last executing test programs: 14m39.070759625s ago: executing program 2 (id=684): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) creat(0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(0x0, 0x0, 0x0, 0x114d401, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x1) 14m38.419688592s ago: executing program 2 (id=687): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x8000, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x1, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 14m37.235696898s ago: executing program 2 (id=694): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x10000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffffff7) 14m36.310437698s ago: executing program 0 (id=699): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) unshare(0x22020600) rseq(&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) listen(r0, 0x5) accept$inet6(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 14m36.114293984s ago: executing program 2 (id=700): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x2125099, 0x0) unshare(0x20400) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000040)=[{r0, 0x208}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='ramfs\x00', 0x10010, 0x0) 14m35.341751515s ago: executing program 0 (id=702): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x6, 0x1, {0xa, 0x4e23, 0x1, @mcast2, 0x9}}}, 0x3a) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000200)) 14m35.179575096s ago: executing program 2 (id=704): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) r3 = socket$inet6(0xa, 0x1, 0x0) listen(r3, 0xb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000080), &(0x7f0000000840)=r2}, 0x20) 14m35.031955685s ago: executing program 0 (id=706): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x11d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200004, 0x200004, 0x3}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 14m33.94375843s ago: executing program 0 (id=710): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 14m33.648048821s ago: executing program 0 (id=712): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x10001043, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000000)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2) 14m30.441605874s ago: executing program 2 (id=725): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000a00)=ANY=[@ANYBLOB="0009a7000000ff"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 14m30.050402591s ago: executing program 32 (id=725): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000a00)=ANY=[@ANYBLOB="0009a7000000ff"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 14m29.7864186s ago: executing program 0 (id=730): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000480)={0x4, {{0xa, 0x4e22, 0x3, @mcast1, 0xfffffffd}}}, 0x88) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4f4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 14m28.936417894s ago: executing program 33 (id=730): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000480)={0x4, {{0xa, 0x4e22, 0x3, @mcast1, 0xfffffffd}}}, 0x88) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4f4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 4m56.746754376s ago: executing program 4 (id=4709): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000), &(0x7f0000000080)=0x8) 4m56.622594305s ago: executing program 4 (id=4712): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x2, 0x0, 0x3, 0x0, &(0x7f0000000380)="fd97a6", 0x0}, 0x50) 4m56.472435274s ago: executing program 4 (id=4714): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='nr_inodes=1m']) 4m56.29180097s ago: executing program 4 (id=4718): add_key$user(0x0, 0x0, &(0x7f0000000080)="269d5dfee993d0b38403e96b97e97a715a61f496e8d05a99f2f7ffb097254c115b53559cdf6bc389", 0x28, 0xfffffffffffffffd) syz_usb_connect(0x2, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000056544820e105080411250102070109023600010000000009040000042ec25d000905"], 0x0) 4m55.559103727s ago: executing program 4 (id=4729): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') preadv2(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/53, 0x35}], 0x1, 0x1000, 0xc427, 0x10) 4m55.044429015s ago: executing program 4 (id=4733): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd2a, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 4m39.865434176s ago: executing program 34 (id=4733): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd2a, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2m49.254762688s ago: executing program 6 (id=6029): syz_emit_ethernet(0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa04000000000000000000000000019078ac1e0001ac1414aa0b009078032c00004100000000000000008900000a010101ac1414aa8d240000000206085e00fa66fff502050404a60011960605390007fff5800000b61a0904d3f9d4254b"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc0000001800018014000200"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 2m48.881498301s ago: executing program 6 (id=6033): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000d000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m48.629973703s ago: executing program 6 (id=6036): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x10002, 0x2, 0x2000, 0x2000, &(0x7f0000007000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) 2m47.040079678s ago: executing program 6 (id=6047): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', 0x0) 2m46.892083554s ago: executing program 6 (id=6049): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0xf22) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) 2m45.985764105s ago: executing program 6 (id=6059): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(0x0, 0x2) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000) syz_open_dev$audion(0x0, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2m45.38894745s ago: executing program 35 (id=6059): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(0x0, 0x2) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000) syz_open_dev$audion(0x0, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2m40.71047365s ago: executing program 3 (id=6087): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x0, r0, 0x0, 0x61000006, 0x0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 2m40.130104083s ago: executing program 3 (id=6091): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'erspan0\x00'}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r3, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7aaf804d}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001e00)=""/54, 0x36}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x81}], 0x4, 0x12002, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m38.437475142s ago: executing program 3 (id=6098): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x2100000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m36.755788732s ago: executing program 3 (id=6108): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_secret(0x80000) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae03, 0x2e) 2m36.472663198s ago: executing program 3 (id=6110): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) 2m35.333693162s ago: executing program 3 (id=6118): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='+3 +4\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='32768\n', 0x6) 2m20.152244972s ago: executing program 36 (id=6118): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='+3 +4\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='32768\n', 0x6) 1m53.484899446s ago: executing program 1 (id=6377): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) rename(&(0x7f0000000180)='./file7\x00', &(0x7f0000000740)='./file0\x00') 1m52.812130395s ago: executing program 1 (id=6380): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000000540)={@random="b12a73e9dc0f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0, @loopback}}}}}}, 0x0) 1m52.089324917s ago: executing program 1 (id=6385): connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m51.042343639s ago: executing program 1 (id=6391): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x50}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@setlink={0x34, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xa, 0x1, @random="0242ac110002"}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x34}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'syz_tun\x00'}) syz_emit_ethernet(0x15, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c20000000242ac110001000742420300000000"], 0x0) 1m49.539642043s ago: executing program 1 (id=6397): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000380)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp,nolock,rsize=1024,wsize=1024\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000480)='addr=127.0.0.1,vers=2,proto=udp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') 1m48.146463178s ago: executing program 1 (id=6407): r0 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r4) pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 1m32.976422893s ago: executing program 37 (id=6407): r0 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r4) pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 1m26.40771719s ago: executing program 8 (id=6577): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000340)="b9cd", 0x2}], 0x1}}], 0x1, 0x20008000) close(r0) r1 = socket(0x1, 0x3, 0x0) recvmsg$can_raw(r1, 0x0, 0x40012020) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(0xffffffffffffffff, 0x40086e81, &(0x7f0000000040)=0x8) syz_genetlink_get_family_id$tipc2(0x0, r1) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) 1m25.81343351s ago: executing program 8 (id=6582): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x100008b}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) timer_create(0xfffffffffffffffc, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone3(&(0x7f0000000500)={0x4000000, 0x0, 0x0, 0x0, {0x14}, &(0x7f0000000300)=""/82, 0x52, 0x0, 0x0}, 0x58) 1m24.198268978s ago: executing program 8 (id=6588): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x1005, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', r1, &(0x7f0000000000)='./file0\x00', 0x1) 1m22.971735026s ago: executing program 8 (id=6594): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ppoll(&(0x7f0000000140)=[{r3, 0x2082}], 0x1, &(0x7f0000000240), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m22.1146617s ago: executing program 8 (id=6599): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1000', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/mpls/conf/lo/input\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv4_newroute={0x44, 0x18, 0x601, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @private=0xa000001}, @RTA_OIF={0x8, 0x4, 0x1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x64, 0x0, 0x1}]}}]}, 0x44}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000500)=0x64, 0x4) connect$inet(r3, &(0x7f0000000540)={0x2, 0x1234, @private=0xa000001}, 0x10) sendmsg$inet(r3, &(0x7f0000000580)={&(0x7f0000000540)={0x2, 0x1234, @private=0xa000001}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000600)='\x00'/1000, 0x3e8}], 0x1}, 0x0) 1m17.747616744s ago: executing program 8 (id=6621): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, 0x1, 0x7}, 0x40880) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) prctl$PR_MCE_KILL(0x23, 0xb, 0x7fffffffeffe) syz_usb_connect$cdc_ecm(0x3, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024c00010100c08109040000fe03020000052406000005240002000d240f01bfffffff0000000000042413020424130109058103000407100709058202000207fc00090503"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 1m0.886078786s ago: executing program 38 (id=6621): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, 0x1, 0x7}, 0x40880) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) prctl$PR_MCE_KILL(0x23, 0xb, 0x7fffffffeffe) syz_usb_connect$cdc_ecm(0x3, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024c00010100c08109040000fe03020000052406000005240002000d240f01bfffffff0000000000042413020424130109058103000407100709058202000207fc00090503"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 19.152141852s ago: executing program 5 (id=6880): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x32, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r1, &(0x7f0000000300)="b7336c6fa97eeefb494e72900ec75bb045e57f507d", &(0x7f0000000600)=""/240}, 0x20) (fail_nth: 1) 18.427460427s ago: executing program 5 (id=6882): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'erspan0\x00'}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r3, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7aaf804d}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001e00)=""/54, 0x36}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x81}], 0x4, 0x12002, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18.342099468s ago: executing program 5 (id=6883): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'erspan0\x00'}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r3, &(0x7f0000002080), 0x0, 0x12002, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17.669637586s ago: executing program 5 (id=6886): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x4c042, 0x100) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x0, &(0x7f00000001c0)) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x18, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}, @remote, {[@hopopts={0x2f, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0x453}, @jumbo={0xc2, 0x4, 0xc}]}]}}}}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x64, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r2, 0x51b0b}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x4000010) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000000)=0xffffffffffff0000, 0x8) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f0000000200)=[@nested_vmlaunch={0x12f, 0x18, 0x1}, @code={0xa, 0x65, {"b93d020000b80a000000ba000000000f30b805000000b983ea8b7d0f01d966f30fa6c066470f06c744240033000000c74424021eb2c3e2ff2c24b9390300000f328f29788013db2db0780000f20fe660f90f01c9"}}, @nested_amd_invlpga={0x17d, 0x20, {0xffffffff, 0x2b85}}, @uexit={0x0, 0x18, 0x137}, @wrmsr={0x65, 0x20, {0x246, 0x80000000}}, @enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_load_code={0x12e, 0x52, {0x1, "b988030000b856e24edbba40e5fb310f30470f090f01cf0fc7785966b84c008ed80f01cf66b880000f00d8400fc73b0fe1797db9350800000f32"}}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_syzos={0x136, 0x80, {0x0, 0xc6, [@nested_amd_clgi={0x17f, 0x10}, @wr_drn={0x68, 0x20, {0x6, 0x7}}, @nested_create_vm={0x12d, 0x18}, @nested_vmresume={0x130, 0x18}]}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x8a, 0x5, 0x4, 0x7}}], 0x247}) fcntl$setlease(r0, 0x400, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) 17.519587619s ago: executing program 5 (id=6888): prlimit64(0x0, 0x3, &(0x7f0000000400)={0x8, 0x80000008b}, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mincore(&(0x7f0000001000/0x2000)=nil, 0x2000, &(0x7f0000000080)=""/251) r0 = fanotify_init(0xf00, 0x1000) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000440)='./file0\x00', 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)={0x50, r5, 0x1, 0x0, 0x300, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x24, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x50}}, 0x0) r6 = socket(0x10, 0x4, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x9, 0xfd, r7}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffff001, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x257, 0x0, r3, 0xc, '\x00', r7, r8, 0x3, 0x2, 0x5}, 0x50) setresuid(0xee00, 0xee01, 0xee01) clock_adjtime(0x7, &(0x7f0000000000)={0xfffe, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x8000000000000000, 0x4, 0x2000000006, 0x8, 0x2000000000000, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7, 0x101, 0x0, 0x0, 0x6, 0x0, 0x1000000000000, 0xfffffffffffffff8, 0xa}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r11, 0x8929, &(0x7f0000000240)={'veth0_virt_wifi\x00', @ifru_map={0x6942, 0x19, 0x1, 0x8, 0x2, 0x7}}) splice(r10, 0x0, r9, 0x0, 0x6, 0x0) write(r9, &(0x7f00000002c0)="fe", 0xfdef) write$UHID_INPUT(r9, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x6, 0x50000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) 17.233723978s ago: executing program 5 (id=6890): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (fail_nth: 2) 7.66891925s ago: executing program 7 (id=6909): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000004000000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0xfffffffd}}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000001f00)=""/4096, 0x48, 0x1000, 0x3}, 0x28) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = syz_usb_connect$midi(0x2, 0x9f, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x499, 0x1011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x1, 0x1, 0x8, 0x40, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x0, 0xf8, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x0, 0xef}, @midi_out_jack={0xf, 0x24, 0x3, 0x1, 0x2, 0x4, [{0xda, 0x5}, {0x2, 0x7}, {0x6, 0xf}, {0x2, 0x2}], 0x8}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x72d, 0x7}, @midi_out_jack={0xb, 0x24, 0x3, 0x1, 0xfd, 0x2, [{0x40, 0x32}, {0x7f, 0x3}], 0x80}, @ms_header={0x7, 0x24, 0x1, 0x7ff, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x6, 0x1}, @midi_out_jack={0xb, 0x24, 0x3, 0xb0212d69f6d04483, 0x5, 0x2, [{0x1, 0x7}, {0x4, 0x8}], 0x5}], [{{0x9, 0x5, 0xf, 0x8, 0x40, 0x0, 0x70, 0xc, {0x9, 0x25, 0x1, 0x5, "a69d6c1fc2"}}}, {{0x9, 0x5, 0x4, 0xdbfb674e884bb2d4, 0x10, 0x83, 0x0, 0x6, {0x4}}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x6, 0x3, 0xb, {0xd, 0x25, 0x1, 0x9, "38fde9195237cd94a1"}}}]}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0x6, 0x1d, 0x8, 0xff, 0xff}, 0xd7, &(0x7f00000004c0)={0x5, 0xf, 0xd7, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "390e8884dcf497921525bf4956989b3d"}, @ss_container_id={0x14, 0x10, 0x4, 0x30, "59e648d5c55be5e6a3bef37e29674ad4"}, @generic={0x66, 0x10, 0xa, "a93aacb367961edb8437614dba51163dd652e04eae5dc4d8e86737b6c34fa386913032fba10952f40ea4adf37afc85fa9d5d5011d991236a0fccbaf397a8fd92954e1a7937ca5cc4051e2308b0df995bea749d2b3fce5e8ea6f4118e05c754a7012b36"}, @generic={0x25, 0x10, 0x4, "3bdd0fbe6e0cc861e280a5cdcad75de5e62d507179bd80f3a26262b1220c5f7951b3"}, @ssp_cap={0x18, 0x10, 0xa, 0xa7, 0x3, 0x80, 0xf000, 0xbf61, [0x3ff0, 0xff000f, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x1, 0x3}]}, 0x6, [{0x8e, &(0x7f0000000680)=@string={0x8e, 0x3, "76a9be4bb2c60d9fa518ab419a62dc349077b5fae9b71926d27a8411fcf2bf1b3236c09a807f53b813086bcbba26b765cbfa0e8456052dc1b0f050e40767cfcc073eb7614484368bff285bd1aaf1e9f553fa2bc3491aaa20d06c2bcec6d04ce47fc44d35ace4003fa3833715bf3535aa0e048484ae54172c6b2265bc29ee56d1e4429c214ac1a774b04ee5d5"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x409}}]}) syz_usb_control_io$hid(r5, &(0x7f0000000d00)={0x24, &(0x7f0000000b40)={0x40, 0x24, 0xef, {0xef, 