type=1326 audit(1770573967.315:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12660 comm="syz.1.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9402b1c2d9 code=0x7ffc0000 [ 885.060483][ T5807] Bluetooth: hci1: command tx timeout [ 885.259511][T12673] CIFS: Unable to determine destination address [ 885.437319][T12670] FAULT_INJECTION: forcing a failure. [ 885.437319][T12670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 885.437392][T12670] CPU: 1 UID: 0 PID: 12670 Comm: syz.1.2107 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 885.437426][T12670] Tainted: [L]=SOFTLOCKUP [ 885.437435][T12670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 885.437450][T12670] Call Trace: [ 885.437462][T12670] [ 885.437475][T12670] dump_stack_lvl+0xe8/0x150 [ 885.437513][T12670] should_fail_ex+0x46b/0x600 [ 885.437546][T12670] _copy_from_user+0x2d/0xb0 [ 885.437578][T12670] ___sys_recvmsg+0x175/0x590 [ 885.437611][T12670] ? __pfx____sys_recvmsg+0x10/0x10 [ 885.437642][T12670] ? __fget_files+0x2a/0x420 [ 885.437698][T12670] do_recvmmsg+0x33a/0x800 [ 885.437733][T12670] ? __pfx_do_recvmmsg+0x10/0x10 [ 885.437773][T12670] ? rt_mutex_slowunlock+0x1cb/0x300 [ 885.437817][T12670] __x64_sys_recvmmsg+0x198/0x250 [ 885.437851][T12670] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 885.437892][T12670] do_syscall_64+0xe2/0xf80 [ 885.437924][T12670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.437947][T12670] ? trace_irq_disable+0x37/0x100 [ 885.437979][T12670] ? clear_bhb_loop+0x60/0xb0 [ 885.438007][T12670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.438031][T12670] RIP: 0033:0x7f9402b7aeb9 [ 885.438052][T12670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 885.438074][T12670] RSP: 002b:00007f9400dad028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 885.438099][T12670] RAX: ffffffffffffffda RBX: 00007f9402df6090 RCX: 00007f9402b7aeb9 [ 885.438116][T12670] RDX: 0000000004000210 RSI: 0000200000001740 RDI: 0000000000000003 [ 885.438138][T12670] RBP: 00007f9400dad090 R08: 0000000000000000 R09: 0000000000000000 [ 885.438154][T12670] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 885.438168][T12670] R13: 00007f9402df6128 R14: 00007f9402df6090 R15: 00007ffd7e548878 [ 885.438204][T12670] [ 886.272965][ T8336] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 886.308074][T12682] Bluetooth: MGMT ver 1.23 [ 886.429037][ T8336] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 886.429070][ T8336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.429092][ T8336] usb 2-1: Product: syz [ 886.429107][ T8336] usb 2-1: Manufacturer: syz [ 886.429122][ T8336] usb 2-1: SerialNumber: syz [ 886.505947][ T8336] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 886.611870][ T45] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 886.653282][ T807] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 886.703790][T12643] chnl_net:caif_netlink_parms(): no params data found [ 886.761041][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 886.780840][ T45] usb 3-1: config 4 has an invalid interface number: 9 but max is 0 [ 886.780877][ T45] usb 3-1: config 4 has no interface number 0 [ 886.780983][ T45] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 886.781003][ T45] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 886.781021][ T45] usb 3-1: config 4 interface 9 has no altsetting 0 [ 886.785947][ T45] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 886.785972][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.786041][ T45] usb 3-1: Product: syz [ 886.786054][ T45] usb 3-1: Manufacturer: syz [ 886.786072][ T45] usb 3-1: SerialNumber: syz [ 886.942755][T12686] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 886.942895][T12686] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 887.296332][ T5807] Bluetooth: hci1: command tx timeout [ 887.328686][ T45] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 887.369377][ T2207] usb 3-1: Failed to submit usb control message: -71 [ 887.369420][ T2207] usb 3-1: unable to send the bmi data to the device: -71 [ 887.369441][ T2207] usb 3-1: unable to get target info from device [ 887.369471][ T2207] usb 3-1: could not get target info (-71) [ 888.153691][ T807] usb 2-1: Service connection timeout for: 256 [ 888.158077][ T807] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 888.190869][ T2207] usb 3-1: could not probe fw (-71) [ 888.240192][ T807] ath9k_htc: Failed to initialize the device [ 888.269818][ T45] usb 3-1: USB disconnect, device number 34 [ 888.394371][ T807] usb 2-1: ath9k_htc: USB layer deinitialized [ 888.712344][T12700] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2111'. [ 888.712371][T12700] FAULT_INJECTION: forcing a failure. [ 888.712371][T12700] name failslab, interval 1, probability 0, space 0, times 0 [ 888.712411][T12700] CPU: 1 UID: 0 PID: 12700 Comm: syz.2.2111 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 888.712442][T12700] Tainted: [L]=SOFTLOCKUP [ 888.712450][T12700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 888.712464][T12700] Call Trace: [ 888.712474][T12700] [ 888.712485][T12700] dump_stack_lvl+0xe8/0x150 [ 888.712523][T12700] should_fail_ex+0x46b/0x600 [ 888.712555][T12700] should_failslab+0xa8/0x100 [ 888.712590][T12700] __kmalloc_cache_noprof+0x83/0x6b0 [ 888.712625][T12700] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 888.712650][T12700] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 888.712675][T12700] ? genl_start+0x1c9/0x6c0 [ 888.712703][T12700] genl_start+0x1c9/0x6c0 [ 888.712738][T12700] __netlink_dump_start+0x469/0x7e0 [ 888.712778][T12700] genl_family_rcv_msg_dumpit+0x213/0x310 [ 888.712810][T12700] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 888.712833][T12700] ? genl_get_cmd+0x4a8/0x930 [ 888.712860][T12700] ? rcu_is_watching+0x15/0xb0 [ 888.712889][T12700] ? __pfx_genl_start+0x10/0x10 [ 888.712918][T12700] ? __pfx_genl_dumpit+0x10/0x10 [ 888.712939][T12700] ? __pfx_genl_done+0x10/0x10 [ 888.712967][T12700] ? bpf_lsm_capable+0x9/0x20 [ 888.712991][T12700] ? security_capable+0x7e/0x2c0 [ 888.713021][T12700] genl_rcv_msg+0x5e8/0x7a0 [ 888.713052][T12700] ? __pfx_genl_rcv_msg+0x10/0x10 [ 888.713075][T12700] ? __pfx_devlink_nl_health_reporter_dump_get_dumpit+0x10/0x10 [ 888.713111][T12700] ? __lock_acquire+0x6b5/0x2cf0 [ 888.713151][T12700] netlink_rcv_skb+0x232/0x4b0 [ 888.713181][T12700] ? __pfx_genl_rcv_msg+0x10/0x10 [ 888.713206][T12700] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 888.713252][T12700] ? netlink_deliver_tap+0x2e/0x1b0 [ 888.713283][T12700] ? netlink_deliver_tap+0x2e/0x1b0 [ 888.713318][T12700] genl_rcv+0x28/0x40 [ 888.713339][T12700] netlink_unicast+0x831/0x9f0 [ 888.713376][T12700] ? __pfx_netlink_unicast+0x10/0x10 [ 888.713403][T12700] ? __alloc_skb+0x193/0x390 [ 888.713439][T12700] ? netlink_sendmsg+0x650/0xb40 [ 888.713493][T12700] ? skb_put+0x11b/0x210 [ 888.713520][T12700] netlink_sendmsg+0x813/0xb40 [ 888.713581][T12700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 888.713623][T12700] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 888.713661][T12700] ____sys_sendmsg+0xa4e/0xac0 [ 888.713686][T12700] ? __might_fault+0xaf/0x130 [ 888.713727][T12700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 888.713763][T12700] ? import_iovec+0x73/0xa0 [ 888.713798][T12700] ___sys_sendmsg+0x2a5/0x360 [ 888.713820][T12700] ? __lock_acquire+0x6b5/0x2cf0 [ 888.713851][T12700] ? __pfx____sys_sendmsg+0x10/0x10 [ 888.713924][T12700] ? __fget_files+0x2a/0x420 [ 888.713946][T12700] ? __fget_files+0x3a6/0x420 [ 888.713980][T12700] __x64_sys_sendmsg+0x1c3/0x2a0 [ 888.714010][T12700] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 888.714047][T12700] ? __pfx_ksys_write+0x10/0x10 [ 888.714089][T12700] do_syscall_64+0xe2/0xf80 [ 888.714122][T12700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.714144][T12700] ? trace_irq_disable+0x37/0x100 [ 888.714176][T12700] ? clear_bhb_loop+0x60/0xb0 [ 888.714206][T12700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.714229][T12700] RIP: 0033:0x7f6282a2aeb9 [ 888.714251][T12700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.714273][T12700] RSP: 002b:00007f6280c86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 888.714297][T12700] RAX: ffffffffffffffda RBX: 00007f6282ca5fa0 RCX: 00007f6282a2aeb9 [ 888.714315][T12700] RDX: 000000000001c810 RSI: 0000200000000240 RDI: 0000000000000003 [ 888.714331][T12700] RBP: 00007f6280c86090 R08: 0000000000000000 R09: 0000000000000000 [ 888.714346][T12700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.714360][T12700] R13: 00007f6282ca6038 R14: 00007f6282ca5fa0 R15: 00007ffec73d54b8 [ 888.714397][T12700] [ 889.142117][T12643] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.143044][T12643] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.143844][T12643] bridge_slave_0: entered allmulticast mode [ 889.217201][T12643] bridge_slave_0: entered promiscuous mode [ 889.295737][T12355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 889.296354][ T12] bridge_slave_1: left allmulticast mode [ 889.296383][ T12] bridge_slave_1: left promiscuous mode [ 889.296657][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.300136][ T5807] Bluetooth: hci1: command tx timeout [ 889.412072][ T12] bridge_slave_0: left allmulticast mode [ 889.412096][ T12] bridge_slave_0: left promiscuous mode [ 889.412290][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.540654][ T9] usb 2-1: USB disconnect, device number 122 [ 891.371138][T12704] Invalid option length (1048180) for dns_resolver key [ 892.050563][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 892.110652][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 892.142655][ T12] bond0 (unregistering): Released all slaves [ 892.769997][T12643] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.770089][T12643] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.770293][T12643] bridge_slave_1: entered allmulticast mode [ 892.772087][T12643] bridge_slave_1: entered promiscuous mode [ 892.819880][ T37] kauditd_printk_skb: 370 callbacks suppressed [ 892.819900][ T37] audit: type=1326 audit(1770573976.265:5367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.1.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 892.819952][ T37] audit: type=1326 audit(1770573976.265:5368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.1.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 892.890135][ T37] audit: type=1326 audit(1770573976.345:5369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.1.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 892.893832][ T37] audit: type=1326 audit(1770573976.345:5370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.1.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 892.893996][ T37] audit: type=1326 audit(1770573976.345:5371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.1.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 892.896384][ T37] audit: type=1326 audit(1770573976.345:5372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.1.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 892.896750][ T37] audit: type=1326 audit(1770573976.345:5373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.1.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 892.897081][ T37] audit: type=1326 audit(1770573976.345:5374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.1.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 892.897415][ T37] audit: type=1326 audit(1770573976.345:5375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.1.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 892.897775][ T37] audit: type=1326 audit(1770573976.345:5376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.1.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 895.824749][ T12] hsr_slave_0: left promiscuous mode [ 895.876793][ T12] hsr_slave_1: left promiscuous mode [ 895.877675][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.911389][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.107375][T12713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2115'. [ 896.704750][T12718] fuse: Bad value for 'fd' [ 897.522082][ T12] team0 (unregistering): Port device team_slave_1 removed [ 897.831559][ T12] team0 (unregistering): Port device team_slave_0 removed [ 898.240028][T10138] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 898.276590][T10138] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 898.278387][T10138] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 898.418880][T12726] CIFS: Unable to determine destination address [ 898.703233][T10138] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 898.767362][T10138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 900.980090][T10138] Bluetooth: hci5: command tx timeout [ 901.613400][T12713] hsr_slave_1 (unregistering): left promiscuous mode [ 901.674172][T12643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.704428][T12643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.827932][T12643] team0: Port device team_slave_0 added [ 901.866087][T12387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 901.904098][T12643] team0: Port device team_slave_1 added [ 901.907958][T12733] block nbd1: NBD_DISCONNECT [ 902.359900][ T8336] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 902.520466][ T8336] usb 3-1: Using ep0 maxpacket: 16 [ 902.634966][ T8336] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 902.635051][ T8336] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 903.113479][T10138] Bluetooth: hci5: command tx timeout [ 903.183720][ T8336] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 903.183757][ T8336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.183781][ T8336] usb 3-1: Product: syz [ 903.183798][ T8336] usb 3-1: Manufacturer: syz [ 903.183814][ T8336] usb 3-1: SerialNumber: syz [ 903.462785][ T8336] usb 3-1: 0:2 : does not exist [ 903.471447][ T8336] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 903.598219][ T8336] usb 3-1: USB disconnect, device number 35 [ 903.688762][T12735] udevd[12735]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 903.787178][T12643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 903.787199][T12643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.787231][T12643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 903.826346][T12643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.826399][T12643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.826476][T12643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 903.947852][ T5807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 903.972219][ T5807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 903.974317][ T5807] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 903.975826][ T5807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 904.002498][ T5807] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 904.355797][ T37] kauditd_printk_skb: 1475 callbacks suppressed [ 904.355819][ T37] audit: type=1326 audit(1770573987.805:6852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12748 comm="syz.2.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6282a2aeb9 code=0x7ffc0000 [ 904.355871][ T37] audit: type=1326 audit(1770573987.805:6853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12748 comm="syz.2.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6282a2aeb9 code=0x7ffc0000 [ 904.358920][T12643] hsr_slave_0: entered promiscuous mode [ 904.360121][ T37] audit: type=1326 audit(1770573987.815:6854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12748 comm="syz.2.