last executing test programs: 11m32.481860265s ago: executing program 3 (id=367): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)={0x23}) 11m30.962375271s ago: executing program 3 (id=372): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x28000003, 0x2000007, 0x30, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000800)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000880)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000900), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000940), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x40) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x29c9, 0x1, 0x13, r3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @val=@netkit}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f00000009c0), 0xa82, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket(0x2, 0x80006, 0x80) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80042, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000340)={{0x8, 0xfffffffc}, {0xffffffffffffffff, 0x8}, 0x100201, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1ff) 11m29.470889278s ago: executing program 3 (id=373): syz_mount_image$ext4(&(0x7f0000006080)='ext4\x00', &(0x7f00000060c0)='./file1\x00', 0x1000040, &(0x7f0000006100), 0x1, 0x5a3, &(0x7f0000006140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000006700)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000006740)='2', 0x1, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) timer_create(0x1, &(0x7f0000000180)={0x0, 0x21, 0x4}, &(0x7f00000001c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000240), 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./configfs/usb_gadget/g1/functions/uvc.0/../file0\x00', 0x1d3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 11m27.460637207s ago: executing program 3 (id=379): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x104}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000100)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 11m26.90130352s ago: executing program 3 (id=383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'}) r5 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x2200) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000400)={&(0x7f0000000100), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r6, 0x400, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) getxattr(&(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000b00)=""/4096, 0x1000) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) 11m22.489065347s ago: executing program 3 (id=389): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000003c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) gettimeofday(&(0x7f0000000280), 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000000440)={&(0x7f0000000000)=""/35, 0x2, 0x23}, &(0x7f0000002740)={0x0}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000000300)=ANY=[], 0xc1, 0x151f, &(0x7f000000d180)="$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") 11m6.659750493s ago: executing program 32 (id=389): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000003c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) gettimeofday(&(0x7f0000000280), 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000000440)={&(0x7f0000000000)=""/35, 0x2, 0x23}, &(0x7f0000002740)={0x0}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000000300)=ANY=[], 0xc1, 0x151f, &(0x7f000000d180)="$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") 15.750279496s ago: executing program 5 (id=2318): r0 = socket$tipc(0x1e, 0x5, 0x0) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ptrace(0xffffffffffffffff, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f00000000c0)='./file1\x00', 0x108843, 0x98) fcntl$setlease(r4, 0x400, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'dummy0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x50}, 0x1, 0x0, 0x0, 0xd848}, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@name, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[], 0x0) 14.739543481s ago: executing program 5 (id=2322): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="0100000003000000640000000000000000000000000000000000000000000000000000000000000002000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="0100000003000000640000000000000000000000000000000000000000000000000000000000000001000000000000000200000001000000020000000100"/72, 0x48}], 0x1}}], 0x2, 0x0) 14.572613065s ago: executing program 5 (id=2325): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x4001, 0x3, 0x280, 0x118, 0xb, 0x148, 0x0, 0x148, 0x1e8, 0x230, 0x242, 0x1e8, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0xff000000, 0xffffffff, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0xe8, 0x118, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x1, 0x8}}, @common=@unspec=@helper={{0x48}, {0x1, 'syz1\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0xfc}}}}, {{@uncond, 0xec010000, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x1ff, 0x4, [0x3d, 0x3a, 0x19, 0x2e, 0x4, 0x14, 0xf, 0x12, 0x37, 0x18, 0x8, 0x10, 0x32, 0x6, 0x12, 0x4], 0x1, 0x8, 0x7c5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8080000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) lstat(0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = syz_io_uring_setup(0xefe, &(0x7f0000000e80)={0x0, 0xffffffbe, 0x2, 0x83, 0x3af}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0, &(0x7f0000000f80)) syz_io_uring_modify_offsets$generic(r3, r4, 0x2c, 0x1000) io_uring_enter(r2, 0x8a1, 0xb08a, 0x6, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x12, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x10, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES32=r6, @ANYBLOB="0000000000000000b7"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r0, r5, &(0x7f0000000140)=0x6, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x38, 0x0, 0x0, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x9, 0x8, 0x100, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x9, 0x1, 0x8, 0x40, 0x42, 0x1}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x14, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002022206b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f00000085000000060000007a0af0ff0000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000000000850000000200000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r9, 0x0, 0x3, 0x0, &(0x7f0000000d00)='\x00\x00\x00', 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) truncate(0x0, 0x2fffffd) dup2(r6, r0) 13.447247373s ago: executing program 5 (id=2327): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x42000000) 10.880513185s ago: executing program 0 (id=2339): syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0xff}, {0x1, [{@none, 0x5, 0x7, '\x00\b\x00', 0xcee, 0x7, "0522924a225d2de1f0343bc61f431bb8a9a7727f74617a2a97ac72b0e986583fc962e4fed6ca7bd8f79de2f2e7079764b0bef27fc62bf1ddbc4915a98fb3e0ff359c1c32064341189b67577e7dbb5a164cb3c34876d2bea660e9e0d51c472ffe1f52e640548e6e9e283927db17ebc18fbed27f99d4d1e4ea151468826e0326a239b7ba8c1d9be3217c70e8657a6f14f4812caa73ab56c73bb14db9ac41ca942ed88d8245e5050ab07775f8c699c00deaa271400ab72ac6e744c9cb530419dfac627964770b59173a7dcb05917eb8d76e797035233f3c6562a5f2e0732b80ffcda37dbd800e7c53dacb8c1b45e869d440"}]}}}, 0x102) 8.922696513s ago: executing program 0 (id=2344): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000004240)={0x2}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x600) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r3 = add_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000500)='asymmetric\x00', 0x0, &(0x7f0000000540)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000ac0)={r4, 0xa1}, 0x0, &(0x7f0000000b00)="cb44032c2a3a518de9000000c11a536275a146d65e2988ef1a4992f9a2675b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf7f799a4257d4bf67e86244beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785368bc3b20816471f5254e6e9e7a9ccd90d32ebcf5ea2c79482fb0e0cfb8bf19da1095e6b47db929f5277a", 0x0) 8.685189968s ago: executing program 0 (id=2347): r0 = socket$tipc(0x1e, 0x5, 0x0) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ptrace(0xffffffffffffffff, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f00000000c0)='./file1\x00', 0x108843, 0x98) fcntl$setlease(r4, 0x400, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'dummy0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x50}, 0x1, 0x0, 0x0, 0xd848}, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@name, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[], 0x0) 8.386588066s ago: executing program 2 (id=2348): socket$netlink(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2c, &(0x7f0000000500)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a000000000000010000010000126700"/30}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca4150002800000000000000000100000100"], 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000200)='X', 0x1}, {0x0}], 0x2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000005c0), 0x8) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000600)={0x1, 0x6}, 0x4) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000640)={0x0, 0x2000}, 0x4) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000680)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], 0x1c}, 0x1, 0x0, 0x0, 0x77b9735028232f08}, 0x20004000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0x0, 0xee01, 0x0) r8 = open(&(0x7f0000000100)='./file0\x00', 0x60840, 0xc2) fcntl$setlease(r8, 0x400, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x2) fcntl$setlease(r8, 0x400, 0x2) 7.624356254s ago: executing program 0 (id=2349): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x112, &(0x7f0000000080)={0x0, 0xf59b, 0x400, 0x10003, 0x65}, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) recvmsg(r0, 0x0, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) clock_gettime(0xfffffffffffffffe, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0x42c9, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfd47, 0x1000, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x845, 0x2, 0x8, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe58c, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r4}}], 0x1, 0x0, 0x0) 7.471231458s ago: executing program 0 (id=2350): socket$tipc(0x1e, 0x5, 0x0) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace(0xffffffffffffffff, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'dummy0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x50}, 0x1, 0x0, 0x0, 0xd848}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1b88a81c0081002e00080045", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c80000088b1e222ade3315aa3a41904c1aa6c2818e2aeef2e9e133daa1b3767c10218a88893258914721fae614987983ebb56b339466c314ee718391918aeccd898693ccc48d847119d75218d7f7deaf8f2f6c7263f3e6f2fb3cea1f9194479be117f063052e70670f09362065b3a48ccaae0276df947cfe5c57c211856fccd15"], 0x0) 7.3967201s ago: executing program 2 (id=2352): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000080)={0x77359400}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sync_file_range(r4, 0x6, 0x9fd, 0x3) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xffff}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="78000000000101042b000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1e00010c000280050001000000000008000740"], 0x78}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) 6.420209074s ago: executing program 0 (id=2354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x18}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200008d5}, 0x20004090) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010097"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20) 6.311567116s ago: executing program 2 (id=2355): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x101) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r0, &(0x7f0000000180)='27', 0x2) socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) 5.236536192s ago: executing program 1 (id=2357): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000004240)={0x2}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x600) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000000080)) r3 = add_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000500)='asymmetric\x00', 0x0, &(0x7f0000000540)="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", 0x559, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000ac0)={r4, 0xa1}, 0x0, &(0x7f0000000b00)="cb44032c2a3a518de9000000c11a536275a146d65e2988ef1a4992f9a2675b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf7f799a4257d4bf67e86244beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785368bc3b20816471f5254e6e9e7a9ccd90d32ebcf5ea2c79482fb0e0cfb8bf19da1095e6b47db929f5277a", 0x0) 4.626991767s ago: executing program 5 (id=2358): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000003c0)) r1 = socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000480)=0x22922, 0x4) r2 = socket$l2tp(0x2, 0x2, 0x73) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x11, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00000000000000001508", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff8500000001"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000880)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x4, 0x401d031, 0xffffffffffffffff, 0x0) statfs(&(0x7f00000008c0)='./proc\x00', &(0x7f0000000900)=""/241) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000a00)={0x1, &(0x7f0000000a40)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) bind$inet(r2, &(0x7f0000000a80)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000ac0)={0x2, 0x100, @local}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmmsg$inet(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000b80), 0x2400, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000dc0)=0xe) openat$ppp(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5b5d, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, &(0x7f0000000e40)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x6a, 0x1, 0x0, 0xc) 4.1026913s ago: executing program 2 (id=2360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000780), 0x651, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000080)={@void, @val={0x2, 0x3, 0x1b, 0x30, 0x14, 0x6}, @ipv6=@gre_packet={0x3, 0x6, "1772ab", 0x44, 0x2f, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0xa888, 0x88be, 0x4, {{0x8, 0x1, 0x7, 0x0, 0x0, 0x1, 0x7, 0x7}, 0x1, {0x86dd}}}, {0x8, 0x22eb, 0x1, {{0xc, 0x2, 0xfa, 0x3, 0x1, 0x2, 0x1, 0x7}, 0x2, {0x0, 0x8, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}}}}}, 0xfdef) 4.057920101s ago: executing program 4 (id=2361): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x1) syz_io_uring_setup(0x112, &(0x7f0000000080)={0x0, 0xf59b, 0x400, 0x10003, 0x65, 0x0, r0}, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) recvmsg(r1, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) clock_gettime(0xfffffffffffffffe, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000004c0)={0x0, 0x42c9, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfd47, 0x1000, 0x1000002, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x845, 0x2, 0x8, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe58c, 0x2000, 0x4003bfff, 0x2b9, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r5}}], 0x1, 0x0, 0x0) 3.999871032s ago: executing program 1 (id=2362): socket$netlink(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x31, &(0x7f0000000500)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a0000000000000100000100001267000000000000000000000000112233"}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca4150002800000000000000000100000100"], 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000200)='X', 0x1}, {0x0}], 0x2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000005c0), 0x8) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000600)={0x1, 0x6}, 0x4) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000640)={0x0, 0x2000}, 0x4) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000680)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], 0x1c}, 0x1, 0x0, 0x0, 0x77b9735028232f08}, 0x20004000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0x0, 0xee01, 0x0) r8 = open(&(0x7f0000000100)='./file0\x00', 0x60840, 0xc2) fcntl$setlease(r8, 0x400, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x2) fcntl$setlease(r8, 0x400, 0x2) 3.763033288s ago: executing program 1 (id=2363): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x181441, 0x148) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)) syz_ublk_setup_io_uring(0x7120, &(0x7f0000000640)={0x0, 0x0, 0x8, 0x2, 0x1e5}, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r0, 0x0, &(0x7f0000000840)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x100, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0x7e}}], 0x1, 0x0, 0x0) 3.67079814s ago: executing program 4 (id=2364): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0xffffffffffffff6a, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000a00), 0x0, 0x4040881) getsockname(r3, &(0x7f0000000200)=@caif=@util, &(0x7f0000000340)=0x80) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x1214040, 0x0) chdir(0x0) 3.602747142s ago: executing program 1 (id=2365): socket$tipc(0x1e, 0x5, 0x0) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace(0xffffffffffffffff, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'dummy0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x50}, 0x1, 0x0, 0x0, 0xd848}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1b88a81c0081002e00080045f400280067000002069078", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c80000088b1e222ade3315aa3a41904c1aa6c2818e2aeef2e9e133daa1b3767c10218a88893258914721fae614987983ebb56b339466c314ee718391918aeccd898693ccc48d847119d75218d7f7deaf8f2f6c7263f3e6f2fb3cea1f9194479be117f063052e70670f09362065b3a48ccaae0276df947cfe5c57c211856fccd15"], 0x0) 2.488876759s ago: executing program 5 (id=2366): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000180), 0xcd79, 0x141000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000200)={0x2, 0x0, 0x1, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000240)={0x2, 0x1, 0x3, 0x4, 0x4}) 2.429762151s ago: executing program 4 (id=2367): prctl$PR_GET_TID_ADDRESS(0x28, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_open_dev$loop(0x0, 0x4, 0x80000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x24040084) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) r3 = socket$inet_tcp(0x2, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'lo\x00'}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'virt_wifi0\x00', 0x1}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) recvmsg(0xffffffffffffffff, 0x0, 0x40002002) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 2.241826455s ago: executing program 1 (id=2368): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x4001, 0x3, 0x280, 0x118, 0xb, 0x148, 0x0, 0x148, 0x1e8, 0x230, 0x242, 0x1e8, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0xff000000, 0xffffffff, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0xe8, 0x118, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x1, 0x8}}, @common=@unspec=@helper={{0x48}, {0x1, 'syz1\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0xfc}}}}, {{@uncond, 0xec010000, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x1ff, 0x4, [0x3d, 0x3a, 0x19, 0x2e, 0x4, 0x14, 0xf, 0x12, 0x37, 0x18, 0x8, 0x10, 0x32, 0x6, 0x12, 0x4], 0x1, 0x8, 0x7c5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8080000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) lstat(0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = syz_io_uring_setup(0xefe, &(0x7f0000000e80)={0x0, 0xffffffbe, 0x2, 0x83, 0x3af}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0, &(0x7f0000000f80)) syz_io_uring_modify_offsets$generic(r3, r4, 0x2c, 0x1000) io_uring_enter(r2, 0x8a1, 0xb08a, 0x6, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x12, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x10, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="0000000000000000b703"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r0, r5, &(0x7f0000000140)=0x6, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x38, 0x0, 0x0, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x9, 0x8, 0x100, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x9, 0x1, 0x8, 0x40, 0x42, 0x1}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x14, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002022206b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f00000085000000060000007a0af0ff0000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000000000850000000200000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r9, 0x0, 0x3, 0x0, &(0x7f0000000d00)='\x00\x00\x00', 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) truncate(0x0, 0x2fffffd) dup2(r6, r0) 1.124771452s ago: executing program 2 (id=2369): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad67060000020000006a0200000ee61800bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f15bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae62420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f452533d4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8668f076c659f56d6c7f97a96d6cdf45cfe88b30c170000000001000000effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b31a14ffcddd92c38f6b6d86a0e5ed47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000000000000000002a37163e8d7ef2f3c58d045f0700000094029acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b4"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x22020600) socket$inet6(0xa, 0x6, 0x0) 1.096032263s ago: executing program 1 (id=2370): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xa, &(0x7f0000000580)=@raw=[@generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x0, 0x22, 0x0, &(0x7f0000000780)="001122334455001122334456080045000028000000004006f8ce0a0000010a000002", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 872.446578ms ago: executing program 4 (id=2371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xd4}}, 0x0) 68.380938ms ago: executing program 4 (id=2372): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000004240)={0x2}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x600) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) r3 = add_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000500)='asymmetric\x00', 0x0, &(0x7f0000000540)="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", 0x559, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000ac0)={r4, 0xa1}, 0x0, &(0x7f0000000b00)="cb44032c2a3a518de9000000c11a536275a146d65e2988ef1a4992f9a2675b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf7f799a4257d4bf67e86244beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785368bc3b20816471f5254e6e9e7a9ccd90d32ebcf5ea2c79482fb0e0cfb8bf19da1095e6b47db929f5277a", 0x0) 56.300688ms ago: executing program 2 (id=2373): socket$netlink(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x31, &(0x7f0000000500)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a0000000000000100000100001267000000000000000000000000112233"}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca4150002800000000000000000100000100"], 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000200)='X', 0x1}, {0x0}], 0x2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000005c0), 0x8) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000600)={0x1, 0x6}, 0x4) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000640)={0x0, 0x2000}, 0x4) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000680)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r1], 0x1c}, 0x1, 0x0, 0x0, 0x77b9735028232f08}, 0x20004000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0x0, 0xee01, 0x0) r8 = open(&(0x7f0000000100)='./file0\x00', 0x60840, 0xc2) fcntl$setlease(r8, 0x400, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x2) fcntl$setlease(r8, 0x400, 0x2) 0s ago: executing program 4 (id=2374): r0 = syz_open_dev$hidraw(&(0x7f0000000140), 0x82, 0x2) write$hidraw(r0, 0x0, 0x0) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000340)) kernel console output (not intermixed with test programs): ]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 197.239244][ T5763] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.353' sets config #0 [ 197.591199][ T5770] Cannot find add_set index 6 as target [ 197.741078][ T5766] netlink: 'syz.4.359': attribute type 1 has an invalid length. [ 204.924905][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 206.904290][ T5850] binder: 5840:5850 ioctl c0306201 0 returned -14 [ 207.870870][ T5861] FAULT_INJECTION: forcing a failure. [ 207.870870][ T5861] name failslab, interval 1, probability 0, space 0, times 1 [ 207.883589][ T5861] CPU: 0 PID: 5861 Comm: syz.4.386 Not tainted syzkaller #0 [ 207.890896][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 207.900973][ T5861] Call Trace: [ 207.904269][ T5861] [ 207.907212][ T5861] dump_stack_lvl+0x188/0x24e [ 207.911932][ T5861] ? show_regs_print_info+0x12/0x12 [ 207.917149][ T5861] ? load_image+0x410/0x410 [ 207.921666][ T5861] ? __might_sleep+0xd0/0xd0 [ 207.926269][ T5861] ? __lock_acquire+0x7ea0/0x7ea0 [ 207.931320][ T5861] ? __se_sys_memfd_create+0xee/0x340 [ 207.936709][ T5861] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.942798][ T5861] should_fail_ex+0x390/0x4c0 [ 207.947500][ T5861] should_failslab+0x5/0x20 [ 207.952013][ T5861] slab_pre_alloc_hook+0x59/0x300 [ 207.957057][ T5861] kmem_cache_alloc_lru+0x49/0x2e0 [ 207.962182][ T5861] ? shmem_alloc_inode+0x24/0x40 [ 207.967142][ T5861] shmem_alloc_inode+0x24/0x40 [ 207.971928][ T5861] ? shmem_match+0x160/0x160 [ 207.976536][ T5861] new_inode_pseudo+0x5f/0x1c0 [ 207.981319][ T5861] new_inode+0x25/0x1d0 [ 207.985490][ T5861] shmem_get_inode+0x327/0xbc0 [ 207.990272][ T5861] ? _raw_spin_unlock+0x24/0x40 [ 207.995139][ T5861] __shmem_file_setup+0x10b/0x290 [ 208.000182][ T5861] ? shmem_file_setup+0x13/0x30 [ 208.005049][ T5861] __se_sys_memfd_create+0x1e1/0x340 [ 208.010349][ T5861] do_syscall_64+0x4c/0xa0 [ 208.014780][ T5861] ? clear_bhb_loop+0x60/0xb0 [ 208.019468][ T5861] ? clear_bhb_loop+0x60/0xb0 [ 208.024160][ T5861] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.030081][ T5861] RIP: 0033:0x7fbeb239e559 [ 208.034511][ T5861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.054130][ T5861] RSP: 002b:00007fbeb31f0e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 208.062571][ T5861] RAX: ffffffffffffffda RBX: 000000000000030b RCX: 00007fbeb239e559 [ 208.070549][ T5861] RDX: 00007fbeb31f0ee0 RSI: 0000000000000000 RDI: 00007fbeb2435c98 [ 208.078534][ T5861] RBP: 0000200000001e00 R08: 00000000ffffffff R09: 0000000000000000 [ 208.086513][ T5861] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000100 [ 208.094492][ T5861] R13: 00007fbeb31f0ee0 R14: 00007fbeb31f0ea0 R15: 0000200000000140 [ 208.102489][ T5861] [ 211.423787][ T5881] Cannot find add_set index 6 as target [ 212.860269][ T5894] Cannot find add_set index 6 as target [ 215.691780][ T5910] usb usb5: usbfs: interface 0 claimed by hub while 'syz.1.398' sets config #0 [ 220.258328][ T26] audit: type=1800 audit(1792286108.464:5): pid=5943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.406" name="id" dev="configfs" ino=37736 res=0 errno=0 [ 220.667583][ T4395] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 220.868436][ T4395] usb 1-1: Dual-Role OTG device on HNP port [ 220.882936][ T4395] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 220.911186][ T5952] Cannot find add_set index 6 as target [ 220.936531][ T4395] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.616742][ T5955] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.411' sets config #0 [ 221.957630][ T4395] gspca_main: spca501-2.14.0 probing 0000:0000 [ 222.928417][ T4395] gspca_spca501: reg write: error -32 [ 222.933829][ T4395] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 222.957341][ T4395] spca501: probe of 1-1:1.0 failed with error -22 [ 226.494577][ T5998] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.424' sets config #0 [ 228.145797][ T4286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 228.155684][ T4286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 228.165177][ T4286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 228.173680][ T4286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 228.181833][ T4286] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 228.189349][ T4286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 228.289592][ T6011] rxe_eth0 speed is unknown, defaulting to 1000 [ 228.332393][ T6018] FAULT_INJECTION: forcing a failure. [ 228.332393][ T6018] name failslab, interval 1, probability 0, space 0, times 0 [ 228.407596][ T6018] CPU: 1 PID: 6018 Comm: syz.0.429 Not tainted syzkaller #0 [ 228.414940][ T6018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 228.425014][ T6018] Call Trace: [ 228.428308][ T6018] [ 228.431284][ T6018] dump_stack_lvl+0x188/0x24e [ 228.435987][ T6018] ? show_regs_print_info+0x12/0x12 [ 228.441208][ T6018] ? load_image+0x410/0x410 [ 228.445727][ T6018] ? __might_sleep+0xd0/0xd0 [ 228.450337][ T6018] ? __lock_acquire+0x7ea0/0x7ea0 [ 228.455394][ T6018] should_fail_ex+0x390/0x4c0 [ 228.460100][ T6018] should_failslab+0x5/0x20 [ 228.464606][ T6018] slab_pre_alloc_hook+0x59/0x300 [ 228.469633][ T6018] ? cache_create_net+0x8e/0x250 [ 228.474571][ T6018] __kmem_cache_alloc_node+0x4f/0x270 [ 228.479939][ T6018] ? rcu_is_watching+0x11/0xa0 [ 228.484712][ T6018] ? cache_create_net+0x8e/0x250 [ 228.489672][ T6018] __kmalloc+0xa3/0x240 [ 228.493824][ T6018] cache_create_net+0x8e/0x250 [ 228.498594][ T6018] nfsd_idmap_init+0x55/0x1e0 [ 228.503270][ T6018] ? nfsd_init_net+0x34/0x1e0 [ 228.507946][ T6018] nfsd_init_net+0x47/0x1e0 [ 228.512446][ T6018] ops_init+0x360/0x5e0 [ 228.516602][ T6018] setup_net+0x4f2/0xbd0 [ 228.520846][ T6018] ? copy_net_ns+0x5b0/0x5b0 [ 228.525437][ T6018] ? copy_net_ns+0x324/0x5b0 [ 228.530024][ T6018] ? down_read_killable+0x1cc/0x340 [ 228.535239][ T6018] copy_net_ns+0x33e/0x5b0 [ 228.539677][ T6018] create_new_namespaces+0x3ce/0x700 [ 228.544969][ T6018] unshare_nsproxy_namespaces+0x116/0x160 [ 228.550687][ T6018] ksys_unshare+0x4f6/0x8e0 [ 228.555195][ T6018] ? sighand_ctor+0x40/0x40 [ 228.559698][ T6018] ? lock_chain_count+0x20/0x20 [ 228.564551][ T6018] ? syscall_enter_from_user_mode+0x21/0x80 [ 228.570445][ T6018] __x64_sys_unshare+0x34/0x40 [ 228.575208][ T6018] do_syscall_64+0x4c/0xa0 [ 228.579620][ T6018] ? clear_bhb_loop+0x60/0xb0 [ 228.584295][ T6018] ? clear_bhb_loop+0x60/0xb0 [ 228.588970][ T6018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.594856][ T6018] RIP: 0033:0x7fc1edf9e559 [ 228.599264][ T6018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.618860][ T6018] RSP: 002b:00007fc1eef53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 228.627266][ T6018] RAX: ffffffffffffffda RBX: 00007fc1ee225fa0 RCX: 00007fc1edf9e559 [ 228.635241][ T6018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 228.643206][ T6018] RBP: 00007fc1ee035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 228.651169][ T6018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.659132][ T6018] R13: 00007fc1ee226038 R14: 00007fc1ee225fa0 R15: 00007ffcd70c3cd8 [ 228.667126][ T6018] [ 228.768141][ T6022] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.425' sets config #0 [ 229.194657][ T6028] overlayfs: overlapping lowerdir path [ 230.237595][ T4286] Bluetooth: hci5: command 0x0409 tx timeout [ 230.280348][ T6011] chnl_net:caif_netlink_parms(): no params data found [ 230.519778][ T6011] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.526971][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.568810][ T6011] device bridge_slave_0 entered promiscuous mode [ 230.583000][ T6011] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.617638][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.625927][ T6011] device bridge_slave_1 entered promiscuous mode [ 230.709817][ T6011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.741502][ T6011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.794061][ T6011] team0: Port device team_slave_0 added [ 230.821889][ T6011] team0: Port device team_slave_1 added [ 230.867772][ T6011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.884934][ T6011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.992992][ T6011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.021244][ T6011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.039003][ T6011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.073658][ T6011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.110999][ T6011] device hsr_slave_0 entered promiscuous mode [ 232.724598][ T4286] Bluetooth: hci5: command 0x041b tx timeout [ 232.988047][ T6011] device hsr_slave_1 entered promiscuous mode [ 233.013260][ T6011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.055567][ T6011] Cannot create hsr debugfs directory [ 233.902218][ T6059] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.436' sets config #0 [ 234.832845][ T4286] Bluetooth: hci5: command 0x040f tx timeout [ 236.368954][ T4302] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.092125][ T4302] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.312592][ T4286] Bluetooth: hci5: command 0x0419 tx timeout [ 237.491836][ T4302] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.561771][ T6011] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 237.584973][ T6011] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 237.635693][ T4302] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.685376][ T6011] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 237.705511][ T6011] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 237.974162][ T6093] FAULT_INJECTION: forcing a failure. [ 237.974162][ T6093] name failslab, interval 1, probability 0, space 0, times 0 [ 238.025183][ T6093] CPU: 0 PID: 6093 Comm: syz.4.444 Not tainted syzkaller #0 [ 238.032520][ T6093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 238.042574][ T6093] Call Trace: [ 238.045848][ T6093] [ 238.048781][ T6093] dump_stack_lvl+0x188/0x24e [ 238.053460][ T6093] ? show_regs_print_info+0x12/0x12 [ 238.058658][ T6093] ? load_image+0x410/0x410 [ 238.063156][ T6093] ? __might_sleep+0xd0/0xd0 [ 238.067739][ T6093] ? __lock_acquire+0x7ea0/0x7ea0 [ 238.072771][ T6093] should_fail_ex+0x390/0x4c0 [ 238.077458][ T6093] should_failslab+0x5/0x20 [ 238.081961][ T6093] slab_pre_alloc_hook+0x59/0x300 [ 238.086986][ T6093] kmem_cache_alloc+0x56/0x2f0 [ 238.091744][ T6093] ? getname_flags+0xb7/0x500 [ 238.096422][ T6093] getname_flags+0xb7/0x500 [ 238.100918][ T6093] __x64_sys_mkdirat+0x78/0x90 [ 238.105678][ T6093] do_syscall_64+0x4c/0xa0 [ 238.110088][ T6093] ? clear_bhb_loop+0x60/0xb0 [ 238.114757][ T6093] ? clear_bhb_loop+0x60/0xb0 [ 238.119436][ T6093] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.125320][ T6093] RIP: 0033:0x7fbeb239e559 [ 238.129728][ T6093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.149330][ T6093] RSP: 002b:00007fbeb3233028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 238.157740][ T6093] RAX: ffffffffffffffda RBX: 00007fbeb2625fa0 RCX: 00007fbeb239e559 [ 238.165705][ T6093] RDX: 00000000000001ff RSI: 0000000000000000 RDI: ffffffffffffff9c [ 238.173670][ T6093] RBP: 00007fbeb2435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 238.181633][ T6093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.189596][ T6093] R13: 00007fbeb2626038 R14: 00007fbeb2625fa0 R15: 00007ffd377d2ba8 [ 238.197570][ T6093] [ 238.245811][ T6011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.336127][ T6011] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.356493][ T6113] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.448' sets config #0 [ 238.387859][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.396012][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.466086][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.502628][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.584297][ T4563] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.591499][ T4563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.813824][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.243779][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.357397][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.368659][ T4563] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.376460][ T4563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.405507][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.424528][ T6125] xt_l2tp: invalid flags combination: 8 [ 239.489262][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.515335][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.538787][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.388340][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.428988][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.464229][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.607198][ T6011] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.646775][ T6011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.691727][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.723500][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.762335][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.827847][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.890260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.926015][ T26] audit: type=1800 audit(1792286129.124:6): pid=6135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.453" name="id" dev="configfs" ino=39262 res=0 errno=0 [ 241.526875][ T6154] overlayfs: overlapping lowerdir path [ 242.020894][ T6011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.043963][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.055658][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.650511][ T4302] device hsr_slave_0 left promiscuous mode [ 243.669814][ T4302] device hsr_slave_1 left promiscuous mode [ 243.687112][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.715047][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.749163][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.775242][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.805739][ T4302] device bridge_slave_1 left promiscuous mode [ 243.824081][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.858894][ T6197] xt_l2tp: invalid flags combination: 8 [ 243.869764][ T4302] device bridge_slave_0 left promiscuous mode [ 243.887726][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.936104][ T4302] device veth1_macvtap left promiscuous mode [ 244.958614][ T4302] device veth0_macvtap left promiscuous mode [ 244.964736][ T4302] device veth1_vlan left promiscuous mode [ 244.973391][ T4302] device veth0_vlan left promiscuous mode [ 245.114564][ T5744] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 245.430186][ T5744] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 245.458524][ T5744] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.487529][ T5744] usb 5-1: config 0 interface 0 has no altsetting 0 [ 245.497874][ T5744] usb 5-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 245.506938][ T5744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.557617][ T5744] usb 5-1: config 0 descriptor?? [ 245.772903][ T5744] usbhid 5-1:0.0: can't add hid device: -71 [ 245.779560][ T5744] usbhid: probe of 5-1:0.0 failed with error -71 [ 245.807183][ T5744] usb 5-1: USB disconnect, device number 5 [ 246.346465][ T4302] team0 (unregistering): Port device team_slave_1 removed [ 246.456650][ T4302] team0 (unregistering): Port device team_slave_0 removed [ 246.554307][ T4302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.644560][ T4302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.143956][ T4302] bond0 (unregistering): Released all slaves [ 248.488186][ T5868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 248.539943][ T6247] xt_l2tp: invalid flags combination: 8 [ 248.546121][ T5868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 249.708094][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 249.763437][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 249.785781][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 249.798243][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 249.858470][ T6011] device veth0_vlan entered promiscuous mode [ 249.895601][ T6011] device veth1_vlan entered promiscuous mode [ 250.005770][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 250.048255][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 250.094911][ T6011] device veth0_macvtap entered promiscuous mode [ 250.122688][ T6011] device veth1_macvtap entered promiscuous mode [ 250.193559][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.217543][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.275130][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.306094][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.336500][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.364335][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.407532][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.454064][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.512868][ T6011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.539561][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.577781][ T6269] usb usb5: usbfs: interface 0 claimed by hub while 'syz.1.475' sets config #0 [ 250.609004][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.656587][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.731596][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.278203][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.317579][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.387497][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.438798][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.450932][ T6011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.461292][ T5868] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 251.484926][ T5868] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 251.548301][ T5868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 251.582842][ T5868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 251.604221][ T5868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 251.659039][ T5868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 251.720208][ T6011] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.767626][ T6011] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.778328][ T6011] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.819986][ T6011] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.034855][ T5064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.063003][ T5064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.246078][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 252.256157][ T5868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.294090][ T5868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.321776][ T5868] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 253.666004][ T6292] usb usb5: usbfs: interface 0 claimed by hub while 'syz.4.482' sets config #0 [ 255.910657][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.916986][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.134034][ T6363] FAULT_INJECTION: forcing a failure. [ 260.134034][ T6363] name failslab, interval 1, probability 0, space 0, times 0 [ 260.203171][ T6363] CPU: 0 PID: 6363 Comm: syz.5.489 Not tainted syzkaller #0 [ 260.210515][ T6363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 260.220601][ T6363] Call Trace: [ 260.223891][ T6363] [ 260.226838][ T6363] dump_stack_lvl+0x188/0x24e [ 260.231545][ T6363] ? show_regs_print_info+0x12/0x12 [ 260.236764][ T6363] ? load_image+0x410/0x410 [ 260.241284][ T6363] ? __might_sleep+0xd0/0xd0 [ 260.245889][ T6363] ? __lock_acquire+0x7ea0/0x7ea0 [ 260.250941][ T6363] should_fail_ex+0x390/0x4c0 [ 260.255649][ T6363] should_failslab+0x5/0x20 [ 260.260170][ T6363] slab_pre_alloc_hook+0x59/0x300 [ 260.265214][ T6363] ? cache_create_net+0x8e/0x250 [ 260.270179][ T6363] __kmem_cache_alloc_node+0x4f/0x270 [ 260.275562][ T6363] ? rcu_is_watching+0x11/0xa0 [ 260.280353][ T6363] ? cache_create_net+0x8e/0x250 [ 260.285308][ T6363] __kmalloc+0xa3/0x240 [ 260.289479][ T6363] cache_create_net+0x8e/0x250 [ 260.294272][ T6363] nfsd_idmap_init+0x55/0x1e0 [ 260.298969][ T6363] ? nfsd_init_net+0x34/0x1e0 [ 260.303667][ T6363] nfsd_init_net+0x47/0x1e0 [ 260.308198][ T6363] ops_init+0x360/0x5e0 [ 260.312377][ T6363] setup_net+0x4f2/0xbd0 [ 260.316642][ T6363] ? copy_net_ns+0x5b0/0x5b0 [ 260.321256][ T6363] ? copy_net_ns+0x324/0x5b0 [ 260.325866][ T6363] ? down_read_killable+0x1cc/0x340 [ 260.331086][ T6363] copy_net_ns+0x33e/0x5b0 [ 260.335528][ T6363] create_new_namespaces+0x3ce/0x700 [ 260.340843][ T6363] unshare_nsproxy_namespaces+0x116/0x160 [ 260.346587][ T6363] ksys_unshare+0x4f6/0x8e0 [ 260.351120][ T6363] ? sighand_ctor+0x40/0x40 [ 260.355639][ T6363] ? lock_chain_count+0x20/0x20 [ 260.360514][ T6363] ? syscall_enter_from_user_mode+0x21/0x80 [ 260.366428][ T6363] __x64_sys_unshare+0x34/0x40 [ 260.371191][ T6363] do_syscall_64+0x4c/0xa0 [ 260.375614][ T6363] ? clear_bhb_loop+0x60/0xb0 [ 260.380289][ T6363] ? clear_bhb_loop+0x60/0xb0 [ 260.384965][ T6363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.390852][ T6363] RIP: 0033:0x7ff0d619e559 [ 260.395259][ T6363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.414866][ T6363] RSP: 002b:00007ff0d7105028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 260.423279][ T6363] RAX: ffffffffffffffda RBX: 00007ff0d6425fa0 RCX: 00007ff0d619e559 [ 260.431247][ T6363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 260.439212][ T6363] RBP: 00007ff0d6235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 260.447177][ T6363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.455139][ T6363] R13: 00007ff0d6426038 R14: 00007ff0d6425fa0 R15: 00007ffe31962328 [ 260.463122][ T6363] [ 260.673476][ T6368] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 260.688628][ T6368] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.589627][ T26] audit: type=1326 audit(1792286151.764:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.0.506" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1edf9e559 code=0x7ffc0000 [ 263.631279][ T26] audit: type=1326 audit(1792286151.764:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.0.506" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1edf9e559 code=0x7ffc0000 [ 263.717492][ T26] audit: type=1326 audit(1792286151.764:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.0.506" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fc1edf9e559 code=0x7ffc0000 [ 263.809074][ T26] audit: type=1326 audit(1792286151.764:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.0.506" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1edf9e559 code=0x7ffc0000 [ 263.936557][ T6402] usb usb5: usbfs: interface 0 claimed by hub while 'syz.4.501' sets config #0 [ 264.167570][ T26] audit: type=1326 audit(1792286151.764:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz.0.506" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1edf9e559 code=0x7ffc0000 [ 265.491519][ T6435] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.507' sets config #0 [ 271.886778][ T6485] FAULT_INJECTION: forcing a failure. [ 271.886778][ T6485] name failslab, interval 1, probability 0, space 0, times 0 [ 271.987580][ T6485] CPU: 0 PID: 6485 Comm: syz.4.516 Not tainted syzkaller #0 [ 271.994912][ T6485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 272.004984][ T6485] Call Trace: [ 272.008284][ T6485] [ 272.011232][ T6485] dump_stack_lvl+0x188/0x24e [ 272.015941][ T6485] ? show_regs_print_info+0x12/0x12 [ 272.021165][ T6485] ? load_image+0x410/0x410 [ 272.025695][ T6485] ? __might_sleep+0xd0/0xd0 [ 272.030304][ T6485] ? __lock_acquire+0x7ea0/0x7ea0 [ 272.035361][ T6485] should_fail_ex+0x390/0x4c0 [ 272.040079][ T6485] should_failslab+0x5/0x20 [ 272.044604][ T6485] slab_pre_alloc_hook+0x59/0x300 [ 272.049675][ T6485] kmem_cache_alloc+0x56/0x2f0 [ 272.049743][ T6485] ? __proc_create+0x36f/0x8b0 [ 272.049771][ T6485] __proc_create+0x36f/0x8b0 [ 272.049795][ T6485] ? proc_symlink+0x210/0x210 [ 272.049827][ T6485] ? _raw_write_unlock+0x24/0x40 [ 272.049847][ T6485] ? proc_register+0x5d1/0x7e0 [ 272.049871][ T6485] proc_create_data+0xa2/0x180 [ 272.049898][ T6485] cache_register_net+0x2a7/0x4b0 [ 272.049927][ T6485] nfsd_idmap_init+0x92/0x1e0 [ 272.049947][ T6485] ? nfsd_init_net+0x34/0x1e0 [ 272.049973][ T6485] nfsd_init_net+0x47/0x1e0 [ 272.049997][ T6485] ops_init+0x360/0x5e0 [ 272.050023][ T6485] setup_net+0x4f2/0xbd0 [ 272.050051][ T6485] ? copy_net_ns+0x5b0/0x5b0 [ 272.050079][ T6485] ? copy_net_ns+0x324/0x5b0 [ 272.050104][ T6485] ? down_read_killable+0x1cc/0x340 [ 272.050132][ T6485] copy_net_ns+0x33e/0x5b0 [ 272.050161][ T6485] create_new_namespaces+0x3ce/0x700 [ 272.050194][ T6485] unshare_nsproxy_namespaces+0x116/0x160 [ 272.050218][ T6485] ksys_unshare+0x4f6/0x8e0 [ 272.050247][ T6485] ? sighand_ctor+0x40/0x40 [ 272.050266][ T6485] ? lock_chain_count+0x20/0x20 [ 272.050294][ T6485] ? syscall_enter_from_user_mode+0x21/0x80 [ 272.050324][ T6485] __x64_sys_unshare+0x34/0x40 [ 272.050343][ T6485] do_syscall_64+0x4c/0xa0 [ 272.050361][ T6485] ? clear_bhb_loop+0x60/0xb0 [ 272.050381][ T6485] ? clear_bhb_loop+0x60/0xb0 [ 272.050402][ T6485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.050422][ T6485] RIP: 0033:0x7fbeb239e559 [ 272.050439][ T6485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.050454][ T6485] RSP: 002b:00007fbeb3233028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 272.050475][ T6485] RAX: ffffffffffffffda RBX: 00007fbeb2625fa0 RCX: 00007fbeb239e559 [ 272.050489][ T6485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 272.050501][ T6485] RBP: 00007fbeb2435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 272.050513][ T6485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.050524][ T6485] R13: 00007fbeb2626038 R14: 00007fbeb2625fa0 R15: 00007ffd377d2ba8 [ 272.050553][ T6485] [ 274.706974][ T6488] tty tty1: ldisc open failed (-12), clearing slot 0 [ 274.950886][ T6480] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 278.059888][ T6559] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.533' sets config #0 [ 285.145497][ T6613] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.551' sets config #0 [ 287.898009][ T6644] usb usb5: usbfs: interface 0 claimed by hub while 'syz.4.547' sets config #0 [ 291.224143][ T41] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 291.453243][ T41] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.509162][ T41] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 291.586338][ T41] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 291.658474][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 291.707762][ T41] usb 3-1: SerialNumber: syz [ 291.956061][ T6680] usb usb5: usbfs: interface 0 claimed by hub while 'syz.5.567' sets config #0 [ 291.973259][ T41] usb 3-1: 0:2 : does not exist [ 292.000055][ T41] usb 3-1: unit 5: unexpected type 0x09 [ 292.054881][ T41] usb 3-1: USB disconnect, device number 4 [ 299.537003][ T6793] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.591' sets config #0 [ 303.661147][ T6824] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 303.676943][ T6824] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 303.683072][ T6824] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 303.690970][ T6824] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 303.697162][ T6824] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 303.703430][ T6824] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 303.710348][ T6824] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 