last executing test programs: 19m26.959744496s ago: executing program 1 (id=859): shmget(0x1, 0x1000, 0x2, &(0x7f00003ae000/0x1000)=nil) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x1, 0x284100) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x2, 0x1, 0xfffffe0000000001, 0xfa19, 0xffffffff}, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x40401, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x325) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) preadv(r2, &(0x7f0000000540)=[{&(0x7f0000000040)=""/197, 0xc5}], 0x1, 0x2a, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 19m23.601265321s ago: executing program 1 (id=872): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c7000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x8000}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) landlock_restrict_self(0xffffffffffffffff, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x2, 0x3e, 0x3c, 0x66, 0x0, 0x4, 0x6, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x14, 0xf, 0x3, 0xc, [{@multicast2, 0x4}, {@empty, 0x2}]}]}}, {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x5, 0x0, 0x5dc}}}}}}, 0x0) 19m23.189601287s ago: executing program 1 (id=874): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb78925", 0x7a}], 0x1}}], 0x1, 0x4000900) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, r1, 0x489, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8d1}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe4dc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x810) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) 19m22.85024097s ago: executing program 1 (id=877): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 19m22.527194448s ago: executing program 1 (id=878): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GROUP_PRIORITIES_INFO(0xffffffffffffffff, 0xc0106440, &(0x7f0000000040)={0x3, 0x6}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd25, 0x2, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x2, 0x2, {@in6_addr=@loopback, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x895}, 0x40080c0) 19m21.897667573s ago: executing program 1 (id=884): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x8000}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) landlock_restrict_self(0xffffffffffffffff, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x2, 0x3e, 0x3c, 0x66, 0x0, 0x4, 0x6, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x14, 0xf, 0x3, 0xc, [{@multicast2, 0x4}, {@empty, 0x2}]}]}}, {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x5, 0x0, 0x5dc}}}}}}, 0x0) 19m21.276261445s ago: executing program 32 (id=884): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x8000}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) landlock_restrict_self(0xffffffffffffffff, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x2, 0x3e, 0x3c, 0x66, 0x0, 0x4, 0x6, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x14, 0xf, 0x3, 0xc, [{@multicast2, 0x4}, {@empty, 0x2}]}]}}, {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x5, 0x0, 0x5dc}}}}}}, 0x0) 18m18.840943354s ago: executing program 5 (id=1097): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) (async) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x821, 0x2, @thr={0x0, 0x0}}, 0x0) syz_usb_connect$uac1(0x2, 0x96, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) (async) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fallocate$kvm_guest_memfd(r2, 0x37, 0x2000, 0x5000) (async) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x60) (async) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) r5 = dup2(r4, r3) creat(&(0x7f0000000240)='./bus\x00', 0xc2) (async) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) (async) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="b23d"], 0x0) (async) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) (async) gettid() (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x0, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) openat$urandom(0xffffffffffffff9c, 0x0, 0x10840, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000140)={0x0, 0x401, 0x8081, 0x3a, 0x5, 0x10000000}) (async) setpriority(0x1, 0x0, 0x9) 18m15.263446745s ago: executing program 5 (id=1110): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb789", 0x79}], 0x1}}], 0x1, 0x4000900) r0 = socket(0x10, 0x80002, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040ba124b0700000000000109022400010000102c09040005010300010009210080090122180009058103"], 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x101000) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e000000180002801400100e7387851b289cb1bc97cf5f2fecec2530b9147adb040300c6ff8b76032c35b1cb44fbe89e542606c746c11c371102cf0e7666aa27189809ebfb0219a03c330104a6887fdb81cf045c2e12258cb8db63a248d5a5cfc48ad58a1653b596b01d3434cc46b0a962ca8a8e74d39d091bcddfe41ce77023947c587f545c27987575c55a012560f82bcf334bf696309dfa04f6b4c83805be3fce947e27363ea9a99a0190962073212c9a989077edccb3c01229d5d72729ce", @ANYRES8=0x0], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000340)) readv(r2, &(0x7f0000003400)=[{0x0}, {&(0x7f00000003c0)=""/4096, 0x1000}, {0x0, 0xffffffab}, {0x0}, {0x0}], 0x5) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 18m13.252451234s ago: executing program 5 (id=1116): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000104c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000200003801c00008018000180140001"], 0xd0}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r2 = socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet6(0xa, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000140)=@usbdevfs_driver={0x0, 0x8, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, 0x0, 0x40f6045) r4 = socket(0x1a, 0x3, 0x47e) r5 = syz_open_dev$radio(&(0x7f0000001040), 0x3, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r5, 0xc0485630, &(0x7f0000001100)={0x2, "763ab51871b757a4c180d69a4325824c20c9ce7badf3ee042813323abc68c9e1", 0x2, 0x6, 0x4, 0xff06ff, 0xa}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001080)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=@delqdisc={0x60, 0x25, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0x3}, {0x5, 0x5}, {0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x400}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "e111811f3a8b2c5deaed360004592c74"}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x884}, 0x20000000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r7, &(0x7f0000000680)=""/253, 0xfd, 0x4) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) 18m12.517756374s ago: executing program 5 (id=1121): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb40000000000000000200a00000000000ad47847d8c69a6c1e931c4acfb44b1aebf0f2ea4e54e7cdf05443720f7047ea61fb1a5ab2fb373c03d63087a4360efb119017f37d45738afbdb83e56eac6b5237247e3cac4ab5b4c4070a99a1a2987a789989cae0359", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0xb8}}, 0x0) file_getattr(r1, 0x0, &(0x7f0000006040), 0x27, 0x1000) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 18m12.228911456s ago: executing program 5 (id=1124): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x20, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xc}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x58, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x17}, {0x85, 0x0, 0x0, 0x6a}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r12 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r12, 0xc0184800, &(0x7f0000000340)={0xe939, r11}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r13}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r10, 0x100000000) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffe, 0x4b, 0x0, 0x0) poll(0x0, 0x0, 0x3ff) r14 = userfaultfd(0x801) ioctl$UFFDIO_API(r14, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x117}) 18m11.882662005s ago: executing program 5 (id=1127): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8], 0x0) r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) syz_usb_disconnect(r0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31) syz_usb_disconnect(r0) 18m11.089759255s ago: executing program 33 (id=1127): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8], 0x0) r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) syz_usb_disconnect(r0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31) syz_usb_disconnect(r0) 2m41.546791068s ago: executing program 3 (id=5394): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cgroup\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c0000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8db20200211a0100140003006e657464657673696d3000000000000034001680300001802c000c801400010000f8ffff61080000040000008100000014000107010000007b0500000900000081000000140028"], 0x7c}, 0x1, 0x0, 0x0, 0x8041}, 0x48880) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x3, 0x8, 0xffffffff, 0x2, 0x4, "0b2bad42f057102443a61efa15c9e072e05f0e"}) lseek(r0, 0xffffff60, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000001f00)=""/4093, 0xffd) write$tun(r2, &(0x7f0000000340)={@val={0x0, 0x8e51}, @void, @ipv4=@udp={{0x6, 0x4, 0x1, 0x21, 0x7c, 0x66, 0x0, 0x2, 0x11, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x31}, {[@end]}}, {0x4e21, 0x4e22, 0x64, 0x0, @gue={{0x1, 0x1, 0x2, 0x3b, 0x0, @void}, "9eca8212550662bb4e90c6bb37a6306f136f9aea9a5cca28f0da1cac2993ded72d00679b0bf52bfb77cc865cd6e612de489ccfc3eb19d34ecd58cb8ebf998d4623cafff7f8819ca81598c8e1ce1fc00ec584f96bc14ea45b"}}}}, 0x80) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r3, &(0x7f0000009500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000540)="dc", 0x1}], 0x1, &(0x7f0000001e00)=[{0x10, 0x20c, 0x5}], 0x10}}], 0x1, 0x4048052) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x64, r7, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x4}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xffffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x45000}, 0x64044000) 2m40.885274512s ago: executing program 3 (id=5398): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904", @ANYRES16], 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x5, 0x7, 0xffffffff}) socket$l2tp6(0xa, 0x2, 0x73) r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) 2m39.123614426s ago: executing program 3 (id=5406): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000c00)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="e819", 0x2}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000084000000070000007f0000010000060018000000000000008400000007000000e00000020000000020000000000000008400000008000000fc01000000000000000000000000000130000000000000008400000001000000ff0f0700000004f200000700"/124, @ANYRES32, @ANYBLOB="20000000000000008400000008000000fc0000000000000000000000000000012000000000000000840000000200000002000d"], 0xc0, 0x40000d4}], 0x1, 0x8000) 2m38.73393619s ago: executing program 3 (id=5409): syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) socket(0x18, 0x5, 0xff) socket$vsock_stream(0x28, 0x1, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xf813d845a5e6b0a0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m36.565751186s ago: executing program 3 (id=5410): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x1ff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r7, 0xe) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000010000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 2m35.984496958s ago: executing program 3 (id=5413): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000640)=ANY=[@ANYBLOB="480100001a00330600000000fddbdf25ac141618000000000000000000000000200100000000000000000000000000014e2140044e2280010200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x98) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[]) syz_usb_connect$printer(0x1f, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d5980905eb022000020205090505"], 0x0) r2 = userfaultfd(0x801) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0xfffffffffffffffe, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x321, 0x3, 0x0, 0x101, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES64=r2], 0x108}}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x1a8}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100), 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) ptrace$setregs(0x1a, r5, 0xc, &(0x7f0000000000)) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000002c0)=[@ioring_restriction_register_op={0x0, 0xa}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1b}, @ioring_restriction_sqe_op={0x1, 0x1d}, @ioring_restriction_register_op={0x0, 0x23}, @ioring_restriction_sqe_op={0x1, 0xc}, @ioring_restriction_sqe_flags_required={0x3, 0xf}, @ioring_restriction_sqe_op={0x1, 0xb}, @ioring_restriction_register_op={0x0, 0x24}, @ioring_restriction_sqe_op={0x1, 0x4}, @ioring_restriction_register_op={0x0, 0x1c}, @ioring_restriction_register_op={0x0, 0xd}, @ioring_restriction_sqe_flags_required={0x3, 0x12}], 0xc) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x4, 0x2012, r6, 0x0) move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000007000/0x2000)=nil], &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x2fd9, &(0x7f0000001980)={0x0, 0xdbb1, 0x80000, 0x1, 0x324}, &(0x7f0000001a00), &(0x7f0000001a40), &(0x7f0000000140)) 2m20.953242327s ago: executing program 34 (id=5413): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000640)=ANY=[@ANYBLOB="480100001a00330600000000fddbdf25ac141618000000000000000000000000200100000000000000000000000000014e2140044e2280010200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x98) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[]) syz_usb_connect$printer(0x1f, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d5980905eb022000020205090505"], 0x0) r2 = userfaultfd(0x801) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0xfffffffffffffffe, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x321, 0x3, 0x0, 0x101, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES64=r2], 0x108}}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x1a8}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100), 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) ptrace$setregs(0x1a, r5, 0xc, &(0x7f0000000000)) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000002c0)=[@ioring_restriction_register_op={0x0, 0xa}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1b}, @ioring_restriction_sqe_op={0x1, 0x1d}, @ioring_restriction_register_op={0x0, 0x23}, @ioring_restriction_sqe_op={0x1, 0xc}, @ioring_restriction_sqe_flags_required={0x3, 0xf}, @ioring_restriction_sqe_op={0x1, 0xb}, @ioring_restriction_register_op={0x0, 0x24}, @ioring_restriction_sqe_op={0x1, 0x4}, @ioring_restriction_register_op={0x0, 0x1c}, @ioring_restriction_register_op={0x0, 0xd}, @ioring_restriction_sqe_flags_required={0x3, 0x12}], 0xc) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x4, 0x2012, r6, 0x0) move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000007000/0x2000)=nil], &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x2fd9, &(0x7f0000001980)={0x0, 0xdbb1, 0x80000, 0x1, 0x324}, &(0x7f0000001a00), &(0x7f0000001a40), &(0x7f0000000140)) 19.464396145s ago: executing program 6 (id=5902): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000020000000b7040000100000207207f0ff00000000850000002f000000b70000000a00000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x5}, 0x94) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001a00010028bd7000fcdbdf250a808000000000000000000006"], 0x34}}, 0x20000050) socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$media(&(0x7f0000000100), 0xfff, 0x406000) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60a4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x27, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xc1, 0xfe, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0xc0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB=' \"('], 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) stat(0x0, 0x0) rseq(0xfffffffffffffffe, 0xfffffffffffffeb2, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$FITHAW(r3, 0xc0045878) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000040)=ANY=[@ANYRES64=r2, @ANYRES16=r3], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000022"], 0xd8}}, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x1000, 0x4, 0x2, 0x82, 0x2, 0x3}, 0x30, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000080)={0x12090, r2}, 0x9dbafc5d232b5693) 18.104814837s ago: executing program 6 (id=5910): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r0, 0xa, 0x1c) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, 0x0, 0x2002c094) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, 0x0, 0x44860) ftruncate(r2, 0x8800000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) r6 = dup3(r5, r4, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r6, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x56}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x40}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x8000) sendfile(r6, r2, 0x0, 0x1000009) 17.598079662s ago: executing program 2 (id=5912): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x80001) r1 = socket$netlink(0x10, 0x3, 0xa) fsopen(&(0x7f0000000000)='ceph\x00', 0x1) dup(r1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004280)=ANY=[@ANYBLOB="0500000001000000a003000002"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r4, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r2], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x100000000000000) 16.919887784s ago: executing program 6 (id=5913): syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) socket(0x18, 0x5, 0xff) socket$vsock_stream(0x28, 0x1, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xf813d845a5e6b0a0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.143487763s ago: executing program 2 (id=5917): socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x5, 0x87, 0x7}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0xc0c83, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0x4001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x8d8, 0x5, 0x50424752, 0x6, 0x8000002, 0xb, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x4}}) 13.818228567s ago: executing program 4 (id=5920): add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000100)="000000000000340463656c6c00000001000000440000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010203040000000405060708", 0x58, 0xffffffffffffffff) 13.405432432s ago: executing program 4 (id=5921): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x24040004) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40095) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x41, 0x1c0862) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000c80), &(0x7f0000000000)=0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0xa, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x845}, 0x2004c004) sendfile(r5, r4, 0x0, 0x210) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e20, 0x80002, @loopback, 0x4}, 0x1c, 0x0}, 0x44060) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.829210224s ago: executing program 6 (id=5922): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xe, "0000000000020400000000000000010e"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 12.054607562s ago: executing program 4 (id=5924): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r1, 0xa, 0x1c) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, 0x0, 0x2002c094) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x44, r5, 0x1, 0x170bf2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x4}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0xd}]}, 0x44}, 0x1, 0x0, 0x0, 0x4920}, 0x44860) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r7 = dup3(r6, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x3c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x56}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) sendfile(r7, r3, 0x0, 0x1000009) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000400)=ANY=[]}, 0x0) r8 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0xb05, 0x19b6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc, 0x10, 0xff, "", [{{0x9, 0x4, 0x0, 0xf3, 0x1, 0x3, 0x1, 0x3, 0x19, {0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0x1af}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xf0, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x2}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x0, 0x4, 0x9, 0x20, 0xff}, 0xd6, &(0x7f0000000340)={0x5, 0xf, 0xd6, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x4, 0xf0, 0x1000, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0xe, 0x10}, @generic={0xa5, 0x10, 0x1, "4c647c130e91e05b7f956c7d9f2ab22786306cf9f17b67cbc7e2f990ebb6771829c1c6abc34c6e13815ff49d4de78d476adcef4649675911dd2591d629aa2316902cd40cf932403a79483de34a1845956f15e3c737a72e6ce68a60b868d1437b6be057736eac9e2bf8b7669a0f644c49a436d19b5798caed2efacc63a7e7a92c34c4b5edc46298d98543ed0fa4302f2ee2f23a3ccfc1eb50bd0baa74fb22514feb2a"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x0, 0x81, 0x1000}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x7ffffff, 0xf000, 0x3, [0x0]}]}, 0x4, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x140c}}, {0xba, &(0x7f00000004c0)=@string={0xba, 0x3, "b3fd2ea1b5d9885e06126fa054d06929a493c6f9a50613cd67ed23856622fd1a5102779a5176e4432d0e6ae433ce68b21687c81373751ddc20c67a6d3e90fab12913fca161fb1378cc73a44bd9b7394acd5ff2e25ace5aff548de8fe966188943833976061b23af1eb02f1ff3ff983cd125a0171a1c99635e5d1ce78f90cf7d0e2ebca6eccfd3ba9d234b89d0f97eabb8de8d68354499e5731eba03ad457b7363c8d02695fa6c9e37f5e94bbed8c89de3919fc0ac944f111"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xf0ff}}]}) syz_usb_control_io(r8, &(0x7f0000000780)={0x2c, &(0x7f0000000640)={0x20, 0x23, 0x3, {0x3, 