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f6282a2aeb9 code=0x7ffc0000 [ 904.360739][ T37] audit: type=1326 audit(1770573987.815:6855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12748 comm="syz.2.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6282a2aeb9 code=0x7ffc0000 [ 904.360791][ T37] audit: type=1326 audit(1770573987.815:6856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12748 comm="syz.2.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6282a2aeb9 code=0x7ffc0000 [ 904.361561][T12643] hsr_slave_1: entered promiscuous mode [ 904.365282][ T37] audit: type=1326 audit(1770573987.815:6857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12748 comm="syz.2.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62829cc2d9 code=0x7ffc0000 [ 904.365698][ T37] audit: type=1326 audit(1770573987.815:6858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12748 comm="syz.2.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62829cc2d9 code=0x7ffc0000 [ 904.366073][ T37] audit: type=1326 audit(1770573987.815:6859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12748 comm="syz.2.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62829cc2d9 code=0x7ffc0000 [ 904.366459][ T37] audit: type=1326 audit(1770573987.815:6860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12748 comm="syz.2.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62829cc2d9 code=0x7ffc0000 [ 904.366987][ T37] audit: type=1326 audit(1770573987.815:6861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12748 comm="syz.2.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62829cc2d9 code=0x7ffc0000 [ 905.251890][T10138] Bluetooth: hci5: command tx timeout [ 905.537118][T12755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2124'. [ 905.638512][T12756] fuse: Bad value for 'fd' [ 906.019953][T12483] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 906.100190][T10138] Bluetooth: hci3: command tx timeout [ 906.171823][T12483] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 906.171860][T12483] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 906.171878][T12483] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 906.171899][T12483] usb 2-1: config 0 interface 0 has no altsetting 0 [ 906.171943][T12483] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 906.171960][T12483] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.177361][T12483] usb 2-1: config 0 descriptor?? [ 906.630276][T12483] hid-alps 0003:044E:120C.000A: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.1-1/input0 [ 906.795178][T12483] usb 2-1: USB disconnect, device number 123 [ 906.909232][T12761] fido_id[12761]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 907.244286][T12722] chnl_net:caif_netlink_parms(): no params data found [ 907.299962][T10138] Bluetooth: hci5: command tx timeout [ 908.183240][T10138] Bluetooth: hci3: command tx timeout [ 910.259834][T10138] Bluetooth: hci3: command tx timeout [ 910.282758][T12774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.289627][ T37] kauditd_printk_skb: 349 callbacks suppressed [ 910.289754][ T37] audit: type=1326 audit(1770573993.735:7211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12783 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6282a2aeb9 code=0x7ffc0000 [ 910.290436][ T37] audit: type=1326 audit(1770573993.745:7212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12783 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6282a2aeb9 code=0x7ffc0000 [ 910.291062][ T37] audit: type=1326 audit(1770573993.745:7213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12783 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f6282a2aeb9 code=0x7ffc0000 [ 910.291472][ T37] audit: type=1326 audit(1770573993.745:7214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12783 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6282a2aeb9 code=0x7ffc0000 [ 910.291736][ T37] audit: type=1326 audit(1770573993.745:7215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12783 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6282a2aeb9 code=0x7ffc0000 [ 910.295585][ T37] audit: type=1326 audit(1770573993.745:7216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12783 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62829cc2d9 code=0x7ffc0000 [ 910.299145][ T37] audit: type=1326 audit(1770573993.745:7217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12783 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62829cc2d9 code=0x7ffc0000 [ 910.350343][ T37] audit: type=1326 audit(1770573993.795:7218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12783 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62829cc2d9 code=0x7ffc0000 [ 910.399387][ T37] audit: type=1326 audit(1770573993.805:7219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12783 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62829cc2d9 code=0x7ffc0000 [ 910.399601][ T37] audit: type=1326 audit(1770573993.805:7220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12783 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62829cc2d9 code=0x7ffc0000 [ 910.536108][T12774] bond0: (slave rose0): Enslaving as an active interface with an up link [ 911.002534][T12786] FAULT_INJECTION: forcing a failure. [ 911.002534][T12786] name failslab, interval 1, probability 0, space 0, times 0 [ 911.002582][T12786] CPU: 0 UID: 0 PID: 12786 Comm: syz.1.2132 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 911.002623][T12786] Tainted: [L]=SOFTLOCKUP [ 911.002632][T12786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 911.002646][T12786] Call Trace: [ 911.002655][T12786] [ 911.002664][T12786] dump_stack_lvl+0xe8/0x150 [ 911.002701][T12786] should_fail_ex+0x46b/0x600 [ 911.002731][T12786] ? __alloc_skb+0x1d7/0x390 [ 911.002766][T12786] should_failslab+0xa8/0x100 [ 911.002800][T12786] ? __alloc_skb+0x1d7/0x390 [ 911.002831][T12786] kmem_cache_alloc_node_noprof+0x8a/0x6d0 [ 911.002864][T12786] ? lockdep_hardirqs_on+0x7a/0x110 [ 911.002896][T12786] ? __alloc_skb+0x193/0x390 [ 911.002930][T12786] __alloc_skb+0x1d7/0x390 [ 911.002967][T12786] fdb_notify+0xa6/0x160 [ 911.002996][T12786] br_fdb_external_learn_add+0x539/0x6a0 [ 911.003024][T12786] ? br_fdb_external_learn_add+0x169/0x6a0 [ 911.003054][T12786] __br_fdb_add+0x42f/0xf00 [ 911.003091][T12786] br_fdb_add+0x746/0xc40 [ 911.003125][T12786] ? __pfx_br_fdb_add+0x10/0x10 [ 911.003160][T12786] ? __nla_parse+0x40/0x60 [ 911.003186][T12786] ? __pfx_br_fdb_add+0x10/0x10 [ 911.003213][T12786] rtnl_fdb_add+0x77c/0xba0 [ 911.003261][T12786] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 911.003312][T12786] ? rtnetlink_rcv_msg+0x722/0xbe0 [ 911.003359][T12786] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 911.003394][T12786] rtnetlink_rcv_msg+0x77e/0xbe0 [ 911.003429][T12786] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 911.003461][T12786] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 911.003492][T12786] ? ref_tracker_free+0x673/0x820 [ 911.003515][T12786] ? __copy_skb_header+0xa3/0x4a0 [ 911.003543][T12786] ? __pfx_ref_tracker_free+0x10/0x10 [ 911.003566][T12786] ? __skb_clone+0x63/0x7a0 [ 911.003602][T12786] netlink_rcv_skb+0x232/0x4b0 [ 911.003645][T12786] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 911.003681][T12786] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 911.003727][T12786] ? netlink_deliver_tap+0x2e/0x1b0 [ 911.003770][T12786] netlink_unicast+0x831/0x9f0 [ 911.003809][T12786] ? __pfx_netlink_unicast+0x10/0x10 [ 911.003838][T12786] ? __alloc_skb+0x193/0x390 [ 911.003873][T12786] ? netlink_sendmsg+0x650/0xb40 [ 911.003904][T12786] ? skb_put+0x11b/0x210 [ 911.003931][T12786] netlink_sendmsg+0x813/0xb40 [ 911.003975][T12786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 911.004017][T12786] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 911.004055][T12786] ____sys_sendmsg+0xa4e/0xac0 [ 911.004080][T12786] ? __might_fault+0xaf/0x130 [ 