0xb, "23d8451a1cd0b6c55e05ba146c980181be71ae8606f3620e21908db096e85002051b6de4fc58cab8532fdd2deb4c2f6954955110904a410c2b6a6851ab8f091d3df4c8e4860ff85ccefa42c3fda9cae84246cd4226829b4fb412c1f172c24fa4d06c1f28e415317a910731b64cbaa21d573f9b20119c4b91770dfa407b1f92d1e1ea53ddf9d4691b52c7dd5d64558e96845a683eb27970404c40e52179cd1e154d1a1b008a8532ecff9639525a35a8c9a984b50fa6114065abf1f49f632aa6ed57dfae62cf0203cd572dbe5b087fc289fee9f48b3b1122fb8072742b0f55d27426ce3d11e52c155ef46f21abcc"}}, &(0x7f0000000c40)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "628d290f3fb679e97caf46fae2a3a9c9113a021aa99440111ced"}}, &(0x7f0000000c80)={0x0, 0x22, 0x11, {[@main=@item_4={0x3, 0x0, 0xb, 'P Iy'}, @main=@item_012={0x0, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0x8, "5ff83f10"}, @global=@item_4={0x3, 0x1, 0xe3b4b8345a83bd98, "be9bb286"}, @global=@item_012={0x0, 0x1, 0x5}]}}, &(0x7f0000000cc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0xd3e}}}}, &(0x7f0000000f80)={0x2c, &(0x7f0000000d40)={0x20, 0x17, 0xbc, "a6f4729aa8950950a12231d935110c68119ed5596e6b8fce20f9b7e713a92e8f6da4ffea850856366d9772f72ed37797199b7d29222e8cff06f3c01ee5c956e87cf8351afce8e7e84e53782caf2cdba577742ad84800002b704858773211b8110665c79bfc1152ad33ec1db96f136e0550c4574350da5cc5f6aab60e7e2d46d1bf2607382741213e89cccb9c83ca3d7d3daf72a8d38deb25ce7cefea7d1ab968fe47e4101f2d19ee66341a67ae9c2c84184d3a060f4d726b0a20ccf0"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x5e}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0xf8}, &(0x7f0000000ec0)={0x20, 0x1, 0x3b, "52185058b2a88694199091aaab41b43c76388d6c1681586c3fc806a4159386637013ebffe82fbe691f57cba4f9128b6996cdb329871b5eadb8a9cc"}, &(0x7f0000000f40)={0x20, 0x3, 0x1, 0xe}}) 4.181845156s ago: executing program 7 (id=6914): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x8013, 0x1b223}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xc3b}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xc094) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) memfd_secret(0x0) 4.172276844s ago: executing program 9 (id=6915): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0xfffffffa, 0x7, 0x32}, 0x9c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0xfffffffffffffd4f, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40530, 0x5a1b5}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0xffff0000}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048001}, 0x20040880) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r6, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x16021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4009}, 0x8000002) 3.485659016s ago: executing program 7 (id=6917): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x14, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0x1, 0xd4, {0xd4, 0xd, "f57a9417ed1bf44d8725f7b6aa3315823ec39aaa77b50f95be681a057d4056b9691f5fa7c955f1210a1e04e1c8578e430e2c04d6c179c840c1e1fa311669cd956b44c91ac25700d0449ca2abd32177b88e3f5e83ceab7206f953936e4194f916bd5a83a140c7c1858071b993171a068f37df32c5164221cd45444097b4d4c75ddf3b97dca0276339a377e16bafa8422b5f8c6cde54328e4d04c1c02769c970f5b4452d03ad39ae15982d6516262ac1ffd301541de2d3946ef5b18ce3dd2d65c8d332bd24e23614ee11aeee1d52cef6e508f0"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x40, 0xd, 0xf7, "8e63bb87eeac83b3dc0f5cff30c5373ebc87687f1e93667580bb9cd3bea7f8bce9acc7f32107c5572d6a78447681e5e01e37f699e2e097c0628dd287b913597c54066cf1ba1892a5918f72fd015889c024563172ca65615e3e320770b5afd7b6a748cd863adfcda83770c739074577df5f1dc45fa0d2abdbda4797a14326fca3cb24d00cd728f4177fbdad4db6e1035d36af9c433c1053d748b8c28308c63ae924a669eb44382d3bbf7ca420e4a3b3b16b9379220272dca75f28934fcd7dd9274eebddcd266d4cfdc8ba344076738c487b3a652722ae3a0bf2ed49a3dbae60f33f325820c4fc132683b817c2f1a4c389439bcc95efcc18"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000340)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f0000000380)={0x40, 0xa0, 0x4, 0x6}, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "d5148ed4617cc536353095af41cc345c66276ea8506134f06780102a7d0abed6490df09c6689595cbeb506239080fa"}}) 3.182962118s ago: executing program 9 (id=6918): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000fcff390600000000", @ANYRES32=0x0, @ANYRES32=r0], 0x5c}}, 0x24000000) (async) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async, rerun: 32) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x43, @multicast2}}, {{0x2, 0xfffc, @broadcast}}}, 0x108) (rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x43, @multicast2}}, {{0x2, 0xfffc, @broadcast}}}, 0x108) (async) close(r1) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000680)={r6, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x7fdfffff, 0x0, 0x0, 0x4], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7, r8, 0x0, r8], [0x2b8], [0x0, 0x1]}) (async) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f0000000000)={r7, 0x1, 0x2}) 2.689625338s ago: executing program 9 (id=6919): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d5a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x12, 0xf3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, &(0x7f0000000340)={0x20, 0x8, 0x6, {0x6, 0x24, "7e83a682"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c0000001200010026bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00210100bf0dcf6208001d00f8ffffff140003007866726d30"], 0x3c}, 0x1, 0x0, 0x0, 0x22045054}, 0x4) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000080)=""/187, 0xbb}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x32, 0x4, 0x2, 0x0, r4}, 0x50) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000008b80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private2, 0x7}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x240408d1) shutdown(r6, 0x1) setsockopt(r6, 0x84, 0x80, &(0x7f00000001c0)="020000000980ffff", 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r5, &(0x7f0000000300)="b7336c6fa97eeefb494e72900ec75bb045e57f507d", &(0x7f0000000600)=""/240}, 0x20) 1.863208595s ago: executing program 39 (id=6890): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (fail_nth: 2) 683.239314ms ago: executing program 9 (id=6921): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000080f06010200000000000000000200008406000b0001000000424009"], 0x1c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00'}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x1, 0xfffffff7, 0x5, 0x6, 0x7f, 0x7131, 0x10000, {0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x8000001, 0x6, 0x8a, 0xf3e, 0x1}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) rt_sigqueueinfo(0x0, 0x7, &(0x7f00000002c0)={0x8003f, 0x9, 0x8}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) tee(r1, r2, 0xc, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x50) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xff}, 0x18) sendmmsg(r6, &(0x7f000000a540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000500)=@ethtool_regs={0x4, 0x5}}) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000000)) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1c4}}, 0x0) 432.935634ms ago: executing program 7 (id=6922): unshare(0x2020400) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x1, {0x0, 0xf0, 0x3}, 0xfd}, 0x18) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 234.445657ms ago: executing program 7 (id=6923): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f02, 0x2c}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0xc, 0x0, @void}, 0x10) 137.28778ms ago: executing program 9 (id=6924): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x3dbc, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x1641, @private2, 0xfffffff9}}, 0xfff, 0x9}, &(0x7f0000000380)=0x90) socket(0x10, 0x803, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000068b000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f000068f000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000692000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x15b1, 0xd081, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x2d, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) clock_gettime(0x0, &(0x7f0000000f40)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000180)=@tipc=@id, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000500)=""/107, 0x6b}, {&(0x7f0000000580)=""/65, 0x41}, {&(0x7f0000000680)=""/78, 0x4e}, {&(0x7f0000000700)=""/54, 0x36}, {&(0x7f0000000740)=""/146, 0x92}, {&(0x7f0000000800)=""/212, 0xd4}, {&(0x7f0000000900)=""/228, 0xe4}, {&(0x7f0000000a00)=""/36, 0x24}], 0x8, &(0x7f0000000ac0)=""/59, 0x3b}, 0x4}, {{&(0x7f0000000b00)=@xdp, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000b80)=""/243, 0xf3}, {&(0x7f0000000c80)=""/195, 0xc3}, {&(0x7f0000000d80)=""/94, 0x5e}, {&(0x7f0000000e00)=""/90, 0x5a}], 0x4}}], 0x2, 0x40000001, &(0x7f0000000f80)={r4, r5+10000000}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x13, &(0x7f0000000640)=ANY=[@ANYRES16=r2], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xffffffff, 0x100, 0x0, &(0x7f0000000400)="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", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x50) 0s ago: executing program 7 (id=6925): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x1}, @IFLA_GTP_RESTART_COUNT={0xffffffffffffff51}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004d040}, 0x4048014) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendto$inet6(r1, &(0x7f0000000780)='#', 0x1, 0x50, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000840)=ANY=[@ANYBLOB=';#\x00\x00'], 0x128) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x380000, @empty, 0x1b}, 0x1c) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r4, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x2, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x48}}, 0x80) kernel console output (not intermixed with test programs): 00 [ 844.992245][ T37] audit: type=1326 audit(1785153595.059:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19499 comm="syz.7.5217" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f64bde99 code=0x7ffc0000 [ 845.024308][ T37] audit: type=1326 audit(1785153595.069:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19499 comm="syz.7.5217" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7fc0f64bde99 code=0x7ffc0000 [ 845.122780][ T5738] usb 6-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 845.122817][ T5738] usb 6-1: config 0 interface 0 has no altsetting 0 [ 845.122852][ T5738] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 845.122877][ T5738] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.176256][ T5738] usb 6-1: config 0 descriptor?? [ 845.748562][ T5738] koneplus 0003:1E7D:2E22.001C: unknown main item tag 0x0 [ 845.748600][ T5738] koneplus 0003:1E7D:2E22.001C: unknown main item tag 0x0 [ 845.748630][ T5738] koneplus 0003:1E7D:2E22.001C: unknown main item tag 0x0 [ 845.748655][ T5738] koneplus 0003:1E7D:2E22.001C: unknown main item tag 0x0 [ 845.748680][ T5738] koneplus 0003:1E7D:2E22.001C: unknown main item tag 0x0 [ 845.817532][ T5738] koneplus 0003:1E7D:2E22.001C: hidraw0: USB HID v0.04 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 845.989820][T18375] usb 6-1: USB disconnect, device number 22 [ 846.069456][T19513] fido_id[19513]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 847.477985][T19545] ipvlan2: entered promiscuous mode [ 847.480129][T19545] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 848.092275][T19565] veth0_virt_wifi: entered allmulticast mode [ 848.214780][ T5614] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 848.350459][T19575] program syz.6.5249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 848.394879][ T5614] usb 4-1: Using ep0 maxpacket: 8 [ 848.399566][ T5614] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 848.399597][ T5614] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 848.399619][ T5614] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 848.399641][ T5614] usb 4-1: config 250 has no interface number 0 [ 848.399689][ T5614] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 848.399718][ T5614] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 848.399745][ T5614] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 848.399773][ T5614] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 848.399800][ T5614] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 848.399847][ T5614] usb 4-1: config 250 interface 228 has no altsetting 0 [ 848.403342][ T5614] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 848.403371][ T5614] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 848.403394][ T5614] usb 4-1: Product: syz [ 848.403409][ T5614] usb 4-1: SerialNumber: syz [ 848.552810][ T5614] hub 4-1:250.228: bad descriptor, ignoring hub [ 848.552853][ T5614] hub 4-1:250.228: probe with driver hub failed with error -5 [ 848.759996][ T5614] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 26 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 849.670937][ C1] usblp0: nonzero read bulk status received: -71 [ 849.961728][T17172] usb 4-1: USB disconnect, device number 26 [ 849.982717][T17172] usblp0: removed [ 850.339298][ T5614] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 850.497339][ T5614] usb 7-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 850.497391][ T5614] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 850.497421][ T5614] usb 7-1: config 0 interface 0 has no altsetting 0 [ 850.497456][ T5614] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 850.497483][ T5614] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.561801][ T5614] usb 7-1: config 0 descriptor?? [ 851.025179][ T5614] pyra 0003:1E7D:2C24.001D: ignoring exceeding usage max [ 851.095790][ T5614] pyra 0003:1E7D:2C24.001D: hidraw0: USB HID v0.01 Device [HID 1e7d:2c24] on usb-dummy_hcd.6-1/input0 [ 851.224586][ T5738] usb 7-1: USB disconnect, device number 32 [ 851.317420][T19624] fido_id[19624]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 852.627458][T19656] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 852.764851][ T5614] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 852.949948][T19678] IPv6: NLM_F_CREATE should be specified when creating new route [ 852.950079][T19678] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5295'. [ 852.954811][ T5614] usb 4-1: Using ep0 maxpacket: 32 [ 852.983763][ T5614] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 852.983794][ T5614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.983817][ T5614] usb 4-1: Product: syz [ 852.983833][ T5614] usb 4-1: Manufacturer: syz [ 852.983849][ T5614] usb 4-1: SerialNumber: syz [ 853.037340][ T5614] usb 4-1: config 0 descriptor?? [ 853.055123][ T5614] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 853.055289][ T5614] dvb-usb: bulk message failed: -22 (2/0) [ 853.097604][ T5614] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 853.098569][ T5614] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 853.098628][ T5614] usb 4-1: media controller created [ 853.145043][ T5614] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 853.217273][ T5614] usb 4-1: selecting invalid altsetting 7 [ 853.217297][ T5614] cxusb: set interface failed [ 853.217310][ T5614] dvb-usb: bulk message failed: -22 (1/0) [ 853.400663][ T5614] DVB: Unable to find symbol lgdt330x_attach() [ 853.400680][ T5614] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 853.654785][ T5614] rc_core: IR keymap rc-dvico-portable not found [ 853.654808][ T5614] Registered IR keymap rc-empty [ 853.656906][ T5614] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 853.697523][ T5614] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input31 [ 853.715869][ T5614] dvb-usb: schedule remote query interval to 100 msecs. [ 853.715902][ T5614] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 853.747177][ T5614] usb 4-1: USB disconnect, device number 27 [ 853.885010][ T5614] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 854.942302][T19719] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5311'. [ 854.942336][T19719] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5311'. [ 854.960491][ T31] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 855.019414][T19719] bridge2: entered promiscuous mode [ 855.019442][T19719] bridge2: entered allmulticast mode [ 855.164737][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 855.172187][ T31] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 855.172219][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.172242][ T31] usb 4-1: Product: syz [ 855.172258][ T31] usb 4-1: Manufacturer: syz [ 855.172274][ T31] usb 4-1: SerialNumber: syz [ 855.648724][ T31] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 855.648934][ T31] mxuport 4-1:254.0: probe with driver mxuport failed with error -5 [ 855.711527][ T31] usb 4-1: USB disconnect, device number 28 [ 856.560610][T19755] IPv6: sit1: Disabled Multicast RS [ 857.394855][ T31] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 857.577512][ T31] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 857.577544][ T31] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 857.577582][ T31] usb 2-1: config 220 interface 0 has no altsetting 0 [ 857.584219][ T31] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 857.584262][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.584292][ T31] usb 2-1: Product: syz [ 857.584312][ T31] usb 2-1: Manufacturer: syz [ 857.584335][ T31] usb 2-1: SerialNumber: syz [ 857.951290][ T31] uvcvideo 2-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 857.951328][ T31] uvcvideo 2-1:220.0: No valid video chain found. [ 857.974565][ T31] usb 2-1: USB disconnect, device number 29 [ 858.144812][ T5614] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 858.318492][ T5614] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 858.318523][ T5614] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.318544][ T5614] usb 6-1: config 0 has no interface number 0 [ 858.318592][ T5614] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 858.318621][ T5614] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 858.318644][ T5614] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 858.323802][ T5614] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 858.323832][ T5614] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.323854][ T5614] usb 6-1: Product: syz [ 858.323870][ T5614] usb 6-1: Manufacturer: syz [ 858.323893][ T5614] usb 6-1: SerialNumber: syz [ 858.429555][ T5614] usb 6-1: config 0 descriptor?? [ 858.659617][ T5611] Bluetooth: hci3: unexpected event for opcode 0x040d [ 858.843500][ T5614] usbtouchscreen 6-1:0.117: probe with driver usbtouchscreen failed with error -32 [ 858.914467][ T5614] usb 6-1: USB disconnect, device number 23 [ 858.924835][ T9] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 859.054952][ T9] usb 7-1: device descriptor read/64, error -71 [ 859.332059][T19831] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5361'. [ 859.354868][ T9] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 859.495689][ T9] usb 7-1: device descriptor read/64, error -71 [ 859.606880][ T9] usb usb7-port1: attempt power cycle [ 859.709588][T19839] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5363'. [ 859.945188][ T9] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 859.965644][ T9] usb 7-1: device descriptor read/8, error -71 [ 860.205884][ T9] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 