0x2, "b2"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}, &(0x7f00000006c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x1, 0xb, 0xc, "04f495a8", "19f900d3"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x15, 0x10, 0x2, 0x67, 0xfd, 0xd, 0x7}}}, &(0x7f0000000bc0)={0x84, &(0x7f00000007c0)={0x0, 0xe, 0x6, "0c0f9a725c0b"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0xd}, &(0x7f0000000980)={0x40, 0xb, 0x2, 'y%'}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0xd}, &(0x7f0000000a00)={0x40, 0x13, 0x6}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @random="fe4bcec19b89"}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "7afe"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0xd}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x9}}) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) setsockopt$sock_attach_bpf(r9, 0x1, 0x50, &(0x7f0000000100), 0x48) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) 8.9871617s ago: executing program 6 (id=5927): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048080}, 0x24000080) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, r0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x7, 0x3, 0xff, 0x6}, {0x1, 0x4, 0xfe}, {0x7, 0xce, 0x9, 0x3}, {0x0, 0x43, 0x6, 0x6}]}) (async) rseq(0x0, 0x0, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000000002) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0) (async) getdents(0xffffffffffffffff, 0x0, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x34, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000580)={0x40, 0xa0, 0x4, 0xfffffffa}, 0x0}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f00000002c0)) (async) keyctl$clear(0x7, 0xfffffffffffffffb) (async) r3 = socket$inet6(0xa, 0x3, 0x88) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r1], 0x0}, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r2], 0x0, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r5, 0x81044804, &(0x7f0000000400)={0x1}) (async) syz_usb_control_io(r4, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0}, 0x0) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) syz_open_procfs$pagemap(0x0, 0x0) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0xe4, r6, {0x2, 0x0, @broadcast}, 0x80004, 0x0, 0x24}}, 0x2e) 8.380812998s ago: executing program 4 (id=5929): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00d}, {0x6, 0xba, 0x75, 0xffef}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010003d3dd71106d840e0af774010203010902120001090200dc090439d3a6d7000409"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x3, 0x2) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003340)=@newtfilter={0x158, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff2, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x124, 0x2, [@TCA_MATCHALL_ACT={0x120, 0x2, [@m_ife={0x11c, 0x14, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xfffffffb}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x40}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xfff8}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}]}, {0xbb, 0x6, "1f27a2145188b9bd783167edd638cd82d84c32b1aed07707a742ab332e5872a3aac81a99bac89cf733ae2e8ff61296109afa6f72b2441183a18425f40464d52d5d78be21674a9aa9ce4e2ff0970a4240b36d292d2d8702adc17b31f65fcce57d8f5208621b48ce4572c9166b666d391b33a90785880cfe7c8f2542cfc658c27b5b78fa14b847569bec06280da0cb8ccdee2e3a8a1b1e5381f03e023484ff82d073f61e84a6a4b7f7a76f3fa6281c4e3a9764703ec4be3c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x4}}}}]}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r11 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r11, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r10, 0x42}, 0x80, &(0x7f0000003300)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c10200000006125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f00000022c0)="02db0b9ef1cafdab", 0xa888}], 0x2}, 0x4005) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000001240)=ANY=[@ANYBLOB="0800080000000200b6e71400020046200fc1006800000388"], 0xfcf) 6.723063635s ago: executing program 2 (id=5931): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c4000000190001000000000010000000e0000002000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000f5ff1810be1a000000000500000000000000000000000000000008000000000000000000000000000000fdffffffffffffff900f00000000000000000000000000000000000000000000000000000000000000100000b86b6e0000010001000000000c0015005d07350002b1"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) (fail_nth: 6) 5.973258351s ago: executing program 2 (id=5933): sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16], 0x2c}}, 0x4000000) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100810000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}, 0x1, 0x0, 0x0, 0x945}, 0x0) 5.752733354s ago: executing program 0 (id=5934): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r0, 0xa, 0x1c) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, 0x0, 0x2002c094) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, 0x0, 0x44860) ftruncate(r2, 0x8800000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) r6 = dup3(r5, r4, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r6, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x56}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x40}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x8000) sendfile(r6, r2, 0x0, 0x1000009) 4.337951588s ago: executing program 2 (id=5936): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet(0x2, 0x800, 0x6) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000007000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000001c0)=0x7) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @local}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) ioctl$KVM_SET_IRQCHIP(r6, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x81, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0x6, '\x00', 0x2}, {0xd, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0x6}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x6, '\x00', 0xb}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xa, 0x21, 0x4, '\x00', 0x7}, {0x8, 0x9, 0x0, '\x00', 0x6c}]}}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r7, 0x0, 0x13, 0x0, &(0x7f0000000c00)=0xfffffffffffffe87) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x5, 0x6, 0x9}) rename(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00') 4.088498012s ago: executing program 0 (id=5938): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a8800a4d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) 3.637659442s ago: executing program 4 (id=5939): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={0x2, 0x3, 0x0, 0x9, 0xf, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3, 0x40000001}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0x78}, 0x1, 0x7, 0x80ff}, 0x0) 3.527122579s ago: executing program 0 (id=5940): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r3, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r3, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) r4 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x12, r4, 0x0) (async) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x3, r3, 0x0, &(0x7f0000000100)="af", 0x1, 0x8000000000000000}) (async) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r3, 0x0, &(0x7f0000000000)="ca", 0x1, 0xc97c}) (async) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000780)={0x28, 0x2, r3, 0x0, &(0x7f0000000680)='%', 0x1, 0x33e2}) (async) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r3, 0x0, &(0x7f00000006c0)='h', 0x1, 0x388}) (async) ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, &(0x7f0000000240)={0x18, r3, 0x7, 0x280000000}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r6, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e, 0x80800) (async) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) (async) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000300)={'wlan0\x00'}) (async) ioctl$KVM_CAP_HYPERV_SYNIC2(r8, 0x4068aea3, &(0x7f0000000140)) (async) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r9, 0x8, 0x4) (async) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7ffd}, {0x375, 0x0, 0x75dcdd38}]}) mq_open(0x0, 0x40, 0x0, 0x0) 3.308040489s ago: executing program 7 (id=5941): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x3]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "57a1"}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}}}, {0xdd86}}}}}}, 0x0) 2.972108192s ago: executing program 4 (id=5942): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="a0000000420001000000000000000000030100000f0000007d00010000112233445566778899aabb86dd2c00001c00ff840001110000010101010253aa58fe6cbdf035bc6eae44132403b1fd606412c3258e6248ffa62e9e156d23cfd72ddb80723d4613dc929cbc86ba94e0cd05c4a639eee919c4b391a38f086b58225d45c1b4106bb4754aebb15e0feff76718ef7ff9be52ec9c00000004000280040003"], 0xa0}}, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0xfffffffd, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0x3ff}, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async, rerun: 64) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003700)=""/4064, 0xfe0}], 0x1}, 0x10100) (async, rerun: 64) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='dctcp-reno', 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mount$fuse(0x0, 0x0, 0x0, 0x2382420, &(0x7f0000000200)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file1\x00'}) io_uring_setup(0x20006d19, &(0x7f0000000100)={0x0, 0x31ce, 0x10000, 0x2, 0x10c, 0x0, r5}) (async) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x110, 0xfffffffffffffffd) r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) write$binfmt_script(r7, &(0x7f0000000080)={'#! ', './file1'}, 0xb) (async, rerun: 32) close(r7) (rerun: 32) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) 2.740389822s ago: executing program 2 (id=5943): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) r0 = syz_usb_connect$cdc_ncm(0x2, 0x87, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902750002010000000904000001020d0000052406000105240000000d240f0112000100000000000606241a00000003240218042402000c241b04"], 0x0) fstat(0xffffffffffffffff, &(0x7f0000000140)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x1401, 0x1, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x20008400}, 0x840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r8 = socket(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r10, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x200000000000000, 0x0, 0x1, 0xfcff, &(0x7f0000000580)="b3"}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.725763111s ago: executing program 0 (id=5944): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="30000000f5000000290000000400000084023004000000000402000304"], 0x30}, 0x40) 2.645201849s ago: executing program 7 (id=5945): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x260, 0x194, 0x194, 0x260, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x158, 0x180, 0x0, {0x0, 0x74020000}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@initdev={0xfe, 0x88, '\x00', 0x8e, 0x0}, [0x0, 0xffffffff, 0x0, 0xffffff00], @ipv6=@ipv4={'\x00', '\xff\xff', @local}, [0xff, 0xffff00, 0xffffff00, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x18}, [0xffffffff, 0xff, 0xffffffff, 0xff], @ipv4=@empty=0x300, [0x0, 0xff, 0xffffff00, 0xff000000], 0x1, 0x30b, 0x11, 0x4e20, 0x4e20, 0x4e23, 0x4e24, 0x20}, 0x80}}, @common=@addrtype={{0x30}, {0xa0, 0x4, 0x1, 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'veth0_to_hsr\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) 2.365598241s ago: executing program 7 (id=5946): openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) r0 = getpgid(0x0) syz_pidfd_open(r0, 0x0) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba", 0x2) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffe00000000003, 0x20000000000000b, 0x1, 0x200, 0x4a, 0x28, 0x80000005, 0x2}) pselect6(0x40, &(0x7f0000000080)={0x3, 0x0, 0x7fffffff, 0xfffffffffffffffd, 0x2, 0x0, 0x3, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xffffffffffffffff, 0x9, 0x800000000000000, 0xf, 0x26}, 0x0, 0x0) 2.238335796s ago: executing program 6 (id=5947): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x76, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000200)={0x3, @raw_data="156659f2646f147e24f3a2013bae49e0355268c95e5fab36d20cde72d464607b44a01d454101e7a2a735cc5bd9036cd00764fffb46c9e43432b9b9b6d0c0440879ebdb887228f523eb29a0b2110cfd6b2d4ca6fa5c004a5c3200ff3409ac4f721bf4f448d241c7126869452dea818d3f239769301659d102f9913f2117ae5cf69f824e217fe819c321c3886c3fc647fe8281f635fc54a6a358c6d5e53ae11a98f8f36828dd6d8b753fcc1e43affd62d0f33502f8cb4594ff2f71c65736db603a636351be667f0996"}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xf}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x1, 0x101, 0x4, 0x0, 0x5, 0x42}}, {0x4}}]}, @qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6, 0x5, {0x10, 0x5}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1, 0x14a43ec2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES8=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r8, @ANYBLOB="5c005a8014000180050007000100000005000a"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$unix(0x1, 0x5, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@empty}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@getchain={0x4c, 0x66, 0x801, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xffe0, 0xfff2}, {0x6, 0xffe0}, {0x4, 0x8}}, [{0x8, 0xb, 0xfffffff8}, {0x8, 0xb, 0x8}, {0x6, 0xb, 0x7}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x10001}]}, 0x4c}}, 0x24040084) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r11 = socket(0x28, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xca7, 0x70bd23, 0x0, {0x0, 0x0, 0x0, r12, {0x4, 0x5}, {}, {0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0x6}}]}}]}, 0x3c}}, 0x0) 1.985636502s ago: executing program 0 (id=5948): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001bc0)={'#! ', './file1/../file0', [{0x20, '#2\xb7\xfd\x84\xb9&\xc8! '}, {0x20, '\xecM8\xc6!\xb45Z~AD\t\xc3n\xc1i\x12\xc8\x9cW)}@M\x18\xcf\x93\xdbP\xc6C=\x84\x13\xb1?\xc0i\xbaE\x03\xb1J)\x99\xed\x939\x9ff\x84+r\xbf\xb77\xc3\x00\x00\x00\x00\xdeq\x01!\xd2\xe5\xc3\xffi\x11n\x8b\x8c\b\x1f\xd0sG@\xdd\x17k\x14r\x01\x18R\t)\x117\x8f\xddZj:\x8aA\x1fx\x97\x8f\x9d\x8eY2P4\xc5\xb3\xd1\x1a)I\xb9\xbbp\x06\a\xfe\xce\x11\x8ba\x9c\x82\xfd\xa4g\x87\xa6\x00\xcew\xb7A!Cx\xb5\xfe\x8f/8{\v\x14A\xe9*\xfa\xaf\x8b\xd2\xcfq@qS\xe8\xe4\x99{#\x1e\xfe6c\xac\xac\xc6N<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00%+H\xcaN\xb5 u?\x1c9\x00\xfc\td\xc6\x13-\xa3\xd6\x84-HH=\xaa\xdc\x1d\xd7A&\xeb\xfe\x88\xf9\x80D\x9fH\xe0E\xe9|no\xac\x18\x80u&\xbe\xef\x1a\x8c\xea<\x8e\x9c\xf9\x1bZ\xa9]#\xeb\xb1\xdc\xdc\xc6Q\x03S4\xc3\x94q\x18 \xbcxXR\x92\x98_\x1d\xcc\xfb\xd7r\b\x93\x9e\xe8R\x8e0\xddqj\x87\xde\x1a\xdb{\xf8\xb9\xf4\xd2#\xda;\x13\xa1\xa6\xc6\xc9b\x16\x82\xfa\xe3\x01\xf6CKhO/\x7f2\x8dJ\x88\x04:\xf4\x7fk\xff\xcbY\x11\x1e^H\x9c\xa7i)\xe7 \xed\xbe\xa5B\x9cc4\xc2\xbb%R\b\x8c\x97\xc1\xfb\xea\x02r\xa0\x7f\r\xa12\xc4S\xcb\v\xc3\xe2\x8d[\xd6\xc7\xe4\xc0z\xb8\xcd\xe2\n\xb5r;\xdc\xbf\x86\x83r\xbe\xb1LA\xea&C\xf1\xfbn\xb3\x99\xc8\xc4twd\xa9\x80\x85q\xfe` \xc8g\xe5'}, {}, {0x20, '/dev/loop#\x00'}, {0x20, '#! '}, {0x20, '#! '}, {}, {}, {0x20, '\xecM8\xc6!\xb45Z~AD\t\xc3n\xc1i\x12\xc8\x9cW)}@M\x18\xcf\x93\xdbP\xc6C=\x84\x13\xb1?\xc0i\xbaE\x03\xb1J)\x99\xed\x939\x9ff\x84+r\xbf\xb77\xc3\x00\x00\x00\x00\xdeq\x01!\xd2\xe5\xc3\xffi\x11n\x8b\x8c\b\x1f\xd0sG@\xdd\x17k\x14r\x01\x18R\t)\x117\x8f\xddZj:\x8aA\x1fx\x97\x8f\x9d\x8eY2P4\xc5\xb3\xd1\x1a)I\xb9\xbbp\x06\a\xfe\xce\x11\x8ba\x9c\x82\xfd\xa4g\x87\xa6\x00\xcew\xb7A!Cx\xb5\xfe\x8f/8{\v\x14A\xe9*\xfa\xaf\x8b\xd2\xcfq@qS\xe8\xe4\x99{#\x1e\xfe6c\xac\xac\xc6N<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00%+H\xcaN\xb5 u?\x1c9\x00\xfc\td\xc6\x13-\xa3\xd6\x84-HH=\xaa\xdc\x1d\xd7A&\xeb\xfe\x88\xf9\x80D\x9fH\xe0E\xe9|no\xac\x18\x80u&\xbe\xef\x1a\x8c\xea<\x8e\x9c\xf9\x1bZ\xa9]#\xeb\xb1\xdc\xdc\xc6Q\x03S4\xc3\x94q\x18 \xbcxXR\x92\x98_\x1d\xcc\xfb\xd7r\b\x93\x9e\xe8R\x8e0\xddqj\x87\xde\x1a\xdb{\xf8\xb9\xf4\xd2#\xda;\x13\xa1\xa6\xc6\xc9b\x16\x82\xfa\xe3\x01\xf6CKhO/\x7f2\x8dJ\x88\x04:\xf4\x7fk\xff\xcbY\x11\x1e^H\x9c\xa7i)\xe7 \xed\xbe\xa5B\x9cc4\xc2\xbb%R\b\x8c\x97\xc1\xfb\xea\x02r\xa0\x7f\r\xa12\xc4S\xcb\v\xc3\xe2\x8d[\xd6\xc7\xe4\xc0z\xb8\xcd\xe2\n\xb5r;\xdc\xbf\x86\x83r\xbe\xb1LA\xea&C\xf1\xfbn\xb3\x99\xc8\xc4twd\xa9\x80\x85q\xfe` \xc8g\xe5'}]}, 0x374) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x8001ffef, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 1.349111501s ago: executing program 0 (id=5949): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x36, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a000101000000090400401702020000052406000005240000000d240f0100000000060000002006240704070009058103400000000009058202100000000009050302"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000800000000000060cf0000186a00000000000000000000083d00009500000000000000a3699376ca0ecbc8330882fa238ab78611c567d2bbbe6b04a0884c2671efa3797887aff982afa52ae3f3ba592d88d724120ebbcf89"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x40800d0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES64, @ANYRESOCT=r0, @ANYRES64=r1, @ANYRES32], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000006d0200000300000022bf000001"], 0x50) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES32=r3, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe8000000000000000000000000000aab0000280090001800c0000000000000008000000000000001b000000000000000800000000000000080000000000000018000280140001800900", @ANYRES16=r3], 0xec}}, 0xc804) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000400)=ANY=[@ANYBLOB="200804"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x0, 0x7, 0xe7, {0xe7, 0x11, "e6c5db768123f409001db81e9aa8c14757b084b2f82c89bbe2dca820c484d4e9a669c8c2855ad7f6393c337271ab41ca5959bef948fb517e3374cc93bec536c2ac009ca67e1b2f7ad12ea4791a4e44786d084a71748dd9d9028c441bdd4307c7fad7c9252c9997288b7672271c063a828580e6423233619670860f1a0b88a18c299fd0cfc83d53c0e148298a580db373946cdf1f9538d47b0b101f23a3c44ae1dd95f7fa200d8f7d550f5d47973e1f45049a33ef3a6098f37b317b65669862be15d7bf8b0a71a01c15f1ea6edd651a691a090b3eae6f177865df85caf27ed9f04b5197c16e"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x438}}}, &(0x7f0000000880)={0x34, &(0x7f0000000680)={0x20, 0x1, 0x4b, "c4db032fa6364c8d876c43170ba97de66edf885185f52e32730be8a640eef4bb40e0d1020d9c899cb40e06c451ffbbaa773f3f05fc04fe17b4c7fb41864951d4021cb3eddff8e1c8b567b2"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x68}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000780)={0x20, 0x0, 0x4c, {0x4a, "ca19a7bc405800c21c6167f2d17dacae8bfd32a66bde654a356a036cb74be2656766402672f214f2e2f77b005943f29f0a3ee8e8ebeaa7c3c314a940d98c710a8e01e45b39e3d637e6d8"}}, &(0x7f0000000800)={0x20, 0x1, 0x1, 0x81}, &(0x7f0000000840)={0x20, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) syz_usb_connect$uac2(0x6, 0xf7, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x78, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x4, 0x60, 0x0, {0x8, 0xb, 0x1, 0x2, 0x1, 0xb, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x8, 0x35, 0x8}, [@processing_unit={0xd, 0x24, 0x8, 0x5, 0x40, [0x3, 0x3, 0x0, 0x0]}, @sample_rate={0xf, 0x24, 0xd, 0x5, 0x2, 0x4, [0x3, 0x0, 0x1, 0x0]}, @input_terminal={0x10, 0x24, 0x2, 0x5, 0x100, 0x2, 0xc0, 0x8, 0x69f4, 0x8, 0x4, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x400, 0xfff, 0x2}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8b, 0xf, 0x7, "373994cfabb2"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x4, 0x2, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x4, 0x5, 0x7c, {0x8, 0x25, 0x1, 0x0, 0xf, 0x69, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x80, 0x2, 0x4, 0x6, "3194697d8a2471"}, @as_header={0x10, 0x24, 0x1, 0x1, 0x0, 0x2, 0x2, 0xff, 0xffffffff, 0xd}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x1}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x8, 0xa, 0x5, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x7, 0xa, {0x8, 0x25, 0x1, 0x1, 0x30, 0x8, 0x8000}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0x1, 0x0, 0x8, 0x8, 0x2}, 0x3d, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x3, [{0x5b, &(0x7f0000000340)=@string={0x5b, 0x3, "5c22c7c8c27e31ee081359beaa9504c5b5333949ead3af4cb68f273720d611e9974dd4aad719f29260d0bf4db13209c4feebdad43ffdcc24a369393cc3260776ad7010cd01496ef936c37825e278d6ddfedf6bd617157364a1"}}, {0x28, &(0x7f00000003c0)=@string={0x28, 0x3, "11764043da76a224876f32aa8799082dbb240370f8a10da88019e076de9c4dca629fe0a9551c"}}, {0xbb, &(0x7f0000000400)=@string={0xbb, 0x3, "52de9178c403c7d34dcfb6b5c57977557162c0b3a97207efc23ef8c18bb3c9637584a5fea2d3d13f00561b4fe2a68a45ba393b903e043c5391e0c21525f9cead686633eb27d8aaa86e7e1b35e97ed232be225b5038ef32197e666d32e9fa17c5328674e2c3e59a65dc5361573e1c473b3017ed76d8fdbe15620e17427057e49302bb022337b10ae6dcfffdc3bd8780818754c710dd82668f99c36bdd5350397028f45c1055b0afd9052a7dda8d3f259d358329853b933b57d2"}}]}) 1.066028575s ago: executing program 7 (id=5950): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000027c0)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000002a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}], 0x20}}], 0x2, 0xfffffffffffffff5) 605.657627ms ago: executing program 7 (id=5951): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="0f333e65440fdcd965670fc770ad420f09c4c221458109000000d9fe0f52bd0e0000000f07b9800000c00f3235010000000f3066baf80cb86bc45b8bef66bafc0cec", 0x42}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 7 (id=5952): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (fail_nth: 72) r2 = syz_io_uring_setup(0x7890, &(0x7f0000000540)={0x0, 0xd52b, 0x10000, 0x5, 0x240004f}, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x13732000) kernel console output (not intermixed