911.004122][T12786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 911.004159][T12786] ? import_iovec+0x73/0xa0 [ 911.004194][T12786] ___sys_sendmsg+0x2a5/0x360 [ 911.004219][T12786] ? __lock_acquire+0x6b5/0x2cf0 [ 911.004250][T12786] ? __pfx____sys_sendmsg+0x10/0x10 [ 911.004321][T12786] ? __fget_files+0x2a/0x420 [ 911.004342][T12786] ? __fget_files+0x3a6/0x420 [ 911.004378][T12786] __x64_sys_sendmsg+0x1c3/0x2a0 [ 911.004409][T12786] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 911.004447][T12786] ? __pfx_ksys_write+0x10/0x10 [ 911.004491][T12786] do_syscall_64+0xe2/0xf80 [ 911.004523][T12786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.004545][T12786] ? trace_irq_disable+0x37/0x100 [ 911.004575][T12786] ? clear_bhb_loop+0x60/0xb0 [ 911.004612][T12786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.004635][T12786] RIP: 0033:0x7f9402b7aeb9 [ 911.004658][T12786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.004681][T12786] RSP: 002b:00007f9400dce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 911.004706][T12786] RAX: ffffffffffffffda RBX: 00007f9402df5fa0 RCX: 00007f9402b7aeb9 [ 911.004725][T12786] RDX: 0000000004040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 911.004740][T12786] RBP: 00007f9400dce090 R08: 0000000000000000 R09: 0000000000000000 [ 911.004755][T12786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 911.004769][T12786] R13: 00007f9402df6038 R14: 00007f9402df5fa0 R15: 00007ffd7e548878 [ 911.004808][T12786] [ 911.517340][T12793] netlink: 852 bytes leftover after parsing attributes in process `syz.2.2133'. [ 911.584889][T12746] chnl_net:caif_netlink_parms(): no params data found [ 912.730609][T10138] Bluetooth: hci3: command tx timeout [ 913.159588][T12722] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.167334][T12722] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.167593][T12722] bridge_slave_0: entered allmulticast mode [ 913.197926][T12722] bridge_slave_0: entered promiscuous mode [ 913.922930][T12722] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.923357][T12722] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.923611][T12722] bridge_slave_1: entered allmulticast mode [ 913.926847][T12722] bridge_slave_1: entered promiscuous mode [ 914.101375][T12722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.139834][ T31] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 914.146878][T12722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.299912][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 914.305491][ T31] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 914.305526][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.305549][ T31] usb 2-1: Product: syz [ 914.305566][ T31] usb 2-1: Manufacturer: syz [ 914.305582][ T31] usb 2-1: SerialNumber: syz [ 914.315095][ T31] usb 2-1: config 0 descriptor?? [ 914.360620][ T31] hub 2-1:0.0: bad descriptor, ignoring hub [ 914.360649][ T31] hub 2-1:0.0: probe with driver hub failed with error -5 [ 914.365425][ T31] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 914.437960][T12746] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.438211][T12746] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.440326][T12746] bridge_slave_0: entered allmulticast mode [ 914.473050][T12746] bridge_slave_0: entered promiscuous mode [ 914.486148][T12722] team0: Port device team_slave_0 added [ 914.488790][T12746] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.488921][T12746] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.489166][T12746] bridge_slave_1: entered allmulticast mode [ 914.518335][T12746] bridge_slave_1: entered promiscuous mode [ 914.535575][T12722] team0: Port device team_slave_1 added [ 914.557373][ T31] gspca_vc032x: reg_w err -71 [ 914.557415][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.557428][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.557439][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.557450][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.557461][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.557471][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.557482][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.557491][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.557502][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.557512][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.557522][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.557531][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.557548][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.557559][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.557569][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.557580][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.557590][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.557600][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.557610][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.557624][ T31] gspca_vc032x: Unknown sensor... [ 914.557713][ T31] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 914.767196][ T31] usb 2-1: USB disconnect, device number 124 [ 915.494233][ T37] kauditd_printk_skb: 514 callbacks suppressed [ 915.494250][ T37] audit: type=1326 audit(1770573998.735:7735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12813 comm="syz.2.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6282a2aeb9 code=0x7ffc0000 [ 915.494290][ T37] audit: type=1326 audit(1770573998.945:7736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12813 comm="syz.2.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6282a2aeb9 code=0x7ffc0000 [ 915.494824][ T37] audit: type=1326 audit(1770573998.945:7737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12813 comm="syz.2.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6282a2aeb9 code=0x7ffc0000 [ 915.495349][ T37] audit: type=1326 audit(1770573998.945:7738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12813 comm="syz.2.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6282a2aeb9 code=0x7ffc0000 [ 915.495897][ T37] audit: type=1326 audit(1770573998.945:7739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12813 comm="syz.2.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6282a2aeb9 code=0x7ffc0000 [ 915.496230][ T37] audit: type=1326 audit(1770573998.945:7740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12813 comm="syz.2.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6282a2aeb9 code=0x7ffc0000 [ 915.497172][ T37] audit: type=1326 audit(1770573998.945:7741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12813 comm="syz.2.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62829cc2d9 code=0x7ffc0000 [ 915.497727][ T37] audit: type=1326 audit(1770573998.945:7742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12813 comm="syz.2.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6282a2aeb9 code=0x7ffc0000 [ 915.498423][ T37] audit: type=1326 audit(1770573998.945:7743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12813 comm="syz.2.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6282a2aeb9 code=0x7ffc0000 [ 915.499080][ T37] audit: type=1326 audit(1770573998.945:7744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12813 comm="syz.2.