305.150901][ T4286] Bluetooth: hci0: command 0x0c1a tx timeout [ 306.165525][ T4279] Bluetooth: hci3: command 0x0c1a tx timeout [ 306.165564][ T4286] Bluetooth: hci5: command 0x0c1a tx timeout [ 306.244266][ T4279] Bluetooth: hci2: command 0x0c1a tx timeout [ 306.250372][ T4279] Bluetooth: hci1: command 0x0c1a tx timeout [ 307.487386][ T6868] netlink: 104 bytes leftover after parsing attributes in process `syz.1.606'. [ 309.005661][ T4288] Bluetooth: hci5: command 0x0406 tx timeout [ 309.233889][ T6878] xt_l2tp: invalid flags combination: 8 [ 309.612120][ T6885] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.608' sets config #0 [ 311.324647][ T4288] Bluetooth: hci5: command 0x0406 tx timeout [ 317.025959][ T6962] xt_l2tp: invalid flags combination: 8 [ 317.664368][ T6975] usb usb5: usbfs: interface 0 claimed by hub while 'syz.5.628' sets config #0 [ 320.160885][ T7006] device vlan2 entered promiscuous mode [ 320.166484][ T7006] device dummy0 entered promiscuous mode [ 320.215622][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.224382][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.038638][ T4348] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 321.413176][ T4348] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 321.424550][ T4348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.438980][ T4348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.449893][ T4348] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 321.477714][ T4348] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 321.513801][ T4348] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 321.613224][ T4348] usb 3-1: Manufacturer: syz [ 322.595946][ T4348] usb 3-1: config 0 descriptor?? [ 323.568307][ T4348] usbhid 3-1:0.0: can't add hid device: -71 [ 323.574372][ T4348] usbhid: probe of 3-1:0.0 failed with error -71 [ 323.669989][ T4348] usb 3-1: USB disconnect, device number 5 [ 324.141771][ T7038] usb usb5: usbfs: interface 0 claimed by hub while 'syz.4.641' sets config #0 [ 333.152482][ T7164] usb usb5: usbfs: interface 0 claimed by hub while 'syz.1.671' sets config #0 [ 339.485518][ T7225] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.688' sets config #0 [ 340.532898][ T7234] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.690' sets config #0 [ 341.583231][ T7251] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.694' sets config #0 [ 341.868573][ T7253] binder: 7252:7253 ioctl 4018620d 0 returned -22 [ 344.197991][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'. [ 344.222625][ T7248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.245974][ T7261] binder: 7247:7261 ioctl c0306201 0 returned -14 [ 345.071593][ T7248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.882240][ T4347] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 347.008667][ T7295] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.705' sets config #0 [ 347.093384][ T4347] usb 6-1: Using ep0 maxpacket: 32 [ 347.111872][ T4347] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.156962][ T4347] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 347.220173][ T4347] usb 6-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 347.256679][ T4347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.316023][ T4347] usb 6-1: config 0 descriptor?? [ 347.781319][ T4347] hid (null): report_id 50351 is invalid [ 347.803218][ T4347] uclogic 0003:5543:0005.0003: report_id 50351 is invalid [ 347.815996][ T4347] uclogic 0003:5543:0005.0003: item 0 2 1 8 parsing failed [ 347.826511][ T4347] uclogic 0003:5543:0005.0003: parse failed [ 347.832997][ T4347] uclogic: probe of 0003:5543:0005.0003 failed with error -22 [ 348.279285][ T4347] usb 6-1: USB disconnect, device number 2 [ 348.931328][ T7313] xt_l2tp: invalid flags combination: 8 [ 350.107563][ T7325] netlink: 'syz.0.713': attribute type 1 has an invalid length. [ 352.381662][ T41] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 352.604303][ T41] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.796589][ T41] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 352.944600][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.109287][ T41] gspca_main: spca501-2.14.0 probing 0000:0000 [ 353.445282][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 353.697178][ T41] gspca_spca501: reg write: error -110 [ 353.775060][ T41] spca501 3-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 353.889473][ T41] spca501: probe of 3-1:1.0 failed with error -22 [ 353.923856][ T7366] xt_l2tp: invalid flags combination: 8 [ 354.812201][ T41] uvcvideo 3-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 354.821506][ T41] usb 3-1: Found UVC 1.00 device (0000:0000) [ 354.828454][ T41] uvcvideo 3-1:1.1: No supported video formats found. [ 355.011605][ T41] uvcvideo 3-1:1.1: Failed to initialize the device (-22). [ 355.039239][ T41] usb 3-1: USB disconnect, device number 6 [ 359.697293][ T7413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.725405][ T7413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.944413][ T7421] xt_l2tp: invalid flags combination: 8 [ 362.778892][ T7453] rxe_eth0 speed is unknown, defaulting to 1000 [ 362.787069][ T7454] usb usb5: usbfs: interface 0 claimed by hub while 'syz.4.749' sets config #0 [ 363.952965][ T7467] xt_l2tp: invalid flags combination: 8 [ 364.736852][ T41] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 364.823297][ T5302] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 364.969245][ T41] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.006597][ T41] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 365.041930][ T5302] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 365.065983][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.099974][ T5302] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 365.145711][ T41] gspca_main: spca501-2.14.0 probing 0000:0000 [ 365.164660][ T5302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 365.197539][ T5302] usb 5-1: Product: syz [ 365.207918][ T5302] usb 5-1: Manufacturer: syz [ 365.227548][ T5302] usb 5-1: SerialNumber: syz [ 365.351992][ T41] gspca_spca501: reg write: error -71 [ 365.359250][ T41] spca501 6-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 365.374229][ T41] spca501: probe of 6-1:1.0 failed with error -22 [ 365.391951][ T41] uvcvideo 6-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 365.419452][ T41] usb 6-1: Found UVC 1.00 device (0000:0000) [ 365.426382][ T41] uvcvideo 6-1:1.1: No supported video formats found. [ 365.441021][ T41] uvcvideo 6-1:1.1: Failed to initialize the device (-22). [ 365.467720][ T41] usb 6-1: USB disconnect, device number 3 [ 365.508868][ T5302] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 365.849442][ C0] usblp0: nonzero write bulk status received: -71 [ 365.849722][ T5302] usb 5-1: USB disconnect, device number 6 [ 365.899363][ T5302] usblp0: removed [ 368.521748][ T7513] xt_l2tp: invalid flags combination: 8 [ 369.378141][ T26] audit: type=1326 audit(1792286250.568:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.5.775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d619e559 code=0x7ffc0000 [ 369.455042][ T7535] input: syz0 as /devices/virtual/input/input10 [ 369.504487][ T26] audit: type=1326 audit(1792286250.614:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.5.775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d619e559 code=0x7ffc0000 [ 369.661791][ T26] audit: type=1326 audit(1792286250.614:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.5.775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d619e559 code=0x7ffc0000 [ 369.697612][ T26] audit: type=1326 audit(1792286250.614:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.5.775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff0d619e559 code=0x7ffc0000 [ 369.725133][ T26] audit: type=1326 audit(1792286250.614:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.5.775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d619e559 code=0x7ffc0000 [ 369.749670][ T26] audit: type=1326 audit(1792286250.614:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.5.775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d619e559 code=0x7ffc0000 [ 369.773769][ T26] audit: type=1326 audit(1792286250.623:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.5.775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d619e559 code=0x7ffc0000 [ 370.247159][ T7524] overlayfs: conflicting lowerdir path [ 370.976867][ T26] audit: type=1326 audit(1792286250.623:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.5.775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d619e559 code=0x7ffc0000 [ 371.020707][ T26] audit: type=1326 audit(1792286250.623:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.5.775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff0d619e559 code=0x7ffc0000 [ 371.073197][ T26] audit: type=1326 audit(1792286250.623:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.5.775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d619e559 code=0x7ffc0000 [ 372.116148][ T7560] xt_l2tp: invalid flags combination: 8 [ 374.316938][ T7572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.327394][ T7572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.713666][ T7572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.753787][ T7572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.266561][ T7607] xt_l2tp: invalid flags combination: 8 [ 380.264460][ T7630] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 380.292811][ T7630] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 380.310537][ T7630] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 380.320574][ T7630] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 380.357151][ T7630] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 380.980154][ T7654] xt_l2tp: invalid flags combination: 8 [ 381.621835][ T4288] Bluetooth: hci0: command 0x0c1a tx timeout [ 382.499855][ T4288] Bluetooth: hci3: command 0x0c1a tx timeout [ 382.499892][ T4279] Bluetooth: hci1: command 0x0c1a tx timeout [ 382.512487][ T4286] Bluetooth: hci2: command 0x0c1a tx timeout [ 382.575775][ T4288] Bluetooth: hci5: command 0x0c1a tx timeout [ 383.247566][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 383.247579][ T26] audit: type=1326 audit(1792286263.319:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.1.814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb215d9e559 code=0x7ffc0000 [ 383.484932][ T26] audit: type=1326 audit(1792286263.338:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.1.814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb215d9e559 code=0x7ffc0000 [ 383.540169][ T7690] xt_l2tp: invalid flags combination: 8 [ 383.742120][ T7695] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.816' sets config #0 [ 383.853838][ T26] audit: type=1326 audit(1792286263.338:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.1.814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb215d9e559 code=0x7ffc0000 [ 384.001493][ T26] audit: type=1326 audit(1792286263.338:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.1.814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb215d9e559 code=0x7ffc0000 [ 384.159147][ T26] audit: type=1326 audit(1792286263.338:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.1.814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb215d9e559 code=0x7ffc0000 [ 384.346022][ T26] audit: type=1326 audit(1792286263.338:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.1.814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb215d9e559 code=0x7ffc0000 [ 384.750058][ T26] audit: type=1326 audit(1792286263.347:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.1.814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb215d9e559 code=0x7ffc0000 [ 385.071103][ T26] audit: type=1326 audit(1792286263.347:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.1.814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb215d9e559 code=0x7ffc0000 [ 385.097353][ T26] audit: type=1326 audit(1792286263.347:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.1.814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fb215d9e559 code=0x7ffc0000 [ 385.154175][ T26] audit: type=1326 audit(1792286263.347:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.1.814" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb215d9e559 code=0x7ffc0000 [ 386.739268][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.745643][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.946222][ T7748] xt_l2tp: invalid flags combination: 8 [ 392.258761][ T7780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.282953][ T7780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.765381][ T7795] xt_l2tp: invalid flags combination: 8 [ 397.163082][ T955] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 397.415844][ T955] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.439410][ T955] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 397.473585][ T955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.512068][ T955] gspca_main: spca501-2.14.0 probing 0000:0000 [ 397.728103][ T955] gspca_spca501: reg write: error -71 [ 397.733559][ T955] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 397.753258][ T955] spca501: probe of 5-1:1.0 failed with error -22 [ 397.767431][ T955] uvcvideo 5-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 397.787102][ T955] usb 5-1: Found UVC 1.00 device (0000:0000) [ 397.795317][ T955] uvcvideo 5-1:1.1: No supported video formats found. [ 397.804137][ T955] uvcvideo 5-1:1.1: Failed to initialize the device (-22). [ 397.819150][ T955] usb 5-1: USB disconnect, device number 7 [ 400.981764][ T7849] xt_l2tp: invalid flags combination: 8 [ 404.635999][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 404.636012][ T26] audit: type=1326 audit(1792286283.111:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.1.