860.238252][ T9] usb 7-1: device descriptor read/8, error -71 [ 860.345794][ T9] usb usb7-port1: unable to enumerate USB device [ 860.805442][ T5738] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 860.934960][ T5738] usb 7-1: device descriptor read/64, error -71 [ 861.175026][ T5738] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 861.304748][ T5738] usb 7-1: device descriptor read/64, error -71 [ 861.415123][ T5738] usb usb7-port1: attempt power cycle [ 863.153785][T19914] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 864.139557][ T37] audit: type=1326 audit(1785153614.209:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19944 comm="syz.5.5409" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcfe5d4de99 code=0x0 [ 864.245140][ T31] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 864.402045][ T31] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 864.402106][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.402136][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.402160][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 864.402304][ T31] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 864.402331][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.477851][ T31] usb 7-1: config 0 descriptor?? [ 864.517933][T19948] loop9: detected capacity change from 0 to 524287998 [ 864.977650][ T31] plantronics 0003:047F:FFFF.001E: reserved main item tag 0xd [ 865.459681][ T31] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 865.499862][ T31] usb 7-1: USB disconnect, device number 40 [ 865.698568][T19969] fido_id[19969]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 867.267071][ T37] audit: type=1326 audit(1785153617.339:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20014 comm="syz.5.5439" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe5d4de99 code=0x7ffc0000 [ 867.267210][ T37] audit: type=1326 audit(1785153617.339:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20014 comm="syz.5.5439" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe5d4de99 code=0x7ffc0000 [ 867.269093][ T37] audit: type=1326 audit(1785153617.339:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20014 comm="syz.5.5439" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe5d4de99 code=0x7ffc0000 [ 867.379697][ T37] audit: type=1326 audit(1785153617.449:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20014 comm="syz.5.5439" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe5d4de99 code=0x7ffc0000 [ 867.379755][ T37] audit: type=1326 audit(1785153617.449:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20014 comm="syz.5.5439" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe5d4de99 code=0x7ffc0000 [ 867.391162][ T37] audit: type=1326 audit(1785153617.449:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20014 comm="syz.5.5439" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcfe5d4f707 code=0x7ffc0000 [ 867.391217][ T37] audit: type=1326 audit(1785153617.459:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20014 comm="syz.5.5439" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fcfe5d0e6ce code=0x7ffc0000 [ 867.396753][ T37] audit: type=1326 audit(1785153617.459:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20014 comm="syz.5.5439" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fcfe5d0e6ce code=0x7ffc0000 [ 867.396911][ T37] audit: type=1326 audit(1785153617.459:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20014 comm="syz.5.5439" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fcfe5d0e6ce code=0x7ffc0000 [ 867.579216][T20015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 867.957080][T20035] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5449'. [ 868.119302][T20043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.670707][T20066] sg_write: data in/out 439262/690 bytes for SCSI command 0x0-- guessing data in; [ 868.670707][T20066] program syz.7.5463 not setting count and/or reply_len properly [ 869.153352][ T37] kauditd_printk_skb: 44 callbacks suppressed [ 869.153373][ T37] audit: type=1326 audit(1785153619.219:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20060 comm="syz.6.5461" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f25fde99 code=0x7ffc0000 [ 869.153423][ T37] audit: type=1326 audit(1785153619.219:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20060 comm="syz.6.5461" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f25fde99 code=0x7ffc0000 [ 869.251781][ T37] audit: type=1326 audit(1785153619.309:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20060 comm="syz.6.5461" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f10f25fde99 code=0x7ffc0000 [ 869.251968][ T37] audit: type=1326 audit(1785153619.319:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20060 comm="syz.6.5461" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f10f25fde99 code=0x7ffc0000 [ 869.252394][T20075] netlink: 'syz.5.5467': attribute type 27 has an invalid length. [ 869.252413][T20075] netlink: 'syz.5.5467': attribute type 4 has an invalid length. [ 869.252429][T20075] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5467'. [ 869.304739][ T5614] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 869.485195][ T5614] usb 8-1: Using ep0 maxpacket: 32 [ 869.487686][ T5614] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 869.487735][ T5614] usb 8-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 869.487759][ T5614] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.535678][ T5614] usb 8-1: config 0 descriptor?? [ 869.570100][ T5611] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 869.967219][ T5614] hid_parser_main: 27 callbacks suppressed [ 869.967243][ T5614] ortek 0003:05A4:8003.001F: unknown main item tag 0x4 [ 869.967275][ T5614] ortek 0003:05A4:8003.001F: reserved main item tag 0xd [ 869.967303][ T5614] ortek 0003:05A4:8003.001F: nested delimiters [ 869.967317][ T5614] ortek 0003:05A4:8003.001F: item 0 4 2 10 parsing failed [ 869.982544][ T5614] ortek 0003:05A4:8003.001F: probe with driver ortek failed with error -22 [ 870.041145][T20088] netlink: 87 bytes leftover after parsing attributes in process `syz.6.5472'. [ 870.180912][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.180986][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.204392][ T5737] usb 8-1: USB disconnect, device number 3 [ 870.279127][T20094] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 870.279127][T20094] program syz.1.5475 not setting count and/or reply_len properly [ 870.413802][T20093] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 870.746557][T17172] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 870.908745][T17172] usb 2-1: Using ep0 maxpacket: 32 [ 870.914534][T17172] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 870.914581][T17172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 870.944752][T17172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 870.944785][T17172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 870.944814][T17172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 870.947506][T17172] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 870.947536][T17172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.947557][T17172] usb 2-1: Product: syz [ 870.947573][T17172] usb 2-1: Manufacturer: syz [ 870.947589][T17172] usb 2-1: SerialNumber: syz [ 871.041171][T17172] usb 2-1: config 0 descriptor?? [ 871.234777][ T5738] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 871.408807][ T5738] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 871.408858][ T5738] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.408951][ T5738] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.408977][ T5738] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 871.413100][ T5738] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 871.413703][ T5738] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 871.413729][ T5738] usb 8-1: Manufacturer: syz [ 871.474179][T17172] input input34: Device does not respond to id packet M [ 871.558122][ T5738] usb 8-1: config 0 descriptor?? [ 871.668735][T17172] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 871.668789][T17172] input input34: Device does not respond to id packet P [ 871.670332][T17172] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 871.670775][T17172] input input34: Device does not respond to id packet B [ 871.672688][T17172] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 871.673313][T17172] input input34: Device does not respond to id packet N [ 871.674428][T17172] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 871.721107][T17172] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 871.744917][T17172] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 871.745565][T17172] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 871.843393][T17172] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input34 [ 871.976852][T17172] usb 2-1: USB disconnect, device number 30 [ 872.010543][ T5738] appleir 0003:05AC:8243.0020: unknown main item tag 0x0 [ 872.038647][ T5738] appleir 0003:05AC:8243.0020: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 872.172707][T20132] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5494'. [ 872.381880][ T5738] usb 8-1: USB disconnect, device number 4 [ 872.703365][T20137] fido_id[20137]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 873.664814][ T5738] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 873.818971][ T5738] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 873.819007][ T5738] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 873.819036][ T5738] usb 2-1: config 0 interface 0 has no altsetting 0 [ 873.819069][ T5738] usb 2-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 873.819093][ T5738] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.892075][ T5738] usb 2-1: config 0 descriptor?? [ 873.896231][T20162] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 874.072944][ T37] audit: type=1326 audit(1785153624.139:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20182 comm="syz.5.5516" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe5d4de99 code=0x7ffc0000 [ 874.073023][ T37] audit: type=1326 audit(1785153624.139:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20182 comm="syz.5.5516" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe5d4de99 code=0x7ffc0000 [ 874.074810][ T37] audit: type=1326 audit(1785153624.139:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20182 comm="syz.5.5516" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe5d4de99 code=0x7ffc0000 [ 874.099395][ T37] audit: type=1326 audit(1785153624.159:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20182 comm="syz.5.5516" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe5d4de99 code=0x7ffc0000 [ 874.099479][ T37] audit: type=1326 audit(1785153624.169:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20182 comm="syz.5.5516" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfe5d4de99 code=0x7ffc0000 [ 874.104408][ T37] audit: type=1326 audit(1785153624.169:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20182 comm="syz.5.5516" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcfe5d4de99 code=0x7ffc0000 [ 874.376640][ T5738] itetech 0003:048D:8595.0021: unknown main item tag 0x0 [ 874.376681][ T5738] itetech 0003:048D:8595.0021: unknown main item tag 0x0 [ 874.376709][ T5738] itetech 0003:048D:8595.0021: unknown main item tag 0x0 [ 874.376736][ T5738] itetech 0003:048D:8595.0021: unknown main item tag 0x0 [ 874.376764][ T5738] itetech 0003:048D:8595.0021: unknown main item tag 0x0 [ 874.376794][ T5738] itetech 0003:048D:8595.0021: unknown main item tag 0x0 [ 874.376822][ T5738] itetech 0003:048D:8595.0021: unknown main item tag 0x0 [ 874.376850][ T5738] itetech 0003:048D:8595.0021: unknown main item tag 0x0 [ 874.414392][ T5738] itetech 0003:048D:8595.0021: hidraw0: USB HID v0.c1 Device [HID 048d:8595] on usb-dummy_hcd.1-1/input0 [ 874.548581][T20190] netlink: 'syz.5.5519': attribute type 6 has an invalid length. [ 874.627703][T18375] usb 2-1: USB disconnect, device number 31 [ 874.849854][T20191] fido_id[20191]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 875.088166][T20188] Invalid logical block size (7) [ 875.233031][T20205] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5526'. [ 875.714782][ T5738] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 875.869369][ T5738] usb 2-1: not running at top speed; connect to a high speed hub [ 875.870910][ T5738] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 875.895358][ T5738] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 875.895407][ T5738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.895429][ T5738] usb 2-1: Product: syz [ 875.895444][ T5738] usb 2-1: Manufacturer: syz [ 875.895470][ T5738] usb 2-1: SerialNumber: syz [ 875.940989][ T5738] oti6858 2-1:1.0: oti6858 converter detected [ 875.967499][ T5738] usb 2-1: oti6858 converter now attached to ttyUSB0 [ 876.790298][ T5737] usb 2-1: USB disconnect, device number 32 [ 876.853407][ T5737] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 876.868942][ T5737] oti6858 2-1:1.0: device disconnected [ 876.954564][T20245] netlink: ct family unspecified [ 876.960856][T20245] openvswitch: netlink: Actions may not be safe on all matching packets [ 877.452149][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 877.452167][ T37] audit: type=1400 audit(1785153627.479:553): lsm=SMACK fn=smack_task_setnice action=denied subject="w" object="_" requested=w pid=20257 comm="syz.5.5552" opid=8977 ocomm="syz-executor" [ 877.452335][ T37] audit: type=1400 audit(1785153627.519:554): lsm=SMACK fn=smack_task_setnice action=denied subject="w" object="_" requested=w pid=20257 comm="syz.5.5552" opid=10789 ocomm="syz.5.1701" [ 877.490612][ T37] audit: type=1400 audit(1785153627.559:555): lsm=SMACK fn=smack_task_setnice action=denied subject="w" object="_" requested=w pid=20257 comm="syz.5.5552" opid=20257 ocomm="syz.5.5552" [ 877.710721][T20267] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5557'. [ 878.452174][T20286] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 879.424162][T20325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5581'. [ 879.554840][T17172] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 879.725028][T17172] usb 7-1: Using ep0 maxpacket: 16 [ 879.727367][T17172] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 879.727399][T17172] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 879.730366][T17172] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 879.730396][T17172] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.730419][T17172] usb 7-1: Product: syz [ 879.730435][T17172] usb 7-1: Manufacturer: syz [ 879.730451][T17172] usb 7-1: SerialNumber: syz [ 879.801499][T17172] usb 7-1: config 0 descriptor?? [ 879.837645][T17172] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 879.837705][T17172] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 880.449872][T17172] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 880.625074][ T5738] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 880.651813][T17172] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 880.652261][T17172] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 880.652281][T17172] em28xx 7-1:0.0: No AC97 audio processor [ 880.703698][T17172] usb 7-1: USB disconnect, device number 41 [ 880.718650][T17172] em28xx 7-1:0.0: Disconnecting em28xx [ 880.739906][T17172] em28xx 7-1:0.0: Freeing device [ 880.784204][ T5738] usb 6-1: Using ep0 maxpacket: 32 [ 880.798642][ T5738] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 880.798672][ T5738] usb 6-1: config 0 has no interface number 0 [ 880.798720][ T5738] usb 6-1: config 0 interface 12 has no altsetting 0 [ 880.826509][ T5738] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 880.826549][ T5738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.826571][ T5738] usb 6-1: Product: syz [ 880.826587][ T5738] usb 6-1: Manufacturer: syz [ 880.826603][ T5738] usb 6-1: SerialNumber: syz [ 880.831787][ T5738] usb 6-1: config 0 descriptor?? [ 881.371352][T20367] 9p: Bad value for 'wfdno' [ 881.735312][ T5738] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 881.735436][ T5738] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 881.735454][ T5738] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 881.735534][ T5738] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 881.825974][ T5738] usb 6-1: USB disconnect, device number 24 [ 881.854395][ T5611] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 882.110776][T20383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 883.462716][T20424] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5624'. [ 883.462740][T20424] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5624'. [ 883.509169][ T5738] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 883.668589][ T5738] usb 7-1: Using ep0 maxpacket: 16 [ 883.672668][ T5738] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 883.672694][ T5738] usb 7-1: config 0 has no interface number 0 [ 883.702625][ T5738] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 883.702664][ T5738] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.702694][ T5738] usb 7-1: Product: syz [ 883.702717][ T5738] usb 7-1: Manufacturer: syz [ 883.702739][ T5738] usb 7-1: SerialNumber: syz [ 883.742741][ T5738] usb 7-1: config 0 descriptor?? [ 883.765959][ T5738] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 884.375702][ T5738] gspca_spca1528: reg_w err -71 [ 884.395819][ T5738] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 884.428952][ T5738] usb 7-1: USB disconnect, device number 42 [ 884.914839][ T37] audit: type=1326 audit(1785153634.979:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20448 comm="syz.5.5634" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfe5d4de99 code=0x0 [ 885.817995][T20475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5644'. [ 886.444968][ T9] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 886.600263][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 886.600307][ T9] usb 8-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 886.600333][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.644530][ T9] usb 8-1: config 0 descriptor?? [ 887.089004][ T9] hid_parser_main: 32 callbacks suppressed [ 887.089031][ T9] hid-rmi 0003:0461:4E72.0022: unknown main item tag 0x2 [ 887.089063][ T9] hid-rmi 0003:0461:4E72.0022: unexpected long global item [ 887.089803][ T9] hid-rmi 0003:0461:4E72.0022: parse failed [ 887.091756][ T9] hid-rmi 0003:0461:4E72.0022: probe with driver hid-rmi failed with error -22 [ 887.135799][ T31] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 887.284924][T18375] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 887.305833][ T31] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 887.305862][ T31] usb 7-1: config 0 has no interface number 0 [ 887.314127][ T9] usb 8-1: USB disconnect, device number 6 [ 887.335067][ T31] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 887.335101][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.335121][ T31] usb 7-1: Product: syz [ 887.335137][ T31] usb 7-1: Manufacturer: syz [ 