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6282a2aeb9 code=0x7ffc0000 [ 915.723008][T12819] QAT: Device 7 not found [ 916.523736][T12746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.529979][T12722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.530024][T12722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.530107][T12722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.782999][T12746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.803410][T12722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.803425][T12722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.803458][T12722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.098947][T12746] team0: Port device team_slave_0 added [ 917.148190][T12746] team0: Port device team_slave_1 added [ 917.277322][T12722] hsr_slave_0: entered promiscuous mode [ 917.278369][T12722] hsr_slave_1: entered promiscuous mode [ 917.279066][T12722] debugfs: 'hsr0' already exists in 'hsr' [ 917.279085][T12722] Cannot create hsr debugfs directory [ 917.368945][T12746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.368961][T12746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.368984][T12746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.710301][T12746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.710322][T12746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.710356][T12746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 919.816141][T12844] FAULT_INJECTION: forcing a failure. [ 919.816141][T12844] name failslab, interval 1, probability 0, space 0, times 0 [ 919.816186][T12844] CPU: 0 UID: 0 PID: 12844 Comm: syz.2.2150 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 919.816217][T12844] Tainted: [L]=SOFTLOCKUP [ 919.816225][T12844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 919.816239][T12844] Call Trace: [ 919.816248][T12844] [ 919.816258][T12844] dump_stack_lvl+0xe8/0x150 [ 919.816296][T12844] should_fail_ex+0x46b/0x600 [ 919.816327][T12844] should_failslab+0xa8/0x100 [ 919.816364][T12844] __kmalloc_noprof+0xdf/0x7c0 [ 919.816397][T12844] ? tomoyo_encode+0x28b/0x550 [ 919.816426][T12844] tomoyo_encode+0x28b/0x550 [ 919.816455][T12844] tomoyo_realpath_from_path+0x58d/0x5d0 [ 919.816481][T12844] ? tomoyo_domain+0xd8/0x130 [ 919.816512][T12844] ? tomoyo_path_number_perm+0x219/0x630 [ 919.816544][T12844] tomoyo_path_number_perm+0x246/0x630 [ 919.816580][T12844] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 919.816611][T12844] ? __lock_acquire+0x6b5/0x2cf0 [ 919.816640][T12844] ? do_raw_spin_lock+0x12b/0x2f0 [ 919.816711][T12844] ? __fget_files+0x2a/0x420 [ 919.816735][T12844] ? __fget_files+0x2a/0x420 [ 919.816755][T12844] ? __fget_files+0x3a6/0x420 [ 919.816774][T12844] ? __fget_files+0x2a/0x420 [ 919.816800][T12844] security_file_ioctl+0xc3/0x2a0 [ 919.816841][T12844] __se_sys_ioctl+0x47/0x170 [ 919.816871][T12844] do_syscall_64+0xe2/0xf80 [ 919.816903][T12844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.816925][T12844] ? trace_irq_disable+0x37/0x100 [ 919.816956][T12844] ? clear_bhb_loop+0x60/0xb0 [ 919.816986][T12844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.817009][T12844] RIP: 0033:0x7f6282a2aeb9 [ 919.817029][T12844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 919.817050][T12844] RSP: 002b:00007f6280c86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 919.817074][T12844] RAX: ffffffffffffffda RBX: 00007f6282ca5fa0 RCX: 00007f6282a2aeb9 [ 919.817092][T12844] RDX: 00002000000003c0 RSI: 000000004010ae68 RDI: 0000000000000005 [ 919.817108][T12844] RBP: 00007f6280c86090 R08: 0000000000000000 R09: 0000000000000000 [ 919.817123][T12844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.817138][T12844] R13: 00007f6282ca6038 R14: 00007f6282ca5fa0 R15: 00007ffec73d54b8 [ 919.817176][T12844] [ 919.817198][T12844] ERROR: Out of memory at tomoyo_realpath_from_path. [ 920.664119][T12643] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 921.532349][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 921.532372][ T37] audit: type=1326 audit(1770574004.985:7759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 921.532527][ T37] audit: type=1326 audit(1770574004.985:7760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 921.533062][ T37] audit: type=1326 audit(1770574004.985:7761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 921.533600][ T37] audit: type=1326 audit(1770574004.985:7762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 921.533654][ T37] audit: type=1326 audit(1770574004.985:7763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 921.534210][ T37] audit: type=1326 audit(1770574004.985:7764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9402b1c2d9 code=0x7ffc0000 [ 921.534270][ T37] audit: type=1326 audit(1770574004.985:7765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9402b1c2d9 code=0x7ffc0000 [ 921.534693][ T37] audit: type=1326 audit(1770574004.985:7766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9402b1c2d9 code=0x7ffc0000 [ 921.534760][ T37] audit: type=1326 audit(1770574004.985:7767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9402b7aeb9 code=0x7ffc0000 [ 921.535230][ T37] audit: type=1326 audit(1770574004.985:7768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9402b1c2d9 code=0x7ffc0000 [ 921.848397][T10138] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 921.941055][T12643] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 922.233583][T12643] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 923.665191][T12643] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 923.720323][T12868] FAULT_INJECTION: forcing a failure. [ 923.720323][T12868] name failslab, interval 1, probability 0, space 0, times 0 [ 923.720366][T12868] CPU: 1 UID: 0 PID: 12868 Comm: syz.1.2157 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 923.720399][T12868] Tainted: [L]=SOFTLOCKUP [ 923.720407][T12868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 923.720421][T12868] Call Trace: [ 923.720430][T12868] [ 923.720441][T12868] dump_stack_lvl+0xe8/0x150 [ 923.720478][T12868] should_fail_ex+0x46b/0x600 [ 923.720508][T12868] should_failslab+0xa8/0x100 [ 923.720544][T12868] __kmalloc_cache_noprof+0x83/0x6b0 [ 923.720577][T12868] ? cgw_create_job+0x1fe/0xc90 [ 923.720603][T12868] cgw_create_job+0x1fe/0xc90 [ 923.720624][T12868] ? rtnetlink_rcv_msg+0x722/0xbe0 [ 923.720668][T12868] ? __pfx_cgw_create_job+0x10/0x10 [ 923.720697][T12868] ? __pfx_cgw_create_job+0x10/0x10 [ 923.720728][T12868] rtnetlink_rcv_msg+0x77e/0xbe0 [ 923.720766][T12868] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 923.720796][T12868] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 923.720825][T12868] ? ref_tracker_free+0x673/0x820 [ 923.720849][T12868] ? __copy_skb_header+0xa3/0x4a0 [ 923.720875][T12868] ? __pfx_ref_tracker_free+0x10/0x10 [ 923.720899][T12868] ? __skb_clone+0x63/0x7a0 [ 923.720933][T12868] netlink_rcv_skb+0x232/0x4b0 [ 923.720965][T12868] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 923.721001][T12868] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 923.721044][T12868] ? netlink_deliver_tap+0x2e/0x1b0 [ 923.721084][T12868] netlink_unicast+0x831/0x9f0 [ 923.721122][T12868] ? __pfx_netlink_unicast+0x10/0x10 [ 923.721150][T12868] ? __alloc_skb+0x193/0x390 [ 923.721184][T12868] ? netlink_sendmsg+0x650/0xb40 [ 923.721212][T12868] ? skb_put+0x11b/0x210 [ 923.721237][T12868] netlink_sendmsg+0x813/0xb40 [ 923.721280][T12868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 923.721321][T12868] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 923.721358][T12868] ____sys_sendmsg+0xa4e/0xac0 [ 923.721383][T12868] ? __might_fault+0xaf/0x130 [ 923.721423][T12868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 923.721459][T12868] ? import_iovec+0x73/0xa0 [ 923.721493][T12868] ___sys_sendmsg+0x2a5/0x360 [ 923.721517][T12868] ? __lock_acquire+0x6b5/0x2cf0 [ 923.721549][T12868] ? __pfx____sys_sendmsg+0x10/0x10 [ 923.721620][T12868] ? __fget_files+0x2a/0x420 [ 923.721641][T12868] ? __fget_files+0x3a6/0x420 [ 923.721673][T12868] __x64_sys_sendmsg+0x1c3/0x2a0 [ 923.721701][T12868] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 923.721741][T12868] ? __pfx_ksys_write+0x10/0x10 [ 923.721783][T12868] do_syscall_64+0xe2/0xf80 [ 923.721814][T12868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.721836][T12868] ? trace_irq_disable+0x37/0x100 [ 923.721865][T12868] ? clear_bhb_loop+0x60/0xb0 [ 923.721894][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.721917][T12868] RIP: 