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb215d9e559 code=0x7ffc0000 [ 404.979251][ T7878] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.868' sets config #0 [ 405.519661][ T26] audit: type=1326 audit(1792286283.111:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.1.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb215d9e559 code=0x7ffc0000 [ 405.680323][ T26] audit: type=1326 audit(1792286283.111:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.1.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb215d9e559 code=0x7ffc0000 [ 405.761732][ T26] audit: type=1326 audit(1792286283.111:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.1.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb215d9e559 code=0x7ffc0000 [ 405.790931][ T26] audit: type=1326 audit(1792286283.111:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.1.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fb215d9e559 code=0x7ffc0000 [ 405.844143][ T26] audit: type=1326 audit(1792286283.111:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.1.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb215d9e559 code=0x7ffc0000 [ 405.903126][ T26] audit: type=1326 audit(1792286283.111:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.1.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb215d9e559 code=0x7ffc0000 [ 406.012539][ T26] audit: type=1326 audit(1792286283.111:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.1.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb215d9e559 code=0x7ffc0000 [ 406.220096][ T26] audit: type=1326 audit(1792286283.111:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.1.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb215d9e559 code=0x7ffc0000 [ 406.370966][ T26] audit: type=1326 audit(1792286283.111:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.1.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb215d9e559 code=0x7ffc0000 [ 407.081291][ T7901] xt_connbytes: Forcing CT accounting to be enabled [ 409.052237][ T955] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 409.301472][ T955] usb 6-1: Using ep0 maxpacket: 16 [ 409.319795][ T955] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.496409][ T955] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 409.553847][ T955] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 409.572269][ T955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.780464][ T955] usb 6-1: Product: syz [ 409.785751][ T955] usb 6-1: Manufacturer: syz [ 409.790702][ T955] usb 6-1: SerialNumber: syz [ 410.131795][ T7951] netlink: 'syz.1.886': attribute type 9 has an invalid length. [ 410.178332][ T7951] device sit0 entered promiscuous mode [ 410.291367][ T7954] usb usb5: usbfs: interface 0 claimed by hub while 'syz.4.881' sets config #0 [ 411.184698][ T7951] netlink: 'syz.1.886': attribute type 1 has an invalid length. [ 411.398426][ T7951] netlink: 1 bytes leftover after parsing attributes in process `syz.1.886'. [ 412.879233][ T955] usb 6-1: 0:2 : does not exist [ 412.908550][ T955] usb 6-1: unit 6 not found! [ 413.260266][ T955] usb 6-1: USB disconnect, device number 4 [ 413.793282][ T7935] udevd[7935]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 415.384405][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'. [ 415.639339][ T7995] team0: Port device team_slave_0 removed [ 416.805651][ T8010] ip_tables: iptables: counters copy to user failed while replacing table [ 418.352113][ T8025] xt_connbytes: Forcing CT accounting to be enabled [ 423.011304][ T26] kauditd_printk_skb: 50 callbacks suppressed [ 423.011318][ T26] audit: type=1326 audit(1792286300.071:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz.0.922" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1edf9e559 code=0x7fc00000 [ 423.931537][ T26] audit: type=1326 audit(1792286300.910:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz.0.922" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc1edf9e559 code=0x7fc00000 [ 425.038523][ T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 425.234451][ T8101] usb usb5: usbfs: interface 0 claimed by hub while 'syz.5.928' sets config #0 [ 425.828964][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 425.844829][ T7] usb 3-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 425.888975][ T8103] FAULT_INJECTION: forcing a failure. [ 425.888975][ T8103] name failslab, interval 1, probability 0, space 0, times 0 [ 425.913480][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.932247][ T8103] CPU: 1 PID: 8103 Comm: syz.0.931 Not tainted syzkaller #0 [ 425.939572][ T8103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 425.949642][ T8103] Call Trace: [ 425.952939][ T8103] [ 425.955879][ T8103] dump_stack_lvl+0x188/0x24e [ 425.959093][ T7] usb 3-1: Product: syz [ 425.960568][ T8103] ? show_regs_print_info+0x12/0x12 [ 425.964707][ T7] usb 3-1: Manufacturer: syz [ 425.969890][ T8103] ? load_image+0x410/0x410 [ 425.969916][ T8103] ? __might_sleep+0xd0/0xd0 [ 425.969934][ T8103] ? __lock_acquire+0x7ea0/0x7ea0 [ 425.969963][ T8103] should_fail_ex+0x390/0x4c0 [ 425.969994][ T8103] should_failslab+0x5/0x20 [ 425.970011][ T8103] slab_pre_alloc_hook+0x59/0x300 [ 426.002964][ T8103] kmem_cache_alloc+0x56/0x2f0 [ 426.005936][ T7] usb 3-1: SerialNumber: syz [ 426.007728][ T8103] ? ptlock_alloc+0x1c/0x60 [ 426.007758][ T8103] ptlock_alloc+0x1c/0x60 [ 426.021193][ T8103] pte_alloc_one+0xc0/0x310 [ 426.025723][ T8103] ? pfn_modify_allowed+0x560/0x560 [ 426.030944][ T8103] ? __rwlock_init+0x140/0x140 [ 426.035734][ T8103] __pte_alloc+0x21/0x150 [ 426.040092][ T8103] handle_mm_fault+0x34b1/0x3d40 [ 426.045063][ T8103] ? numa_migrate_prep+0x250/0x250 [ 426.050208][ T8103] ? vma_is_secretmem+0x9/0x40 [ 426.055031][ T8103] ? check_vma_flags+0x340/0x4c0 [ 426.059996][ T8103] __get_user_pages+0x40d/0xec0 [ 426.064885][ T8103] ? populate_vma_page_range+0x2b0/0x2b0 [ 426.070547][ T8103] ? __might_sleep+0xd0/0xd0 [ 426.075155][ T8103] ? read_lock_is_recursive+0x10/0x10 [ 426.080556][ T8103] __get_user_pages_remote+0x1c2/0x730 [ 426.086041][ T8103] ? get_user_pages_remote+0x55/0xa0 [ 426.091347][ T8103] get_arg_page+0x1ca/0x410 [ 426.095875][ T8103] ? copy_string_kernel+0x220/0x220 [ 426.101097][ T8103] ? up_write+0x1b6/0x410 [ 426.105447][ T8103] ? alloc_bprm+0x37a/0x710 [ 426.109977][ T8103] copy_string_kernel+0x161/0x220 [ 426.115032][ T8103] do_execveat_common+0x35d/0x6b0 [ 426.120088][ T8103] __x64_sys_execve+0x8e/0xa0 [ 426.124795][ T8103] do_syscall_64+0x4c/0xa0 [ 426.129232][ T8103] ? clear_bhb_loop+0x60/0xb0 [ 426.133928][ T8103] ? clear_bhb_loop+0x60/0xb0 [ 426.138628][ T8103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 426.144545][ T8103] RIP: 0033:0x7fc1edf9e559 [ 426.148978][ T8103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.168599][ T8103] RSP: 002b:00007fc1eef53028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 426.177037][ T8103] RAX: ffffffffffffffda RBX: 00007fc1ee225fa0 RCX: 00007fc1edf9e559 [ 426.185027][ T8103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000008c0 [ 426.193013][ T8103] RBP: 00007fc1ee035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 426.201001][ T8103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.208985][ T8103] R13: 00007fc1ee226038 R14: 00007fc1ee225fa0 R15: 00007ffcd70c3cd8 [ 426.216988][ T8103] [ 426.389654][ T8112] netlink: 'syz.4.934': attribute type 9 has an invalid length. [ 426.656827][ T8111] device sit0 entered promiscuous mode [ 426.687438][ T8111] netlink: 'syz.4.934': attribute type 1 has an invalid length. [ 426.711527][ T8111] netlink: 1 bytes leftover after parsing attributes in process `syz.4.934'. [ 428.491470][ T7] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 429.271361][ T8125] device vlan0 entered promiscuous mode [ 429.290558][ T7] usb 3-1: USB disconnect, device number 7 [ 430.511647][ T8127] udevd[8127]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 431.177337][ T8159] usb usb5: usbfs: interface 0 claimed by hub while 'syz.4.944' sets config #0 [ 432.348868][ T8175] netlink: 'syz.0.951': attribute type 9 has an invalid length. [ 434.097936][ T8173] raw_sendmsg: syz.1.950 forgot to set AF_INET. Fix it! [ 435.100361][ T8199] device gre1 entered promiscuous mode [ 435.151740][ T8199] netlink: 24 bytes leftover after parsing attributes in process `syz.5.958'. [ 438.559727][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.965'. [ 440.408571][ T8260] device syzkaller0 entered promiscuous mode [ 444.038965][ T8293] overlayfs: failed to resolve './bus': -2 [ 445.510837][ T5744] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 446.668791][ T8328] netlink: 32 bytes leftover after parsing attributes in process `syz.4.996'. [ 446.888446][ T5744] usb 6-1: unable to get BOS descriptor or descriptor too short [ 446.897007][ T5744] usb 6-1: config 1 has an invalid interface number: 103 but max is 0 [ 446.905359][ T5744] usb 6-1: config 1 has no interface number 0 [ 446.911595][ T5744] usb 6-1: config 1 interface 103 has no altsetting 0 [ 446.920691][ T5744] usb 6-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=22.65 [ 446.929876][ T5744] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.938222][ T5744] usb 6-1: Product: syz [ 446.942879][ T5744] usb 6-1: Manufacturer: syz [ 446.947500][ T5744] usb 6-1: SerialNumber: syz [ 448.606518][ T5744] usb 6-1: can't set config #1, error -71 [ 448.631492][ T5744] usb 6-1: USB disconnect, device number 5 [ 448.937298][ T8338] rxe_eth0 speed is unknown, defaulting to 1000 [ 450.765310][ T8364] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 450.773002][ T8364] IPv6: NLM_F_CREATE should be set when creating new route [ 450.780285][ T8364] IPv6: NLM_F_CREATE should be set when creating new route [ 451.020530][ T8374] FAULT_INJECTION: forcing a failure. [ 451.020530][ T8374] name failslab, interval 1, probability 0, space 0, times 0 [ 451.072138][ T8374] CPU: 0 PID: 8374 Comm: syz.5.1009 Not tainted syzkaller #0 [ 451.079560][ T8374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 451.089634][ T8374] Call Trace: [ 451.092923][ T8374] [ 451.095873][ T8374] dump_stack_lvl+0x188/0x24e [ 451.100577][ T8374] ? show_regs_print_info+0x12/0x12 [ 451.105796][ T8374] ? load_image+0x410/0x410 [ 451.110326][ T8374] ? __might_sleep+0xd0/0xd0 [ 451.114936][ T8374] ? __lock_acquire+0x7ea0/0x7ea0 [ 451.119983][ T8374] ? __might_sleep+0xd0/0xd0 [ 451.124592][ T8374] should_fail_ex+0x390/0x4c0 [ 451.129295][ T8374] should_failslab+0x5/0x20 [ 451.133820][ T8374] slab_pre_alloc_hook+0x59/0x300 [ 451.138866][ T8374] kmem_cache_alloc_lru+0x49/0x2e0 [ 451.143994][ T8374] ? sock_alloc_inode+0x24/0xc0 [ 451.148872][ T8374] sock_alloc_inode+0x24/0xc0 [ 451.153565][ T8374] ? sockfs_init_fs_context+0xa0/0xa0 [ 451.158950][ T8374] new_inode_pseudo+0x5f/0x1c0 [ 451.163731][ T8374] __sock_create+0x129/0x940 [ 451.168339][ T8374] ? __might_fault+0xa6/0x120 [ 451.173029][ T8374] ? __might_fault+0xc2/0x120 [ 451.177725][ T8374] __sys_socketpair+0x1bd/0x540 [ 451.182599][ T8374] __x64_sys_socketpair+0x97/0xb0 [ 451.187651][ T8374] do_syscall_64+0x4c/0xa0 [ 451.192084][ T8374] ? clear_bhb_loop+0x60/0xb0 [ 451.196779][ T8374] ? clear_bhb_loop+0x60/0xb0 [ 451.201471][ T8374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 451.207378][ T8374] RIP: 0033:0x7ff0d619e559 [ 451.211807][ T8374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.231427][ T8374] RSP: 002b:00007ff0d7105028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 451.239844][ T8374] RAX: ffffffffffffffda RBX: 00007ff0d6425fa0 RCX: 00007ff0d619e559 [ 451.247818][ T8374] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 451.255783][ T8374] RBP: 00007ff0d6235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 451.263745][ T8374] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 451.271705][ T8374] R13: 00007ff0d6426038 R14: 00007ff0d6425fa0 R15: 00007ffe31962328 [ 451.279687][ T8374] [ 451.308810][ T8374] socket: no more sockets [ 453.335727][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 453.342073][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 