887.335153][ T31] usb 7-1: SerialNumber: syz [ 887.398198][ T31] usb 7-1: config 0 descriptor?? [ 887.445436][T18375] usb 6-1: Using ep0 maxpacket: 8 [ 887.461220][T18375] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 887.461255][T18375] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 887.494095][T18375] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 887.494128][T18375] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.494151][T18375] usb 6-1: Product: syz [ 887.494190][T18375] usb 6-1: Manufacturer: syz [ 887.494207][T18375] usb 6-1: SerialNumber: syz [ 887.650936][ T31] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 887.668226][ T31] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 887.668748][ T31] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 887.668800][ T31] usb 7-1: media controller created [ 887.732195][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 887.899254][T18375] cdc_ncm 6-1:1.0: bind() failure [ 887.975266][T18375] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 887.975314][T18375] cdc_ncm 6-1:1.1: bind() failure [ 888.031990][T18375] usb 6-1: USB disconnect, device number 25 [ 888.035899][ T9] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 888.267077][ T9] usb 2-1: config 127 has an invalid interface number: 57 but max is 0 [ 888.267108][ T9] usb 2-1: config 127 has no interface number 0 [ 888.267156][ T9] usb 2-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 888.275972][ T9] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 888.276005][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.276062][ T9] usb 2-1: Product: syz [ 888.276104][ T9] usb 2-1: Manufacturer: syz [ 888.276128][ T9] usb 2-1: SerialNumber: syz [ 888.368908][T20515] input: syz0 as /devices/virtual/input/input35 [ 888.385803][T20510] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 888.816636][T20510] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 888.904397][ T31] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 889.038866][ T31] usb 7-1: USB disconnect, device number 43 [ 889.224548][ T9] asix 2-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 889.224581][ T9] asix 2-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 889.225666][ T9] asix 2-1:127.57: probe with driver asix failed with error -71 [ 889.283273][ T9] usb 2-1: USB disconnect, device number 33 [ 889.518970][T20533] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5669'. [ 889.743850][T20539] netlink: 165 bytes leftover after parsing attributes in process `syz.6.5672'. [ 891.131693][T20579] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5688'. [ 891.352522][T20589] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5694'. [ 891.352547][T20589] tc_dump_action: action bad kind [ 891.643382][T20602] UHID_CREATE from different security context by process 3011 (syz.1.5701), this is not allowed. [ 891.752045][ T37] audit: type=1326 audit(1785153641.819:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20606 comm="syz.7.5705" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0f64bde99 code=0x0 [ 891.865255][ T31] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 892.024016][ T31] usb 4-1: too many endpoints for config 0 interface 0 altsetting 16: 255, using maximum allowed: 30 [ 892.024068][ T31] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 892.024099][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 892.024146][ T31] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 892.024170][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.094436][ T31] usb 4-1: config 0 descriptor?? [ 892.543207][ T31] hid (null): global environment stack underflow [ 892.543230][ T31] hid (null): unknown global tag 0x63 [ 892.588965][ T31] magicmouse 0003:05AC:0265.0023: unknown main item tag 0x0 [ 892.589004][ T31] magicmouse 0003:05AC:0265.0023: unknown main item tag 0x0 [ 892.589033][ T31] magicmouse 0003:05AC:0265.0023: unknown main item tag 0x0 [ 892.589062][ T31] magicmouse 0003:05AC:0265.0023: unknown main item tag 0x0 [ 892.589091][ T31] magicmouse 0003:05AC:0265.0023: unknown main item tag 0x0 [ 892.589119][ T31] magicmouse 0003:05AC:0265.0023: unknown main item tag 0x0 [ 892.589156][ T31] magicmouse 0003:05AC:0265.0023: unknown main item tag 0x0 [ 892.589185][ T31] magicmouse 0003:05AC:0265.0023: unknown main item tag 0x0 [ 892.589214][ T31] magicmouse 0003:05AC:0265.0023: unknown main item tag 0x0 [ 892.589244][ T31] magicmouse 0003:05AC:0265.0023: unknown main item tag 0x0 [ 892.593813][ T31] magicmouse 0003:05AC:0265.0023: global environment stack underflow [ 892.593834][ T31] magicmouse 0003:05AC:0265.0023: item 0 1 1 11 parsing failed [ 892.685446][ T31] magicmouse 0003:05AC:0265.0023: magicmouse hid parse failed [ 892.685572][ T31] magicmouse 0003:05AC:0265.0023: probe with driver magicmouse failed with error -22 [ 892.744467][ T31] usb 4-1: USB disconnect, device number 29 [ 892.790086][T20631] usbcore.quirks: string doesn't fit in 127 chars. [ 892.885697][T20635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5715'. [ 894.561619][T20674] netdevsim netdevsim5 netdevsim0: IPsec offload requires 128 bit authentication [ 894.737961][T20676] loop5: detected capacity change from 0 to 7 [ 895.188228][T20686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5737'. [ 895.851206][T20676] Dev loop5: unable to read RDB block 7 [ 895.851271][T20676] loop5: unable to read partition table [ 895.851454][T20676] loop5: partition table beyond EOD, truncated [ 895.851493][T20676] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 895.978048][ T31] kernel write not supported for file /bluetooth/6lowpan_control (pid: 31 comm: kworker/1:0) [ 896.148692][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 896.148786][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 896.206819][ T4965] Dev loop5: unable to read RDB block 7 [ 896.206953][ T4965] loop5: unable to read partition table [ 896.207180][ T4965] loop5: partition table beyond EOD, truncated [ 896.365017][ T31] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 896.536599][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 896.536628][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 896.542024][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 896.542056][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.542080][ T31] usb 4-1: Product: syz [ 896.542095][ T31] usb 4-1: Manufacturer: syz [ 896.542112][ T31] usb 4-1: SerialNumber: syz [ 896.622159][ T31] usb 4-1: 0:2 : does not exist [ 896.822714][ T31] usb 4-1: USB disconnect, device number 30 [ 896.845075][T17172] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 897.044818][T17172] usb 2-1: Using ep0 maxpacket: 32 [ 897.047691][T17172] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 897.047719][T17172] usb 2-1: config 0 has no interface number 0 [ 897.051069][T17172] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 897.051100][T17172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.051123][T17172] usb 2-1: Product: syz [ 897.051138][T17172] usb 2-1: Manufacturer: syz [ 897.051154][T17172] usb 2-1: SerialNumber: syz [ 897.113864][T17172] usb 2-1: config 0 descriptor?? [ 897.146244][T17172] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 897.543180][T17172] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 897.610112][T17172] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 897.763021][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 897.811671][T17172] usb 2-1: USB disconnect, device number 34 [ 897.860432][T17172] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 897.912052][T17172] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 897.930847][T17172] quatech2 2-1:0.51: device disconnected [ 898.413810][T20743] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 898.424099][T20743] team0: Port device batadv1 added [ 899.648793][T20778] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5778'. [ 900.109265][T20787] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5783'. [ 900.110417][T20788] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5784'. [ 900.780498][T20809] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.5793'. [ 901.100056][T18375] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 901.256123][T18375] usb 4-1: Using ep0 maxpacket: 32 [ 901.258012][T18375] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 901.258038][T18375] usb 4-1: config 0 has no interface number 0 [ 901.258086][T18375] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 901.260707][T18375] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 901.260736][T18375] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.260757][T18375] usb 4-1: Product: syz [ 901.260773][T18375] usb 4-1: Manufacturer: syz [ 901.260790][T18375] usb 4-1: SerialNumber: syz [ 901.334109][T18375] usb 4-1: config 0 descriptor?? [ 901.335171][T20811] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 901.547724][T20811] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 901.960199][T18375] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 901.960473][T18375] asix 4-1:0.188: probe with driver asix failed with error -71 [ 902.015775][T18375] usb 4-1: USB disconnect, device number 31 [ 902.304937][T17796] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 902.409162][T20847] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5810'. [ 902.409191][T20847] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5810'. [ 902.454919][T17796] usb 8-1: Using ep0 maxpacket: 16 [ 902.487824][T17796] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 902.487855][T17796] usb 8-1: config 0 has no interface number 0 [ 902.487903][T17796] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 902.487931][T17796] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 902.490567][T17796] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 902.490598][T17796] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.490620][T17796] usb 8-1: Product: syz [ 902.490636][T17796] usb 8-1: Manufacturer: syz [ 902.490652][T17796] usb 8-1: SerialNumber: syz [ 902.524852][T18375] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 902.593901][T17796] usb 8-1: config 0 descriptor?? [ 902.596638][T20842] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 902.596875][T20842] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 902.695111][T18375] usb 2-1: Using ep0 maxpacket: 32 [ 902.745287][T18375] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.745322][T18375] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.750862][T18375] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 902.750961][T18375] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 902.750986][T18375] usb 2-1: Product: syz [ 902.751002][T18375] usb 2-1: Manufacturer: syz [ 902.851710][T20842] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 902.851843][T20842] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 902.895024][T18375] hub 2-1:4.0: USB hub found [ 903.053367][T17796] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 903.094126][T18375] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 903.368586][T18375] usb 2-1: USB disconnect, device number 35 [ 903.465376][T17796] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 903.465701][T17796] asix 8-1:0.34: probe with driver asix failed with error -32 [ 903.605466][T17796] usb 8-1: USB disconnect, device number 7 [ 904.476392][ T5738] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 904.626002][ T5738] usb 7-1: Using ep0 maxpacket: 8 [ 904.629035][ T5738] usb 7-1: config 0 has no interfaces? [ 904.630998][ T5738] usb 7-1: config 0 has no interfaces? [ 904.634921][ T5738] usb 7-1: config 0 has no interfaces? [ 904.658140][ T5738] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 904.658172][ T5738] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.658194][ T5738] usb 7-1: Product: syz [ 904.658211][ T5738] usb 7-1: Manufacturer: syz [ 904.658227][ T5738] usb 7-1: SerialNumber: syz [ 904.747602][ T5738] usb 7-1: config 0 descriptor?? [ 904.974310][ T9] usb 7-1: USB disconnect, device number 44 [ 905.174002][T20918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5840'. [ 906.565051][T17796] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 906.715077][T17796] usb 4-1: Using ep0 maxpacket: 16 [ 906.717661][T17796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.717718][T17796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 906.717748][T17796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 906.717772][T17796] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 906.717797][T17796] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 906.719286][T17796] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 906.719318][T17796] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 906.719339][T17796] usb 4-1: Manufacturer: syz [ 906.816037][T17796] usb 4-1: config 0 descriptor?? [ 907.226555][T17796] rc_core: IR keymap rc-hauppauge not found [ 907.226579][T17796] Registered IR keymap rc-empty [ 907.227520][T17796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 907.256393][T17796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 907.283913][T17796] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 907.309278][T17796] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input36 [ 907.336648][T17796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 907.355086][T17796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 907.374913][T17796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 907.394948][T17796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 907.417064][T17796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 907.434984][T17796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 907.454993][T17796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 907.476534][T17796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 907.494946][T17796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 907.514889][T17796] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 907.540998][T17796] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 907.541020][T17796] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 907.572717][T17796] usb 4-1: USB disconnect, device number 32 [ 908.469334][T20999] binder: 20998:20999 ioctl c0306201 200000000480 returned -14 [ 908.617410][T17172] libceph: connect (1)[c::]:6789 error -101 [ 908.617619][T17172] libceph: mon0 (1)[c::]:6789 connect error [ 908.617758][T21001] ceph: No mds server is up or the cluster is laggy [ 908.618529][T17172] libceph: connect (1)[c::]:6789 error -101 [ 908.618728][T17172] libceph: mon0 (1)[c::]:6789 connect error [ 908.878654][T17172] libceph: connect (1)[c::]:6789 error -101 [ 908.878888][T17172] libceph: mon0 (1)[c::]:6789 connect error [ 909.104899][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 909.264837][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 909.283576][ T9] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 909.283607][ T9] usb 8-1: config 0 has no interface number 0 [ 909.283653][ T9] usb 8-1: config 0 interface 184 has no altsetting 0 [ 909.332144][ T9] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 909.332179][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.332202][ T9] usb 8-1: Product: syz [ 909.332218][ T9] usb 8-1: Manufacturer: syz [ 909.332235][ T9] usb 8-1: SerialNumber: syz [ 909.379011][ T9] usb 8-1: config 0 descriptor?? [ 910.065184][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 910.065217][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 910.275008][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 910.275043][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 910.275067][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 910.275370][ T9] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 910.282178][ T9] usb 8-1: USB disconnect, device number 8 [ 910.402348][T21038] netlink: 'syz.5.5888': attribute type 3 has an invalid length. [ 910.402364][T21038] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5888'. [ 911.514068][T21069] 0x000000000000-0x000000020000 : "" [ 911.545536][T21069] ftl_cs: FTL header not found. [ 911.868495][T21076] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5904'. [ 912.433118][ T37] audit: type=1326 audit(1785153662.499:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21088 comm="syz.7.5909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0f64bde99 code=0x0 [ 913.146902][T21096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5912'. [ 913.685408][T17172] usb 7-1: new low-speed USB device number 45 using dummy_hcd [ 913.801537][T21108] gadgetfs: bound to dummy_udc driver [ 913.902105][T17172] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 913.902167][T17172] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 913.902199][T17172] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 913.902227][T17172] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 913.902257][T17172] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 913.904576][T17172] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 913.972359][T17172] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 913.972391][T17172] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 913.972417][T17172] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 913.972443][T17172] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 914.035068][T17172] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 914.035128][T17172] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 914.035158][T17172] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 914.035185][T17172] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 914.035212][T17172] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 914.104008][T17172] usb 7-1: string descriptor 0 read error: -22 [ 914.104149][T17172] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 914.104189][T17172] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.206021][ T5738] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 914.206506][ C1] gadgetfs: connected [ 914.207211][ T5738] gadgetfs: disconnected [ 914.260570][T17172] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 914.374973][ C1] gadgetfs: connected [ 914.377129][ T5738] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 914.377171][ T5738] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 914.377194][ T5738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.671491][ C1] gadgetfs: configuration #1 [ 914.769465][T21109] gadgetfs: suspended from state 3 [ 914.773247][ T5738] usb 1-1: USB disconnect, device number 3 [ 914.788612][T21109] gadgetfs: disconnected [ 915.244853][ T5738] usb 7-1: USB disconnect, device number 45 [ 917.297567][ T37] audit: type=1326 audit(1785153667.369:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21180 comm="syz.6.5950" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f25fde99 code=0x7ffc0000 [ 917.298618][ T37] audit: type=1326 audit(1785153667.369:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21180 comm="syz.6.5950" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f25fde99 code=0x7ffc0000 [ 917.298672][ T37] audit: type=1326 