0033:0x7f9402b7aeb9 [ 923.721938][T12868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.721959][T12868] RSP: 002b:00007f9400dce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 923.721983][T12868] RAX: ffffffffffffffda RBX: 00007f9402df5fa0 RCX: 00007f9402b7aeb9 [ 923.722001][T12868] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 923.722015][T12868] RBP: 00007f9400dce090 R08: 0000000000000000 R09: 0000000000000000 [ 923.722030][T12868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.722044][T12868] R13: 00007f9402df6038 R14: 00007f9402df5fa0 R15: 00007ffd7e548878 [ 923.722082][T12868] [ 924.012635][T12746] hsr_slave_0: entered promiscuous mode [ 924.040000][T12746] hsr_slave_1: entered promiscuous mode [ 924.052632][T12746] debugfs: 'hsr0' already exists in 'hsr' [ 924.052740][T12746] Cannot create hsr debugfs directory [ 924.488110][T12885] block nbd1: NBD_DISCONNECT [ 926.300097][ T45] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 926.395742][ T12] bridge_slave_1: left allmulticast mode [ 926.395777][ T12] bridge_slave_1: left promiscuous mode [ 926.396055][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.410550][ T8336] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 926.450007][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 926.453766][ T45] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 926.453798][ T45] usb 2-1: config 0 has no interface number 0 [ 926.453854][ T45] usb 2-1: config 0 interface 12 has no altsetting 0 [ 926.457031][ T45] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 926.457055][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.457070][ T45] usb 2-1: Product: syz [ 926.457081][ T45] usb 2-1: Manufacturer: syz [ 926.457093][ T45] usb 2-1: SerialNumber: syz [ 926.520043][ T45] usb 2-1: config 0 descriptor?? [ 926.544286][ T12] bridge_slave_0: left allmulticast mode [ 926.544321][ T12] bridge_slave_0: left promiscuous mode [ 926.544604][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.610471][ T8336] usb 3-1: Using ep0 maxpacket: 16 [ 926.612776][ T8336] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 926.612805][ T8336] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 926.615650][ T8336] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 926.615673][ T8336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.615731][ T8336] usb 3-1: Product: syz [ 926.615749][ T8336] usb 3-1: Manufacturer: syz [ 926.615767][ T8336] usb 3-1: SerialNumber: syz [ 926.686726][ T12] bridge_slave_1: left allmulticast mode [ 926.686761][ T12] bridge_slave_1: left promiscuous mode [ 926.687145][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.771425][ T12] bridge_slave_0: left allmulticast mode [ 926.771459][ T12] bridge_slave_0: left promiscuous mode [ 926.771763][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.928438][ T8336] usb 3-1: 0:2 : does not exist [ 926.992432][ T8336] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 927.179078][ T45] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 68 failed: -71 [ 927.179141][ T45] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 927.179159][ T45] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 927.179255][ T45] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 927.235447][ T8336] usb 3-1: USB disconnect, device number 36 [ 927.292911][ T45] usb 2-1: USB disconnect, device number 125 [ 927.395361][T12905] udevd[12905]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 928.726422][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 928.831646][T12916] FAULT_INJECTION: forcing a failure. [ 928.831646][T12916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 928.831690][T12916] CPU: 1 UID: 0 PID: 12916 Comm: syz.2.2171 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 928.831723][T12916] Tainted: [L]=SOFTLOCKUP [ 928.831732][T12916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 928.831747][T12916] Call Trace: [ 928.831757][T12916] [ 928.831767][T12916] dump_stack_lvl+0xe8/0x150 [ 928.831804][T12916] should_fail_ex+0x46b/0x600 [ 928.831835][T12916] _copy_to_user+0x31/0xb0 [ 928.831868][T12916] __htab_map_lookup_and_delete_batch+0xfe4/0x13b0 [ 928.831935][T12916] ? __pfx___htab_map_lookup_and_delete_batch+0x10/0x10 [ 928.831973][T12916] ? __pfx_htab_lru_percpu_map_lookup_and_delete_batch+0x10/0x10 [ 928.832003][T12916] bpf_map_do_batch+0x45b/0x630 [ 928.832043][T12916] __sys_bpf+0x808/0x920 [ 928.832098][T12916] ? __pfx___sys_bpf+0x10/0x10 [ 928.832126][T12916] ? rt_mutex_slowunlock+0x1cb/0x300 [ 928.832170][T12916] ? ksys_write+0x248/0x270 [ 928.832203][T12916] ? __pfx_ksys_write+0x10/0x10 [ 928.832240][T12916] __x64_sys_bpf+0x7c/0x90 [ 928.832269][T12916] do_syscall_64+0xe2/0xf80 [ 928.832297][T12916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.832321][T12916] ? trace_irq_disable+0x37/0x100 [ 928.832350][T12916] ? clear_bhb_loop+0x60/0xb0 [ 928.832378][T12916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.832400][T12916] RIP: 0033:0x7f6282a2aeb9 [ 928.832422][T12916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.832444][T12916] RSP: 002b:00007f6280c86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 928.832468][T12916] RAX: ffffffffffffffda RBX: 00007f6282ca5fa0 RCX: 00007f6282a2aeb9 [ 928.832485][T12916] RDX: 0000000000000038 RSI: 0000200000000600 RDI: 0000000000000019 [ 928.832500][T12916] RBP: 00007f6280c86090 R08: 0000000000000000 R09: 0000000000000000 [ 928.832515][T12916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.832528][T12916] R13: 00007f6282ca6038 R14: 00007f6282ca5fa0 R15: 00007ffec73d54b8 [ 928.832564][T12916] [ 929.037581][ T37] kauditd_printk_skb: 311 callbacks suppressed [ 929.037636][ T37] audit: type=1326 audit(1770574012.485:8080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12917 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6282a2aeb9 code=0x7ffc0000 [ 929.038392][ T37] audit: type=1326 audit(1770574012.485:8081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12917 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6282a2aeb9 code=0x7ffc0000 [ 929.043266][ T37] audit: type=1326 audit(1770574012.495:8082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12917 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f6282a2aeb9 code=0x7ffc0000 [ 929.094905][ T37] audit: type=1326 audit(1770574012.495:8083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12917 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6282a2aeb9 code=0x7ffc0000 [ 929.095075][ T37] audit: type=1326 audit(1770574012.545:8084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12917 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62829cc2d9 code=0x7ffc0000 [ 929.102485][ T37] audit: type=1326 audit(1770574012.545:8085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12917 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62829cc2d9 code=0x7ffc0000 [ 929.117241][ T37] audit: type=1326 audit(1770574012.555:8086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12917 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62829cc2d9 code=0x7ffc0000 [ 929.118917][ T37] audit: type=1326 audit(1770574012.565:8087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12917 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62829cc2d9 code=0x7ffc0000 [ 929.127981][ T37] audit: type=1326 audit(1770574012.575:8088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12917 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62829cc2d9 code=0x7ffc0000 [ 929.143020][ T37] audit: type=1326 audit(1770574012.575:8089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12917 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62829cc2d9 code=0x7ffc0000 [ 929.288673][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 929.582285][ T12] bond0 (unregistering): Released