with test programs): eth2 [ 1290.509319][T23814] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1290.527166][T23814] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1290.577681][T23814] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1290.613075][ T52] Bluetooth: hci3: command tx timeout [ 1290.813378][T20605] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1290.890384][T23879] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5497'. [ 1290.966757][T20605] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1290.968355][T20605] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1290.968375][T20605] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.968389][T20605] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1290.968450][T20605] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1290.977180][T20605] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1290.977316][T20605] usb 1-1: Product: syz [ 1290.977360][T20605] usb 1-1: Manufacturer: syz [ 1291.098964][T20605] cdc_wdm 1-1:1.0: skipping garbage [ 1291.098987][T20605] cdc_wdm 1-1:1.0: skipping garbage [ 1291.149536][T20605] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1291.149562][T20605] cdc_wdm 1-1:1.0: Unknown control protocol [ 1291.286954][T23814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1291.329876][T20605] usb 1-1: USB disconnect, device number 49 [ 1291.349706][T23881] loop5: detected capacity change from 0 to 7 [ 1291.362344][T23881] loop5: [ 1291.362374][T23881] loop5: partition table partially beyond EOD, truncated [ 1291.429290][T23814] 8021q: adding VLAN 0 to HW filter on device team0 [ 1291.498148][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.498278][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1291.575604][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.575708][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.811192][T23888] input: syz0 as /devices/virtual/input/input123 [ 1291.887779][T20605] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1291.939789][T23889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1291.940296][T23889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1292.050716][T20605] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1292.053031][T20605] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1292.053060][T20605] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.053082][T20605] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1292.053127][T20605] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.114615][T20605] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1292.114645][T20605] usb 1-1: Product: syz [ 1292.114663][T20605] usb 1-1: Manufacturer: syz [ 1292.173125][T20605] cdc_wdm 1-1:1.0: skipping garbage [ 1292.173185][T20605] cdc_wdm 1-1:1.0: skipping garbage [ 1292.195557][T20605] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1292.195580][T20605] cdc_wdm 1-1:1.0: Unknown control protocol [ 1292.311079][T23814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1292.643465][T23814] veth0_vlan: entered promiscuous mode [ 1292.692937][ T52] Bluetooth: hci3: command tx timeout [ 1292.741742][T23814] veth1_vlan: entered promiscuous mode [ 1292.948893][T23814] veth0_macvtap: entered promiscuous mode [ 1292.996375][T23814] veth1_macvtap: entered promiscuous mode [ 1293.089742][T23814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1293.122992][T20605] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1293.158333][T23814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1293.273310][T20605] usb 5-1: Using ep0 maxpacket: 8 [ 1293.274237][T20605] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1293.281359][T20605] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1293.316572][T20605] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1293.316605][T20605] usb 5-1: Product: syz [ 1293.316620][T20605] usb 5-1: Manufacturer: syz [ 1293.316636][T20605] usb 5-1: SerialNumber: syz [ 1293.384543][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.410637][T15595] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.445935][ T60] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.555702][ T5709] usb 1-1: USB disconnect, device number 50 [ 1293.643627][T23905] syzkaller0: entered promiscuous mode [ 1293.643648][T23905] syzkaller0: entered allmulticast mode [ 1293.671478][T20605] usb 5-1: Invalid connection information received from device [ 1293.707844][T15594] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.028881][T20104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1294.028909][T20104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1294.077092][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 1294.077111][ T31] audit: type=1326 audit(1791137151.918:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23898 comm="syz.4.5506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f636a99e159 code=0x0 [ 1294.216990][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1294.217015][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1294.772835][ T52] Bluetooth: hci3: command tx timeout [ 1295.058576][T23922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5512'. [ 1295.327727][T23914] nvme nvme0: failed to connect socket: -512 [ 1295.757555][T23934] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5515'. [ 1295.848667][T23935] syzkaller0: entered promiscuous mode [ 1295.848695][T23935] syzkaller0: entered allmulticast mode [ 1296.084722][ T123] usb 5-1: USB disconnect, device number 56 [ 1296.316384][T23942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5519'. [ 1296.316403][T23942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5519'. [ 1296.398830][T23942] macsec2: entered promiscuous mode [ 1296.990658][T20605] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1297.152845][T20605] usb 7-1: Using ep0 maxpacket: 8 [ 1297.155823][T20605] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1297.201537][T20605] usb 7-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 1297.201592][T20605] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 1297.201623][T20605] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 225, changing to 7 [ 1297.201654][T20605] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34649, setting to 1024 [ 1297.201683][T20605] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1297.287356][T20605] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.287390][T20605] usb 7-1: Product: syz [ 1297.287408][T20605] usb 7-1: Manufacturer: syz [ 1297.287426][T20605] usb 7-1: SerialNumber: syz [ 1297.370553][T20605] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1297.384256][T20605] usbtest 7-1:1.0: Linux user mode ISO test driver [ 1297.384283][T20605] usbtest 7-1:1.0: high-speed {control iso-in} tests (+alt) [ 1297.402872][T12382] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1297.558001][T12382] usb 5-1: Using ep0 maxpacket: 32 [ 1297.558839][T12382] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1297.587186][T12382] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.587245][T12382] usb 5-1: Product: syz [ 1297.587258][T12382] usb 5-1: Manufacturer: syz [ 1297.587269][T12382] usb 5-1: SerialNumber: syz [ 1297.629950][T12382] usb 5-1: config 0 descriptor?? [ 1297.678293][T12382] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1297.694655][ T123] usb 7-1: USB disconnect, device number 33 [ 1298.133353][T23977] netlink: 'syz.2.5527': attribute type 1 has an invalid length. [ 1298.417358][T23977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1298.832398][T23983] ip_tables: iptables: counters copy to user failed while replacing table [ 1300.216512][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.216563][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.609611][T12382] gspca_stk1135: reg_w 0x351 err -71 [ 1300.619995][T12382] gspca_stk1135: serial bus timeout: status=0x00 [ 1300.620013][T12382] gspca_stk1135: Sensor write failed [ 1300.620047][T12382] gspca_stk1135: serial bus timeout: status=0x00 [ 1300.620055][T12382] gspca_stk1135: Sensor write failed [ 1300.620101][T12382] gspca_stk1135: serial bus timeout: status=0x00 [ 1300.620114][T12382] gspca_stk1135: Sensor read failed [ 1300.620165][T12382] gspca_stk1135: serial bus timeout: status=0x00 [ 1300.620176][T12382] gspca_stk1135: Sensor read failed [ 1300.620186][T12382] gspca_stk1135: Detected sensor type unknown (0x0) [ 1300.620241][T12382] gspca_stk1135: serial bus timeout: status=0x00 [ 1300.620266][T12382] gspca_stk1135: Sensor read failed [ 1300.620313][T12382] gspca_stk1135: serial bus timeout: status=0x00 [ 1300.620323][T12382] gspca_stk1135: Sensor read failed [ 1300.620358][T12382] gspca_stk1135: serial bus timeout: status=0x00 [ 1300.620365][T12382] gspca_stk1135: Sensor write failed [ 1300.620390][T12382] gspca_stk1135: serial bus timeout: status=0x00 [ 1300.620397][T12382] gspca_stk1135: Sensor write failed [ 1300.731446][T12382] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 1300.744100][T12382] usb 5-1: USB disconnect, device number 57 [ 1300.844035][T24005] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5536'. [ 1301.582858][ T123] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1301.734062][ T123] usb 1-1: Using ep0 maxpacket: 16 [ 1301.738440][ T123] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1301.763689][ T123] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1301.763728][ T123] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1301.763758][ T123] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1301.763795][ T123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.829927][ T123] usb 1-1: config 0 descriptor?? [ 1302.181973][T24031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.182561][T24031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.250695][T24018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.290148][T24018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.374779][T24035] FAULT_INJECTION: forcing a failure. [ 1302.374779][T24035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1302.374820][T24035] CPU: 1 UID: 0 PID: 24035 Comm: syz.7.5543 Tainted: G L syzkaller #0 PREEMPT(full) [ 1302.374851][T24035] Tainted: [L]=SOFTLOCKUP [ 1302.374868][T24035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1302.374885][T24035] Call Trace: [ 1302.374895][T24035] [ 1302.374906][T24035] dump_stack_lvl+0xe8/0x150 [ 1302.374946][T24035] should_fail_ex+0x410/0x560 [ 1302.374981][T24035] _copy_from_user+0x2d/0xb0 [ 1302.375014][T24035] ___sys_sendmsg+0x1c6/0x360 [ 1302.375049][T24035] ? __lock_acquire+0x747/0x2de0 [ 1302.375079][T24035] ? __pfx____sys_sendmsg+0x10/0x10 [ 1302.375151][T24035] ? __fget_files+0x2a/0x420 [ 1302.375184][T24035] ? __fget_files+0x3a2/0x420 [ 1302.375228][T24035] __x64_sys_sendmsg+0x1b1/0x290 [ 1302.375267][T24035] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1302.375324][T24035] do_syscall_64+0x166/0x520 [ 1302.375357][T24035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.375382][T24035] ? clear_bhb_loop+0x70/0xc0 [ 1302.375410][T24035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.375434][T24035] RIP: 0033:0x7fb47d19e159 [ 1302.375455][T24035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1302.375475][T24035] RSP: 002b:00007fb47e08b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1302.375500][T24035] RAX: ffffffffffffffda RBX: 00007fb47d425fa0 RCX: 00007fb47d19e159 [ 1302.375518][T24035] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 1302.375534][T24035] RBP: 00007fb47e08b090 R08: 0000000000000000 R09: 0000000000000000 [ 1302.375549][T24035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1302.375563][T24035] R13: 00007fb47d426038 R14: 00007fb47d425fa0 R15: 00007fb47d54fa48 [ 1302.375598][T24035] [ 1302.407853][T24033] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5541'. [ 1303.634782][T24042] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1304.381376][ T123] usbhid 1-1:0.0: can't add hid device: -71 [ 1304.381495][ T123] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1304.410477][ T123] usb 1-1: USB disconnect, device number 51 [ 1306.159443][T24074] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5558'. [ 1307.248773][T24092] program syz.4.5564 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1307.273663][T24093] syz.4.5564 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 1307.273712][T24093] CPU: 0 UID: 0 PID: 24093 Comm: syz.4.5564 Tainted: G L syzkaller #0 PREEMPT(full) [ 1307.273747][T24093] Tainted: [L]=SOFTLOCKUP [ 1307.273757][T24093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1307.273772][T24093] Call Trace: [ 1307.273783][T24093] [ 1307.273794][T24093] dump_stack_lvl+0xe8/0x150 [ 1307.273835][T24093] dump_header+0xd3/0x4b0 [ 1307.273870][T24093] out_of_memory+0x10d4/0x1480 [ 1307.273902][T24093] ? try_charge_memcg+0xc32/0x15e0 [ 1307.273948][T24093] ? __pfx_out_of_memory+0x10/0x10 [ 1307.273978][T24093] ? do_raw_spin_unlock+0xf5/0x200 [ 1307.274025][T24093] try_charge_memcg+0xcdf/0x15e0 [ 1307.274079][T24093] ? __pfx_try_charge_memcg+0x10/0x10 [ 1307.274118][T24093] ? percpu_ref_tryget+0x15/0x180 [ 1307.274164][T24093] ? __obj_cgroup_charge+0x36/0x2c0 [ 1307.274196][T24093] __obj_cgroup_charge+0x1fd/0x2c0 [ 1307.274224][T24093] ? __obj_cgroup_charge+0x36/0x2c0 [ 1307.274255][T24093] __memcg_slab_post_alloc_hook+0x766/0xd90 [ 1307.274307][T24093] __kmalloc_cache_noprof+0x366/0x600 [ 1307.274334][T24093] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1307.274359][T24093] ? mem_cgroup_css_alloc+0x6be/0x1970 [ 1307.274388][T24093] ? mem_cgroup_css_alloc+0x6be/0x1970 [ 1307.274432][T24093] mem_cgroup_css_alloc+0x6be/0x1970 [ 1307.274475][T24093] cgroup_apply_control_enable+0x5bb/0xda0 [ 1307.274524][T24093] cgroup_mkdir+0xd2c/0xf90 [ 1307.274565][T24093] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1307.274595][T24093] kernfs_iop_mkdir+0x213/0x360 [ 1307.274630][T24093] vfs_mkdir+0x40c/0x620 [ 1307.274667][T24093] filename_mkdirat+0x285/0x510 [ 1307.274702][T24093] ? __pfx_filename_mkdirat+0x10/0x10 [ 1307.274735][T24093] ? do_getname+0x151/0x250 [ 1307.274769][T24093] __se_sys_mkdirat+0x35/0x150 [ 1307.274801][T24093] do_syscall_64+0x166/0x520 [ 1307.274833][T24093] ? trace_irq_disable+0x3b/0x140 [ 1307.274857][T24093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.274882][T24093] ? clear_bhb_loop+0x70/0xc0 [ 1307.274922][T24093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.274947][T24093] RIP: 0033:0x7f636a99e159 [ 1307.274969][T24093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1307.274990][T24093] RSP: 002b:00007f636b7ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1307.275057][T24093] RAX: ffffffffffffffda RBX: 00007f636ac26090 RCX: 00007f636a99e159 [ 1307.275080][T24093] RDX: 0000000000000020 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1307.275105][T24093] RBP: 00007f636aa3506b R08: 0000000000000000 R09: 0000000000000000 [ 1307.275126][T24093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1307.275141][T24093] R13: 00007f636ac26128 R14: 00007f636ac26090 R15: 00007f636ad4fa48 [ 1307.275181][T24093] [ 1307.333288][T12068] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1307.392249][T24093] memory: usage 0kB, limit 0kB, failcnt 38 [ 1307.392312][T24093] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1307.392441][T24093] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1307.392477][T24093] Memory cgroup stats for /syz4/test: [ 1307.393199][T24093] cache 0 [ 1307.393239][T24093] rss 0 [ 1307.393331][T24093] rss_huge 0 [ 1307.393361][T24093] shmem 0 [ 1307.393394][T24093] mapped_file 0 [ 1307.393418][T24093] dirty 0 [ 1307.393493][T24093] writeback 0 [ 1307.393523][T24093] workingset_refault_anon 0 [ 1307.393547][T24093] workingset_refault_file 0 [ 1307.393571][T24093] swap 0 [ 1307.393586][T24093] swapcached 0 [ 1307.393670][T24093] pgpgin 0 [ 1307.393701][T24093] pgpgout 0 [ 1307.393722][T24093] pgfault 0 [ 1307.393744][T24093] pgmajfault 0 [ 1307.393767][T24093] inactive_anon 0 [ 1307.393843][T24093] active_anon 0 [ 1307.393871][T24093] inactive_file 0 [ 1307.393887][T24093] active_file 0 [ 1307.393911][T24093] unevictable 0 [ 1307.393943][T24093] hierarchical_memory_limit 0 [ 1307.394010][T24093] hierarchical_memsw_limit 9223372036854771712 [ 1307.394042][T24093] total_cache 0 [ 1307.443227][T12382] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1307.527484][T24093] total_rss 0 [ 1307.527586][T24093] total_rss_huge 0 [ 1307.527615][T24093] total_shmem 0 [ 1307.527637][T24093] total_mapped_file 0 [ 1307.527659][T24093] total_dirty 0 [ 1307.527686][T24093] total_writeback 0 [ 1307.527763][T24093] total_workingset_refault_anon 0 [ 1307.527796][T24093] total_workingset_refault_file 0 [ 1307.527826][T24093] total_swap 0 [ 1307.527866][T24093] total_swapcached 0 [ 1307.527955][T24093] total_pgpgin 0 [ 1307.527985][T24093] total_pgpgout 0 [ 1307.528008][T24093] total_pgfault 0 [ 1307.528030][T24093] total_pgmajfault 0 [ 1307.528053][T24093] total_inactive_anon 0 [ 1307.528137][T24093] total_active_anon 0 [ 1307.528158][T24093] total_inactive_file 0 [ 1307.528188][T24093] total_active_file 0 [ 1307.528211][T24093] total_unevictable 0 [ 1307.528241][T24093] anon_cost 0 [ 1307.528318][T24093] file_cost 0 [ 1307.528343][T24093] Out of memory and no killable processes... [ 1307.706559][T12068] usb 1-1: Using ep0 maxpacket: 16 [ 1307.739339][T12382] usb 7-1: Using ep0 maxpacket: 32 [ 1307.771012][T12068] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1307.849361][T12382] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1307.849416][T12382] usb 7-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1307.859084][T12068] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1307.859343][T12068] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.925012][T12382] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.925042][T12382] usb 7-1: Product: syz [ 1307.925060][T12382] usb 7-1: SerialNumber: syz [ 1307.983697][T12068] usb 1-1: config 0 descriptor?? [ 1307.989159][T24089] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1308.812312][T12068] hid-sensor-hub 0003:0C70:F00D.003C: unknown main item tag 0x0 [ 1308.812382][T12068] hid-sensor-hub 0003:0C70:F00D.003C: unknown main item tag 0x0 [ 1308.812405][T12068] hid-sensor-hub 0003:0C70:F00D.003C: unknown main item tag 0x0 [ 1308.812450][T12068] hid-sensor-hub 0003:0C70:F00D.003C: unknown main item tag 0x0 [ 1308.812481][T12068] hid-sensor-hub 0003:0C70:F00D.003C: unknown main item tag 0x0 [ 1308.812535][T12068] hid-sensor-hub 0003:0C70:F00D.003C: unknown main item tag 0x0 [ 1308.812556][T12068] hid-sensor-hub 0003:0C70:F00D.003C: unknown main item tag 0x0 [ 1308.812594][T12068] hid-sensor-hub 0003:0C70:F00D.003C: unknown main item tag 0x0 [ 1308.812625][T12068] hid-sensor-hub 0003:0C70:F00D.003C: unknown main item tag 0x0 [ 1308.911603][T12068] hid-sensor-hub 0003:0C70:F00D.003C: unknown main item tag 0x0 [ 1308.912803][ T123] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 1309.109162][T12068] hid-sensor-hub 0003:0C70:F00D.003C: hidraw0: USB HID v0.08 Device [HID 0c70:f00d] on usb-dummy_hcd.0-1/input0 [ 1309.154194][T24089] netlink: Failed to add dvmrp0 helper -22 [ 1309.154312][T24089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1309.197827][T12068] hid-sensor-hub 0003:0C70:F00D.003C: No report with id 0xffffffff found [ 1309.197893][T12068] hid_sensor_accel_3d HID-SENSOR-200073.1.auto: failed to setup common attributes [ 1309.197907][T12068] hid_sensor_accel_3d HID-SENSOR-200073.1.auto: probe with driver hid_sensor_accel_3d failed with error -22 [ 1309.268820][T24109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1309.318617][ T123] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1309.318665][ T123] usb 5-1: no configurations [ 1309.318680][ T123] usb 5-1: can't read configurations, error -22 [ 1309.668433][T20606] usb 1-1: USB disconnect, device number 52 [ 1309.821921][T24112] fido_id[24112]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1310.411405][T12382] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1310.420129][T12382] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1310.592455][T24114] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5567'. [ 1310.615956][T24117] loop5: detected capacity change from 0 to 7 [ 1310.618978][T24117] loop5: [ 1310.619007][T24117] loop5: partition table partially beyond EOD, truncated [ 1310.713607][T12382] usb 7-1: USB disconnect, device number 34 [ 1310.777928][T22101] udevd[22101]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 1310.778073][T22101] udevd[22101]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 1311.078208][T24124] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5568'. [ 1311.647572][T24136] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5574'. [ 1311.647647][T24136] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5574'. [ 1312.497663][T24140] fuse: Bad value for 'rootmode' [ 1312.620179][T24142] loop8: detected capacity change from 0 to 1 [ 1312.623135][T24142] Dev loop8: unable to read RDB block 1 [ 1312.623216][T24142] loop8: unable to read partition table [ 1312.626140][T24142] loop8: partition table beyond EOD, truncated [ 1312.626201][T24142] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1312.941365][ T123] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1314.188834][T24164] netlink: 'syz.0.5582': attribute type 6 has an invalid length. [ 1315.116375][T24169] netlink: 'syz.6.5584': attribute type 15 has an invalid length. [ 1316.471994][T24184] fuse: Bad value for 'rootmode' [ 1317.045157][T24190] fuse: fd is not a fuse device [ 1317.286632][T24196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5593'. [ 1317.286680][T24196] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5593'. [ 