audit(1785153667.369:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21180 comm="syz.6.5950" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f25fde99 code=0x7ffc0000 [ 917.298722][ T37] audit: type=1326 audit(1785153667.369:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21180 comm="syz.6.5950" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f25fde99 code=0x7ffc0000 [ 917.298778][ T37] audit: type=1326 audit(1785153667.369:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21180 comm="syz.6.5950" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f10f25fde99 code=0x7ffc0000 [ 917.300305][ T37] audit: type=1326 audit(1785153667.369:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21180 comm="syz.6.5950" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f25fde99 code=0x7ffc0000 [ 917.300362][ T37] audit: type=1326 audit(1785153667.369:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21180 comm="syz.6.5950" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f25fde99 code=0x7ffc0000 [ 917.324652][ T37] audit: type=1326 audit(1785153667.369:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21180 comm="syz.6.5950" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f25fde99 code=0x7ffc0000 [ 917.324712][ T37] audit: type=1326 audit(1785153667.389:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21180 comm="syz.6.5950" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f10f25fde99 code=0x7ffc0000 [ 918.552152][T21211] 9p: Bad value for 'wfdno' [ 921.587745][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 921.587766][ T37] audit: type=1326 audit(1785153671.659:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21273 comm="syz.7.5988" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0f64bde99 code=0x0 [ 921.701408][T21271] hpfs: Bad magic ... probably not HPFS [ 921.727172][T21262] hpfs: Bad magic ... probably not HPFS [ 922.003638][T21283] tipc: Enabled bearer , priority 10 [ 923.998931][T21342] veth0: entered promiscuous mode [ 924.042227][T21341] veth0: left promiscuous mode [ 924.861660][T21369] input: syz0 as /devices/virtual/input/input37 [ 925.139638][T21378] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6029'. [ 929.631991][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 929.693026][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 929.722164][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 929.776590][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 929.777778][T14670] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.778073][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 930.491762][T21461] dummy0: entered allmulticast mode [ 930.491930][T21462] dummy0: left allmulticast mode [ 931.151137][T21488] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 931.653709][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.653803][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.917087][T14670] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.164889][ T5611] Bluetooth: hci3: command tx timeout [ 932.177455][T18375] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 932.202558][T21459] lo speed is unknown, defaulting to 1000 [ 932.330357][T18375] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 932.330391][T18375] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.369992][T18375] usb 8-1: config 0 descriptor?? [ 933.072963][T14670] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.609058][T18375] usb 8-1: Cannot set autoneg [ 933.609336][T18375] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 933.706216][T18375] usb 8-1: USB disconnect, device number 9 [ 934.118154][T14670] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.244874][ T5611] Bluetooth: hci3: command tx timeout [ 934.369247][T21533] netlink: 'syz.7.6092': attribute type 1 has an invalid length. [ 934.483925][T21533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 934.730876][T21536] bond1: (slave veth3): Enslaving as an active interface with a down link [ 936.328748][ T5611] Bluetooth: hci3: command tx timeout [ 938.404870][ T5611] Bluetooth: hci3: command tx timeout [ 938.487107][T14670] bridge_slave_1: left allmulticast mode [ 938.487146][T14670] bridge_slave_1: left promiscuous mode [ 938.487420][T14670] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.619868][ T10] hid_parser_main: 365 callbacks suppressed [ 938.619897][ T10] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 938.659880][ T10] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 938.740280][T14670] bridge_slave_0: left allmulticast mode [ 938.740320][T14670] bridge_slave_0: left promiscuous mode [ 938.740595][T14670] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.804851][ T5611] Bluetooth: hci5: command 0x0406 tx timeout [ 939.221319][T14670] pim6reg: left allmulticast mode [ 942.365127][ T5614] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 942.517607][ T5614] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 942.517643][ T5614] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 942.517667][ T5614] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 942.517712][ T5614] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 942.517737][ T5614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.595264][ T5614] usbtmc 2-1:16.0: bulk endpoints not found [ 943.175977][T14670] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 943.176004][T14670] bridge1 (unregistering): left promiscuous mode [ 943.575932][T14670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 943.655985][T14670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 943.678021][T14670] bond0 (unregistering): Released all slaves [ 943.693757][T14670] bond1 (unregistering): Released all slaves [ 943.721907][T14670] bond2 (unregistering): Released all slaves [ 943.776118][T21459] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.776349][T21459] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.776581][T21459] bridge_slave_0: entered allmulticast mode [ 943.778816][T21459] bridge_slave_0: entered promiscuous mode [ 943.847292][T21459] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.847478][T21459] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.847735][T21459] bridge_slave_1: entered allmulticast mode [ 943.851210][T21459] bridge_slave_1: entered promiscuous mode [ 943.964474][T21459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.983192][T21459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.231035][T21459] team0: Port device team_slave_0 added [ 944.289221][T21459] team0: Port device team_slave_1 added [ 944.290057][T14670] tipc: Left network mode [ 944.599330][T21459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.599348][T21459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.599379][T21459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.608790][T21459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.608844][T21459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.608927][T21459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.202919][ T10] usb 2-1: USB disconnect, device number 36 [ 945.338976][T21653] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6137'. [ 945.339005][T21653] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6137'. [ 945.826846][T14670] IPVS: stopping master sync thread 11510 ... [ 945.944278][T21653] geneve2: entered promiscuous mode [ 945.944307][T21653] geneve2: entered allmulticast mode [ 946.057191][T21459] hsr_slave_0: entered promiscuous mode [ 946.058629][T21459] hsr_slave_1: entered promiscuous mode [ 946.059623][T21459] debugfs: 'hsr0' already exists in 'hsr' [ 946.059650][T21459] Cannot create hsr debugfs directory [ 947.837757][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 949.992769][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10 [ 950.581619][T21752] netlink: 'syz.7.6170': attribute type 1 has an invalid length. [ 950.581639][T21752] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6170'. [ 950.878615][ T8333] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 950.878899][ T8333] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 950.878941][ T8333] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 950.878979][ T8333] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 950.907507][T21752] netlink: 'syz.7.6170': attribute type 1 has an invalid length. [ 950.907569][T21752] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6170'. [ 951.613037][T14670] hsr_slave_0: left promiscuous mode [ 951.836468][T14670] hsr_slave_1: left promiscuous mode [ 951.838052][T14670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 951.838082][T14670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 951.969482][T14670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 951.969523][T14670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 952.109635][T21780] netlink: 'syz.7.6180': attribute type 3 has an invalid length. [ 952.109659][T21780] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6180'. [ 952.201109][T14670] veth1_macvtap: left promiscuous mode [ 952.201220][T14670] veth0_macvtap: left promiscuous mode [ 952.235816][T14670] veth1_vlan: left promiscuous mode [ 952.235913][T14670] veth0_vlan: left promiscuous mode [ 955.040223][ T5611] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 955.132516][ T5611] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 955.134377][ T5611] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 955.190637][ T5611] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 955.203795][ T5611] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 955.965784][T14670] team0 (unregistering): Port device team_slave_1 removed [ 956.145918][T14670] team0 (unregistering): Port device team_slave_0 removed [ 956.823220][ T5260] 8021q: adding VLAN 0 to HW filter on device eth11 [ 957.450361][ T5621] Bluetooth: hci6: command tx timeout [ 958.303164][T21889] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6221'. [ 959.139085][T21459] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 959.226768][T21459] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 959.227912][T21817] lo speed is unknown, defaulting to 1000 [ 959.229409][T21459] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 959.332667][T21459] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 959.359240][T21459] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 959.531972][ T5621] Bluetooth: hci6: command tx timeout [ 959.762898][T21459] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 960.080436][T21459] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 960.218679][T21459] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 960.292758][ T5260] 8021q: adding VLAN 0 to HW filter on device eth12 [ 960.344819][ T5614] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 960.507783][ T5614] usb 2-1: unable to get BOS descriptor or descriptor too short [ 960.509329][ T5614] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 960.509357][ T5614] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 960.509410][ T5614] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 960.509451][ T5614] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 960.509495][ T5614] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 960.509525][ T5614] usb 2-1: config 1 interface 1 has no altsetting 0 [ 960.596141][ T5614] usb 2-1: string descriptor 0 read error: -22 [ 960.596301][ T5614] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 960.596328][ T5614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.555927][ T5614] usb 2-1: 2:0: failed to get current value for ch 1 (-32) [ 961.605065][ T5621] Bluetooth: hci6: command tx timeout [ 962.301980][ T5614] usb 2-1: USB disconnect, device number 37 [ 962.941866][T21459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.692221][ T5621] Bluetooth: hci6: command tx timeout [ 963.830676][T21459] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.026965][ T773] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.028205][ T773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.029175][T21817] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.029299][T21817] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.029534][T21817] bridge_slave_0: entered allmulticast mode [ 964.032780][T21817] bridge_slave_0: entered promiscuous mode [ 964.177627][T21817] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.177744][T21817] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.177995][T21817] bridge_slave_1: entered allmulticast mode [ 964.183000][T21817] bridge_slave_1: entered promiscuous mode [ 964.283029][T14671] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.283225][T14671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.433805][T21817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.532780][T21817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.734968][T22014] trusted_key: syz.1.6267 sent an empty control message without MSG_MORE. [ 964.903170][T22019] UDC core: g1: couldn't find an available UDC or it's busy [ 964.964109][T21817] team0: Port device team_slave_0 added [ 965.081726][T21817] team0: Port device team_slave_1 added [ 965.332860][T21817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.332879][T21817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.332912][T21817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.398683][T21817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.398703][T21817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.398735][T21817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.798010][T21817] hsr_slave_0: entered promiscuous mode [ 965.802980][T21817] hsr_slave_1: entered promiscuous mode [ 965.820850][T21817] debugfs: 'hsr0' already exists in 'hsr' [ 965.820892][T21817] Cannot create hsr debugfs directory [ 966.716495][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 966.873618][ T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 966.873654][ T9] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 966.873677][ T9] usb 2-1: Product: syz [ 966.873698][ T9] usb 2-1: SerialNumber: syz [ 966.927072][ T9] usb 2-1: config 0 descriptor?? [ 967.158641][ T9] hso 2-1:0.0: Failed to find BULK eps [ 967.353333][ T9] usb 2-1: USB disconnect, device number 38 [ 969.314901][T21459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 969.787326][T21817] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 969.863822][T21817] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 969.910215][T21817] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 970.152146][T21817] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 970.175448][T21817] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 970.378794][T21817] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 970.581848][T21817] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 970.721639][T21817] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 971.621756][T21459] veth0_vlan: entered promiscuous mode [ 971.721755][T21459] veth1_vlan: entered promiscuous mode [ 972.398407][T21459] veth0_macvtap: entered promiscuous mode [ 972.465475][T21817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.468779][T21459] veth1_macvtap: entered promiscuous mode [ 972.707718][T21817] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.834206][T21459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 972.906156][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.913029][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 973.080790][T21459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 973.100500][ T773] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.102252][ T773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.354123][T15246] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.373596][T15246] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.384974][T15246] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.389391][ T773] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.252782][T14673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.252805][T14673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.908518][ T8333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.908542][ T8333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.320605][T21817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.434739][ T5749] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 979.665200][ T5749] usb 9-1: Using ep0 maxpacket: 32 [ 979.671867][ T5749] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 979.671903][ T5749] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.671925][ T5749] usb 9-1: Product: syz [ 979.671942][ T5749] usb 9-1: Manufacturer: syz [ 979.671957][ T5749] usb 9-1: SerialNumber: syz [ 979.751307][ T5749] usb 9-1: config 0 descriptor?? [ 979.772242][ T5749] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 980.047868][T22324] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6372'. [ 981.103347][ T5749] gspca_ov534_9: reg_w failed -71 [ 981.398743][ T5749] gspca_ov534_9: Unknown sensor 0000 [ 981.398849][ T5749] ov534_9 9-1:0.0: probe with driver ov534_9 failed with error -22 [ 981.435007][ T5749] usb 9-1: USB disconnect, device number 2 [ 981.849263][T21817] veth0_vlan: entered promiscuous mode [ 981.906409][T21817] veth1_vlan: entered promiscuous mode [ 982.173623][T21817] veth0_macvtap: entered promiscuous mode [ 982.210675][T21817] veth1_macvtap: entered promiscuous mode [ 982.588185][T21817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 982.745647][T21817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 982.914410][T15243] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.930404][T15243] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.933938][T15243] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.937520][T15243] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.407548][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.407568][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.332692][T15244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.332716][T15244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 989.685255][T17796] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 989.878760][T17796] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 989.878882][T17796] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.878908][T17796] usb 10-1: Product: syz [ 989.878925][T17796] usb 10-1: Manufacturer: syz [ 989.878943][T17796] usb 10-1: SerialNumber: syz [ 990.428536][T17796] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 990.428602][T17796] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 990.905858][T22505] syz.7.6431 (22505) used greatest stack depth: 17152 bytes left [ 991.051741][T17796] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 991.051800][T17796] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 991.175534][T17796] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 991.255797][T17796] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -32 [ 991.406766][T17796] usb 10-1: USB disconnect, device number 2 [ 993.062190][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.062265][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.105161][T22596] tipc: Started in network