455.413423][ T8429] overlayfs: failed to clone upperpath [ 456.011878][ T8431] FAULT_INJECTION: forcing a failure. [ 456.011878][ T8431] name failslab, interval 1, probability 0, space 0, times 0 [ 456.079288][ T8431] CPU: 0 PID: 8431 Comm: syz.4.1023 Not tainted syzkaller #0 [ 456.086708][ T8431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 456.096776][ T8431] Call Trace: [ 456.100064][ T8431] [ 456.103003][ T8431] dump_stack_lvl+0x188/0x24e [ 456.107706][ T8431] ? show_regs_print_info+0x12/0x12 [ 456.112932][ T8431] ? load_image+0x410/0x410 [ 456.117461][ T8431] ? __might_sleep+0xd0/0xd0 [ 456.122070][ T8431] ? __lock_acquire+0x7ea0/0x7ea0 [ 456.127101][ T8431] ? __might_sleep+0xd0/0xd0 [ 456.131687][ T8431] should_fail_ex+0x390/0x4c0 [ 456.136369][ T8431] should_failslab+0x5/0x20 [ 456.140870][ T8431] slab_pre_alloc_hook+0x59/0x300 [ 456.145896][ T8431] kmem_cache_alloc_lru+0x49/0x2e0 [ 456.151002][ T8431] ? sock_alloc_inode+0x24/0xc0 [ 456.155853][ T8431] sock_alloc_inode+0x24/0xc0 [ 456.160525][ T8431] ? sockfs_init_fs_context+0xa0/0xa0 [ 456.165892][ T8431] new_inode_pseudo+0x5f/0x1c0 [ 456.170655][ T8431] __sock_create+0x129/0x940 [ 456.175243][ T8431] ? __might_fault+0xa6/0x120 [ 456.179921][ T8431] ? __might_fault+0xc2/0x120 [ 456.184607][ T8431] __sys_socketpair+0x1bd/0x540 [ 456.189464][ T8431] __x64_sys_socketpair+0x97/0xb0 [ 456.194483][ T8431] do_syscall_64+0x4c/0xa0 [ 456.198907][ T8431] ? clear_bhb_loop+0x60/0xb0 [ 456.203582][ T8431] ? clear_bhb_loop+0x60/0xb0 [ 456.208279][ T8431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 456.214173][ T8431] RIP: 0033:0x7fbeb239e559 [ 456.218579][ T8431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.238192][ T8431] RSP: 002b:00007fbeb3233028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 456.246604][ T8431] RAX: ffffffffffffffda RBX: 00007fbeb2625fa0 RCX: 00007fbeb239e559 [ 456.254575][ T8431] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 456.262543][ T8431] RBP: 00007fbeb2435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 456.270508][ T8431] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 456.278501][ T8431] R13: 00007fbeb2626038 R14: 00007fbeb2625fa0 R15: 00007ffd377d2ba8 [ 456.286480][ T8431] [ 456.319953][ T8431] socket: no more sockets [ 457.438991][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1028'. [ 460.685334][ T8481] ip_tables: iptables: counters copy to user failed while replacing table [ 464.410189][ T8549] ip_tables: iptables: counters copy to user failed while replacing table [ 467.451537][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1068'. [ 472.591896][ T8632] device ip6gretap0 entered promiscuous mode [ 472.617165][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1087'. [ 472.654721][ T8632] device ip6gretap0 left promiscuous mode [ 475.562239][ T8652] device gre1 entered promiscuous mode [ 481.666528][ T8720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.757678][ T8720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.498854][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1121'. [ 486.773225][ T8778] bond0: (slave bond_slave_1): Releasing backup interface [ 488.261305][ T8792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1132'. [ 500.622254][ T8897] FAULT_INJECTION: forcing a failure. [ 500.622254][ T8897] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 500.848561][ T8897] CPU: 1 PID: 8897 Comm: syz.0.1162 Not tainted syzkaller #0 [ 500.855994][ T8897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 500.866061][ T8897] Call Trace: [ 500.869347][ T8897] [ 500.872300][ T8897] dump_stack_lvl+0x188/0x24e [ 500.877004][ T8897] ? show_regs_print_info+0x12/0x12 [ 500.882214][ T8897] ? load_image+0x410/0x410 [ 500.886731][ T8897] ? __lock_acquire+0x7ea0/0x7ea0 [ 500.891777][ T8897] should_fail_ex+0x390/0x4c0 [ 500.896476][ T8897] prepare_alloc_pages+0x1e1/0x5b0 [ 500.901621][ T8897] __alloc_pages+0x130/0x4f0 [ 500.906236][ T8897] ? zone_statistics+0x170/0x170 [ 500.911195][ T8897] ? _raw_spin_lock_irqsave+0x100/0x100 [ 500.916756][ T8897] ? copy_page_from_iter+0xe4/0x100 [ 500.921970][ T8897] pipe_write+0x616/0x1ae0 [ 500.926423][ T8897] ? pipe_read+0x12d0/0x12d0 [ 500.931026][ T8897] ? end_current_label_crit_section+0x14b/0x170 [ 500.937290][ T8897] ? common_file_perm+0x171/0x1c0 [ 500.942344][ T8897] vfs_write+0x482/0x9a0 [ 500.946613][ T8897] ? file_end_write+0x250/0x250 [ 500.951488][ T8897] ? __fget_files+0x3fc/0x460 [ 500.956195][ T8897] ? __fdget_pos+0x1d4/0x360 [ 500.960798][ T8897] ? ksys_write+0x70/0x260 [ 500.965231][ T8897] ksys_write+0x14d/0x260 [ 500.969578][ T8897] ? __ia32_sys_read+0x80/0x80 [ 500.974365][ T8897] ? lockdep_hardirqs_on+0x94/0x140 [ 500.979586][ T8897] do_syscall_64+0x4c/0xa0 [ 500.984010][ T8897] ? clear_bhb_loop+0x60/0xb0 [ 500.988699][ T8897] ? clear_bhb_loop+0x60/0xb0 [ 500.993388][ T8897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 500.999295][ T8897] RIP: 0033:0x7fc1edf9e559 [ 501.003721][ T8897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.023342][ T8897] RSP: 002b:00007fc1eef53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 501.031769][ T8897] RAX: ffffffffffffffda RBX: 00007fc1ee225fa0 RCX: 00007fc1edf9e559 [ 501.039751][ T8897] RDX: 00000000200002e6 RSI: 00002000000012c0 RDI: 0000000000000004 [ 501.047737][ T8897] RBP: 00007fc1ee035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 501.055725][ T8897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.063707][ T8897] R13: 00007fc1ee226038 R14: 00007fc1ee225fa0 R15: 00007ffcd70c3cd8 [ 501.071708][ T8897] [ 504.385336][ T8930] rxe_eth0 speed is unknown, defaulting to 1000 [ 505.268591][ T8949] FAULT_INJECTION: forcing a failure. [ 505.268591][ T8949] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 505.317651][ T8949] CPU: 0 PID: 8949 Comm: syz.5.1177 Not tainted syzkaller #0 [ 505.325080][ T8949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 505.335151][ T8949] Call Trace: [ 505.338448][ T8949] [ 505.341391][ T8949] dump_stack_lvl+0x188/0x24e [ 505.346094][ T8949] ? show_regs_print_info+0x12/0x12 [ 505.351311][ T8949] ? load_image+0x410/0x410 [ 505.355828][ T8949] ? __lock_acquire+0x7ea0/0x7ea0 [ 505.360880][ T8949] should_fail_ex+0x390/0x4c0 [ 505.365583][ T8949] prepare_alloc_pages+0x1e1/0x5b0 [ 505.370726][ T8949] __alloc_pages+0x130/0x4f0 [ 505.375349][ T8949] ? zone_statistics+0x170/0x170 [ 505.380313][ T8949] ? _raw_spin_lock_irqsave+0x100/0x100 [ 505.385880][ T8949] ? copy_page_from_iter+0xe4/0x100 [ 505.391101][ T8949] pipe_write+0x616/0x1ae0 [ 505.395553][ T8949] ? pipe_read+0x12d0/0x12d0 [ 505.400156][ T8949] ? end_current_label_crit_section+0x14b/0x170 [ 505.406425][ T8949] ? common_file_perm+0x171/0x1c0 [ 505.411483][ T8949] vfs_write+0x482/0x9a0 [ 505.415752][ T8949] ? file_end_write+0x250/0x250 [ 505.420631][ T8949] ? __fget_files+0x3fc/0x460 [ 505.425335][ T8949] ? __fdget_pos+0x1d4/0x360 [ 505.429945][ T8949] ? ksys_write+0x70/0x260 [ 505.434386][ T8949] ksys_write+0x14d/0x260 [ 505.438740][ T8949] ? __ia32_sys_read+0x80/0x80 [ 505.443534][ T8949] ? lockdep_hardirqs_on+0x94/0x140 [ 505.448763][ T8949] do_syscall_64+0x4c/0xa0 [ 505.453206][ T8949] ? clear_bhb_loop+0x60/0xb0 [ 505.457902][ T8949] ? clear_bhb_loop+0x60/0xb0 [ 505.462603][ T8949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 505.468515][ T8949] RIP: 0033:0x7ff0d619e559 [ 505.472944][ T8949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.492562][ T8949] RSP: 002b:00007ff0d7105028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 505.500978][ T8949] RAX: ffffffffffffffda RBX: 00007ff0d6425fa0 RCX: 00007ff0d619e559 [ 505.508946][ T8949] RDX: 00000000200002e6 RSI: 00002000000012c0 RDI: 0000000000000004 [ 505.516912][ T8949] RBP: 00007ff0d6235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 505.524877][ T8949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.532841][ T8949] R13: 00007ff0d6426038 R14: 00007ff0d6425fa0 R15: 00007ffe31962328 [ 505.540829][ T8949] [ 505.574916][ T8939] rxe_eth0 speed is unknown, defaulting to 1000 [ 514.151370][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 515.725985][ T26] audit: type=1326 audit(1792286385.614:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9048 comm="syz.0.1205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1edf9e559 code=0x7ffc0000 [ 515.787088][ T26] audit: type=1326 audit(1792286385.614:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9048 comm="syz.0.1205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1edf9e559 code=0x7ffc0000 [ 515.820302][ T26] audit: type=1326 audit(1792286385.651:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9048 comm="syz.0.1205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1edf9e559 code=0x7ffc0000 [ 516.066455][ T26] audit: type=1326 audit(1792286385.651:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9048 comm="syz.0.1205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1edf9e559 code=0x7ffc0000 [ 516.679360][ T26] audit: type=1326 audit(1792286385.651:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9048 comm="syz.0.1205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc1edf9e559 code=0x7ffc0000 [ 516.905753][ T26] audit: type=1326 audit(1792286385.651:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9048 comm="syz.0.1205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1edf9e559 code=0x7ffc0000 [ 517.470451][ T26] audit: type=1326 audit(1792286385.651:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9048 comm="syz.0.1205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1edf9e559 code=0x7ffc0000 [ 517.551929][ T26] audit: type=1326 audit(1792286385.651:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9048 comm="syz.0.1205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1edf9e559 code=0x7ffc0000 [ 517.576046][ T26] audit: type=1326 audit(1792286385.651:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9048 comm="syz.0.1205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1edf9e559 code=0x7ffc0000 [ 517.633600][ T26] audit: type=1326 audit(1792286385.651:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9048 comm="syz.0.1205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc1edf9e559 code=0x7ffc0000 [ 517.770335][ T4395] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 518.658828][ T4395] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.708793][ T4395] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 518.739813][ T4395] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.825528][ T4395] usb 3-1: config 0 descriptor?? [ 519.563227][ T4395] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 519.605444][ T4395] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0004/input/input11 [ 519.750736][ T4395] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 519.955453][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 519.966855][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 520.186659][ T6776] usb 3-1: USB disconnect, device number 8 [ 520.420768][ T9111] fido_id[9111]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 526.049437][ T9177] kvm: pic: non byte write [ 528.748298][ T9216] capability: warning: `syz.4.1252' uses 32-bit capabilities (legacy support in use) [ 533.578184][ T9269] overlayfs: unrecognized mount option "/" or missing value [ 535.431020][ T9298] xt_l2tp: invalid flags combination: 8 [ 536.994120][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1281'. [ 537.024528][ T9310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1281'. [ 537.033851][ T9310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1281'. [ 537.471214][ T9317] rxe_eth0 speed is unknown, defaulting to 1000 [ 542.532560][ T9359] overlayfs: overlapping lowerdir path [ 545.356781][ T9377] rxe_eth0 speed is unknown, defaulting to 1000 [ 546.181514][ T9399] device syz_tun entered promiscuous mode [ 546.188820][ T9399] device macsec1 entered promiscuous mode [ 546.197172][ T9399] device syz_tun left promiscuous mode [ 549.887088][ T9427] rxe_eth0 speed is unknown, defaulting to 1000 [ 555.459454][ T4288] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 560.700913][ T9537] binder: 9532:9537 ioctl c0306201 0 returned -14 [ 568.932356][ T9631] netlink: 'syz.4.1383': attribute type 1 has an invalid length. [ 569.994343][ T9644] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1385'. [ 575.718166][ T9694] netlink: 'syz.0.1403': attribute type 1 has an invalid length. [ 575.784258][ T9694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.840827][ T9694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.013316][ T9694] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 577.677662][ T9714] rxe_eth0 speed is unknown, defaulting to 1000 [ 578.717735][ T9741] netlink: 'syz.4.1412': attribute type 11 has an invalid length. [ 578.725591][ T9741] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1412'. [ 578.795989][ T9742] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1413'. [ 