1317.885444][T24206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1317.886635][T24206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1318.008292][T24207] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5598'. [ 1318.027473][ T31] audit: type=1326 audit(1791137175.878:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24205 comm="syz.2.5598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49b39e159 code=0x7ffc0000 [ 1318.030418][ T31] audit: type=1326 audit(1791137175.878:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24205 comm="syz.2.5598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49b39e159 code=0x7ffc0000 [ 1318.095612][ T31] audit: type=1326 audit(1791137175.948:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24205 comm="syz.2.5598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa49b39e159 code=0x7ffc0000 [ 1318.096043][ T31] audit: type=1326 audit(1791137175.948:3976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24205 comm="syz.2.5598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49b39e159 code=0x7ffc0000 [ 1318.096415][ T31] audit: type=1326 audit(1791137175.948:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24205 comm="syz.2.5598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49b39e159 code=0x7ffc0000 [ 1318.188129][ T31] audit: type=1326 audit(1791137176.038:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24205 comm="syz.2.5598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fa49b39e159 code=0x7ffc0000 [ 1318.188326][ T31] audit: type=1326 audit(1791137176.038:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24205 comm="syz.2.5598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49b39e159 code=0x7ffc0000 [ 1318.188545][ T31] audit: type=1326 audit(1791137176.038:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24205 comm="syz.2.5598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49b39e159 code=0x7ffc0000 [ 1318.269107][ T31] audit: type=1326 audit(1791137176.068:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24205 comm="syz.2.5598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49b39e159 code=0x7ffc0000 [ 1318.269170][ T31] audit: type=1326 audit(1791137176.118:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24205 comm="syz.2.5598" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49b39e159 code=0x7ffc0000 [ 1318.635044][T12382] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1318.782894][T12382] usb 7-1: Using ep0 maxpacket: 32 [ 1318.783942][T12382] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1318.785323][T12382] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 1318.785350][T12382] usb 7-1: config 0 has no interface number 0 [ 1318.785396][T12382] usb 7-1: config 0 interface 12 has no altsetting 0 [ 1318.831086][T12382] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.831107][T12382] usb 7-1: Product: syz [ 1318.831118][T12382] usb 7-1: Manufacturer: syz [ 1318.831130][T12382] usb 7-1: SerialNumber: syz [ 1318.857723][T12382] usb 7-1: config 0 descriptor?? [ 1319.332225][T24221] fuse: Bad value for 'rootmode' [ 1319.637759][T24227] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1319.736197][T24216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5601'. [ 1319.736230][T24216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5601'. [ 1320.148943][T24236] FAULT_INJECTION: forcing a failure. [ 1320.148943][T24236] name failslab, interval 1, probability 0, space 0, times 0 [ 1320.148985][T24236] CPU: 1 UID: 0 PID: 24236 Comm: syz.7.5609 Tainted: G L syzkaller #0 PREEMPT(full) [ 1320.149017][T24236] Tainted: [L]=SOFTLOCKUP [ 1320.149026][T24236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1320.149044][T24236] Call Trace: [ 1320.149054][T24236] [ 1320.149073][T24236] dump_stack_lvl+0xe8/0x150 [ 1320.149116][T24236] should_fail_ex+0x410/0x560 [ 1320.149151][T24236] ? __alloc_skb+0x1db/0x7a0 [ 1320.149184][T24236] should_failslab+0xa8/0x100 [ 1320.149219][T24236] ? __alloc_skb+0x1db/0x7a0 [ 1320.149247][T24236] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1320.149273][T24236] ? __alloc_skb+0x18d/0x7a0 [ 1320.149304][T24236] ? __alloc_skb+0x1db/0x7a0 [ 1320.149343][T24236] __alloc_skb+0x1db/0x7a0 [ 1320.149380][T24236] __ip_append_data+0x2aa9/0x3cf0 [ 1320.149409][T24236] ? __lock_acquire+0x747/0x2de0 [ 1320.149455][T24236] ? __pfx_raw_getfrag+0x10/0x10 [ 1320.149500][T24236] ? ipv4_mtu+0x23/0x670 [ 1320.149527][T24236] ? __pfx___ip_append_data+0x10/0x10 [ 1320.149554][T24236] ? ipv4_mtu+0x561/0x670 [ 1320.149577][T24236] ? ipv4_mtu+0x23/0x670 [ 1320.149601][T24236] ? __pfx_ipv4_mtu+0x10/0x10 [ 1320.149624][T24236] ? ip_setup_cork+0x512/0x920 [ 1320.149655][T24236] ip_append_data+0x10d/0x190 [ 1320.149686][T24236] ? __pfx_raw_getfrag+0x10/0x10 [ 1320.149714][T24236] raw_sendmsg+0x1406/0x1a20 [ 1320.149758][T24236] ? __pfx_raw_sendmsg+0x10/0x10 [ 1320.149789][T24236] ? __css_rstat_updated+0x237/0x540 [ 1320.149824][T24236] ? __pfx___css_rstat_updated+0x10/0x10 [ 1320.149868][T24236] ? aa_sock_msg_perm+0xfc/0x210 [ 1320.149900][T24236] ? sock_rps_record_flow+0x19/0x350 [ 1320.149932][T24236] ? inet_sendmsg+0x298/0x320 [ 1320.149956][T24236] ? apparmor_socket_sendmsg+0x98/0x360 [ 1320.149987][T24236] ? __pfx_inet_sendmsg+0x10/0x10 [ 1320.150012][T24236] sock_sendmsg_nosec+0x10e/0x180 [ 1320.150043][T24236] ____sys_sendmsg+0x54e/0x850 [ 1320.150092][T24236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1320.150135][T24236] ? import_iovec+0x73/0xa0 [ 1320.150172][T24236] ___sys_sendmsg+0x2a5/0x360 [ 1320.150214][T24236] ? __pfx____sys_sendmsg+0x10/0x10 [ 1320.150246][T24236] ? __lock_acquire+0x747/0x2de0 [ 1320.150326][T24236] __sys_sendmmsg+0x273/0x4d0 [ 1320.150369][T24236] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1320.150415][T24236] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1320.150468][T24236] ? ksys_write+0x242/0x270 [ 1320.150495][T24236] ? __pfx_ksys_write+0x10/0x10 [ 1320.150526][T24236] __x64_sys_sendmmsg+0xa0/0xc0 [ 1320.150563][T24236] do_syscall_64+0x166/0x520 [ 1320.150596][T24236] ? trace_irq_disable+0x3b/0x140 [ 1320.150621][T24236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.150647][T24236] ? clear_bhb_loop+0x70/0xc0 [ 1320.150675][T24236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.150699][T24236] RIP: 0033:0x7fb47d19e159 [ 1320.150720][T24236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1320.150741][T24236] RSP: 002b:00007fb47e08b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1320.150767][T24236] RAX: ffffffffffffffda RBX: 00007fb47d425fa0 RCX: 00007fb47d19e159 [ 1320.150785][T24236] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000007 [ 1320.150800][T24236] RBP: 00007fb47e08b090 R08: 0000000000000000 R09: 0000000000000000 [ 1320.150815][T24236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1320.150830][T24236] R13: 00007fb47d426038 R14: 00007fb47d425fa0 R15: 00007fb47d54fa48 [ 1320.150866][T24236] [ 1320.561776][T12382] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1320.561838][T12382] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 1320.561858][T12382] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1320.561938][T12382] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 1320.609679][T12382] usb 7-1: USB disconnect, device number 35 [ 1321.464354][T24248] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5613'. [ 1321.736653][T24252] fuse: Unknown parameter 'use00000000000000000000' [ 1321.929564][T24260] Cannot find set identified by id 1 to match [ 1322.525693][T12382] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 1322.677247][T24274] netlink: 'syz.2.5622': attribute type 1 has an invalid length. [ 1322.708221][T12382] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1322.737592][T12382] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.737623][T12382] usb 7-1: Product: syz [ 1322.737639][T12382] usb 7-1: Manufacturer: syz [ 1322.737655][T12382] usb 7-1: SerialNumber: syz [ 1322.769368][T12382] usb 7-1: config 0 descriptor?? [ 1323.016688][T12382] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1323.591013][T24267] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5621'. [ 1323.591076][T24267] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5621'. [ 1323.795996][ T5629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1323.819244][ T5629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1323.829929][ T5629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1323.844818][ T5629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1323.850158][ T5629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1324.611265][T19788] tipc: Resetting bearer [ 1324.803963][T19788] tipc: Disabling bearer [ 1324.907772][T12382] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1324.934284][T12382] usb 7-1: USB disconnect, device number 36 [ 1325.426322][T24296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5626'. [ 1325.496089][T24296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5626'. [ 1325.607098][T24284] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.607320][T24284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.607463][T24284] bridge_slave_0: entered allmulticast mode [ 1325.609667][T24301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1325.645696][T24284] bridge_slave_0: entered promiscuous mode [ 1325.648974][T24301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1325.667968][T24284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.668151][T24284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.668850][T24284] bridge_slave_1: entered allmulticast mode [ 1325.695361][T24284] bridge_slave_1: entered promiscuous mode [ 1325.846617][T24284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1325.877219][T24284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1325.962867][T24284] team0: Port device team_slave_0 added [ 1325.973142][T24283] Bluetooth: hci6: command tx timeout [ 1325.988918][T24284] team0: Port device team_slave_1 added [ 1326.227838][T24309] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1326.274001][T24309] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1326.321825][T24284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1326.321846][T24284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1326.321874][T24284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1326.383618][T24284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1326.383641][T24284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1326.383702][T24284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1326.598731][T24284] hsr_slave_0: entered promiscuous mode [ 1326.599986][T24284] hsr_slave_1: entered promiscuous mode [ 1326.600864][T24284] debugfs: 'hsr0' already exists in 'hsr' [ 1326.600886][T24284] Cannot create hsr debugfs directory [ 1326.782928][T12382] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1326.936666][T12382] usb 1-1: Using ep0 maxpacket: 8 [ 1326.938135][T12382] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1326.938784][T12382] usb 1-1: config 0 has no interfaces? [ 1326.938820][T12382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.942211][T12382] usb 1-1: config 0 descriptor?? [ 1327.199874][T24306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1327.204210][T24306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1327.253584][T24306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1327.253978][T24306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1327.261724][T12069] usb 1-1: USB disconnect, device number 53 [ 1327.266527][T12068] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1327.427829][T12068] usb 7-1: device descriptor read/64, error -71 [ 1327.616038][T24284] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.673124][T12068] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1327.814426][T12068] usb 7-1: device descriptor read/64, error -71 [ 1327.963420][T12068] usb usb7-port1: attempt power cycle [ 1328.052830][T24283] Bluetooth: hci6: command tx timeout [ 1328.083100][T24284] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.253821][T24284] bond0: (slave netdevsim1): Releasing backup interface [ 1328.260781][T24284] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.373168][T12068] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1328.403188][T12068] usb 7-1: device descriptor read/8, error -71 [ 1328.411961][T24284] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.639129][T24335] tc action pedit offset must be on 32 bit boundaries [ 1328.653117][T12068] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1328.676482][T12068] usb 7-1: device descriptor read/8, error -71 [ 1328.703259][T24284] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1328.708904][T24284] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1328.710309][T24284] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1328.717485][T24284] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1328.721581][T24284] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1328.751730][T24284] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1328.763662][T24284] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1328.767099][T24284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1328.785845][T12068] usb usb7-port1: unable to enumerate USB device [ 1328.881132][T24284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1328.912230][T24284] 8021q: adding VLAN 0 to HW filter on device team0 [ 1328.927234][ T6828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.927317][ T6828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1328.957846][ T6828] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.957936][ T6828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1329.085763][T24284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1329.510320][T24284] veth0_vlan: entered promiscuous mode [ 1329.520279][ T6828] IPVS: starting estimator thread 0... [ 1329.520926][T24345] batadv_slave_0: mtu less than device minimum [ 1329.575616][T24284] veth1_vlan: entered promiscuous mode [ 1329.603863][T24348] IPVS: using max 38 ests per chain, 91200 per kthread [ 1329.747708][T24284] veth0_macvtap: entered promiscuous mode [ 1329.780046][T24284] veth1_macvtap: entered promiscuous mode [ 1329.868552][T24284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1329.954027][T24359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.959164][T24359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.962403][T24284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1330.124515][ T6828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.126692][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.127315][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.127357][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.133027][T24283] Bluetooth: hci6: command tx timeout [ 1330.515870][T24363] netlink: 'syz.6.5646': attribute type 1 has an invalid length. [ 1330.639867][T24363] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1330.830504][T24365] bond2: (slave geneve2): making interface the new active one [ 1330.840777][T24365] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1330.895059][T15595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1330.895085][T15595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.933217][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1331.009477][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.009530][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.166554][T24367] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5647'. [ 1331.166589][T24367] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5647'. [ 1331.349621][T24372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.352419][T24372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.213616][T24283] Bluetooth: hci6: command tx timeout [ 1332.645265][ T31] kauditd_printk_skb: 45 callbacks suppressed [ 1332.645289][ T31] audit: type=1326 audit(1791137190.488:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24390 comm="syz.6.5654" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21dd59e159 code=0x0 [ 1332.853366][T24404] loop4: detected capacity change from 0 to 2640 [ 1332.853929][T24404] buffer_io_error: 10 callbacks suppressed [ 1332.854018][T24404] Buffer I/O error on dev loop4, logical block 0, async page read [ 1332.854062][T24404] Buffer I/O error on dev loop4, logical block 0, async page read [ 1332.854097][T24404] Buffer I/O error on dev loop4, logical block 0, async page read [ 1332.854129][T24404] Buffer I/O error on dev loop4, logical block 0, async page read [ 1332.854174][T24404] Buffer I/O error on dev loop4, logical block 0, async page read [ 1332.854252][T24404] Buffer I/O error on dev loop4, logical block 0, async page read [ 1332.854301][T24404] Buffer I/O error on dev loop4, logical block 0, async page read [ 1332.854334][T24404] Buffer I/O error on dev loop4, logical block 0, async page read [ 1332.854352][T24404] ldm_validate_partition_table(): Disk read failed. [ 1332.854395][T24404] Buffer I/O error on dev loop4, logical block 0, async page read [ 1332.854446][T24404] Buffer I/O error on dev loop4, logical block 0, async page read [ 1332.854500][T24404] Dev loop4: unable to read RDB block 0 [ 1332.991339][T24404] loop4: unable to read partition table [ 1332.991567][T24404] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1333.060961][T24392] xt_CT: No such helper "netbios-ns" [ 1333.064875][T12382] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1333.243826][T12382] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1333.245981][T12382] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1333.297951][T12382] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1333.297992][T12382] usb 7-1: Product: syz [ 1333.298010][T12382] usb 7-1: Manufacturer: syz [ 1333.298026][T12382] usb 7-1: SerialNumber: syz [ 1333.713390][ T123] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 1333.908315][T24409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1333.931607][ T123] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1333.931654][ T123] usb 1-1: no configurations [ 1333.931665][ T123] usb 1-1: can't read configurations, error -22 [ 1334.042803][T20606] usb 5-1: new low-speed USB device number 60 using dummy_hcd [ 1334.164561][T24417] netlink: 'syz.2.5660': attribute type 1 has an invalid length. [ 1334.168792][T24419] netlink: 'syz.2.5660': attribute type 1 has an invalid length. [ 1334.212917][T20606] usb 5-1: device descriptor read/64, error -71 [ 1334.255672][T24416] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5660'. [ 1334.342618][T24417] bond2: entered promiscuous mode [ 1334.369198][T24417] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1334.391537][T24416] bond2: entered allmulticast mode [ 1334.463584][T20606] usb 5-1: new low-speed USB device number 61 using dummy_hcd [ 1334.603111][T20606] usb 5-1: device descriptor read/64, error -71 [ 1334.713965][T20606] usb usb5-port1: attempt power cycle [ 1334.839311][T24417] bond2: (slave bridge2): making interface the new active one [ 1334.839366][T24417] bridge2: entered promiscuous mode [ 1334.839612][T24417] bridge2: entered allmulticast mode [ 1334.890318][T24426] fuse: Unknown parameter 'user_id00000000000000000000' [ 1334.961857][T24417] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1335.052847][T20606] usb 5-1: new low-speed USB device number 62 using dummy_hcd [ 1335.084156][T20606] usb 5-1: device descriptor read/8, error -71 [ 1335.233986][T24419] bond2: (slave bridge3): Enslaving as a backup interface with an up link [ 1335.353093][T20606] usb 5-1: new low-speed USB device number 63 using dummy_hcd [ 1335.373826][T20606] usb 5-1: device descriptor read/8, error -71 [ 1335.499553][T20606] usb usb5-port1: unable to enumerate USB device [ 1335.589757][T24428] FAULT_INJECTION: forcing a failure. [ 1335.589757][T24428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1335.589804][T24428] CPU: 0 UID: 0 PID: 24428 Comm: syz.0.5663 Tainted: G L syzkaller #0 PREEMPT(full) [ 1335.589835][T24428] Tainted: [L]=SOFTLOCKUP [ 1335.589844][T24428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1335.589857][T24428] Call Trace: [ 1335.589869][T24428] [ 1335.589885][T24428] dump_stack_lvl+0xe8/0x150 [ 1335.589913][T24428] should_fail_ex+0x410/0x560 [ 1335.589953][T24428] _copy_from_user+0x2d/0xb0 [ 1335.589993][T24428] snd_seq_write+0x309/0x820 [ 1335.590033][T24428] ? __pfx_snd_seq_write+0x10/0x10 [ 1335.590056][T24428] ? bpf_lsm_file_permission+0x9/0x20 [ 1335.590080][T24428] ? security_file_permission+0x75/0x260 [ 1335.590117][T24428] ? rw_verify_area+0x203/0x4c0 [ 1335.590155][T24428] ? __pfx_snd_seq_write+0x10/0x10 [ 1335.590178][T24428] vfs_write+0x296/0xba0 [ 1335.590209][T24428] ? __pfx_vfs_write+0x10/0x10 [ 1335.590232][T24428] ? __fget_files+0x2a/0x420 [ 1335.590272][T24428] ? __fget_files+0x2a/0x420 [ 1335.590305][T24428] ? __fget_files+0x3a2/0x420 [ 1335.590335][T24428] ? __fget_files+0x2a/0x420 [ 1335.590376][T24428] ksys_write+0x150/0x270 [ 1335.590394][T24428] ? __pfx_ksys_write+0x10/0x10 [ 1335.590436][T24428] do_syscall_64+0x166/0x520 [ 1335.590469][T24428] ? trace_irq_disable+0x3b/0x140 [ 1335.590492][T24428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.590519][T24428] ? clear_bhb_loop+0x70/0xc0 [ 1335.590539][T24428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.590556][T24428] RIP: 0033:0x7f442e39e159 [ 1335.590587][T24428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1335.590609][T24428] RSP: 002b:00007f442f34b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1335.590632][T24428] RAX: ffffffffffffffda RBX: 00007f442e625fa0 RCX: 00007f442e39e159 [ 1335.590649][T24428] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000007 [ 1335.590669][T24428] RBP: 00007f442f34b090 R08: 0000000000000000 R09: 