mode [ 995.105184][T22596] tipc: Node identity 1000001, cluster identity 4369 [ 995.105200][T22596] tipc: Node number set to 16777217 [ 995.152542][T22596] tipc: Cannot configure node identity twice [ 995.168699][T22596] tipc: New replicast peer: 127.0.0.1 [ 995.187165][T22596] tipc: Enabled bearer , priority 10 [ 995.353755][T22601] tipc: Started in network mode [ 995.353782][T22601] tipc: Node identity 1001001, cluster identity 4711 [ 995.353798][T22601] tipc: Node number set to 16781313 [ 995.354218][T22601] tipc: Cannot configure node identity twice [ 995.443415][T22601] tipc: New replicast peer: 127.0.0.1 [ 995.443813][T22601] tipc: Enabled bearer , priority 10 [ 996.009681][T22619] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6482'. [ 999.342098][T22667] ip6erspan0: entered allmulticast mode [ 1001.920542][ T5611] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1001.992623][ T5611] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1002.035243][ T5611] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1002.063147][ T5611] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1002.076717][ T5611] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1003.150369][ T37] audit: type=1800 audit(1785153753.209:571): pid=22756 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.6537" name="file1" dev="overlay" ino=1392 res=0 errno=0 [ 1003.375117][ T5749] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1003.559671][ T5749] usb 10-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 1003.559708][ T5749] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1003.559732][ T5749] usb 10-1: Product: syz [ 1003.559748][ T5749] usb 10-1: Manufacturer: syz [ 1003.863969][T22728] lo speed is unknown, defaulting to 1000 [ 1004.295225][ T5749] speedtch 10-1:1.0: speedtch_bind: data interface not found! [ 1004.295267][ T5749] speedtch 10-1:1.0: usbatm_usb_probe: bind failed: -19! [ 1004.347983][ T5749] usb 10-1: USB disconnect, device number 3 [ 1004.484819][ T5621] Bluetooth: hci7: command tx timeout [ 1005.022328][T22794] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6552'. [ 1005.758366][T22804] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 1005.762713][T22804] kvm: requested 36876 ns i8254 timer period limited to 200000 ns [ 1005.787307][T22804] kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 1005.791742][T22804] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 1005.791894][T22804] kvm: requested 167619 ns i8254 timer period limited to 200000 ns [ 1005.792069][T22804] kvm: requested 41066 ns i8254 timer period limited to 200000 ns [ 1005.836689][T22804] kvm: requested 199466 ns i8254 timer period limited to 200000 ns [ 1005.836899][T22804] kvm: requested 63695 ns i8254 timer period limited to 200000 ns [ 1005.868798][T22804] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 1005.876833][T22804] kvm: requested 123200 ns i8254 timer period limited to 200000 ns [ 1006.050231][T22728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.050522][T22728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.051421][T22728] bridge_slave_0: entered allmulticast mode [ 1006.113030][T22728] bridge_slave_0: entered promiscuous mode [ 1006.137186][T22728] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.141247][T22728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.143131][T22728] bridge_slave_1: entered allmulticast mode [ 1006.168668][T22728] bridge_slave_1: entered promiscuous mode [ 1006.349564][T22728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1006.367466][T22728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1006.575267][ T5621] Bluetooth: hci7: command tx timeout [ 1006.606701][T22728] team0: Port device team_slave_0 added [ 1006.645879][T22728] team0: Port device team_slave_1 added [ 1006.922508][T22728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1006.922523][T22728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1006.922543][T22728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1006.947466][T22728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1006.947525][T22728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1006.947634][T22728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1007.744022][T22728] hsr_slave_0: entered promiscuous mode [ 1007.753291][T22728] hsr_slave_1: entered promiscuous mode [ 1007.783827][T22728] debugfs: 'hsr0' already exists in 'hsr' [ 1007.783858][T22728] Cannot create hsr debugfs directory [ 1008.648418][ T5621] Bluetooth: hci7: command tx timeout [ 1009.919013][T22880] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6585'. [ 1010.735207][ T5621] Bluetooth: hci7: command tx timeout [ 1017.405010][T22237] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1017.629698][T22237] usb 9-1: Using ep0 maxpacket: 16 [ 1017.709238][T22237] usb 9-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1017.709292][T22237] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1017.709799][T22237] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 254 [ 1017.793946][T22237] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1017.793982][T22237] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1017.794005][T22237] usb 9-1: SerialNumber: syz [ 1028.024037][T23097] binder_alloc: 23090: binder_alloc_buf, no vma [ 1028.901515][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1030.866746][T23140] syzkaller0: entered promiscuous mode [ 1030.866774][T23140] syzkaller0: entered allmulticast mode [ 1035.052069][T22728] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1035.570743][ T5611] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1035.650473][ T5611] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1035.652183][ T5611] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1035.669523][ T5620] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1035.705149][ T5611] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1035.706155][ T5611] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1035.864269][ T5620] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.864306][ T5620] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.864357][ T5620] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1035.864382][ T5620] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.072227][ T5620] usb 10-1: config 0 descriptor?? [ 1036.606897][ T5620] cp2112 0003:10C4:EA90.0025: unknown main item tag 0x0 [ 1036.659760][ T5620] cp2112 0003:10C4:EA90.0025: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 1036.710355][T22728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1036.738039][T22728] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1036.759596][ T5620] cp2112 0003:10C4:EA90.0025: error requesting version [ 1036.888558][T22728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1036.925156][T22728] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1037.119134][T22728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1037.132272][ T5620] cp2112 0003:10C4:EA90.0025: probe with driver cp2112 failed with error -32 [ 1037.134370][T22728] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1037.183417][ T5620] usb 10-1: USB disconnect, device number 4 [ 1037.264444][T22728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1037.360950][T23214] 9p: Bad value for 'wfdno' [ 1038.084905][ T5621] Bluetooth: hci8: command tx timeout [ 1038.952109][ T37] audit: type=1800 audit(1785153789.009:572): pid=23246 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.6699" name="file0" dev="overlay" ino=269 res=0 errno=0 [ 1039.692484][T22728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1039.800391][T23180] lo speed is unknown, defaulting to 1000 [ 1040.164896][ T5621] Bluetooth: hci8: command tx timeout [ 1040.238841][T22728] 8021q: adding VLAN 0 to HW filter on device team0 [ 1040.527844][ T123] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.531104][ T123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1040.992787][T14671] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.993052][T14671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1042.245172][ T5621] Bluetooth: hci8: command tx timeout [ 1043.854765][T23362] 9p: Bad value for 'rfdno' [ 1044.160216][T23180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.160347][T23180] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.160723][T23180] bridge_slave_0: entered allmulticast mode [ 1044.192516][T23180] bridge_slave_0: entered promiscuous mode [ 1044.209293][T23180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.209438][T23180] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.209696][T23180] bridge_slave_1: entered allmulticast mode [ 1044.221073][T23180] bridge_slave_1: entered promiscuous mode [ 1044.324717][ T5621] Bluetooth: hci8: command tx timeout [ 1044.742046][T23180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.288763][T23180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1045.994376][T23180] team0: Port device team_slave_0 added [ 1046.010182][T23180] team0: Port device team_slave_1 added [ 1046.197879][T23180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1046.197909][T23180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1046.197939][T23180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1046.293685][T23180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1046.293704][T23180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1046.293734][T23180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1046.599123][T22728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1047.525769][T23180] hsr_slave_0: entered promiscuous mode [ 1047.531323][T23180] hsr_slave_1: entered promiscuous mode [ 1047.533964][T23180] debugfs: 'hsr0' already exists in 'hsr' [ 1047.533992][T23180] Cannot create hsr debugfs directory [ 1048.645151][T17796] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1048.753693][T22728] veth0_vlan: entered promiscuous mode [ 1048.799882][T17796] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1048.799911][T17796] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.799930][T17796] usb 10-1: Product: syz [ 1048.799943][T17796] usb 10-1: Manufacturer: syz [ 1048.799957][T17796] usb 10-1: SerialNumber: syz [ 1048.853688][T17796] usb 10-1: config 0 descriptor?? [ 1049.281672][T17796] usb 10-1: Firmware version (0.0) predates our first public release. [ 1049.281697][T17796] usb 10-1: Please update to version 0.2 or newer [ 1049.398258][T17796] usb 10-1: Firmware: build [ 1050.830363][T23496] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6762'. [ 1052.506849][T22728] veth1_vlan: entered promiscuous mode [ 1052.753490][T17796] usb 10-1: USB disconnect, device number 5 [ 1056.399081][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.026546][T23566] could not allocate digest TFM handle _!5(iHP,omxę*71U"~ 2.>~e>/y [ 1057.764818][T17796] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1057.895165][T17796] usb 10-1: device descriptor read/64, error -71 [ 1058.030840][T22728] veth0_macvtap: entered promiscuous mode [ 1058.134771][T17796] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1058.237332][T22728] veth1_macvtap: entered promiscuous mode [ 1058.265470][T17796] usb 10-1: device descriptor read/64, error -71 [ 1058.376843][T17796] usb usb10-port1: attempt power cycle [ 1058.445872][ T5611] Bluetooth: hci3: command 0x0406 tx timeout [ 1058.965243][T17796] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1058.985535][T17796] usb 10-1: device descriptor read/8, error -71 [ 1059.265106][T17796] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1059.285693][T17796] usb 10-1: device descriptor read/8, error -71 [ 1059.395239][T17796] usb usb10-port1: unable to enumerate USB device [ 1059.692948][T22728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1059.727638][T22728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1059.801793][ T2278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.802892][ T2278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.807060][ T2278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.807202][ T2278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.359179][T23636] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6800'. [ 1062.406934][T23636] netlink: 56 bytes leftover after parsing attributes in process `syz.9.6800'. [ 1062.658956][ T5611] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1062.753539][ T5611] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1062.767736][ T5611] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1062.796099][ T5611] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1062.802589][ T5611] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1065.125175][ T5621] Bluetooth: hci9: command tx timeout [ 1067.206741][ T5621] Bluetooth: hci9: command tx timeout [ 1067.679337][T14675] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.010352][T23180] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1068.074467][T23180] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1068.127282][T23180] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1068.323210][T23180] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1068.340335][T23180] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1068.401981][T23180] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1069.289673][ T5621] Bluetooth: hci9: command tx timeout [ 1069.488647][T14675] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.726374][T23180] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1069.833068][T23180] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1069.844192][T23639] lo speed is unknown, defaulting to 1000 [ 1071.105105][T14675] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.364889][ T5621] Bluetooth: hci9: command tx timeout [ 1072.695744][T14675] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.918078][T23844] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6865'. [ 1073.921914][T23844] netlink: 56 bytes leftover after parsing attributes in process `syz.9.6865'. [ 1073.962503][T23180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1074.199981][T23180] 8021q: adding VLAN 0 to HW filter on device team0 [ 1074.249072][T15243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.251613][T15243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1074.501611][T15243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.501834][T15243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1075.148540][T23894] FAULT_INJECTION: forcing a failure. [ 1075.148540][T23894] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1075.148574][T23894] CPU: 1 UID: 0 PID: 23894 Comm: syz.5.6880 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1075.148600][T23894] Tainted: [L]=SOFTLOCKUP [ 1075.148607][T23894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1075.148618][T23894] Call Trace: [ 1075.148625][T23894] [ 1075.148633][T23894] dump_stack_lvl+0xe8/0x150 [ 1075.148671][T23894] should_fail_ex+0x467/0x600 [ 1075.148830][T23894] _copy_from_user+0x2d/0xb0 [ 1075.148892][T23894] __sys_bpf+0x2e7/0xd90 [ 1075.148951][T23894] ? __pfx___sys_bpf+0x10/0x10 [ 1075.148973][T23894] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1075.149001][T23894] ? rt_mutex_slowunlock+0x219/0x460 [ 1075.149045][T23894] ? ksys_write+0x248/0x270 [ 1075.149133][T23894] ? __pfx_ksys_write+0x10/0x10 [ 1075.149160][T23894] __x64_sys_bpf+0xba/0xd0 [ 1075.149214][T23894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.149240][T23894] do_syscall_64+0x174/0x580 [ 1075.149291][T23894] ? clear_bhb_loop+0x40/0x90 [ 1075.149315][T23894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.149338][T23894] RIP: 0033:0x7fcfe5d4de99 [ 1075.149355][T23894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1075.149371][T23894] RSP: 002b:00007fcfe3fa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1075.149390][T23894] RAX: ffffffffffffffda RBX: 00007fcfe5fd5fa0 RCX: 00007fcfe5d4de99 [ 1075.149404][T23894] RDX: 0000000000000020 RSI: 0000200000000700 RDI: 0000000000000004 [ 1075.149415][T23894] RBP: 00007fcfe3fa6090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.149427][T23894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1075.149437][T23894] R13: 00007fcfe5fd6038 R14: 00007fcfe5fd5fa0 R15: 00007fff5dd87578 [ 1075.149464][T23894] [ 1075.256756][T23896] FAULT_INJECTION: forcing a failure. [ 1075.256756][T23896] name failslab, interval 1, probability 0, space 0, times 0 [ 1075.256796][T23896] CPU: 0 UID: 0 PID: 23896 Comm: syz.9.6879 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1075.256826][T23896] Tainted: [L]=SOFTLOCKUP [ 1075.256835][T23896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1075.256848][T23896] Call Trace: [ 1075.256857][T23896] [ 1075.256867][T23896] dump_stack_lvl+0xe8/0x150 [ 1075.256908][T23896] should_fail_ex+0x467/0x600 [ 1075.256951][T23896] should_failslab+0xa8/0x100 [ 1075.257068][T23896] __kmalloc_noprof+0xfe/0x780 [ 1075.257120][T23896] ? rcu_is_watching+0x15/0xb0 [ 1075.257206][T23896] ? tomoyo_realpath_from_path+0xef/0x640 [ 1075.257275][T23896] ? tomoyo_realpath_from_path+0xef/0x640 [ 1075.257315][T23896] tomoyo_realpath_from_path+0xef/0x640 [ 1075.257358][T23896] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1075.257386][T23896] tomoyo_path_number_perm+0x246/0x5f0 [ 1075.257416][T23896] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1075.257441][T23896] ? __lock_acquire+0x683/0x2ce0 [ 1075.257507][T23896] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1075.257535][T23896] ? hook_file_ioctl+0x1f3/0x600 [ 1075.257616][T23896] ? lockdep_hardirqs_on+0x7a/0x110 [ 1075.257664][T23896] ? __fget_files+0x2a/0x420 [ 1075.257737][T23896] ? __fget_files+0x2a/0x420 [ 1075.257761][T23896] ? __fget_files+0x3a8/0x420 [ 1075.257784][T23896] ? __fget_files+0x2a/0x420 [ 1075.257813][T23896] security_file_ioctl+0xc3/0x2a0 [ 1075.257865][T23896] __se_sys_ioctl+0x47/0x170 [ 1075.257940][T23896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.257966][T23896] do_syscall_64+0x174/0x580 [ 1075.257994][T23896] ? clear_bhb_loop+0x40/0x90 [ 1075.258030][T23896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.258053][T23896] RIP: 0033:0x7f9fe035de99 [ 1075.258074][T23896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1075.258094][T23896] RSP: 002b:00007f9fde5b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1075.258118][T23896] RAX: ffffffffffffffda RBX: 00007f9fe05e5fa0 RCX: 00007f9fe035de99 [ 1075.258135][T23896] RDX: 0000200000001400 RSI: 00000000000007b1 RDI: 0000000000000003 [ 1075.258150][T23896] RBP: 00007f9fde5b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.258165][T23896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1075.258178][T23896] R13: 00007f9fe05e6038 R14: 00007f9fe05e5fa0 R15: 00007ffd7f4094c8 [ 1075.258215][T23896] [ 1075.283160][T23896] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1076.195567][T23908] FAULT_INJECTION: forcing a failure. [ 1076.195567][T23908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1076.195608][T23908] CPU: 0 UID: 0 PID: 23908 Comm: syz.9.6884 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1076.195647][T23908] Tainted: [L]=SOFTLOCKUP [ 