all slaves [ 929.627062][T12920] FAULT_INJECTION: forcing a failure. [ 929.627062][T12920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 929.627103][T12920] CPU: 0 UID: 0 PID: 12920 Comm: syz.2.2173 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 929.627126][T12920] Tainted: [L]=SOFTLOCKUP [ 929.627132][T12920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 929.627143][T12920] Call Trace: [ 929.627149][T12920] [ 929.627158][T12920] dump_stack_lvl+0xe8/0x150 [ 929.627186][T12920] should_fail_ex+0x46b/0x600 [ 929.627230][T12920] _copy_to_user+0x31/0xb0 [ 929.627255][T12920] put_timespec64+0xc8/0x130 [ 929.627282][T12920] ? __pfx_put_timespec64+0x10/0x10 [ 929.627310][T12920] poll_select_finish+0x4ba/0x630 [ 929.627338][T12920] ? __pfx_poll_select_finish+0x10/0x10 [ 929.627368][T12920] ? __pfx_set_user_sigmask+0x10/0x10 [ 929.627384][T12920] ? rt_mutex_slowunlock+0x1cb/0x300 [ 929.627403][T12920] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 929.627426][T12920] __se_sys_pselect6+0x27e/0x320 [ 929.627455][T12920] ? __pfx___se_sys_pselect6+0x10/0x10 [ 929.627478][T12920] ? __pfx_ksys_write+0x10/0x10 [ 929.627504][T12920] ? __x64_sys_pselect6+0x21/0xf0 [ 929.627530][T12920] do_syscall_64+0xe2/0xf80 [ 929.627553][T12920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.627569][T12920] ? trace_irq_disable+0x37/0x100 [ 929.627591][T12920] ? clear_bhb_loop+0x60/0xb0 [ 929.627611][T12920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.627628][T12920] RIP: 0033:0x7f6282a2aeb9 [ 929.627644][T12920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.627659][T12920] RSP: 002b:00007f6280c86028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 929.627676][T12920] RAX: ffffffffffffffda RBX: 00007f6282ca5fa0 RCX: 00007f6282a2aeb9 [ 929.627688][T12920] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 929.627699][T12920] RBP: 00007f6280c86090 R08: 0000200000000280 R09: 0000000000000000 [ 929.627710][T12920] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 929.627721][T12920] R13: 00007f6282ca6038 R14: 00007f6282ca5fa0 R15: 00007ffec73d54b8 [ 929.627746][T12920] [ 931.389920][ T8336] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 931.570177][ T8336] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 931.570209][ T8336] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 931.573406][ T8336] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 931.573437][ T8336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 931.573453][ T8336] usb 3-1: SerialNumber: syz [ 931.851335][T12926] netlink: 'syz.2.2175': attribute type 1 has an invalid length. [ 931.851359][T12926] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2175'. [ 931.902344][ T8336] usb 3-1: 0:2 : does not exist [ 931.946644][ T8336] usb 3-1: USB disconnect, device number 37 [ 932.084283][T12928] udevd[12928]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 932.454781][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 932.531295][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 932.553536][ T12] bond0 (unregistering): Released all slaves [ 933.950575][T12643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.056684][T12643] 8021q: adding VLAN 0 to HW filter on device team0 [ 934.111904][ T3588] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.112060][ T3588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 934.149610][ T3588] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.157540][ T3588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 934.479858][ T12] hsr_slave_0: left promiscuous mode [ 936.586692][ T12] hsr_slave_1: left promiscuous mode [ 937.050399][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 937.174882][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 937.298733][T12945] [ 937.298751][T12945] ====================================================== [ 937.298762][T12945] WARNING: possible circular locking dependency detected [ 937.298781][T12945] syzkaller #0 Tainted: G L [ 937.298794][T12945] ------------------------------------------------------ [ 937.298803][T12945] syz.2.2179/12945 is trying to acquire lock: [ 937.298816][T12945] ffff88813fe742c0 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 937.298878][T12945] [ 937.298878][T12945] but task is already holding lock: [ 937.298886][T12945] ffff88802465e550 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1a69/0x1fc0 [ 937.298948][T12945] [ 937.298948][T12945] which lock already depends on the new lock. [ 937.298948][T12945] [ 937.298958][T12945] [ 937.298958][T12945] the existing dependency chain (in reverse order) is: [ 937.298967][T12945] [ 937.298967][T12945] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 937.299002][T12945] blk_alloc_queue+0x537/0x620 [ 937.299024][T12945] __blk_mq_alloc_disk+0x197/0x390 [ 937.299050][T12945] loop_add+0x482/0xb50 [ 937.299079][T12945] loop_init+0xd9/0x170 [ 937.299097][T12945] do_one_initcall+0x250/0x840 [ 937.299128][T12945] do_initcall_level+0x104/0x190 [ 937.299150][T12945] do_initcalls+0x59/0xa0 [ 937.299171][T12945] kernel_init_freeable+0x2a6/0x3d0 [ 937.299193][T12945] kernel_init+0x1d/0x1d0 [ 937.299214][T12945] ret_from_fork+0x51b/0xa40 [ 937.299238][T12945] ret_from_fork_asm+0x1a/0x30 [ 937.299261][T12945] [ 937.299261][T12945] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 937.299290][T12945] fs_reclaim_acquire+0x71/0x100 [ 937.299314][T12945] kmem_cache_alloc_noprof+0x40/0x6a0 [ 937.299335][T12945] __kernfs_iattrs+0xdf/0x340 [ 937.299353][T12945] kernfs_iop_setattr+0xea/0x3f0 [ 937.299370][T12945] notify_change+0xc18/0xf60 [ 937.299390][T12945] do_truncate+0x1c2/0x250 [ 937.299408][T12945] path_openat+0x364f/0x3e70 [ 937.299427][T12945] do_filp_open+0x22d/0x490 [ 937.299445][T12945] do_sys_openat2+0x12f/0x220 [ 937.299459][T12945] __x64_sys_openat+0x138/0x170 [ 937.299474][T12945] do_syscall_64+0xe2/0xf80 [ 937.299495][T12945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.299511][T12945] [ 937.299511][T12945] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 937.299534][T12945] __lock_acquire+0x15a5/0x2cf0 [ 937.299550][T12945] lock_acquire+0x106/0x330 [ 937.299565][T12945] down_read+0x97/0x200 [ 937.299586][T12945] kernfs_iop_getattr+0x9e/0x450 [ 937.299604][T12945] vfs_getattr_nosec+0x2e1/0x430 [ 937.299653][T12945] loop_assign_backing_file+0x286/0x4c0 [ 937.299675][T12945] lo_ioctl+0x1ae6/0x1fc0 [ 937.299705][T12945] blkdev_ioctl+0x5e6/0x750 [ 937.299729][T12945] __se_sys_ioctl+0xff/0x170 [ 937.299754][T12945] do_syscall_64+0xe2/0xf80 [ 937.299781][T12945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.299802][T12945] [ 937.299802][T12945] other info that might help us debug this: [ 937.299802][T12945] [ 937.299810][T12945] Chain exists of: [ 937.299810][T12945] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 937.299810][T12945] [ 937.299856][T12945] Possible unsafe locking scenario: [ 937.299856][T12945] [ 937.299862][T12945] CPU0 CPU1 [ 937.299867][T12945] ---- ---- [ 937.299873][T12945] lock(&q->q_usage_counter(io)#24); [ 937.299887][T12945] lock(fs_reclaim); [ 937.299899][T12945] lock(&q->q_usage_counter(io)#24); [ 937.299915][T12945] rlock(&root->kernfs_iattr_rwsem); [ 937.299931][T12945] [ 937.299931][T12945] *** DEADLOCK *** [ 937.299931][T12945] [ 937.299936][T12945] 3 locks held by syz.2.2179/12945: [ 937.299945][T12945] #0: ffff888024779498 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x14d8/0x1fc0 [ 937.299991][T12945] #1: ffff88802465e550 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1a69/0x1fc0 [ 937.300039][T12945] #2: ffff88802465e588 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: lo_ioctl+0x1a69/0x1fc0 [ 937.300087][T12945] [ 937.300087][T12945] stack backtrace: [ 937.300099][T12945] CPU: 1 UID: 0 PID: 12945 Comm: syz.2.2179 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 