0000000000000000 [ 1335.590680][T24428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1335.590690][T24428] R13: 00007f442e626038 R14: 00007f442e625fa0 R15: 00007f442e74fa48 [ 1335.590715][T24428] [ 1335.824768][T12382] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1335.859867][T12382] usb 7-1: USB disconnect, device number 41 [ 1335.872035][T12382] usblp0: removed [ 1336.623088][T12382] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1336.668829][T24441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5667'. [ 1336.779560][T12382] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1336.812096][T12382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.909752][T12382] usb 1-1: config 0 descriptor?? [ 1336.961859][T12382] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1337.220950][T24448] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5666'. [ 1337.242766][ T31] audit: type=1326 audit(1791137195.088:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24436 comm="syz.0.5666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442e39e159 code=0x7ffc0000 [ 1337.288670][ T31] audit: type=1326 audit(1791137195.138:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24436 comm="syz.0.5666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442e39e159 code=0x7ffc0000 [ 1337.288758][ T31] audit: type=1326 audit(1791137195.138:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24436 comm="syz.0.5666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f442e39e159 code=0x7ffc0000 [ 1337.288804][ T31] audit: type=1326 audit(1791137195.138:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24436 comm="syz.0.5666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442e39e159 code=0x7ffc0000 [ 1337.288898][ T31] audit: type=1326 audit(1791137195.138:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24436 comm="syz.0.5666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442e39e159 code=0x7ffc0000 [ 1337.353926][ T31] audit: type=1326 audit(1791137195.168:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24436 comm="syz.0.5666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f442e39e159 code=0x7ffc0000 [ 1337.450979][ T31] audit: type=1326 audit(1791137195.298:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24436 comm="syz.0.5666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442e39e159 code=0x7ffc0000 [ 1337.451067][ T31] audit: type=1326 audit(1791137195.298:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24436 comm="syz.0.5666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442e39e159 code=0x7ffc0000 [ 1337.516250][ T31] audit: type=1326 audit(1791137195.358:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24436 comm="syz.0.5666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f442e39e159 code=0x7ffc0000 [ 1339.678168][T12382] usb 1-1: USB disconnect, device number 56 [ 1339.705261][T24470] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5678'. [ 1339.735461][T24470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.799368][T24476] FAULT_INJECTION: forcing a failure. [ 1339.799368][T24476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1339.799411][T24476] CPU: 1 UID: 0 PID: 24476 Comm: syz.4.5680 Tainted: G L syzkaller #0 PREEMPT(full) [ 1339.799440][T24476] Tainted: [L]=SOFTLOCKUP [ 1339.799449][T24476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1339.799463][T24476] Call Trace: [ 1339.799472][T24476] [ 1339.799483][T24476] dump_stack_lvl+0xe8/0x150 [ 1339.799521][T24476] should_fail_ex+0x410/0x560 [ 1339.799555][T24476] _copy_from_user+0x2d/0xb0 [ 1339.799588][T24476] ___sys_recvmsg+0x173/0x5a0 [ 1339.799617][T24476] ? __pfx____sys_recvmsg+0x10/0x10 [ 1339.799644][T24476] ? lock_acquire+0x115/0x350 [ 1339.799699][T24476] do_recvmmsg+0x31a/0x7f0 [ 1339.799729][T24476] ? __pfx_do_recvmmsg+0x10/0x10 [ 1339.799763][T24476] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1339.799799][T24476] ? __fget_files+0x3a2/0x420 [ 1339.799843][T24476] __x64_sys_recvmmsg+0x198/0x250 [ 1339.799869][T24476] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1339.799903][T24476] do_syscall_64+0x166/0x520 [ 1339.799935][T24476] ? trace_irq_disable+0x3b/0x140 [ 1339.799959][T24476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.799982][T24476] ? clear_bhb_loop+0x70/0xc0 [ 1339.800009][T24476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.800032][T24476] RIP: 0033:0x7f872a19e159 [ 1339.800052][T24476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1339.800072][T24476] RSP: 002b:00007f872afa4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1339.800104][T24476] RAX: ffffffffffffffda RBX: 00007f872a426090 RCX: 00007f872a19e159 [ 1339.800121][T24476] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1339.800136][T24476] RBP: 00007f872afa4090 R08: 0000000000000000 R09: 0000000000000000 [ 1339.800151][T24476] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1339.800168][T24476] R13: 00007f872a426128 R14: 00007f872a426090 R15: 00007f872a54fa48 [ 1339.800202][T24476] [ 1340.073372][T24478] program syz.2.5679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1340.613038][T20608] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1340.766860][T20608] usb 7-1: device descriptor read/64, error -71 [ 1341.005684][T20608] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1341.123069][T24492] syzkaller0: entered promiscuous mode [ 1341.123087][T24492] syzkaller0: entered allmulticast mode [ 1341.156163][T20608] usb 7-1: device descriptor read/64, error -71 [ 1341.263880][T20608] usb usb7-port1: attempt power cycle [ 1341.603766][T20608] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1341.630966][T20608] usb 7-1: device descriptor read/8, error -71 [ 1341.863094][T20608] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1341.883683][T20608] usb 7-1: device descriptor read/8, error -71 [ 1341.993419][T20608] usb usb7-port1: unable to enumerate USB device [ 1342.034578][T24505] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1342.034607][T24505] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1342.040564][T24505] vhci_hcd vhci_hcd.0: Device attached [ 1342.083012][T24505] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 1342.083044][T24505] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1342.089246][T24505] vhci_hcd vhci_hcd.0: Device attached [ 1342.144674][T24505] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(9) [ 1342.144695][T24505] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1342.144908][T24505] vhci_hcd vhci_hcd.0: Device attached [ 1342.150960][T24505] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(11) [ 1342.150997][T24505] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1342.152178][T24505] vhci_hcd vhci_hcd.0: Device attached [ 1342.202768][T24505] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(13) [ 1342.202798][T24505] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1342.203055][T24505] vhci_hcd vhci_hcd.0: Device attached [ 1342.209900][T24505] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(15) [ 1342.209931][T24505] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1342.210489][T24505] vhci_hcd vhci_hcd.0: Device attached [ 1342.257699][T24505] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(17) [ 1342.257731][T24505] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1342.257953][T24505] vhci_hcd vhci_hcd.0: Device attached [ 1342.277509][T20608] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 1342.300941][T24505] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(19) [ 1342.300963][T24505] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1342.301532][T24505] vhci_hcd vhci_hcd.0: Device attached [ 1342.939003][T24520] vhci_hcd: connection closed [ 1342.939289][T24514] vhci_hcd: connection closed [ 1342.939501][T24518] vhci_hcd: connection closed [ 1342.941857][T24512] vhci_hcd: connection closed [ 1342.942929][T24516] vhci_hcd: connection closed [ 1342.966701][T24510] vhci_hcd: connection closed [ 1342.972275][T20104] vhci_hcd vhci_hcd.0: stop threads [ 1342.972303][T20104] vhci_hcd vhci_hcd.0: release socket [ 1342.972356][T20104] vhci_hcd vhci_hcd.0: disconnect device [ 1342.978906][T24506] vhci_hcd: connection reset by peer [ 1342.979281][T20104] vhci_hcd vhci_hcd.0: stop threads [ 1342.979301][T20104] vhci_hcd vhci_hcd.0: release socket [ 1342.979359][T20104] vhci_hcd vhci_hcd.0: disconnect device [ 1343.005922][T24508] vhci_hcd: connection closed [ 1343.045930][T20104] vhci_hcd vhci_hcd.0: stop threads [ 1343.045960][T20104] vhci_hcd vhci_hcd.0: release socket [ 1343.046012][T20104] vhci_hcd vhci_hcd.0: disconnect device [ 1343.047132][T20104] vhci_hcd vhci_hcd.0: stop threads [ 1343.047152][T20104] vhci_hcd vhci_hcd.0: release socket [ 1343.047241][T20104] vhci_hcd vhci_hcd.0: disconnect device [ 1343.062814][T20104] vhci_hcd vhci_hcd.0: stop threads [ 1343.062874][T20104] vhci_hcd vhci_hcd.0: release socket [ 1343.063026][T20104] vhci_hcd vhci_hcd.0: disconnect device [ 1343.063897][T20104] vhci_hcd vhci_hcd.0: stop threads [ 1343.063945][T20104] vhci_hcd vhci_hcd.0: release socket [ 1343.064075][T20104] vhci_hcd vhci_hcd.0: disconnect device [ 1343.146025][T20104] vhci_hcd vhci_hcd.0: stop threads [ 1343.146042][T20104] vhci_hcd vhci_hcd.0: release socket [ 1343.146112][T20104] vhci_hcd vhci_hcd.0: disconnect device [ 1343.146563][T20104] vhci_hcd vhci_hcd.0: stop threads [ 1343.146581][T20104] vhci_hcd vhci_hcd.0: release socket [ 1343.146633][T20104] vhci_hcd vhci_hcd.0: disconnect device [ 1346.584736][T24566] FAULT_INJECTION: forcing a failure. [ 1346.584736][T24566] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.584769][T24566] CPU: 0 UID: 0 PID: 24566 Comm: syz.0.5702 Tainted: G L syzkaller #0 PREEMPT(full) [ 1346.584792][T24566] Tainted: [L]=SOFTLOCKUP [ 1346.584798][T24566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1346.584808][T24566] Call Trace: [ 1346.584818][T24566] [ 1346.584826][T24566] dump_stack_lvl+0xe8/0x150 [ 1346.584855][T24566] should_fail_ex+0x410/0x560 [ 1346.584880][T24566] should_failslab+0xa8/0x100 [ 1346.584907][T24566] __kmalloc_cache_noprof+0xa3/0x600 [ 1346.584927][T24566] ? snd_ctl_notify+0x21f/0x4d0 [ 1346.584948][T24566] ? snd_ctl_notify+0x21f/0x4d0 [ 1346.584973][T24566] snd_ctl_notify+0x21f/0x4d0 [ 1346.585001][T24566] __snd_ctl_add_replace+0x611/0x950 [ 1346.585096][T24566] ? __pfx___snd_ctl_add_replace+0x10/0x10 [ 1346.585125][T24566] ? snd_ctl_elem_add+0x43a/0xa80 [ 1346.585153][T24566] ? snd_ctl_elem_add+0x524/0xa80 [ 1346.585212][T24566] snd_ctl_elem_add+0x762/0xa80 [ 1346.585257][T24566] snd_ctl_ioctl+0xee9/0x1e00 [ 1346.585283][T24566] ? stack_trace_save+0xa9/0x100 [ 1346.585301][T24566] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1346.585323][T24566] ? kasan_save_track+0x4f/0x80 [ 1346.585345][T24566] ? stack_depot_save_flags+0x33/0x7f0 [ 1346.585366][T24566] ? __lock_acquire+0x747/0x2de0 [ 1346.585387][T24566] ? kasan_save_track+0x4f/0x80 [ 1346.585412][T24566] ? kasan_save_track+0x3e/0x80 [ 1346.585430][T24566] ? kasan_save_free_info+0x40/0x50 [ 1346.585454][T24566] ? __kasan_slab_free+0x5c/0x80 [ 1346.585473][T24566] ? kfree+0x1c5/0x650 [ 1346.585486][T24566] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 1346.585506][T24566] ? security_file_ioctl+0xc3/0x2a0 [ 1346.585524][T24566] ? __se_sys_ioctl+0x47/0x170 [ 1346.585541][T24566] ? do_syscall_64+0x166/0x520 [ 1346.585565][T24566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.585621][T24566] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1346.585643][T24566] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1346.585667][T24566] ? do_vfs_ioctl+0x116f/0x1530 [ 1346.585688][T24566] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1346.585717][T24566] ? hook_file_ioctl+0x1f2/0x600 [ 1346.585754][T24566] ? __fget_files+0x2a/0x420 [ 1346.585781][T24566] ? __fget_files+0x2a/0x420 [ 1346.585804][T24566] ? __fget_files+0x3a2/0x420 [ 1346.585827][T24566] ? __fget_files+0x2a/0x420 [ 1346.585854][T24566] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1346.585880][T24566] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1346.585906][T24566] __se_sys_ioctl+0xfc/0x170 [ 1346.585926][T24566] do_syscall_64+0x166/0x520 [ 1346.585949][T24566] ? trace_irq_disable+0x3b/0x140 [ 1346.585966][T24566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.585983][T24566] ? clear_bhb_loop+0x70/0xc0 [ 1346.586003][T24566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.586020][T24566] RIP: 0033:0x7f442e39e159 [ 1346.586036][T24566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1346.586051][T24566] RSP: 002b:00007f442f32a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1346.586069][T24566] RAX: ffffffffffffffda RBX: 00007f442e626090 RCX: 00007f442e39e159 [ 1346.586081][T24566] RDX: 0000200000000340 RSI: 00000000c1105517 RDI: 0000000000000003 [ 1346.586092][T24566] RBP: 00007f442f32a090 R08: 0000000000000000 R09: 0000000000000000 [ 1346.586102][T24566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1346.586112][T24566] R13: 00007f442e626128 R14: 00007f442e626090 R15: 00007f442e74fa48 [ 1346.586137][T24566] [ 1346.586147][T24566] snd_dummy snd_dummy.0: No memory available to allocate event [ 1347.259705][T24563] netlink: 'syz.2.5703': attribute type 11 has an invalid length. [ 1347.410573][T20608] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1347.790982][T24575] FAULT_INJECTION: forcing a failure. [ 1347.790982][T24575] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.791012][T24575] CPU: 0 UID: 0 PID: 24575 Comm: syz.6.5706 Tainted: G L syzkaller #0 PREEMPT(full) [ 1347.791034][T24575] Tainted: [L]=SOFTLOCKUP [ 1347.791042][T24575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1347.791052][T24575] Call Trace: [ 1347.791059][T24575] [ 1347.791066][T24575] dump_stack_lvl+0xe8/0x150 [ 1347.791094][T24575] should_fail_ex+0x410/0x560 [ 1347.791118][T24575] should_failslab+0xa8/0x100 [ 1347.791142][T24575] __kmalloc_noprof+0xfe/0x720 [ 1347.791159][T24575] ? load_elf_binary+0x2c6/0x28d0 [ 1347.791205][T24575] ? load_elf_binary+0x2c6/0x28d0 [ 1347.791241][T24575] load_elf_binary+0x2c6/0x28d0 [ 1347.791263][T24575] ? __lock_acquire+0x747/0x2de0 [ 1347.791288][T24575] ? put_binfmt_handler+0x2f/0x340 [ 1347.791307][T24575] ? load_misc_binary+0x23f/0x15d0 [ 1347.791330][T24575] ? load_misc_binary+0x91c/0x15d0 [ 1347.791359][T24575] ? __pfx_load_elf_binary+0x10/0x10 [ 1347.791393][T24575] bprm_execve+0x930/0x1590 [ 1347.791420][T24575] ? __pfx_bprm_execve+0x10/0x10 [ 1347.791435][T24575] ? do_raw_spin_unlock+0xf5/0x200 [ 1347.791481][T24575] ? alloc_bprm+0x582/0x640 [ 1347.791499][T24575] do_execveat_common+0x4f4/0x670 [ 1347.791522][T24575] __x64_sys_execveat+0xc7/0xf0 [ 1347.791542][T24575] do_syscall_64+0x166/0x520 [ 1347.791566][T24575] ? trace_irq_disable+0x3b/0x140 [ 1347.791583][T24575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.791600][T24575] ? clear_bhb_loop+0x70/0xc0 [ 1347.791620][T24575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.791637][T24575] RIP: 0033:0x7f21dd59e159 [ 1347.791652][T24575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1347.791667][T24575] RSP: 002b:00007f21de4e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1347.791685][T24575] RAX: ffffffffffffffda RBX: 00007f21dd825fa0 RCX: 00007f21dd59e159 [ 1347.791697][T24575] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1347.791708][T24575] RBP: 00007f21de4e2090 R08: 0000000000001000 R09: 0000000000000000 [ 1347.791718][T24575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1347.791728][T24575] R13: 00007f21dd826038 R14: 00007f21dd825fa0 R15: 00007f21dd94fa48 [ 1347.791753][T24575] [ 1348.673670][T24584] fuse: Bad value for 'fd' [ 1348.754047][ T5709] usb usb34-port8: attempt power cycle [ 1348.835596][ T4986] udevd[4986]: worker [22100] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time [ 1349.364367][ T5709] usb usb34-port8: unable to enumerate USB device [ 1353.107711][T24617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5723'. [ 1353.107755][T24617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5723'. [ 1355.559451][T24640] netlink: 'syz.2.5732': attribute type 1 has an invalid length. [ 1355.923634][T20606] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1356.050194][T24640] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1356.084851][T20606] usb 1-1: Using ep0 maxpacket: 32 [ 1356.105490][T20606] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1356.130500][T20606] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1356.130539][T20606] usb 1-1: config 0 has no interface number 0 [ 1356.130584][T20606] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1356.181392][T20606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.181423][T20606] usb 1-1: Product: syz [ 1356.181439][T20606] usb 1-1: Manufacturer: syz [ 1356.181454][T20606] usb 1-1: SerialNumber: syz [ 1356.251699][T20606] usb 1-1: config 0 descriptor?? [ 1356.264077][T24644] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1356.487248][T20606] asix 1-1:0.188: probe with driver asix failed with error -71 [ 1356.708027][T20606] usb 1-1: USB disconnect, device number 57 [ 1356.860927][T24652] ÿ: renamed from bond_slave_0 (while UP) [ 1357.050314][T24655] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1359.192799][T24678] loop8: detected capacity change from 0 to 1 [ 1359.283932][T24678] Dev loop8: unable to read RDB block 1 [ 1359.283965][T24678] loop8: unable to read partition table [ 1359.284121][T24678] loop8: partition table beyond EOD, truncated [ 1359.284147][T24678] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1359.589418][T24680] ip_tables: iptables: counters copy to user failed while replacing table [ 1359.627810][T24679] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1359.658801][T24679] batman_adv: batadv0: Adding interface: gretap1 [ 1359.658901][T24679] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1359.658936][T24679] batman_adv: batadv0: Interface activated: gretap1 [ 1360.401243][T24698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.401607][T24698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.561589][T24698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.576932][T24698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.889523][T24697] bridge0: port 3(vxlan0) entered blocking state [ 1360.912477][T24697] bridge0: port 3(vxlan0) entered disabled state [ 1360.930294][T24697] vxlan0: entered allmulticast mode [ 1360.970900][T24697] vxlan0: entered promiscuous mode [ 1361.452912][ T5709] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1361.604570][ T5709] usb 5-1: Using ep0 maxpacket: 32 [ 1361.605447][ T5709] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1361.640525][ T5709] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1361.640565][ T5709] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1361.640581][ T5709] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.640595][ T5709] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 92 [ 1361.640623][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.658592][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.658679][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.703038][T12382] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1361.912319][T12382] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1361.975639][T12382] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.975673][T12382] usb 7-1: Product: syz [ 1361.975691][T12382] usb 7-1: Manufacturer: syz [ 1361.975708][T12382] usb 7-1: SerialNumber: syz [ 1362.088120][T24706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1362.110675][T24706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.431357][T24706] tipc: Enabling of bearer rejected, failed to enable media [ 1362.450655][T24706] program syz.4.5752 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1363.134781][ T5709] usb 5-1: USB disconnect, device number 64 [ 1363.464656][T12382] rtl8150 7-1:1.0: couldn't reset the device [ 1363.465005][T12382] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 1363.593784][T12382] usb 7-1: USB disconnect, device number 46 [ 1364.409063][T12382] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1364.598898][T12382] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1364.652510][T12382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1364.652546][T12382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1364.652591][T12382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.770022][T12382] usb 1-1: config 0 descriptor?? [ 1368.366361][T24754] FAULT_INJECTION: forcing a failure. [ 1368.366361][T24754] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1368.366419][T24754] CPU: 0 UID: 0 PID: 24754 Comm: syz.6.5764 Tainted: G L syzkaller #0 PREEMPT(full) [ 1368.366449][T24754] Tainted: [L]=SOFTLOCKUP [ 1368.366457][T24754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1368.366480][T24754] Call Trace: [ 1368.366487][T24754] [ 1368.366495][T24754] dump_stack_lvl+0xe8/0x150 [ 1368.366524][T24754] should_fail_ex+0x410/0x560 [ 1368.366574][T24754] prepare_alloc_pages+0x223/0x600 [ 1368.366608][T24754] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1368.366643][T24754] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1368.366666][T24754] ? __pfx_policy_nodemask+0x10/0x10 [ 1368.366713][T24754] alloc_pages_mpol+0x21e/0x390 [ 1368.366752][T24754] alloc_pages_noprof+0xb1/0x2b0 [ 1368.366784][T24754] pte_alloc_one+0x22/0x370 [ 1368.366816][T24754] __pte_alloc+0x25/0x1a0 [ 1368.366833][T24754] ? alloc_new_pud+0x185/0x300 [ 1368.366874][T24754] move_page_tables+0x1b00/0x1ed0 [ 1368.366911][T24754] ? copy_vma+0x89f/0xad0 [ 1368.366948][T24754] ? move_page_tables+0x5cf/0x1ed0 [ 1368.366985][T24754] ? __pfx_move_page_tables+0x10/0x10 [ 1368.367030][T24754] ? percpu_counter_add_batch+0xec/0x1d0 [ 1368.367068][T24754] move_vma+0xa24/0x1850 [ 1368.367115][T24754] ? arch_get_unmapped_area_topdown+0x269/0xb50 [ 1368.367143][T24754] ? __pfx_move_vma+0x10/0x10 [ 1368.367178][T24754] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 1368.367203][T24754] ? mtree_load+0x12a/0x780 [ 1368.367247][T24754] ? mas_walk+0x37e/0x490 [ 1368.367280][T24754] ? cap_mmap_addr+0xaf/0x100 [ 1368.367308][T24754] ? bpf_lsm_mmap_addr+0x9/0x50 [ 1368.367353][T24754] mremap_to+0x7f9/0x8d0 [ 1368.367387][T24754] ? __pfx_mremap_to+0x10/0x10 [ 1368.367439][T24754] __se_sys_mremap+0xf59/0x12d0 [ 1368.367477][T24754] ? ksys_write+0x1e6/0x270 [ 1368.367502][T24754] ? __pfx___se_sys_mremap+0x10/0x10 [ 1368.367530][T24754] ? __mutex_unlock_slowpath+0x731/0x900 [ 1368.367573][T24754] ? __fget_files+0x2a/0x420 [ 1368.367599][T24754] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1368.367645][T24754] ? __fget_files+0x3a2/0x420 [ 1368.367695][T24754] ? __pfx_ksys_write+0x10/0x10 [ 1368.367729][T24754] ? __x64_sys_mremap+0x20/0xc0 [ 1368.367752][T24754] do_syscall_64+0x166/0x520 [ 1368.367776][T24754] ? trace_irq_disable+0x3b/0x140 [ 1368.367813][T24754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.367837][T24754] ? clear_bhb_loop+0x70/0xc0 [ 1368.367864][T24754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.367891][T24754] RIP: 0033:0x7f21dd59e159 [ 1368.367907][T24754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1368.367922][T24754] RSP: 002b:00007f21de4c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1368.367955][T24754] RAX: ffffffffffffffda RBX: 00007f21dd826090 RCX: 00007f21dd59e159 [ 1368.367973][T24754] RDX: 0000000000400000 RSI: 0000000000800000 RDI: 0000200000800000 [ 1368.367989][T24754] RBP: 00007f21de4c1090 R08: 0000200000000000 R09: 0000000000000000 [ 1368.368004][T24754] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1368.368018][T24754] R13: 00007f21dd826128 R14: 00007f21dd826090 R15: 00007f21dd94fa48 [ 1368.368054][T24754] [ 1370.533376][T12382] hid-led 0003:1D34:000A.003E: probe with driver hid-led failed with error -110 [ 1370.792930][ T5709] usb 1-1: USB disconnect, device number 58 [ 1371.878250][ T31] kauditd_printk_skb: 36 callbacks suppressed [ 1371.878295][ T31] audit: type=1326 audit(1791137229.728:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24780 comm="syz.7.5774" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47d19e159 code=0x7ffc0000 [ 1371.878361][ T31] audit: type=1326 audit(1791137229.728:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24780 comm="syz.7.5774" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47d19e159 code=0x7ffc0000 [ 1371.983050][ T31] audit: type=1326 audit(1791137229.838:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24780 comm="syz.7.5774" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb47d15e98e code=0x7ffc0000 [ 1371.989515][ T31] audit: type=1326 audit(1791137229.838:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24780 comm="syz.7.5774" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb47d19ddeb code=0x7ffc0000 [ 1372.061012][ T31] audit: type=1326 audit(1791137229.848:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24780 comm="syz.7.5774" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb47d19ddeb code=0x7ffc0000 [ 1372.097464][ T31] audit: type=1326 audit(1791137229.948:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24780 comm="syz.7.5774" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb47d19ddeb code=0x7ffc0000 [ 1372.097525][ T31] audit: type=1326 audit(1791137229.948:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24780 comm="syz.7.5774" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb47d19ddeb code=0x7ffc0000 [ 1372.280690][T24785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5773'. [ 1372.280722][T24785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5773'. [ 1372.917670][T24789] syzkaller0: entered promiscuous mode [ 1372.917688][T24789] syzkaller0: entered allmulticast mode [ 1373.058702][T24790] dlm: no locking on control device [ 1374.302785][T20600] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 1374.459466][T20600] usb 1-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 1374.464365][T20600] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.464409][T20600] usb 1-1: too many endpoints for config 0 interface 0 altsetting 5: 66, using maximum allowed: 30 [ 1374.464440][T20600] usb 1-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 1374.464484][T20600] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1374.464520][T20600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.562515][T20600] usb 1-1: config 0 descriptor?? [ 1374.670912][T20600] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1375.473895][T24810] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5782'. [ 1375.473918][T24810] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5782'. [ 1375.473929][T24810] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5782'. [ 1376.380447][T24825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.382266][T24825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.771119][T24825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.787708][T24825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.807991][T24825] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5785'. [ 1376.869484][T24828] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5786'. [ 1376.869506][T24828] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5786'. [ 1377.146634][ T5709] usb 1-1: USB disconnect, device number 59 [ 1377.892941][T20606] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1378.022806][T20606] usb 5-1: device descriptor read/64, error -71 [ 1378.092813][T12382] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1378.268055][T20606] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1378.270725][T12382] usb 7-1: Using ep0 maxpacket: 16 [ 1378.287959][T12382] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1378.289133][T12382] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1378.336766][T12382] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.336798][T12382] usb 7-1: Product: syz [ 1378.336825][T12382] usb 7-1: Manufacturer: syz [ 1378.336842][T12382] usb 7-1: SerialNumber: syz [ 1378.367078][T12382] usb 7-1: config 0 descriptor?? [ 1378.392914][T20606] usb 5-1: device descriptor read/64, error -71 [ 1378.419802][T12382] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1378.506287][T20606] usb usb5-port1: attempt power cycle [ 1378.843302][T20606] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1378.863468][T20606] usb 5-1: device descriptor read/8, error -71 [ 1379.102834][T20606] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1379.124452][T20606] usb 5-1: device descriptor read/8, error -71 [ 1379.233088][T20606] usb usb5-port1: unable to enumerate USB device [ 1379.575087][T20104] usb 7-1: Failed to submit usb control message: -110 [ 1379.575141][T20104] usb 7-1: unable to send the bmi data to the device: -110 [ 1379.575189][T20104] usb 7-1: unable to get target info from device [ 1379.575207][T20104] usb 7-1: could not get target info (-110) [ 1379.575227][T20104] usb 7-1: could not probe fw (-110) [ 1379.815581][T24876] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1380.767596][T24892] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[16548] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[24892] [ 1382.832840][T20600] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1382.986430][T20600] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1382.988103][T20600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.014826][T20600] usb 1-1: config 0 descriptor?? [ 1383.080771][T20600] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1383.336848][T24921] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5811'. [ 1383.372069][ T31] audit: type=1326 audit(1791137241.188:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24912 comm="syz.0.5811" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442e39e159 code=0x7ffc0000 [ 1383.372181][ T31] audit: type=1326 audit(1791137241.198:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24912 comm="syz.0.5811" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442e39e159 code=0x7ffc0000 [ 1383.373154][ T31] audit: type=1326 audit(1791137241.218:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24912 comm="syz.0.5811" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f442e39e159 code=0x7ffc0000 [ 1383.481829][ T31] audit: type=1326 audit(1791137241.328:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24912 comm="syz.0.5811" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442e39e159 code=0x7ffc0000 [ 1383.481914][ T31] audit: type=1326 audit(1791137241.328:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24912 comm="syz.0.5811" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442e39e159 code=0x7ffc0000 [ 1383.548295][ T31] audit: type=1326 audit(1791137241.398:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24912 comm="syz.0.5811" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f442e39e159 code=0x7ffc0000 [ 1383.548972][ T31] audit: type=1326 audit(1791137241.398:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24912 comm="syz.0.5811" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442e39e159 code=0x7ffc0000 [ 1383.549280][ T31] audit: type=1326 audit(1791137241.398:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24912 comm="syz.0.5811" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442e39e159 code=0x7ffc0000 [ 1383.622334][ T31] audit: type=1326 audit(1791137241.468:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24912 comm="syz.0.5811" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f442e39e159 code=0x7ffc0000 [ 1383.680940][ T31] audit: type=1326 audit(1791137241.528:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24912 comm="syz.0.5811" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442e39e159 code=0x7ffc0000 [ 1385.038941][T24932] loop8: detected capacity change from 0 to 1 [ 1385.058028][T24932] Dev loop8: unable to read RDB block 1 [ 1385.058075][T24932] loop8: unable to read partition table [ 1385.058350][T24932] loop8: partition table beyond EOD, truncated [ 1385.058381][T24932] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1385.501760][T24937] FAULT_INJECTION: forcing a failure. [ 1385.501760][T24937] name failslab, interval 1, probability 0, space 0, times 0 [ 1385.501801][T24937] CPU: 1 UID: 0 PID: 24937 Comm: syz.2.5819 Tainted: G L syzkaller #0 PREEMPT(full) [ 1385.501835][T24937] Tainted: [L]=SOFTLOCKUP [ 1385.501845][T24937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1385.501859][T24937] Call Trace: [ 1385.501869][T24937] [ 1385.501879][T24937] dump_stack_lvl+0xe8/0x150 [ 1385.501916][T24937] should_fail_ex+0x410/0x560 [ 1385.501953][T24937] should_failslab+0xa8/0x100 [ 1385.501993][T24937] ? alloc_empty_file+0x5b/0x1d0 [ 1385.502025][T24937] kmem_cache_alloc_noprof+0xa1/0x600 [ 1385.502048][T24937] ? stack_depot_save_flags+0x33/0x7f0 [ 1385.502077][T24937] ? alloc_empty_file+0x5b/0x1d0 [ 1385.502104][T24937] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1385.502123][T24937] alloc_empty_file+0x5b/0x1d0 [ 1385.502165][T24937] path_openat+0xa2/0x1d60 [ 1385.502197][T24937] ? __lock_acquire+0x747/0x2de0 [ 1385.502232][T24937] do_file_open+0x23e/0x4a0 [ 1385.502261][T24937] ? __pfx_do_file_open+0x10/0x10 [ 1385.502309][T24937] ? _raw_spin_unlock+0x28/0x50 [ 1385.502339][T24937] ? alloc_fd+0x651/0x6c0 [ 1385.502379][T24937] do_sys_openat2+0x115/0x200 [ 1385.502412][T24937] ? lockdep_hardirqs_on+0x7b/0x110 [ 1385.502437][T24937] ? __pfx_do_sys_openat2+0x10/0x10 [ 1385.502490][T24937] __x64_sys_openat+0x138/0x170 [ 1385.502526][T24937] do_syscall_64+0x166/0x520 [ 1385.502566][T24937] ? trace_irq_disable+0x3b/0x140 [ 1385.502589][T24937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.502612][T24937] ? clear_bhb_loop+0x70/0xc0 [ 1385.502639][T24937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.502663][T24937] RIP: 0033:0x7fa49b39e159 [ 1385.502684][T24937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1385.502704][T24937] RSP: 002b:00007fa49c1b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1385.502729][T24937] RAX: ffffffffffffffda RBX: 00007fa49b625fa0 RCX: 00007fa49b39e159 [ 1385.502745][T24937] RDX: 0b00000000065808 RSI: 0000200000000080 RDI: 0000000000000003 [ 1385.502761][T24937] RBP: 00007fa49c1b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1385.502793][T24937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1385.502808][T24937] R13: 00007fa49b626038 R14: 00007fa49b625fa0 R15: 00007fa49b74fa48 [ 1385.502843][T24937] [ 1386.035506][T20600] usb 1-1: USB disconnect, device number 60 [ 1386.155588][T24942] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5820'. [ 1386.316160][T24945] FAULT_INJECTION: forcing a failure. [ 1386.316160][T24945] name failslab, interval 1, probability 0, space 0, times 0 [ 1386.316202][T24945] CPU: 0 UID: 0 PID: 24945 Comm: syz.0.5822 Tainted: G L syzkaller #0 PREEMPT(full) [ 1386.316252][T24945] Tainted: [L]=SOFTLOCKUP [ 1386.316261][T24945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1386.316275][T24945] Call Trace: [ 1386.316285][T24945] [ 1386.316296][T24945] dump_stack_lvl+0xe8/0x150 [ 1386.316333][T24945] should_fail_ex+0x410/0x560 [ 1386.316367][T24945] should_failslab+0xa8/0x100 [ 1386.316401][T24945] __kmalloc_cache_noprof+0xa3/0x600 [ 1386.316429][T24945] ? sctp_add_bind_addr+0x8c/0x370 [ 1386.316454][T24945] ? sctp_add_bind_addr+0x8c/0x370 [ 1386.316486][T24945] sctp_add_bind_addr+0x8c/0x370 [ 1386.316516][T24945] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1386.316554][T24945] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1386.316581][T24945] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1386.316608][T24945] ? sctp_v6_is_any+0x64/0x80 [ 1386.316637][T24945] ? sctp_copy_one_addr+0x93/0x360 [ 1386.316666][T24945] sctp_bind_addr_copy+0xb3/0x3c0 [ 1386.316693][T24945] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1386.316731][T24945] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1386.316766][T24945] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1386.316806][T24945] ? sctp_inet6_send_verify+0x23a/0x300 [ 1386.316831][T24945] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 1386.316865][T24945] __sctp_connect+0x5cb/0xdc0 [ 1386.316907][T24945] ? __pfx___sctp_connect+0x10/0x10 [ 1386.316938][T24945] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1386.316970][T24945] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 1386.316996][T24945] sctp_getsockopt_connectx3+0x227/0x360 [ 1386.317025][T24945] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 1386.317056][T24945] ? sctp_getsockopt+0x12f/0xb90 [ 1386.317088][T24945] ? __local_bh_enable_ip+0xd6/0x140 [ 1386.317123][T24945] sctp_getsockopt+0x984/0xb90 [ 1386.317154][T24945] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1386.317185][T24945] do_sock_getsockopt+0x51d/0x7e0 [ 1386.317227][T24945] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1386.317281][T24945] ? __fget_files+0x3a2/0x420 [ 1386.317314][T24945] ? __fget_files+0x2a/0x420 [ 1386.317357][T24945] __x64_sys_getsockopt+0x1a4/0x240 [ 1386.317401][T24945] do_syscall_64+0x166/0x520 [ 1386.317433][T24945] ? trace_irq_disable+0x3b/0x140 [ 1386.317457][T24945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.317481][T24945] ? clear_bhb_loop+0x70/0xc0 [ 1386.317510][T24945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.317543][T24945] RIP: 0033:0x7f442e39e159 [ 1386.317565][T24945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1386.317585][T24945] RSP: 002b:00007f442f34b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1386.317611][T24945] RAX: ffffffffffffffda RBX: 00007f442e625fa0 RCX: 00007f442e39e159 [ 1386.317628][T24945] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1386.317643][T24945] RBP: 00007f442f34b090 R08: 0000200000000140 R09: 0000000000000000 [ 1386.317659][T24945] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1386.317674][T24945] R13: 00007f442e626038 R14: 00007f442e625fa0 R15: 00007f442e74fa48 [ 1386.317711][T24945] [ 1387.262573][ T5621] kworker/1:3 (5621) used greatest stack depth: 16064 bytes left [ 1387.488933][T24958] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1388.133332][T12382] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1388.258827][T24966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1388.259350][T24966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1388.292051][T12382] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1388.295831][T12382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.438631][T12382] usb 5-1: config 0 descriptor?? [ 1388.486420][T12382] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1388.836955][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 1388.836977][ T31] audit: type=1326 audit(1791137246.688:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24959 comm="syz.4.5826" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f872a19e159 code=0x7ffc0000 [ 1388.842078][ T31] audit: type=1326 audit(1791137246.688:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24959 comm="syz.4.5826" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f872a19e159 code=0x7ffc0000 [ 1388.876205][ T31] audit: type=1326 audit(1791137246.728:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24959 comm="syz.4.5826" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f872a19e159 code=0x7ffc0000 [ 1388.900336][ T31] audit: type=1326 audit(1791137246.748:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24959 comm="syz.4.5826" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f872a19e159 code=0x7ffc0000 [ 1388.966211][ T31] audit: type=1326 audit(1791137246.818:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24959 comm="syz.4.5826" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f872a19e159 code=0x7ffc0000 [ 1389.012798][ T5709] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1389.032991][ T31] audit: type=1326 audit(1791137246.878:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24959 comm="syz.4.5826" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f872a19e159 code=0x7ffc0000 [ 1389.033071][ T31] audit: type=1326 audit(1791137246.878:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24959 comm="syz.4.5826" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f872a19e159 code=0x7ffc0000 [ 1389.135603][ T31] audit: type=1326 audit(1791137246.988:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24959 comm="syz.4.5826" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f872a19e159 code=0x7ffc0000 [ 1389.135700][ T31] audit: type=1326 audit(1791137246.988:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24959 comm="syz.4.5826" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f872a19e159 code=0x7ffc0000 [ 1389.135749][ T31] audit: type=1326 audit(1791137246.988:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24959 comm="syz.4.5826" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f872a19e159 code=0x7ffc0000 [ 1389.220879][ T5709] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1389.222393][ T5709] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1389.222427][ T5709] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1389.222443][ T5709] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1389.222512][ T5709] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1389.222541][ T5709] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1389.291130][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1389.291169][ T5709] usb 1-1: Product: syz [ 1389.291213][ T5709] usb 1-1: Manufacturer: syz [ 1389.403826][ T5709] cdc_wdm 1-1:1.0: skipping garbage [ 1389.403851][ T5709] cdc_wdm 1-1:1.0: skipping garbage [ 1389.456698][ T5709] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1389.456724][ T5709] cdc_wdm 1-1:1.0: Unknown control protocol [ 1389.824437][T24973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5829'. [ 1389.850675][T24969] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5826'. [ 1389.984853][T24971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5829'. [ 1390.007073][T24968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5829'. [ 1390.314237][ T123] usb 1-1: USB disconnect, device number 61 [ 1390.356935][T24980] ip6t_hbh: unknown flags 38 [ 1391.160311][T12382] usb 5-1: USB disconnect, device number 69 [ 1391.391012][T24987] netlink: 'syz.0.5833': attribute type 1 has an invalid length. [ 1391.593890][T24987] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1391.691720][T24991] bond2: (slave geneve4): making interface the new active one [ 1391.751229][T24991] bond2: (slave geneve4): Enslaving as an active interface with an up link [ 1391.846329][T24995] netlink: 'syz.6.5836': attribute type 16 has an invalid length. [ 1391.846358][T24995] netlink: 'syz.6.5836': attribute type 17 has an invalid length. [ 1391.893302][T24994] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1391.929056][T24994] netlink: 'syz.6.5836': attribute type 16 has an invalid length. [ 1391.929080][T24994] netlink: 'syz.6.5836': attribute type 17 has an invalid length. [ 1391.990086][T24998] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1392.420247][T24995] macsec1: left promiscuous mode [ 1392.681116][T20102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.681260][T20102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1392.849913][T25010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5840'. [ 1392.849936][T25010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5840'. [ 1392.954917][T25010] veth1_macvtap: entered promiscuous mode [ 1392.975279][T25010] macsec1: entered promiscuous mode [ 1393.845963][T25029] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5845'. [ 1393.939381][T25029] macsec1: entered promiscuous mode [ 1394.019017][T25031] lo: entered allmulticast mode [ 1394.087175][T25030] lo: left allmulticast mode [ 1394.696648][T12382] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1394.844552][T12382] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1394.846197][T12382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.880561][T12382] usb 5-1: config 0 descriptor?? [ 1394.903725][T12382] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1395.310803][T25051] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5849'. [ 1395.350167][T25052] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5855'. [ 1395.511209][T25055] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5855'. [ 1395.693841][T25057] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 1395.693865][T25057] PKCS7: Only support pkcs7_signedData type [ 1397.472187][T25069] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 1397.472187][T25069] Please contact the netfilter-devel mailing list or update your nftables rules. [ 1397.545057][T25069] random: crng reseeded on system resumption [ 1397.719282][T25070] fuse: Bad value for 'fd' [ 1397.807452][T12382] usb 5-1: USB disconnect, device number 70 [ 1397.848882][T25069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1397.849311][T25069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1397.883860][T25069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1397.884317][T25069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1398.187768][T25076] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5862'. [ 1398.200217][T25077] xt_NFQUEUE: number of queues (65535) out of range (got 98302) [ 1399.286715][T25096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1399.287220][T25096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1400.660736][ T123] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1400.832802][ T123] usb 5-1: Using ep0 maxpacket: 32 [ 1400.833685][ T123] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1400.834931][ T123] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1400.834957][ T123] usb 5-1: config 0 has no interface number 0 [ 1400.834999][ T123] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1400.888890][ T123] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.888911][ T123] usb 5-1: Product: syz [ 1400.888922][ T123] usb 5-1: Manufacturer: syz [ 1400.888954][ T123] usb 5-1: SerialNumber: syz [ 1400.895830][T25117] netlink: 'syz.2.5876': attribute type 11 has an invalid length. [ 1400.896345][T25117] netlink: 448 bytes leftover after parsing attributes in process `syz.2.5876'. [ 1400.951915][ T123] usb 5-1: config 0 descriptor?? [ 1401.210601][T25099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5871'. [ 1401.641064][T25127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5878'. [ 1401.641244][T25127] FAULT_INJECTION: forcing a failure. [ 1401.641244][T25127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1401.641303][T25127] CPU: 1 UID: 0 PID: 25127 Comm: syz.2.5878 Tainted: G L syzkaller #0 PREEMPT(full) [ 1401.641333][T25127] Tainted: [L]=SOFTLOCKUP [ 1401.641340][T25127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1401.641350][T25127] Call Trace: [ 1401.641356][T25127] [ 1401.641364][T25127] dump_stack_lvl+0xe8/0x150 [ 1401.641419][T25127] should_fail_ex+0x410/0x560 [ 1401.641456][T25127] _copy_from_user+0x2d/0xb0 [ 1401.641490][T25127] kstrtouint_from_user+0xd6/0x180 [ 1401.641511][T25127] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1401.641555][T25127] ? lock_acquire+0x115/0x350 [ 1401.641586][T25127] proc_fail_nth_write+0x8e/0x210 [ 1401.641611][T25127] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1401.641644][T25127] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1401.641662][T25127] vfs_write+0x296/0xba0 [ 1401.641685][T25127] ? __pfx_vfs_write+0x10/0x10 [ 1401.641724][T25127] ? __fget_files+0x2a/0x420 [ 1401.641760][T25127] ? __fget_files+0x3a2/0x420 [ 1401.641795][T25127] ? __fget_files+0x2a/0x420 [ 1401.641826][T25127] ksys_write+0x150/0x270 [ 1401.641858][T25127] ? __pfx_ksys_write+0x10/0x10 [ 1401.641901][T25127] do_syscall_64+0x166/0x520 [ 1401.641938][T25127] ? trace_irq_disable+0x3b/0x140 [ 1401.641963][T25127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.641980][T25127] ? clear_bhb_loop+0x70/0xc0 [ 1401.642001][T25127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.642037][T25127] RIP: 0033:0x7fa49b35e98e [ 1401.642058][T25127] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1401.642076][T25127] RSP: 002b:00007fa49c1b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1401.642106][T25127] RAX: ffffffffffffffda RBX: 00007fa49c1b76c0 RCX: 00007fa49b35e98e [ 1401.642118][T25127] RDX: 0000000000000001 RSI: 00007fa49c1b70a0 RDI: 0000000000000004 [ 1401.642128][T25127] RBP: 00007fa49c1b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1401.642138][T25127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1401.642148][T25127] R13: 00007fa49b626038 R14: 00007fa49b625fa0 R15: 00007fa49b74fa48 [ 1401.642192][T25127] [ 1402.903454][ T123] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1402.903511][ T123] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1402.903526][ T123] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1402.903617][ T123] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1402.955194][ T123] usb 5-1: USB disconnect, device number 71 [ 1403.650630][T25146] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5886'. [ 1403.650687][T25146] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5886'. [ 1403.823363][T25146] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1404.819467][T25173] FAULT_INJECTION: forcing a failure. [ 1404.819467][T25173] name failslab, interval 1, probability 0, space 0, times 0 [ 1404.819511][T25173] CPU: 1 UID: 0 PID: 25173 Comm: syz.7.5893 Tainted: G L syzkaller #0 PREEMPT(full) [ 1404.819540][T25173] Tainted: [L]=SOFTLOCKUP [ 1404.819552][T25173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1404.819562][T25173] Call Trace: [ 1404.819569][T25173] [ 1404.819577][T25173] dump_stack_lvl+0xe8/0x150 [ 1404.819618][T25173] should_fail_ex+0x410/0x560 [ 1404.819653][T25173] should_failslab+0xa8/0x100 [ 1404.819684][T25173] __kmalloc_noprof+0xfe/0x720 [ 1404.819712][T25173] ? copy_splice_read+0x16f/0xaa0 [ 1404.819738][T25173] ? copy_splice_read+0x16f/0xaa0 [ 1404.819783][T25173] copy_splice_read+0x16f/0xaa0 [ 1404.819818][T25173] ? __pfx_pipe_to_null+0x10/0x10 [ 1404.819851][T25173] ? pipe_unlock+0x56/0x80 [ 1404.819875][T25173] ? splice_from_pipe+0x124/0x190 [ 1404.819900][T25173] ? __pfx_pipe_to_null+0x10/0x10 [ 1404.819937][T25173] ? __pfx_copy_splice_read+0x10/0x10 [ 1404.819969][T25173] ? trace_kmalloc+0x2a/0xf0 [ 1404.819995][T25173] ? register_lock_class+0x31/0x2e0 [ 1404.820025][T25173] ? file_end_write+0xd8/0x220 [ 1404.820041][T25173] ? direct_splice_actor+0x10c/0x160 [ 1404.820058][T25173] ? __pfx_copy_splice_read+0x10/0x10 [ 1404.820101][T25173] splice_direct_to_actor+0x48b/0xcb0 [ 1404.820152][T25173] ? __pfx_direct_splice_actor+0x10/0x10 [ 1404.820176][T25173] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1404.820200][T25173] do_splice_direct+0x195/0x290 [ 1404.820218][T25173] ? __pfx_do_splice_direct+0x10/0x10 [ 1404.820251][T25173] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1404.820278][T25173] ? bpf_lsm_file_permission+0x9/0x20 [ 1404.820310][T25173] ? security_file_permission+0x75/0x260 [ 1404.820338][T25173] ? rw_verify_area+0x203/0x4c0 [ 1404.820367][T25173] do_sendfile+0x52e/0x7c0 [ 1404.820411][T25173] ? __pfx_do_sendfile+0x10/0x10 [ 1404.820440][T25173] ? __fget_files+0x3a2/0x420 [ 1404.820484][T25173] __se_sys_sendfile64+0x144/0x1a0 [ 1404.820507][T25173] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1404.820535][T25173] do_syscall_64+0x166/0x520 [ 1404.820579][T25173] ? trace_irq_disable+0x3b/0x140 [ 1404.820602][T25173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.820624][T25173] ? clear_bhb_loop+0x70/0xc0 [ 1404.820652][T25173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.820669][T25173] RIP: 0033:0x7fb47d19e159 [ 1404.820685][T25173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1404.820713][T25173] RSP: 002b:00007fb47e08b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1404.820739][T25173] RAX: ffffffffffffffda RBX: 00007fb47d425fa0 RCX: 00007fb47d19e159 [ 1404.820756][T25173] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 1404.820769][T25173] RBP: 00007fb47e08b090 R08: 0000000000000000 R09: 0000000000000000 [ 1404.820782][T25173] R10: 0000000002000009 R11: 0000000000000246 R12: 0000000000000002 [ 1404.820798][T25173] R13: 00007fb47d426038 R14: 00007fb47d425fa0 R15: 00007fb47d54fa48 [ 1404.820822][T25173] [ 1405.651126][T25181] FAULT_INJECTION: forcing a failure. [ 1405.651126][T25181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1405.651207][T25181] CPU: 0 UID: 0 PID: 25181 Comm: syz.6.5896 Tainted: G L syzkaller #0 PREEMPT(full) [ 1405.651237][T25181] Tainted: [L]=SOFTLOCKUP [ 1405.651247][T25181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1405.651263][T25181] Call Trace: [ 1405.651269][T25181] [ 1405.651277][T25181] dump_stack_lvl+0xe8/0x150 [ 1405.651306][T25181] should_fail_ex+0x410/0x560 [ 1405.651333][T25181] _copy_from_user+0x2d/0xb0 [ 1405.651359][T25181] ___sys_sendmsg+0x1c6/0x360 [ 1405.651385][T25181] ? __lock_acquire+0x747/0x2de0 [ 1405.651406][T25181] ? __pfx____sys_sendmsg+0x10/0x10 [ 1405.651456][T25181] ? __fget_files+0x2a/0x420 [ 1405.651481][T25181] ? __fget_files+0x3a2/0x420 [ 1405.651512][T25181] __x64_sys_sendmsg+0x1b1/0x290 [ 1405.651540][T25181] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1405.651587][T25181] do_syscall_64+0x166/0x520 [ 1405.651612][T25181] ? trace_irq_disable+0x3b/0x140 [ 1405.651629][T25181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.651646][T25181] ? clear_bhb_loop+0x70/0xc0 [ 1405.651667][T25181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.651683][T25181] RIP: 0033:0x7f21dd59e159 [ 1405.651698][T25181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1405.651713][T25181] RSP: 002b:00007f21de4e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1405.651730][T25181] RAX: ffffffffffffffda RBX: 00007f21dd825fa0 RCX: 00007f21dd59e159 [ 1405.651742][T25181] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1405.651753][T25181] RBP: 00007f21de4e2090 R08: 0000000000000000 R09: 0000000000000000 [ 1405.651763][T25181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1405.651774][T25181] R13: 00007f21dd826038 R14: 00007f21dd825fa0 R15: 00007f21dd94fa48 [ 1405.651798][T25181] [ 1407.762291][T25199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1407.780549][T25199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1407.863268][T25199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1407.863665][T25199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1407.902671][T25201] overlay: Unknown parameter '6xƒ¸&&fÇ5ôef¹\' [ 1408.221823][T25207] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5906'. [ 1408.478741][T25206] lo: entered promiscuous mode [ 1408.725871][T25206] tunl0: entered promiscuous mode [ 1408.750689][T25206] gre0: entered promiscuous mode [ 1408.846042][T25206] gretap0: entered promiscuous mode [ 1408.967863][T25206] erspan0: entered promiscuous mode [ 1409.047261][T25206] ip_vti0: entered promiscuous mode [ 1409.073673][T25206] ip6_vti0: entered promiscuous mode [ 1409.075560][T25206] sit0: entered promiscuous mode [ 1409.121623][T25206] ip6tnl0: entered promiscuous mode [ 1409.158623][T25206] ip6gre0: entered promiscuous mode [ 1409.259696][T25206] syz_tun: entered promiscuous mode [ 1409.373721][T25206] ip6gretap0: entered promiscuous mode [ 1409.403607][T25206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.404248][T25206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.411416][T25206] bridge0: entered promiscuous mode [ 1409.454207][T25206] vcan0: entered promiscuous mode [ 1409.478433][T25206] bond0: entered promiscuous mode [ 1409.478451][T25206] bond_slave_0: entered promiscuous mode [ 1409.478655][T25206] bond_slave_1: entered promiscuous mode [ 1409.516016][T25206] team0: entered promiscuous mode [ 1409.516036][T25206] team_slave_0: entered promiscuous mode [ 1409.516263][T25206] team_slave_1: entered promiscuous mode [ 1409.561477][T25206] dummy0: entered promiscuous mode [ 1409.579405][T25235] fuse: Bad value for 'fd' [ 1409.625317][T25237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5912'. [ 1409.652337][T25206] nlmon0: entered promiscuous mode [ 1409.678733][T25206] batadv0: entered promiscuous mode [ 1409.696518][T25206] vxcan0: entered promiscuous mode [ 1409.717842][T25206] vxcan1: entered promiscuous mode [ 1409.721373][T25206] veth0: entered promiscuous mode [ 1409.756748][T25206] veth1: entered promiscuous mode [ 1409.795612][T25206] wg0: entered promiscuous mode [ 1409.824957][T24283] Bluetooth: hci3: command 0x0406 tx timeout [ 1409.850790][T25206] wg1: entered promiscuous mode [ 1409.891884][T25206] wg2: entered promiscuous mode [ 1409.918708][T25206] veth0_to_bridge: entered promiscuous mode [ 1409.978809][T25206] veth1_to_bridge: entered promiscuous mode [ 1410.057035][T25206] veth0_to_bond: entered promiscuous mode [ 1410.110110][T25206] veth1_to_bond: entered promiscuous mode [ 1410.173650][T25206] veth0_to_team: entered promiscuous mode [ 1410.223260][T25206] veth1_to_team: entered promiscuous mode [ 1410.305131][T25206] veth0_to_batadv: entered promiscuous mode [ 1410.339360][T25206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1410.339449][T25206] batadv_slave_0: entered promiscuous mode [ 1410.403332][T25206] veth1_to_batadv: entered promiscuous mode [ 1410.431526][T25206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1410.431594][T25206] batadv_slave_1: entered promiscuous mode [ 1410.489148][T25206] xfrm0: entered promiscuous mode [ 1410.521726][T25206] veth0_to_hsr: entered promiscuous mode [ 1410.591766][T25206] veth1_to_hsr: entered promiscuous mode [ 1410.631737][T25206] hsr0: entered promiscuous mode [ 1410.687019][T25206] veth1_virt_wifi: entered promiscuous mode [ 1410.715734][T25206] veth0_virt_wifi: entered promiscuous mode [ 1410.743801][T25206] virt_wifi0: entered promiscuous mode [ 1410.811417][T25206] vlan0: entered promiscuous mode [ 1410.845755][T25206] vlan1: entered promiscuous mode [ 1410.887201][T25206] macvlan0: entered promiscuous mode [ 1410.961848][T25206] macvlan1: entered promiscuous mode [ 1410.992118][T25206] ipvlan0: entered promiscuous mode [ 1411.003531][T25206] ipvlan1: entered promiscuous mode [ 1411.047499][T25206] macvtap0: entered promiscuous mode [ 1411.060199][T25206] macsec0: entered promiscuous mode [ 1411.074206][T25206] geneve0: entered promiscuous mode [ 1411.078904][T25206] geneve1: entered promiscuous mode [ 1411.109439][T25206] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1411.136489][T25206] netdevsim netdevsim7 netdevsim1: entered promiscuous mode [ 1411.177509][T25206] netdevsim netdevsim7 netdevsim2: entered promiscuous mode [ 1411.203247][T25206] netdevsim netdevsim7 netdevsim3: entered promiscuous mode [ 1411.254865][T25206] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode [ 1411.295280][T25206] mac80211_hwsim hwsim40 wlan1: entered promiscuous mode [ 1411.296929][T25206] mac80211_hwsim hwsim42 wlan2: entered promiscuous mode [ 1411.297122][T25206] sit1: entered promiscuous mode [ 1411.298169][T25206] batman_adv: batadv0: Interface deactivated: gretap1 [ 1411.318517][T25206] gretap1: entered promiscuous mode [ 1411.351746][T25237] bond0: option lp_interval: invalid value (0) [ 1411.351779][T25237] bond0: option lp_interval: allowed values 1 - 2147483647 [ 1411.352881][T20104] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.352929][T20104] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.352966][T20104] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.353003][T20104] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.130444][T25254] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5913'. [ 1412.130470][T25254] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5913'. [ 1412.390206][T25258] netlink: 'syz.4.5919': attribute type 13 has an invalid length. [ 1412.454125][T25258] vxlan0: entered promiscuous mode [ 1412.454176][T25258] vxlan0: entered allmulticast mode [ 1412.463417][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1412.485238][ T60] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1412.485290][ T60] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1412.485354][ T60] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1413.077421][T20102] bridge_slave_1: left allmulticast mode [ 1413.077465][T20102] bridge_slave_1: left promiscuous mode [ 1413.077700][T20102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.198985][T20102] bridge_slave_0: left allmulticast mode [ 1413.200787][T20102] bridge_slave_0: left promiscuous mode [ 1413.201042][T20102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.278047][T20102] pim6reg9: left allmulticast mode [ 1413.878747][ T31] kauditd_printk_skb: 40 callbacks suppressed [ 1413.878768][ T31] audit: type=1326 audit(1791137271.728:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25249 comm="syz.2.5917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa49b39e159 code=0x0 [ 1415.237060][T25282] usb usb7: usbfs: interface 0 claimed by hub while 'syz.0.5925' resets device [ 1415.562822][ T123] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1415.713545][ T123] usb 1-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 1415.715203][ T123] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.715223][ T123] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1415.755124][ T123] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.755184][ T123] usb 1-1: Product: syz [ 1415.755202][ T123] usb 1-1: Manufacturer: syz [ 1415.755219][ T123] usb 1-1: SerialNumber: syz [ 1415.972287][T20102] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1416.238367][T19656] Bluetooth: hci5: CSR: Local version failed (-71) [ 1416.251634][T25238] usb 1-1: USB disconnect, device number 62 [ 1417.077815][T20102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1417.145010][T20102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1417.176096][T20102] bond0 (unregistering): Released all slaves [ 1417.241114][T20102] bond1 (unregistering): Released all slaves [ 1417.749120][T20102] tipc: Left network mode [ 1418.863930][T25226] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1418.900627][T20102] IPVS: stopping master sync thread 14687 ... [ 1419.012798][T25226] usb 1-1: Using ep0 maxpacket: 8 [ 1419.014107][T25226] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice= 0.40 [ 1419.018544][T25226] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 192, changing to 7 [ 1419.058198][T25226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.058229][T25226] usb 1-1: Product: syz [ 1419.058245][T25226] usb 1-1: Manufacturer: syz [ 1419.058265][T25226] usb 1-1: SerialNumber: syz [ 1419.382208][T25226] usb 1-1: Invalid firmware size=96. [ 1419.501751][T25226] usb 1-1: Invalid firmware size=96. [ 1419.569409][T25226] usb 1-1: Invalid firmware size=96. [ 1419.652906][T12382] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1419.809475][T12382] usb 5-1: Using ep0 maxpacket: 16 [ 1419.825842][T12382] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1419.825898][T12382] usb 5-1: New USB device found, idVendor=846d, idProduct=0a0e, bcdDevice=74.f7 [ 1419.827104][T12382] usb 5-1: config 9 has an invalid interface number: 57 but max is 0 [ 1419.827130][T12382] usb 5-1: config 9 has no interface number 0 [ 1419.827182][T12382] usb 5-1: too many endpoints for config 9 interface 57 altsetting 211: 166, using maximum allowed: 30 [ 1419.827211][T12382] usb 5-1: config 9 interface 57 altsetting 211 has 0 endpoint descriptors, different from the interface descriptor's value: 166 [ 1419.827252][T12382] usb 5-1: config 9 interface 57 has no altsetting 0 [ 1419.829982][T12382] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.830008][T12382] usb 5-1: Product: syz [ 1419.830024][T12382] usb 5-1: Manufacturer: syz [ 1419.830039][T12382] usb 5-1: SerialNumber: syz [ 1420.217903][T25304] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5931'. [ 1420.218027][T25304] FAULT_INJECTION: forcing a failure. [ 1420.218027][T25304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1420.218059][T25304] CPU: 1 UID: 0 PID: 25304 Comm: syz.2.5931 Tainted: G L syzkaller #0 PREEMPT(full) [ 1420.218090][T25304] Tainted: [L]=SOFTLOCKUP [ 1420.218097][T25304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1420.218106][T25304] Call Trace: [ 1420.218113][T25304] [ 1420.218121][T25304] dump_stack_lvl+0xe8/0x150 [ 1420.218169][T25304] should_fail_ex+0x410/0x560 [ 1420.218203][T25304] _copy_to_user+0x31/0xb0 [ 1420.218235][T25304] simple_read_from_buffer+0xe1/0x170 [ 1420.218270][T25304] proc_fail_nth_read+0x1bb/0x230 [ 1420.218286][T25304] ? common_file_perm+0x20e/0x2b0 [ 1420.218329][T25304] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1420.218356][T25304] ? rw_verify_area+0x24a/0x4c0 [ 1420.218404][T25304] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1420.218421][T25304] vfs_read+0x213/0xa80 [ 1420.218440][T25304] ? __pfx___mutex_lock+0x10/0x10 [ 1420.218481][T25304] ? __pfx_vfs_read+0x10/0x10 [ 1420.218511][T25304] ? __fget_files+0x2a/0x420 [ 1420.218548][T25304] ? __fget_files+0x3a2/0x420 [ 1420.218591][T25304] ? __fget_files+0x2a/0x420 [ 1420.218640][T25304] ksys_read+0x150/0x270 [ 1420.218665][T25304] ? __pfx_ksys_read+0x10/0x10 [ 1420.218698][T25304] do_syscall_64+0x166/0x520 [ 