1076.195657][T23908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1076.195670][T23908] Call Trace: [ 1076.195679][T23908] [ 1076.195689][T23908] dump_stack_lvl+0xe8/0x150 [ 1076.195729][T23908] should_fail_ex+0x467/0x600 [ 1076.195771][T23908] _copy_to_user+0x31/0xb0 [ 1076.195802][T23908] inotify_read+0x350/0xbf0 [ 1076.195929][T23908] ? __pfx_inotify_read+0x10/0x10 [ 1076.195956][T23908] ? __pfx_woken_wake_function+0x10/0x10 [ 1076.195981][T23908] ? bpf_lsm_file_permission+0x9/0x20 [ 1076.196087][T23908] ? security_file_permission+0x75/0x260 [ 1076.196117][T23908] ? rw_verify_area+0x250/0x4d0 [ 1076.196149][T23908] ? __pfx_inotify_read+0x10/0x10 [ 1076.196171][T23908] vfs_read+0x219/0xa90 [ 1076.196208][T23908] ? __pfx_vfs_read+0x10/0x10 [ 1076.196240][T23908] ? __fget_files+0x2a/0x420 [ 1076.196269][T23908] ? __fget_files+0x2a/0x420 [ 1076.196292][T23908] ? __fget_files+0x3a8/0x420 [ 1076.196316][T23908] ? __fget_files+0x2a/0x420 [ 1076.196350][T23908] ksys_read+0x156/0x270 [ 1076.196382][T23908] ? __pfx_ksys_read+0x10/0x10 [ 1076.196420][T23908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.196446][T23908] do_syscall_64+0x174/0x580 [ 1076.196474][T23908] ? trace_irq_disable+0x3b/0x140 [ 1076.196528][T23908] ? clear_bhb_loop+0x40/0x90 [ 1076.196561][T23908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.196585][T23908] RIP: 0033:0x7f9fe035de99 [ 1076.196607][T23908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.196626][T23908] RSP: 002b:00007f9fde5b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1076.196649][T23908] RAX: ffffffffffffffda RBX: 00007f9fe05e5fa0 RCX: 00007f9fe035de99 [ 1076.196667][T23908] RDX: 0000000000002020 RSI: 0000200000001fc0 RDI: 0000000000000003 [ 1076.196682][T23908] RBP: 00007f9fde5b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1076.196697][T23908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.196710][T23908] R13: 00007f9fe05e6038 R14: 00007f9fe05e5fa0 R15: 00007ffd7f4094c8 [ 1076.196745][T23908] [ 1076.987014][T23933] FAULT_INJECTION: forcing a failure. [ 1076.987014][T23933] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.987051][T23933] CPU: 1 UID: 0 PID: 23933 Comm: syz.5.6890 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1076.987082][T23933] Tainted: [L]=SOFTLOCKUP [ 1076.987091][T23933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1076.987105][T23933] Call Trace: [ 1076.987114][T23933] [ 1076.987125][T23933] dump_stack_lvl+0xe8/0x150 [ 1076.987171][T23933] should_fail_ex+0x467/0x600 [ 1076.987210][T23933] ? __pfx_dev_uevent_name+0x10/0x10 [ 1076.987266][T23933] should_failslab+0xa8/0x100 [ 1076.987296][T23933] __kmalloc_cache_noprof+0xa0/0x6b0 [ 1076.987324][T23933] ? kobject_uevent_env+0x28c/0x9e0 [ 1076.987359][T23933] ? kobject_uevent_env+0x28c/0x9e0 [ 1076.987398][T23933] ? __pfx_dev_uevent_name+0x10/0x10 [ 1076.987422][T23933] kobject_uevent_env+0x28c/0x9e0 [ 1076.987470][T23933] rfkill_set_block+0x36c/0x4f0 [ 1076.987590][T23933] rfkill_fop_write+0x43e/0x570 [ 1076.987623][T23933] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1076.987652][T23933] ? security_file_permission+0x10/0x260 [ 1076.987681][T23933] ? rw_verify_area+0x209/0x4d0 [ 1076.987713][T23933] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1076.987741][T23933] vfs_write+0x29f/0xbb0 [ 1076.987786][T23933] ? __pfx_vfs_write+0x10/0x10 [ 1076.987817][T23933] ? __fget_files+0x2a/0x420 [ 1076.987846][T23933] ? __fget_files+0x2a/0x420 [ 1076.987869][T23933] ? __fget_files+0x3a8/0x420 [ 1076.987892][T23933] ? __fget_files+0x2a/0x420 [ 1076.987925][T23933] ksys_write+0x156/0x270 [ 1076.987957][T23933] ? __pfx_ksys_write+0x10/0x10 [ 1076.987997][T23933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.988022][T23933] do_syscall_64+0x174/0x580 [ 1076.988050][T23933] ? trace_irq_disable+0x3b/0x140 [ 1076.988074][T23933] ? clear_bhb_loop+0x40/0x90 [ 1076.988103][T23933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.988127][T23933] RIP: 0033:0x7fcfe5d4de99 [ 1076.988149][T23933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.988169][T23933] RSP: 002b:00007fcfe3fa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1076.988193][T23933] RAX: ffffffffffffffda RBX: 00007fcfe5fd5fa0 RCX: 00007fcfe5d4de99 [ 1076.988210][T23933] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 1076.988224][T23933] RBP: 00007fcfe3fa6090 R08: 0000000000000000 R09: 0000000000000000 [ 1076.988238][T23933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.988252][T23933] R13: 00007fcfe5fd6038 R14: 00007fcfe5fd5fa0 R15: 00007fff5dd87578 [ 1076.988288][T23933] [ 1077.274280][ T37] audit: type=1326 audit(1785153827.339:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23927 comm="syz.9.6889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe035de99 code=0x7ffc0000 [ 1077.274340][ T37] audit: type=1326 audit(1785153827.339:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23927 comm="syz.9.6889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9fe031abfb code=0x7ffc0000 [ 1077.274398][ T37] audit: type=1326 audit(1785153827.339:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23927 comm="syz.9.6889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f9fe031a2ec code=0x7ffc0000 [ 1077.274452][ T37] audit: type=1326 audit(1785153827.339:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23927 comm="syz.9.6889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe035de99 code=0x7ffc0000 [ 1077.274788][ T37] audit: type=1326 audit(1785153827.349:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23927 comm="syz.9.6889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9fe035de99 code=0x7ffc0000 [ 1077.275554][ T37] audit: type=1326 audit(1785153827.349:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23927 comm="syz.9.6889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9fe031a34e code=0x7ffc0000 [ 1077.750484][T23939] FAULT_INJECTION: forcing a failure. [ 1077.750484][T23939] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.750523][T23939] CPU: 1 UID: 0 PID: 23939 Comm: syz.9.6892 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1077.750553][T23939] Tainted: [L]=SOFTLOCKUP [ 1077.750561][T23939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1077.750576][T23939] Call Trace: [ 1077.750585][T23939] [ 1077.750595][T23939] dump_stack_lvl+0xe8/0x150 [ 1077.750640][T23939] should_fail_ex+0x467/0x600 [ 1077.750682][T23939] should_failslab+0xa8/0x100 [ 1077.750722][T23939] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1077.750748][T23939] ? __alloc_skb+0x1d7/0x7a0 [ 1077.750775][T23939] ? __alloc_skb+0x1d7/0x7a0 [ 1077.750807][T23939] __alloc_skb+0x1d7/0x7a0 [ 1077.750837][T23939] netlink_sendmsg+0x5d4/0xb40 [ 1077.750984][T23939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1077.751016][T23939] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1077.751051][T23939] ? __kernel_text_address+0xd/0x30 [ 1077.751075][T23939] ? unwind_get_return_address+0x4d/0x90 [ 1077.751136][T23939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1077.751165][T23939] sock_sendmsg_nosec+0x13a/0x180 [ 1077.751264][T23939] ____sys_sendmsg+0x565/0x870 [ 1077.751295][T23939] ? __might_fault+0xaf/0x130 [ 1077.751361][T23939] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1077.751401][T23939] ? import_iovec+0x73/0xa0 [ 1077.751433][T23939] ___sys_sendmsg+0x2a5/0x360 [ 1077.751461][T23939] ? __lock_acquire+0x683/0x2ce0 [ 1077.751492][T23939] ? __pfx____sys_sendmsg+0x10/0x10 [ 1077.751558][T23939] ? __fget_files+0x2a/0x420 [ 1077.751583][T23939] ? __fget_files+0x3a8/0x420 [ 1077.751619][T23939] __x64_sys_sendmsg+0x1b7/0x290 [ 1077.751651][T23939] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1077.751707][T23939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.751733][T23939] do_syscall_64+0x174/0x580 [ 1077.751761][T23939] ? trace_irq_disable+0x3b/0x140 [ 1077.751784][T23939] ? clear_bhb_loop+0x40/0x90 [ 1077.751812][T23939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.751834][T23939] RIP: 0033:0x7f9fe035de99 [ 1077.751855][T23939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1077.751874][T23939] RSP: 002b:00007f9fde5b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1077.751898][T23939] RAX: ffffffffffffffda RBX: 00007f9fe05e5fa0 RCX: 00007f9fe035de99 [ 1077.751915][T23939] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1077.751930][T23939] RBP: 00007f9fde5b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1077.751944][T23939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1077.751958][T23939] R13: 00007f9fe05e6038 R14: 00007f9fe05e5fa0 R15: 00007ffd7f4094c8 [ 1077.751994][T23939] [ 1081.103376][T23639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.103477][T23639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.103736][T23639] bridge_slave_0: entered allmulticast mode [ 1081.142574][T23639] bridge_slave_0: entered promiscuous mode [ 1081.778171][T23639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.778302][T23639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.778631][T23639] bridge_slave_1: entered allmulticast mode [ 1081.815746][T23639] bridge_slave_1: entered promiscuous mode [ 1081.864325][T23933] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1081.864353][T23933] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1081.906050][T23933] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1081.906074][T23933] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1082.027085][T14675] bridge_slave_1: left allmulticast mode [ 1082.027125][T14675] bridge_slave_1: left promiscuous mode [ 1082.027414][T14675] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.194201][T23962] Bluetooth: hci6: command 0x0406 tx timeout [ 1082.228735][T23993] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6899'. [ 1082.228764][T23993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1082.283152][T14675] bridge_slave_0: left allmulticast mode [ 1082.283219][T14675] bridge_slave_0: left promiscuous mode [ 1082.283436][T14675] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.698091][T24000] netlink: 'syz.9.6902': attribute type 2 has an invalid length. [ 1082.911828][T24002] netlink: 52 bytes leftover after parsing attributes in process `syz.9.6903'. [ 1084.435150][ T37] audit: type=1804 audit(1785153834.419:579): pid=24006 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.9.6904" name="/newroot/82/file0" dev="tmpfs" ino=462 res=1 errno=0 [ 1085.966991][T14675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1086.035911][T14675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1086.093127][T24021] FAULT_INJECTION: forcing a failure. [ 1086.093127][T24021] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.093166][T24021] CPU: 1 UID: 0 PID: 24021 Comm: syz.7.6907 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1086.093198][T24021] Tainted: [L]=SOFTLOCKUP [ 1086.093206][T24021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1086.093220][T24021] Call Trace: [ 1086.093229][T24021] [ 1086.093239][T24021] dump_stack_lvl+0xe8/0x150 [ 1086.093281][T24021] should_fail_ex+0x467/0x600 [ 1086.093324][T24021] should_failslab+0xa8/0x100 [ 1086.093355][T24021] __kmalloc_noprof+0xfe/0x780 [ 1086.093383][T24021] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1086.093407][T24021] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1086.093440][T24021] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1086.093472][T24021] genl_family_rcv_msg_doit+0xda/0x340 [ 1086.093518][T24021] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1086.093560][T24021] ? rcu_is_watching+0x15/0xb0 [ 1086.093591][T24021] ? rcu_is_watching+0x15/0xb0 [ 1086.093622][T24021] ? cap_capable+0x123/0x460 [ 1086.093726][T24021] ? safesetid_security_capable+0xa9/0x1a0 [ 1086.093757][T24021] ? bpf_lsm_capable+0x9/0x20 [ 1086.093793][T24021] ? security_capable+0x7e/0x2c0 [ 1086.093829][T24021] genl_rcv_msg+0x614/0x7a0 [ 1086.093871][T24021] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1086.093903][T24021] ? ref_tracker_free+0x668/0x820 [ 1086.093972][T24021] ? __pfx_wg_set_device_doit+0x10/0x10 [ 1086.094074][T24021] ? __pfx_ref_tracker_free+0x10/0x10 [ 1086.094108][T24021] netlink_rcv_skb+0x226/0x4a0 [ 1086.094139][T24021] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1086.094175][T24021] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1086.094215][T24021] ? netlink_deliver_tap+0x2e/0x1b0 [ 1086.094243][T24021] ? netlink_deliver_tap+0x2e/0x1b0 [ 1086.094277][T24021] genl_rcv+0x28/0x40 [ 1086.094307][T24021] netlink_unicast+0x7f5/0x990 [ 1086.094346][T24021] netlink_sendmsg+0x813/0xb40 [ 1086.094385][T24021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1086.094417][T24021] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1086.094453][T24021] ? __kernel_text_address+0xd/0x30 [ 1086.094476][T24021] ? unwind_get_return_address+0x4d/0x90 [ 1086.094506][T24021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1086.094545][T24021] sock_sendmsg_nosec+0x13a/0x180 [ 1086.094585][T24021] ____sys_sendmsg+0x565/0x870 [ 1086.094614][T24021] ? __might_fault+0xaf/0x130 [ 1086.094647][T24021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1086.094686][T24021] ? import_iovec+0x73/0xa0 [ 1086.094719][T24021] ___sys_sendmsg+0x2a5/0x360 [ 1086.094747][T24021] ? __lock_acquire+0x683/0x2ce0 [ 1086.094779][T24021] ? __pfx____sys_sendmsg+0x10/0x10 [ 1086.094850][T24021] ? __fget_files+0x2a/0x420 [ 1086.094874][T24021] ? __fget_files+0x3a8/0x420 [ 1086.094911][T24021] __x64_sys_sendmsg+0x1b7/0x290 [ 1086.094944][T24021] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1086.094996][T24021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.095021][T24021] do_syscall_64+0x174/0x580 [ 1086.095051][T24021] ? trace_irq_disable+0x3b/0x140 [ 1086.095075][T24021] ? clear_bhb_loop+0x40/0x90 [ 1086.095104][T24021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.095128][T24021] RIP: 0033:0x7fc0f64bde99 [ 1086.095150][T24021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1086.095171][T24021] RSP: 002b:00007fc0f4716028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1086.095195][T24021] RAX: ffffffffffffffda RBX: 00007fc0f6745fa0 RCX: 00007fc0f64bde99 [ 1086.095212][T24021] RDX: 0000000002000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1086.095227][T24021] RBP: 00007fc0f4716090 R08: 0000000000000000 R09: 0000000000000000 [ 1086.095241][T24021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1086.095254][T24021] R13: 00007fc0f6746038 R14: 00007fc0f6745fa0 R15: 00007fffad5478a8 [ 1086.095292][T24021] [ 1086.241891][T14675] bond0 (unregistering): Released all slaves [ 1087.171194][T23639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1087.439270][T24032] netlink: 'syz.9.6910': attribute type 1 has an invalid length. [ 1087.567974][T23639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.545696][T23933] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1088.545721][T23933] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1088.553035][T23639] team0: Port device team_slave_0 added [ 1088.590149][T23639] team0: Port device team_slave_1 added [ 1088.759687][T23639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1088.759706][T23639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1088.759735][T23639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1088.913307][T23639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1088.913326][T23639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1088.913357][T23639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1088.970230][T24063] FAULT_INJECTION: forcing a failure. [ 1088.970230][T24063] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1088.970288][T24063] CPU: 0 UID: 0 PID: 24063 Comm: syz.9.6912 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1088.970319][T24063] Tainted: [L]=SOFTLOCKUP [ 1088.970328][T24063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1088.970341][T24063] Call Trace: [ 1088.970351][T24063] [ 1088.970360][T24063] dump_stack_lvl+0xe8/0x150 [ 1088.970402][T24063] should_fail_ex+0x467/0x600 [ 1088.970445][T24063] prepare_alloc_pages+0x223/0x690 [ 1088.970573][T24063] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1088.970608][T24063] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1088.970642][T24063] ? __pfx_policy_nodemask+0x10/0x10 [ 1088.970716][T24063] alloc_pages_mpol+0xce/0x280 [ 1088.970751][T24063] alloc_pages_noprof+0xd2/0x2f0 [ 1088.970785][T24063] pte_alloc_one+0x22/0x380 [ 1088.970847][T24063] __pte_alloc+0x25/0x1a0 [ 1088.970914][T24063] do_pte_missing+0x1bda/0x28f0 [ 1088.970947][T24063] ? rt_spin_unlock+0x163/0x200 [ 1088.970988][T24063] ? __pmd_alloc+0x41b/0x5e0 [ 1088.971017][T24063] handle_mm_fault+0xd28/0x13f0 [ 1088.971050][T24063] ? handle_mm_fault+0xe8/0x13f0 [ 1088.971076][T24063] ? __pfx_handle_mm_fault+0x10/0x10 [ 1088.971124][T24063] ? lock_mm_and_find_vma+0xa7/0x340 [ 1088.971156][T24063] do_user_addr_fault+0x744/0x1340 [ 1088.971197][T24063] exc_page_fault+0x6a/0xc0 [ 1088.971226][T24063] asm_exc_page_fault+0x26/0x30 [ 1088.971250][T24063] RIP: 0010:__put_user_4+0xd/0x30 [ 1088.971278][T24063] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1088.971298][T24063] RSP: 0018:ffffc90005867be0 EFLAGS: 00050202 [ 1088.971319][T24063] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000040 [ 1088.971334][T24063] RDX: 0000000000000000 RSI: ffffffff8daf5218 RDI: ffffffff8bca7780 [ 1088.971351][T24063] RBP: 0000000000000000 R08: ffffffff821793ff R09: 0000000000000000 [ 1088.971366][T24063] R10: 0000000000000000 R11: ffff8880387fe2b0 R12: dffffc0000000000 [ 1088.971382][T24063] R13: ffff88805e507090 R14: ffff88805e507010 R15: ffff88805e507090 [ 1088.971407][T24063] ? __might_fault+0xaf/0x130 [ 1088.971441][T24063] fanotify_ioctl+0xcf/0xf0 [ 1088.971466][T24063] ? __pfx_fanotify_ioctl+0x10/0x10 [ 1088.971495][T24063] do_vfs_ioctl+0xf77/0x1550 [ 1088.971531][T24063] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1088.971579][T24063] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1088.971606][T24063] ? hook_file_ioctl+0x1f3/0x600 [ 1088.971646][T24063] ? __asan_memset+0x22/0x50 [ 1088.971712][T24063] ? smack_file_ioctl+0x331/0x360 [ 1088.971770][T24063] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1088.971807][T24063] ? __fget_files+0x2a/0x420 [ 1088.971830][T24063] ? __fget_files+0x3a8/0x420 [ 1088.971853][T24063] ? __fget_files+0x2a/0x420 [ 1088.971890][T24063] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1088.971917][T24063] __se_sys_ioctl+0x82/0x170 [ 1088.971948][T24063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.971974][T24063] do_syscall_64+0x174/0x580 [ 1088.972002][T24063] ? trace_irq_disable+0x3b/0x140 [ 1088.972026][T24063] ? clear_bhb_loop+0x40/0x90 [ 1088.972056][T24063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.972079][T24063] RIP: 0033:0x7f9fe035de99 [ 1088.972101][T24063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.972120][T24063] RSP: 002b:00007f9fde5b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1088.972143][T24063] RAX: ffffffffffffffda RBX: 00007f9fe05e5fa0 RCX: 00007f9fe035de99 [ 1088.972160][T24063] RDX: 0000200000000040 RSI: 000000000000541b RDI: 0000000000000003 [ 1088.972175][T24063] RBP: 