937.300122][T12945] Tainted: [L]=SOFTLOCKUP [ 937.300128][T12945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 937.300139][T12945] Call Trace: [ 937.300146][T12945] [ 937.300153][T12945] dump_stack_lvl+0xe8/0x150 [ 937.300176][T12945] print_circular_bug+0x2e1/0x300 [ 937.300223][T12945] check_noncircular+0x12e/0x150 [ 937.300258][T12945] __lock_acquire+0x15a5/0x2cf0 [ 937.300305][T12945] ? kernfs_iop_getattr+0x9e/0x450 [ 937.300337][T12945] lock_acquire+0x106/0x330 [ 937.300355][T12945] ? kernfs_iop_getattr+0x9e/0x450 [ 937.300380][T12945] down_read+0x97/0x200 [ 937.300402][T12945] ? kernfs_iop_getattr+0x9e/0x450 [ 937.300421][T12945] ? __pfx_down_read+0x10/0x10 [ 937.300444][T12945] ? kernfs_root+0x1c/0x230 [ 937.300462][T12945] ? kernfs_root+0x1c/0x230 [ 937.300482][T12945] kernfs_iop_getattr+0x9e/0x450 [ 937.300504][T12945] vfs_getattr_nosec+0x2e1/0x430 [ 937.300533][T12945] loop_assign_backing_file+0x286/0x4c0 [ 937.300551][T12945] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 937.300580][T12945] lo_ioctl+0x1ae6/0x1fc0 [ 937.300607][T12945] ? __pfx_lo_ioctl+0x10/0x10 [ 937.300637][T12945] ? __lock_acquire+0x6b5/0x2cf0 [ 937.300657][T12945] ? __pfx_css_rstat_updated+0x10/0x10 [ 937.300675][T12945] ? __lock_acquire+0x6b5/0x2cf0 [ 937.300695][T12945] ? __lock_acquire+0x6b5/0x2cf0 [ 937.300714][T12945] ? __lock_acquire+0x6b5/0x2cf0 [ 937.300733][T12945] ? __lock_acquire+0x6b5/0x2cf0 [ 937.300753][T12945] ? __lock_acquire+0x6b5/0x2cf0 [ 937.300771][T12945] ? __lock_acquire+0x6b5/0x2cf0 [ 937.300792][T12945] ? unwind_next_frame+0xa5/0x23c0 [ 937.300814][T12945] ? unwind_next_frame+0xa5/0x23c0 [ 937.300835][T12945] ? is_bpf_text_address+0x26/0x2b0 [ 937.300864][T12945] ? is_bpf_text_address+0x26/0x2b0 [ 937.300891][T12945] ? is_bpf_text_address+0x292/0x2b0 [ 937.300916][T12945] ? is_bpf_text_address+0x26/0x2b0 [ 937.300940][T12945] ? tomoyo_path_number_perm+0x501/0x630 [ 937.300964][T12945] ? kernel_text_address+0xa5/0xe0 [ 937.300986][T12945] ? __kernel_text_address+0xd/0x30 [ 937.301009][T12945] ? unwind_get_return_address+0x4d/0x90 [ 937.301029][T12945] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 937.301045][T12945] ? arch_stack_walk+0xfb/0x150 [ 937.301068][T12945] ? stack_trace_save+0xa9/0x100 [ 937.301083][T12945] ? __pfx_stack_trace_save+0x10/0x10 [ 937.301099][T12945] ? stack_depot_save_flags+0x33/0x810 [ 937.301117][T12945] ? tomoyo_path_number_perm+0x501/0x630 [ 937.301139][T12945] ? kasan_save_track+0x4f/0x80 [ 937.301160][T12945] ? kasan_save_track+0x3e/0x80 [ 937.301179][T12945] ? kasan_save_free_info+0x46/0x50 [ 937.301196][T12945] ? __kasan_slab_free+0x5c/0x80 [ 937.301217][T12945] ? kfree+0x1bb/0x8f0 [ 937.301236][T12945] ? tomoyo_path_number_perm+0x501/0x630 [ 937.301258][T12945] ? security_file_ioctl+0xc3/0x2a0 [ 937.301286][T12945] ? __se_sys_ioctl+0x47/0x170 [ 937.301305][T12945] ? do_syscall_64+0xe2/0xf80 [ 937.301326][T12945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.301363][T12945] ? __asan_memset+0x22/0x50 [ 937.301390][T12945] ? blk_get_meta_cap+0x16d/0x7a0 [ 937.301418][T12945] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 937.301448][T12945] ? blkdev_common_ioctl+0x14b7/0x3250 [ 937.301482][T12945] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 937.301503][T12945] ? kasan_quarantine_put+0xbb/0x1f0 [ 937.301528][T12945] ? tomoyo_path_number_perm+0x219/0x630 [ 937.301551][T12945] ? tomoyo_path_number_perm+0x219/0x630 [ 937.301575][T12945] ? do_vfs_ioctl+0x117b/0x1540 [ 937.301595][T12945] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 937.301620][T12945] ? do_futex+0x333/0x420 [ 937.301639][T12945] ? __asan_memset+0x22/0x50 [ 937.301657][T12945] ? smack_file_ioctl+0x263/0x360 [ 937.301679][T12945] ? __pfx_smack_file_ioctl+0x10/0x10 [ 937.301700][T12945] ? __pfx_lo_ioctl+0x10/0x10 [ 937.301725][T12945] blkdev_ioctl+0x5e6/0x750 [ 937.301746][T12945] ? __pfx_blkdev_ioctl+0x10/0x10 [ 937.301764][T12945] ? __fget_files+0x2a/0x420 [ 937.301780][T12945] ? bpf_lsm_file_ioctl+0x9/0x20 [ 937.301795][T12945] ? __pfx_blkdev_ioctl+0x10/0x10 [ 937.301814][T12945] __se_sys_ioctl+0xff/0x170 [ 937.301834][T12945] do_syscall_64+0xe2/0xf80 [ 937.301856][T12945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.301872][T12945] ? trace_irq_disable+0x37/0x100 [ 937.301894][T12945] ? clear_bhb_loop+0x60/0xb0 [ 937.301912][T12945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.301929][T12945] RIP: 0033:0x7f6282a2aeb9 [ 937.301944][T12945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.301958][T12945] RSP: 002b:00007f6280c86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 937.301976][T12945] RAX: ffffffffffffffda RBX: 00007f6282ca5fa0 RCX: 00007f6282a2aeb9 [ 937.301989][T12945] RDX: 0000000000000009 RSI: 0000000000004c06 RDI: 0000000000000008 [ 937.301999][T12945] RBP: 00007f6282a98c1f R08: 0000000000000000 R09: 0000000000000000 [ 937.302009][T12945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 937.302019][T12945] R13: 00007f6282ca6038 R14: 00007f6282ca5fa0 R15: 00007ffec73d54b8 [ 937.302038][T12945] [ 937.389701][ C0] blk_print_req_error: 151 callbacks suppressed [ 937.389725][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3 [ 937.389762][ C0] buffer_io_error: 150 callbacks suppressed [ 937.389776][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 937.389845][ C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3 [ 937.389873][ C0] Buffer I/O error on dev loop7, logical block 1, async page read [ 937.389918][ C0] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3 [ 937.389944][ C0] Buffer I/O error on dev loop7, logical block 2, async page read [ 937.389997][ C0] I/O error, dev loop7, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3 [ 937.390024][ C0] Buffer I/O error on dev loop7, logical block 3, async page read [ 937.390068][ C0] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3 [ 937.390093][ C0] Buffer I/O error on dev loop7, logical block 4, async page read [ 937.390136][ C0] I/O error, dev loop7, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3 [ 937.390162][ C0] Buffer I/O error on dev loop7, logical block 5, async page read [ 937.390205][ C0] I/O error, dev loop7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3 [ 937.390231][ C0] Buffer I/O error on dev loop7, logical block 6, async page read [ 937.391407][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3 [ 937.391491][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 937.391640][ C1] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3 [ 937.391708][ C1] Buffer I/O error on dev loop7, logical block 1, async page read [ 937.391818][ C1] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 3 [ 937.391882][ C1] Buffer I/O error on dev loop7, logical block 2, async page read [ 937.411978][T12945] ldm_validate_partition_table(): Disk read failed. [ 937.425826][T12945] Dev loop7: unable to read RDB block 0 [ 937.433660][T12945] loop7: unable to read partition table [ 937.434200][T12945] loop7: partition table beyond EOD, truncated [ 937.434223][T12945] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 937.492307][T12944] base_sock_release(ffff88803e6f6e80) sk=ffff888020692000 [ 937.811740][ T12] hsr_slave_0: left promiscuous mode [ 937.931677][ T12] hsr_slave_1: left promiscuous mode [ 937.982468][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.127925][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 939.200401][ T12] team0 (unregistering): Port device team_slave_1 removed [ 939.340425][ T12] team0 (unregistering): Port device team_slave_0 removed [ 940.520406][ T12] team0 (unregistering): Port device team_slave_1 removed [ 940.690374][ T12] team0 (unregistering): Port device team_slave_0 removed [ 941.942608][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.942666][ T1321] ieee802154 phy1 wpan1: encryption failed: -22