1420.218728][T25304] ? trace_irq_disable+0x3b/0x140 [ 1420.218747][T25304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1420.218776][T25304] ? clear_bhb_loop+0x70/0xc0 [ 1420.218806][T25304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1420.218828][T25304] RIP: 0033:0x7fa49b35e98e [ 1420.218848][T25304] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1420.218869][T25304] RSP: 002b:00007fa49c1b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1420.218887][T25304] RAX: ffffffffffffffda RBX: 00007fa49c1b76c0 RCX: 00007fa49b35e98e [ 1420.218899][T25304] RDX: 000000000000000f RSI: 00007fa49c1b70a0 RDI: 0000000000000005 [ 1420.218909][T25304] RBP: 00007fa49c1b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1420.218932][T25304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1420.218947][T25304] R13: 00007fa49b626038 R14: 00007fa49b625fa0 R15: 00007fa49b74fa48 [ 1420.218982][T25304] [ 1420.576539][T25226] usb 1-1: USB disconnect, device number 63 [ 1421.418861][T12382] usb 5-1: USB disconnect, device number 72 [ 1422.921562][T25326] netlink: 'syz.2.5936': attribute type 4 has an invalid length. [ 1422.978352][T25330] netlink: 'syz.2.5936': attribute type 4 has an invalid length. [ 1423.114416][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.114512][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.835072][T25343] ip_tables: iptables: counters copy to user failed while replacing table [ 1424.106043][T20102] hsr_slave_0: left promiscuous mode [ 1424.194606][T20102] hsr_slave_1: left promiscuous mode [ 1424.195623][T20102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1424.195647][T20102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1424.243622][T20102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1424.243643][T20102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1424.270545][T20102] batman_adv: batadv0: Interface deactivated: macsec1 [ 1424.270565][T20102] batman_adv: batadv0: Removing interface: macsec1 [ 1424.337526][T25347] xt_TCPMSS: Only works on TCP SYN packets [ 1424.420162][T25350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1424.420641][T25350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1424.775235][T20102] veth1_macvtap: left promiscuous mode [ 1424.775277][T20102] veth0_macvtap: left promiscuous mode [ 1424.775369][T20102] veth1_vlan: left promiscuous mode [ 1424.775454][T20102] veth0_vlan: left promiscuous mode [ 1425.079279][T25366] loop8: detected capacity change from 0 to 1 [ 1425.104518][T25366] Dev loop8: unable to read RDB block 1 [ 1425.104553][T25366] loop8: unable to read partition table [ 1425.104716][T25366] loop8: partition table beyond EOD, truncated [ 1425.135546][T25366] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1426.004904][T25245] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1426.163371][T25245] usb 1-1: Using ep0 maxpacket: 32 [ 1426.165954][T25245] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1426.168358][T25245] usb 1-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1426.168432][T25245] usb 1-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 16 [ 1426.168461][T25245] usb 1-1: config 1 interface 0 altsetting 64 bulk endpoint 0x3 has invalid maxpacket 128 [ 1426.168487][T25245] usb 1-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 1426.168515][T25245] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1426.265572][T25245] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1426.265604][T25245] usb 1-1: SerialNumber: syz [ 1426.361840][T25372] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1426.362001][T25372] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1426.413675][T25245] hub 1-1:1.0: bad descriptor, ignoring hub [ 1426.413705][T25245] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1426.414535][T25245] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 1426.697581][T25372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.698666][T25372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.775784][T25372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.776390][T25372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.915225][T25382] FAULT_INJECTION: forcing a failure. [ 1426.915225][T25382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1426.915266][T25382] CPU: 1 UID: 0 PID: 25382 Comm: syz.7.5952 Tainted: G L syzkaller #0 PREEMPT(full) [ 1426.915297][T25382] Tainted: [L]=SOFTLOCKUP [ 1426.915306][T25382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1426.915320][T25382] Call Trace: [ 1426.915329][T25382] [ 1426.915340][T25382] dump_stack_lvl+0xe8/0x150 [ 1426.915378][T25382] should_fail_ex+0x410/0x560 [ 1426.915411][T25382] _copy_from_user+0x2d/0xb0 [ 1426.915445][T25382] ___sys_recvmsg+0x173/0x5a0 [ 1426.915475][T25382] ? __pfx____sys_recvmsg+0x10/0x10 [ 1426.915502][T25382] ? lock_acquire+0x115/0x350 [ 1426.915556][T25382] do_recvmmsg+0x31a/0x7f0 [ 1426.915588][T25382] ? __pfx_do_recvmmsg+0x10/0x10 [ 1426.915623][T25382] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1426.915659][T25382] ? __fget_files+0x3a2/0x420 [ 1426.915703][T25382] __x64_sys_recvmmsg+0x198/0x250 [ 1426.915730][T25382] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1426.915765][T25382] do_syscall_64+0x166/0x520 [ 1426.915814][T25382] ? trace_irq_disable+0x3b/0x140 [ 1426.915839][T25382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.915870][T25382] ? clear_bhb_loop+0x70/0xc0 [ 1426.915899][T25382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.915922][T25382] RIP: 0033:0x7fb47d19e159 [ 1426.915943][T25382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1426.915964][T25382] RSP: 002b:00007fb47e06a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1426.915989][T25382] RAX: ffffffffffffffda RBX: 00007fb47d426090 RCX: 00007fb47d19e159 [ 1426.916006][T25382] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1426.916022][T25382] RBP: 00007fb47e06a090 R08: 0000000000000000 R09: 0000000000000000 [ 1426.916038][T25382] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1426.916052][T25382] R13: 00007fb47d426128 R14: 00007fb47d426090 R15: 00007fb47d54fa48 [ 1426.916087][T25382] [ 1427.589583][ T32] INFO: task syz.3.5413:23599 blocked for more than 143 seconds. [ 1427.589609][ T32] Tainted: G L syzkaller #0 [ 1427.589618][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1427.589627][ T32] task:syz.3.5413 state:D stack:26088 pid:23599 tgid:23597 ppid:15336 task_flags:0x400140 flags:0x00080002 [ 1427.589707][ T32] Call Trace: [ 1427.589714][ T32] [ 1427.589725][ T32] __schedule+0x17db/0x58f0 [ 1427.589791][ T32] ? __pfx___schedule+0x10/0x10 [ 1427.589860][ T32] ? schedule+0x90/0x2b0 [ 1427.589885][ T32] schedule+0x164/0x2b0 [ 1427.589909][ T32] schedule_preempt_disabled+0x13/0x30 [ 1427.589932][ T32] __mutex_lock+0x7c1/0x1550 [ 1427.589961][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1427.590008][ T32] ? usbdev_open+0x151/0x770 [ 1427.590092][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1427.590118][ T32] ? bus_find_device+0x27d/0x2d0 [ 1427.590210][ T32] ? __pfx_bus_find_device+0x10/0x10 [ 1427.590228][ T32] ? usbdev_open+0xa7/0x770 [ 1427.590242][ T32] ? usbdev_open+0xa7/0x770 [ 1427.590262][ T32] usbdev_open+0x151/0x770 [ 1427.590283][ T32] ? __pfx_usbdev_open+0x10/0x10 [ 1427.590306][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 1427.590356][ T32] chrdev_open+0x4d9/0x600 [ 1427.590380][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 1427.590401][ T32] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 1427.590426][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 1427.590446][ T32] do_dentry_open+0x816/0x1380 [ 1427.590496][ T32] vfs_open+0x3b/0x340 [ 1427.590517][ T32] ? path_openat+0x1428/0x1d60 [ 1427.590537][ T32] path_openat+0x1443/0x1d60 [ 1427.590569][ T32] do_file_open+0x23e/0x4a0 [ 1427.590592][ T32] ? __pfx_do_file_open+0x10/0x10 [ 1427.590647][ T32] ? _raw_spin_unlock+0x28/0x50 [ 1427.590668][ T32] ? alloc_fd+0x651/0x6c0 [ 1427.590699][ T32] do_sys_openat2+0x115/0x200 [ 1427.590721][ T32] ? __se_sys_futex+0x3a8/0x450 [ 1427.590765][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 1427.590792][ T32] ? rcu_is_watching+0x16/0xb0 [ 1427.590821][ T32] __x64_sys_openat+0x138/0x170 [ 1427.590849][ T32] do_syscall_64+0x166/0x520 [ 1427.590873][ T32] ? trace_irq_disable+0x3b/0x140 [ 1427.590909][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.590927][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1427.590947][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.590965][ T32] RIP: 0033:0x7f281335e98e [ 1427.590980][ T32] RSP: 002b:00007f28142d9b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1427.590997][ T32] RAX: ffffffffffffffda RBX: 00007f28142da6c0 RCX: 00007f281335e98e [ 1427.591010][ T32] RDX: 0000000000101301 RSI: 00007f28142d9c00 RDI: ffffffffffffff9c [ 1427.592471][ T32] RBP: 00007f28142d9c00 R08: 0000000000000000 R09: 0000000000000000 [ 1427.592488][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1427.592518][ T32] R13: 00007f2813626038 R14: 00007f2813625fa0 R15: 00007f281374fa48 [ 1427.592544][ T32] [ 1427.620519][ T32] [ 1427.620519][ T32] Showing all locks held in the system: [ 1427.620576][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 1427.620759][ T32] #0: ffffffff8ec364d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1427.621027][ T32] #1: ffffffff9ad452f8 (&port_lock_key){-...}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 1427.621275][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 1427.621314][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1427.621919][ T32] locks held by kworker/u8:5/60: 3, on CPU#1: [ 1427.621970][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1427.630631][ T32] #1: ffffc9000201fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1427.630734][ T32] #2: ffffffff90254d40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1427.630829][ T32] locks held by getty/5375: 2, on CPU#0: [ 1427.630847][ T32] #0: ffff8880360430a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1427.630982][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1427.631080][ T32] locks held by kworker/0:13/12386: 5, on CPU#0: [ 1427.631097][ T32] #0: ffff8880232ca540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1427.631188][ T32] #1: ffffc9000474fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1427.631250][ T32] #2: ffff888029e251d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1427.631345][ T32] #3: ffff88802acfe1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1427.631405][ T32] #4: ffff88803438c1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1427.631468][ T32] locks held by kworker/u8:3/15594: 3, last CPU#1: [ 1427.631485][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1427.631548][ T32] #1: ffffc9000423fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){ ** replaying previous printk message ** [ 1427.631548][ T32] #1: ffffc9000423fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1427.631614][ T32] #2: ffff888022eb4258 (&devlink->lock_key#12){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1427.631722][ T32] locks held by kworker/u8:35/18788: 5, last CPU#1: [ 1427.631739][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1427.631808][ T32] #1: ffffc900047bfc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1427.631905][ T32] #2: ffffffff8ebe9970 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 1427.632012][ T32] #3: ffffffff8ee38bc0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240 [ 1427.755871][ T32] #4: ffffffff8ebff720 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 1427.756198][ T32] locks held by kworker/u8:41/20102: 5, on CPU#1: [ 1427.756248][ T32] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1427.756497][ T32] #1: ffffc90004e87c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1427.756723][ T32] #2: ffffffff902464e8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1427.756906][ T32] #3: ffffffff90254d40 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xd0/0x760 [ 1427.757076][ T32] #4: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1427.757321][ T32] locks held by udevd/22100: 4, on CPU#0: [ 1427.800804][ T32] #0: ffff8880747f9e18 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 1427.801016][ T32] #1: ffff88823bee0080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 1427.801263][ T32] #2: ffff888058b2f788 (kn->active#20){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1427.801440][ T32] #3: ffff88802acfe1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1427.801680][ T32] locks held by udevd/22101: 4, on CPU#0: [ 1427.801732][ T32] #0: ffff8880449dcbd8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 1427.801898][ T32] #1: ffff888056db7880 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 1427.802112][ T32] #2: ffff8880509e1a58 (kn->active#29){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1427.874416][ T32] #3: ffff88807bcea1d8 (&dev->mutex){....}-{4:4}, at: serial_show+0x26/0xa0 [ 1427.874650][ T32] locks held by syz.3.5413/23599: 1, on CPU#1: [ 1427.874709][ T32] #0: ffff888029e251d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 1427.874879][ T32] locks held by kworker/0:3/25224: 3, on CPU#0: [ 1427.874923][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1427.875095][ T32] #1: ffffc90003f8fc40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1427.875309][ T32] #2: ffffffff90254d40 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x6f/0x770 [ 1427.888372][ T32] locks held by kworker/0:12/25245: 5, on CPU#0: [ 1427.888437][ T32] #0: ffff8880232ca540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1427.888663][ T32] #1: ffffc90003257c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1428.010073][ T32] #2: ffff888029c061d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1428.010293][ T32] #3: ffff88807bcea1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1428.010455][ T32] #4: ffff88807f4281a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1428.010683][ T32] locks held by syz.4.5924/25280: 2, last CPU#1: [ 1428.010786][ T32] #0: ffff88802ae0c460 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x3764/0x4520 [ 1428.010992][ T32] #1: ffff8880287dacc0 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 1428.011235][ T32] locks held by syz.0.5934/25321: 2, last CPU#1: [ 1428.011294][ T32] #0: ffff888033496460 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x3764/0x4520 [ 1428.027873][ T32] #1: ffff8880212b9aa8 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 1428.028082][ T32] locks held by syz.4.5942/25349: 1, last CPU#1: [ 1428.028127][ T32] #0: ffff888077ab96f0 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1e3/0xd70 [ 1428.028449][ T32] locks held by syz.2.5943/25350: 2, on CPU#1: [ 1428.028491][ T32] #0: ffffffff8f991a88 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1428.029059][ T32] #1: ffffffff90254d40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1428.029286][ T32] locks held by syz.2.5943/25358: 1, on CPU#1: [ 1428.029330][ T32] #0: ffffffff90254d40 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 1428.045470][ T32] locks held by syz.2.5943/25360: 1, on CPU#1: [ 1428.045534][ T32] #0: ffffffff90254d40 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 1428.045737][ T32] locks held by syz.6.5947/25363: 1, on CPU#1: [ 1428.045796][ T32] #0: ffffffff90254d40 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 1428.046087][ T32] locks held by syz.6.5947/25365: 1, on CPU#1: [ 1428.046195][ T32] #0: ffffffff90254d40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_add_ifaddr+0x14d/0x3e0 [ 1428.046460][ T32] locks held by syz.6.5947/25367: 1, on CPU#1: [ 1428.046564][ T32] #0: ffffffff90254d40 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 1428.046732][ T32] locks held by syz.6.5947/25368: 1, on CPU#1: [ 1428.046784][ T32] #0: ffffffff90254d40 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 1428.046956][ T32] locks held by syz.6.5947/25369: 1, on CPU#1: [ 1428.046998][ T32] #0: ffffffff90254d40 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 1428.065321][ T32] locks held by syz.0.5949/25372: 1, on CPU#0: [ 1428.065374][ T32] #0: ffffffff90254d40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1428.065530][ T32] locks held by syz.7.5952/25383: 2, last CPU#1: [ 1428.065586][ T32] #0: ffff888035ad8340 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1428.065799][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1428.066296][ T32] [ 1428.066317][ T32] ============================================= [ 1428.066317][ T32] [ 1428.066347][ T32] NMI backtrace for cpu 1 [ 1428.066392][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1428.066474][ T32] Tainted: [L]=SOFTLOCKUP [ 1428.066495][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1428.066529][ T32] Call Trace: [ 1428.066552][ T32] [ 1428.066582][ T32] dump_stack_lvl+0xe8/0x150 [ 1428.066676][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1428.066751][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1428.066866][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1428.066949][ T32] sys_info+0x135/0x170 [ 1428.067011][ T32] watchdog+0xfd7/0x1030 [ 1428.067094][ T32] ? watchdog+0x1c7/0x1030 [ 1428.067179][ T32] kthread+0x38b/0x480 [ 1428.067241][ T32] ? __pfx_watchdog+0x10/0x10 [ 1428.067290][ T32] ? __pfx_kthread+0x10/0x10 [ 1428.067348][ T32] ret_from_fork+0x514/0xb70 [ 1428.067427][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1428.067495][ T32] ? __switch_to+0xc89/0x1420 [ 1428.067594][ T32] ? __pfx_kthread+0x10/0x10 [ 1428.067659][ T32] ret_from_fork_asm+0x1a/0x30 [ 1428.067793][ T32] [ 1428.067888][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1428.067954][ C0] NMI backtrace for cpu 0 [ 1428.067971][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1428.067997][ C0] Tainted: [L]=SOFTLOCKUP [ 1428.068004][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1428.068016][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 1428.068045][ C0] Code: e8 ae 5e 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0f 70 c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 4a 99 76 06 cc 44 89 f9 80 e1 07 [ 1428.068063][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 1428.068081][ C0] RAX: 1ffffffff35a8a00 RBX: 00000000000003fd RCX: 0000000000000000 [ 1428.068094][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 1428.068106][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1428.068119][ C0] R10: dffffc0000000000 R11: ffffffff8573b050 R12: dffffc0000000000 [ 1428.068135][ C0] R13: 0000000000000000 R14: ffffffff9ad45320 R15: 0000000000000000 [ 1428.068151][ C0] FS: 0000000000000000(0000) GS:ffff888124cc6000(0000) knlGS:0000000000000000 [ 1428.068168][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1428.068181][ C0] CR2: 00007fb47d1eb840 CR3: 0000000077ea6000 CR4: 00000000003526f0 [ 1428.068199][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000063235cd5 [ 1428.068212][ C0] DR3: 0000000000007000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1428.068225][ C0] Call Trace: [ 1428.068233][ C0] [ 1428.068242][ C0] wait_for_lsr+0x184/0x2f0 [ 1428.068275][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 1428.068310][ C0] serial8250_console_write+0xaa1/0x1200 [ 1428.068334][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1428.068367][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1428.068390][ C0] ? __schedule+0x17f1/0x58f0 [ 1428.068423][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 1428.068455][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1428.068481][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1428.068511][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 1428.068538][ C0] nbcon_kthread_func+0x679/0x880 [ 1428.068563][ C0] ? nbcon_kthread_func+0x163/0x880 [ 1428.068583][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1428.068608][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1428.068636][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1428.068667][ C0] kthread+0x38b/0x480 [ 1428.068685][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1428.068705][ C0] ? __pfx_kthread+0x10/0x10 [ 1428.068725][ C0] ret_from_fork+0x514/0xb70 [ 1428.068744][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1428.068764][ C0] ? __switch_to+0xc89/0x1420 [ 1428.068792][ C0] ? __pfx_kthread+0x10/0x10 [ 1428.068811][ C0] ret_from_fork_asm+0x1a/0x30 [ 1428.068849][ C0] [ 1428.100918][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1429.086738][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1429.097436][ T32] Tainted: [L]=SOFTLOCKUP [ 1429.101773][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1429.111866][ T32] Call Trace: [ 1429.115186][ T32] [ 1429.118145][ T32] vpanic+0x56d/0xa60 [ 1429.122172][ T32] ? __pfx___schedule+0x10/0x10 [ 1429.127066][ T32] ? __pfx_vpanic+0x10/0x10 [ 1429.131639][ T32] panic+0xc5/0xd0 [ 1429.135391][ T32] ? __pfx_panic+0x10/0x10 [ 1429.139847][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1429.145344][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1429.150755][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1429.156944][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1429.163130][ T32] watchdog+0x1030/0x1030 [ 1429.167522][ T32] ? watchdog+0x1c7/0x1030 [ 1429.172007][ T32] kthread+0x38b/0x480 [ 1429.176115][ T32] ? __pfx_watchdog+0x10/0x10 [ 1429.180832][ T32] ? __pfx_kthread+0x10/0x10 [ 1429.185468][ T32] ret_from_fork+0x514/0xb70 [ 1429.190087][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1429.195226][ T32] ? __switch_to+0xc89/0x1420 [ 1429.199957][ T32] ? __pfx_kthread+0x10/0x10 [ 1429.204582][ T32] ret_from_fork_asm+0x1a/0x30 [ 1429.209416][ T32] [ 1429.213092][ T32] Kernel Offset: disabled [ 1429.217440][ T32] Rebooting in 86400 seconds..