00007f9fde5b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.972189][T24063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1088.972202][T24063] R13: 00007f9fe05e6038 R14: 00007f9fe05e5fa0 R15: 00007ffd7f4094c8 [ 1088.972239][T24063] [ 1089.581139][T23639] hsr_slave_0: entered promiscuous mode [ 1089.600838][T23639] hsr_slave_1: entered promiscuous mode [ 1089.601958][T23639] debugfs: 'hsr0' already exists in 'hsr' [ 1089.601985][T23639] Cannot create hsr debugfs directory [ 1089.652322][T24068] IPv6: Can't replace route, no match found [ 1090.108316][ T37] audit: type=1326 audit(1785153840.179:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24075 comm="syz.7.6914" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f64bde99 code=0x7ffc0000 [ 1090.110129][ T37] audit: type=1326 audit(1785153840.179:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24075 comm="syz.7.6914" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f64bde99 code=0x7ffc0000 [ 1090.110193][ T37] audit: type=1326 audit(1785153840.179:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24075 comm="syz.7.6914" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f64bde99 code=0x7ffc0000 [ 1090.110319][ T37] audit: type=1326 audit(1785153840.179:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24075 comm="syz.7.6914" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fc0f64bde99 code=0x7ffc0000 [ 1090.110616][ T37] audit: type=1326 audit(1785153840.179:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24075 comm="syz.7.6914" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f64bde99 code=0x7ffc0000 [ 1090.112381][ T37] audit: type=1326 audit(1785153840.179:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24075 comm="syz.7.6914" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc0f647e6ce code=0x7ffc0000 [ 1090.112557][ T37] audit: type=1326 audit(1785153840.179:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24075 comm="syz.7.6914" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f64bde99 code=0x7ffc0000 [ 1090.123824][ T37] audit: type=1326 audit(1785153840.179:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24075 comm="syz.7.6914" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc0f647e6ce code=0x7ffc0000 [ 1090.123970][ T37] audit: type=1326 audit(1785153840.189:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24075 comm="syz.7.6914" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc0f647e6ce code=0x7ffc0000 [ 1090.124100][ T37] audit: type=1326 audit(1785153840.189:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24075 comm="syz.7.6914" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc0f647e6ce code=0x7ffc0000 [ 1090.626201][T24076] bond0: option resend_igmp: invalid value (3131) [ 1090.626227][T24076] bond0: option resend_igmp: allowed values 0 - 255 [ 1090.954666][T23933] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1090.954692][T23933] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1091.447574][T23933] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1091.447598][T23933] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1091.828980][T23933] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1091.829008][T23933] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1091.947931][ T5711] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1092.107145][ T5711] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.107183][ T5711] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1092.107227][ T5711] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1092.107252][ T5711] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.172711][ T5711] usb 10-1: config 0 descriptor?? [ 1092.616596][ T5711] savu 0003:1E7D:2D5A.0026: item fetching failed at offset 3/6 [ 1092.619006][ T5711] savu 0003:1E7D:2D5A.0026: parse failed [ 1092.619087][ T5711] savu 0003:1E7D:2D5A.0026: probe with driver savu failed with error -22 [ 1092.947364][ T5620] usb 10-1: USB disconnect, device number 10 [ 1093.343643][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1094.806330][ T38] INFO: task syz.3.6118:21606 blocked for more than 143 seconds. [ 1094.806359][ T38] Tainted: G L syzkaller #0 [ 1094.806373][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1094.806384][ T38] task:syz.3.6118 state:D stack:28424 pid:21606 tgid:21605 ppid:5606 task_flags:0x400140 flags:0x00080002 [ 1094.806461][ T38] Call Trace: [ 1094.806470][ T38] [ 1094.806484][ T38] __schedule+0x16dc/0x5500 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1094.806536][ T38] ? __pfx___schedule+0x10/0x10 [ 1094.806563][ T38] ? irqentry_exit+0x218/0x8f0 [ 1094.806589][ T38] ? trace_irq_disable+0x3b/0x140 [ 1094.806615][ T38] ? __pfx___schedule+0x10/0x10 [ 1094.806636][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 1094.806684][ T38] rt_mutex_schedule+0x76/0xf0 [ 1094.806777][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 1094.806822][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 1094.806860][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1094.806909][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1094.806945][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1094.806990][ T38] ? write_versions+0x95/0xe30 [ 1094.807132][ T38] ? write_versions+0x95/0xe30 [ 1094.807172][ T38] ? write_versions+0x95/0xe30 [ 1094.807205][ T38] mutex_lock_nested+0x168/0x1d0 [ 1094.807246][ T38] write_versions+0x95/0xe30 [ 1094.807278][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 1094.807313][ T38] ? __pfx_write_versions+0x10/0x10 [ 1094.807353][ T38] ? __pfx_write_versions+0x10/0x10 [ 1094.807399][ T38] nfsctl_transaction_write+0x112/0x160 [ 1094.807438][ T38] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1094.807474][ T38] vfs_write+0x29f/0xbb0 [ 1094.807517][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1094.807551][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1094.807581][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 1094.807642][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1094.807673][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 1094.807708][ T38] ? fdget_pos+0x252/0x320 [ 1094.807744][ T38] ksys_write+0x156/0x270 [ 1094.807778][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1094.807820][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.807847][ T38] do_syscall_64+0x174/0x580 [ 1094.807875][ T38] ? trace_irq_disable+0x3b/0x140 [ 1094.807907][ T38] ? clear_bhb_loop+0x40/0x90 [ 1094.807938][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.807963][ T38] RIP: 0033:0x7f3452cbde99 [ 1094.807984][ T38] RSP: 002b:00007f3450f16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1094.808009][ T38] RAX: ffffffffffffffda RBX: 00007f3452f45fa0 RCX: 00007f3452cbde99 [ 1094.808027][ T38] RDX: 0000000000000006 RSI: 0000200000000180 RDI: 0000000000000003 [ 1094.808042][ T38] RBP: 00007f3452d53eaf R08: 0000000000000000 R09: 0000000000000000 [ 1094.808057][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1094.808071][ T38] R13: 00007f3452f46038 R14: 00007f3452f45fa0 R15: 00007ffe80a6cc48 [ 1094.808108][ T38] [ 1094.808120][ T38] INFO: task syz.3.6118:21607 blocked for more than 143 seconds. [ 1094.808141][ T38] Tainted: G L syzkaller #0 [ 1094.808155][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1094.808166][ T38] task:syz.3.6118 state:D stack:28424 pid:21607 tgid:21605 ppid:5606 task_flags:0x400140 flags:0x00080002 [ 1094.808239][ T38] Call Trace: [ 1094.808247][ T38] [ 1094.808261][ T38] __schedule+0x16dc/0x5500 [ 1094.808318][ T38] ? __pfx___schedule+0x10/0x10 [ 1094.808361][ T38] rt_mutex_schedule+0x76/0xf0 [ 1094.808390][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 1094.808443][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1094.808482][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1094.808518][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1094.808575][ T38] ? lock_acquire+0x221/0x350 [ 1094.808608][ T38] ? write_maxblksize+0x40f/0x630 [ 1094.808642][ T38] mutex_lock_nested+0x168/0x1d0 [ 1094.808681][ T38] write_maxblksize+0x40f/0x630 [ 1094.808740][ T38] ? __pfx_write_maxblksize+0x10/0x10 [ 1094.808794][ T38] ? _copy_from_user+0x94/0xb0 [ 1094.808826][ T38] ? simple_transaction_get+0x130/0x170 [ 1094.808910][ T38] nfsctl_transaction_write+0x112/0x160 [ 1094.808949][ T38] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1094.808986][ T38] vfs_write+0x29f/0xbb0 [ 1094.809026][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1094.809060][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1094.809089][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 1094.809118][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1094.809147][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 1094.809183][ T38] ? fdget_pos+0x252/0x320 [ 1094.809217][ T38] ksys_write+0x156/0x270 [ 1094.809250][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1094.809291][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.809319][ T38] do_syscall_64+0x174/0x580 [ 1094.809347][ T38] ? trace_irq_disable+0x3b/0x140 [ 1094.809371][ T38] ? clear_bhb_loop+0x40/0x90 [ 1094.809401][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.809426][ T38] RIP: 0033:0x7f3452cbde99 [ 1094.809447][ T38] RSP: 002b:00007f3450ef5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1094.809471][ T38] RAX: ffffffffffffffda RBX: 00007f3452f46090 RCX: 00007f3452cbde99 [ 1094.809489][ T38] RDX: 0000000000000006 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1094.809503][ T38] RBP: 00007f3452d53eaf R08: 0000000000000000 R09: 0000000000000000 [ 1094.809518][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1094.809533][ T38] R13: 00007f3452f46128 R14: 00007f3452f46090 R15: 00007ffe80a6cc48 [ 1094.809569][ T38] [ 1094.809626][ T38] [ 1094.809626][ T38] Showing all locks held in the system: [ 1094.809643][ T38] 1 lock held by khungtaskd/38: [ 1094.809658][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1094.809756][ T38] 2 locks held by getty/5356: [ 1094.809769][ T38] #0: ffff8880368c00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1094.809911][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1094.810013][ T38] 2 locks held by syz-executor/5605: [ 1094.810043][ T38] #0: ffff888036f360d0 (&type->s_umount_key#69){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 1094.810104][ T38] #1: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1094.810172][ T38] 4 locks held by kworker/u8:45/14675: [ 1094.810186][ T38] #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1094.810246][ T38] #1: ffffc900059c7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1094.810306][ T38] #2: ffffffff8f5a3240 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1094.810395][ T38] #3: ffffffff8f8c2818 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xd1/0x300 [ 1094.810458][ T38] 3 locks held by kworker/1:1/17172: [ 1094.810471][ T38] #0: ffff88813ff1b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1094.810532][ T38] #1: ffffc90005cd7c40 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1094.810595][ T38] #2: ffffffff8f8c2818 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1094.810659][ T38] 2 locks held by syz.4.4733/18385: [ 1094.810672][ T38] #0: ffffffff8f6230a0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1094.810736][ T38] #1: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x136/0x16e0 [ 1094.810803][ T38] 3 locks held by syz.3.6118/21606: [ 1094.810817][ T38] #0: ffff88802bd0d728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1094.810874][ T38] #1: ffff888063d76500 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1094.810947][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 1094.811012][ T38] 3 locks held by syz.3.6118/21607: [ 1094.811025][ T38] #0: ffff88802bd0c128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1094.811080][ T38] #1: ffff888063d76500 (sb_writers#26){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1094.811145][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_maxblksize+0x40f/0x630 [ 1094.811211][ T38] 1 lock held by syz.8.6621/22982: [ 1094.811225][ T38] #0: ffff888036f360d0 (&type->s_umount_key#69){++++}-{4:4}, at: super_lock+0x2d6/0x3d0 [ 1094.811287][ T38] 1 lock held by syz-executor/23180: [ 1094.811301][ T38] #0: ffffffff8f8c2818 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xd1/0x300 [ 1094.811359][ T38] 8 locks held by syz-executor/23639: [ 1094.811374][ T38] 2 locks held by syz.5.6890/23933: [ 1094.811388][ T38] #0: ffffffff8f8c2818 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x199/0x570 [ 1094.811448][ T38] #1: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_rfkill_set_block+0x1e/0x50 [ 1094.811620][ T38] 2 locks held by syz-executor/24119: [ 1094.811634][ T38] #0: ffff88802636a188 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x33/0x6f0 [ 1094.811738][ T38] #1: ffffffff8f8c2818 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x33/0x9d0 [ 1094.811797][ T38] 2 locks held by syz-executor/24133: [ 1094.811810][ T38] #0: ffff8880398be988 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x33/0x6f0 [ 1094.811865][ T38] #1: ffffffff8f8c2818 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x33/0x9d0 [ 1094.811939][ T38] 4 locks held by sed/24148: [ 1094.811952][ T38] [ 1094.811958][ T38] ============================================= [ 1094.811958][ T38] [ 1094.811969][ T38] NMI backtrace for cpu 1 [ 1094.811988][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1094.812018][ T38] Tainted: [L]=SOFTLOCKUP [ 1094.812026][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1094.812039][ T38] Call Trace: [ 1094.812049][ T38] [ 1094.812058][ T38] dump_stack_lvl+0xe8/0x150 [ 1094.812098][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1094.812152][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1094.812215][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1094.812257][ T38] sys_info+0x135/0x170 [ 1094.812289][ T38] watchdog+0xfd7/0x1030 [ 1094.812321][ T38] ? watchdog+0x1c7/0x1030 [ 1094.812350][ T38] kthread+0x388/0x470 [ 1094.812388][ T38] ? __pfx_watchdog+0x10/0x10 [ 1094.812408][ T38] ? __pfx_kthread+0x10/0x10 [ 1094.812445][ T38] ret_from_fork+0x514/0xb70 [ 1094.812485][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1094.812521][ T38] ? __switch_to+0xc89/0x1420 [ 1094.812557][ T38] ? __pfx_kthread+0x10/0x10 [ 1094.812595][ T38] ret_from_fork_asm+0x1a/0x30 [ 1094.812637][ T38] [ 1094.812671][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1094.812703][ C0] NMI backtrace for cpu 0 [ 1094.812721][ C0] CPU: 0 UID: 0 PID: 24148 Comm: sed Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1094.812748][ C0] Tainted: [L]=SOFTLOCKUP [ 1094.812756][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1094.812767][ C0] RIP: 0010:__zap_vma_range+0x2323/0x49e0 [ 1094.812798][ C0] Code: 24 58 8d 73 01 31 ff e8 cb f3 af ff ff c3 0f 88 0c 03 00 00 e8 0e ef af ff 48 8b 5c 24 40 41 0f b6 cc 48 8b bc 24 98 00 00 00 <48> 8b b4 24 f0 00 00 00 ba 01 00 00 00 e8 8b 1c 04 00 84 c0 0f 85 [ 1094.812815][ C0] RSP: 0018:ffffc9000806f5e0 EFLAGS: 00000293 [ 1094.812832][ C0] RAX: ffffffff8215dbe2 RBX: ffff88806eb5b630 RCX: 0000000000000000 [ 1094.812846][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000806fac0 [ 1094.812858][ C0] RBP: ffffc9000806f8d0 R08: 0000000000000000 R09: 0000000000000000 [ 1094.812871][ C0] R10: dffffc0000000000 R11: fffff9400008a4bf R12: 0000000000000000 [ 1094.812886][ C0] R13: dffffc0000000000 R14: 00007f4654cd1000 R15: 00007f4654cc6000 [ 1094.812904][ C0] FS: 0000000000000000(0000) GS:ffff888125c41000(0000) knlGS:0000000000000000 [ 1094.812920][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1094.812945][ C0] CR2: 00007fe42d7ee368 CR3: 000000002b74a000 CR4: 00000000003526f0 [ 1094.812962][ C0] Call Trace: [ 1094.812969][ C0] [ 1094.813006][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 1094.813038][ C0] ? mas_find+0xab1/0xcf0 [ 1094.813060][ C0] ? unmap_vmas+0x1b9/0x550 [ 1094.813086][ C0] unmap_vmas+0x390/0x550 [ 1094.813116][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1094.813155][ C0] exit_mmap+0x293/0x9f0 [ 1094.813218][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1094.813235][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1094.813293][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1094.813321][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1094.813367][ C0] ? arch_uprobe_clear_state+0x1c8/0x240 [ 1094.813421][ C0] ? uprobe_clear_state+0x2af/0x3e0 [ 1094.813489][ C0] __mmput+0xcb/0x3d0 [ 1094.813553][ C0] exit_mm+0x186/0x240 [ 1094.813589][ C0] do_exit+0x6cd/0x2360 [ 1094.813604][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1094.813630][ C0] ? reacquire_held_locks+0x104/0x190 [ 1094.813654][ C0] ? __pfx_do_exit+0x10/0x10 [ 1094.813673][ C0] ? rt_spin_unlock+0x157/0x200 [ 1094.813704][ C0] ? rt_spin_unlock+0x163/0x200 [ 1094.813734][ C0] do_group_exit+0x22d/0x2f0 [ 1094.813751][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.813771][ C0] __x64_sys_exit_group+0x3f/0x40 [ 1094.813789][ C0] x64_sys_call+0x221a/0x2240 [ 1094.813806][ C0] do_syscall_64+0x174/0x580 [ 1094.813828][ C0] ? trace_irq_disable+0x3b/0x140 [ 1094.813846][ C0] ? clear_bhb_loop+0x40/0x90 [ 1094.813868][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.813887][ C0] RIP: 0033:0x7f4654ace6c5 [ 1094.813902][ C0] Code: Unable to access opcode bytes at 0x7f4654ace69b. [ 1094.813912][ C0] RSP: 002b:00007ffe7e2bc298 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 1094.813930][ C0] RAX: ffffffffffffffda RBX: 00007f4654bcffe8 RCX: 00007f4654ace6c5 [ 1094.813944][ C0] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 1094.813956][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1094.813967][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1094.813978][ C0] R13: 0000000000000000 R14: 00007f4654bce680 R15: 00007f4654bd0000 [ 1094.814002][ C0] [ 1094.986203][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1094.986274][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1094.986356][ T38] Tainted: [L]=SOFTLOCKUP [ 1094.986387][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1094.986430][ T38] Call Trace: [ 1094.986460][ T38] [ 1094.986489][ T38] vpanic+0x56c/0xa60 [ 1094.986574][ T38] ? __pfx___schedule+0x10/0x10 [ 1094.986646][ T38] ? __pfx_vpanic+0x10/0x10 [ 1094.986726][ T38] panic+0xc5/0xd0 [ 1094.986784][ T38] ? __pfx_panic+0x10/0x10 [ 1094.986811][ T38] ? preempt_schedule_common+0x82/0xd0 [ 1094.986839][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 1094.986869][ T38] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1094.986910][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1094.987002][ T38] watchdog+0x1030/0x1030 [ 1094.987067][ T38] ? watchdog+0x1c7/0x1030 [ 1094.987096][ T38] kthread+0x388/0x470 [ 1094.987127][ T38] ? __pfx_watchdog+0x10/0x10 [ 1094.987142][ T38] ? __pfx_kthread+0x10/0x10 [ 1094.987169][ T38] ret_from_fork+0x514/0xb70 [ 1094.987202][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1094.987228][ T38] ? __switch_to+0xc89/0x1420 [ 1094.987253][ T38] ? __pfx_kthread+0x10/0x10 [ 1094.987280][ T38] ret_from_fork_asm+0x1a/0x30 [ 1094.987309][ T38] [ 1094.993520][ T38] Kernel Offset: disabled