580.876918][ T9763] netlink: 'syz.1.1419': attribute type 9 has an invalid length. [ 586.046024][ T4348] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 586.580387][ T9810] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1432'. [ 586.627531][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 586.652770][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 587.525401][ T4348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.598709][ T4348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.669281][ T4348] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 1.00 [ 587.733170][ T4348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.747071][ T9809] rxe_eth0 speed is unknown, defaulting to 1000 [ 587.786464][ T4348] usb 3-1: config 0 descriptor?? [ 588.288033][ T4348] hid (null): global environment stack underflow [ 588.297250][ T4348] wacom 0003:056A:0331.0005: global environment stack underflow [ 588.362652][ T4348] wacom 0003:056A:0331.0005: item 0 4 1 11 parsing failed [ 588.405136][ T9815] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 64 (only 8 groups) [ 588.432320][ T4348] wacom 0003:056A:0331.0005: parse failed [ 588.461186][ T4348] wacom: probe of 0003:056A:0331.0005 failed with error -22 [ 589.983346][ T4348] usb 3-1: USB disconnect, device number 9 [ 595.830982][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1463'. [ 596.510256][ T9915] device hsr_slave_1 left promiscuous mode [ 598.843768][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1470'. [ 600.294459][ T9962] bond0: (slave bond_slave_1): Releasing backup interface [ 604.393355][T10002] xt_l2tp: invalid flags combination: 8 [ 605.454733][T10005] binder: 9997:10005 ioctl c0306201 0 returned -14 [ 607.159504][T10028] rxe_eth0 speed is unknown, defaulting to 1000 [ 607.449765][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 607.449794][ T26] audit: type=1326 audit(1792286470.253:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.5.1490" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d619e559 code=0x7ffc0000 [ 607.566328][ T26] audit: type=1326 audit(1792286470.281:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.5.1490" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d619e559 code=0x7ffc0000 [ 607.811891][ T26] audit: type=1326 audit(1792286470.281:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.5.1490" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d619e559 code=0x7ffc0000 [ 608.553169][ T26] audit: type=1326 audit(1792286470.281:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.5.1490" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d619e559 code=0x7ffc0000 [ 608.815923][ T26] audit: type=1326 audit(1792286470.281:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.5.1490" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7ff0d619e559 code=0x7ffc0000 [ 608.898424][ T26] audit: type=1326 audit(1792286470.281:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.5.1490" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d619e559 code=0x7ffc0000 [ 608.985633][ T26] audit: type=1326 audit(1792286470.281:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.5.1490" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d619e559 code=0x7ffc0000 [ 609.072357][ T26] audit: type=1326 audit(1792286470.290:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.5.1490" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff0d619e559 code=0x7ffc0000 [ 609.159337][ T26] audit: type=1326 audit(1792286470.299:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.5.1490" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff0d619e559 code=0x7ffc0000 [ 609.418557][T10055] xt_l2tp: invalid flags combination: 8 [ 611.911183][T10081] binder: 10075:10081 ioctl c0306201 0 returned -14 [ 613.741737][T10094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1510'. [ 616.027657][T10112] rxe_eth0 speed is unknown, defaulting to 1000 [ 616.125289][T10116] xt_l2tp: invalid flags combination: 8 [ 618.294573][T10143] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1524'. [ 618.350987][ T4351] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 618.633373][ T4351] usb 3-1: Using ep0 maxpacket: 8 [ 618.706474][ T4351] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 618.862465][ T4351] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 618.886933][ T4351] usb 3-1: config 0 interface 0 has no altsetting 0 [ 618.894244][ T4351] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 618.903429][ T4351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.940356][ T4351] usb 3-1: config 0 descriptor?? [ 620.075867][ T4351] input: HID 05ac:0265 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:0265.0006/input/input12 [ 620.955701][ T4351] magicmouse 0003:05AC:0265.0006: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 05ac:0265] on usb-dummy_hcd.2-1/input0 [ 621.144082][ T4351] usb 3-1: USB disconnect, device number 10 [ 622.028830][T10192] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1537'. [ 622.498068][T10180] fido_id[10180]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 622.744022][T10198] Dead loop on virtual device ip6_vti0, fix it urgently! [ 626.314224][T10240] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1548'. [ 633.508538][T10315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.554167][T10315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.298773][T10360] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1593'. [ 638.331444][T10360] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1593'. [ 638.455582][T10360] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1593'. [ 638.464580][T10360] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1593'. [ 638.525724][T10360] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1593'. [ 638.534826][T10360] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1593'. [ 639.832894][T10360] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1593'. [ 639.841900][T10360] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1593'. [ 640.068930][T10360] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1593'. [ 640.088274][T10360] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1593'. [ 640.350492][T10360] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.358108][T10360] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.400876][ T4347] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 648.058070][T10474] __nla_validate_parse: 17 callbacks suppressed [ 648.058157][T10474] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1628'. [ 648.642770][ T4347] usb 6-1: config 127 has an invalid interface number: 57 but max is 0 [ 648.651077][ T4347] usb 6-1: config 127 has no interface number 0 [ 648.678781][ T4347] usb 6-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 648.713690][ T4347] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 648.769502][ T4347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.810328][ T4347] usb 6-1: Product: syz [ 648.843128][ T4347] usb 6-1: Manufacturer: syz [ 648.847901][ T4347] usb 6-1: SerialNumber: syz [ 648.873796][T10461] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 649.347825][T10461] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 649.585496][ T4347] asix 6-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random [ 649.817398][ T4347] asix 6-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 649.845468][ T4347] asix 6-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 649.863821][ T4347] asix: probe of 6-1:127.57 failed with error -71 [ 651.687068][ T4347] usb 6-1: USB disconnect, device number 6 [ 653.089685][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 653.096081][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 658.643110][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 662.547292][T10641] tmpfs: Unknown parameter 'rootcontext' [ 663.146874][T10643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1681'. [ 664.204681][T10661] Invalid ELF header magic: != ELF [ 665.256553][T10671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.280644][T10671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.210457][T10694] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1694'. [ 673.918456][T10736] ip_tables: iptables: counters copy to user failed while replacing table [ 673.964946][T10740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1713'. [ 675.946849][T10775] overlayfs: './file2' not a directory [ 681.979031][T10827] xt_l2tp: invalid flags combination: 8 [ 683.767691][ T2183] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 683.986919][ T2183] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.006064][ T2183] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.035141][ T2183] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 684.050001][ T2183] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.080140][ T2183] usb 6-1: config 0 descriptor?? [ 685.054470][ T2183] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 685.095388][ T2183] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 685.138327][T10852] device syzkaller0 entered promiscuous mode [ 685.173732][ T2183] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 685.209867][ T2183] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 685.261699][ T2183] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 685.304766][ T2183] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 685.354289][ T2183] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 685.415875][ T2183] hid-thrustmaster 0003:044F:B65D.0007: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 685.498138][ T2183] hid-thrustmaster 0003:044F:B65D.0007: Wrong number of endpoints? [ 685.546999][ C1] hid-thrustmaster 0003:044F:B65D.0007: Unknown wheel's model id 0x0, unable to proceed further with wheel init [ 685.844011][ T4347] usb 6-1: USB disconnect, device number 7 [ 686.023549][T10864] fido_id[10864]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 686.248901][T10869] xt_l2tp: invalid flags combination: 8 [ 688.682374][T10892] xt_hashlimit: size too large, truncated to 1048576 [ 688.918300][T10895] ip_tables: iptables: counters copy to user failed while replacing table [ 690.518150][T10904] xt_l2tp: invalid flags combination: 8 [ 693.241635][T10908] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 693.305302][T10908] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 693.336817][T10908] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 693.391859][T10908] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 693.431719][T10908] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 695.019216][ T4288] Bluetooth: hci0: command 0x0c1a tx timeout [ 695.532052][ T4288] Bluetooth: hci1: command 0x0c1a tx timeout [ 695.570110][ T4288] Bluetooth: hci5: command 0x0c1a tx timeout [ 695.576215][ T4288] Bluetooth: hci3: command 0x0c1a tx timeout [ 695.582622][ T4279] Bluetooth: hci2: command 0x0c1a tx timeout [ 695.917936][T10946] xt_l2tp: invalid flags combination: 8 [ 696.859857][T10951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.889460][T10951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.930843][T10977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1788'. [ 699.050976][T10952] udevd[10952]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 699.117427][T10985] xt_l2tp: invalid flags combination: 8 [ 700.731947][ T6776] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 700.975569][ T6776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 701.068673][ T6776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 701.192988][ T6776] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 701.344478][ T6776] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 701.451221][ T6776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.499416][ T6776] usb 3-1: config 0 descriptor?? [ 701.657635][T10999] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 702.696733][ T6776] gt683r_led 0003:1770:FF00.0008: unknown main item tag 0x0 [ 702.706076][ T6776] gt683r_led 0003:1770:FF00.0008: unknown main item tag 0x0 [ 702.713493][ T6776] gt683r_led 0003:1770:FF00.0008: unknown main item tag 0x0 [ 702.720842][ T6776] gt683r_led 0003:1770:FF00.0008: unknown main item tag 0x0 [ 702.728452][ T6776] gt683r_led 0003:1770:FF00.0008: unknown main item tag 0x0 [ 702.736047][ T6776] gt683r_led 0003:1770:FF00.0008: unknown main item tag 0x0 [ 702.743373][ T6776] gt683r_led 0003:1770:FF00.0008: unknown main item tag 0x0 [ 702.751174][ T6776] gt683r_led 0003:1770:FF00.0008: unknown main item tag 0x0 [ 702.952899][ T6776] gt683r_led 0003:1770:FF00.0008: unknown main item tag 0x0 [ 703.385194][ T6776] gt683r_led 0003:1770:FF00.0008: unknown main item tag 0x0 [ 703.577550][ T6776] gt683r_led 0003:1770:FF00.0008: unknown main item tag 0x0 [ 703.586437][ T6776] gt683r_led 0003:1770:FF00.0008: unknown main item tag 0x0 [ 703.599104][ T6776] gt683r_led 0003:1770:FF00.0008: unknown main item tag 0x0 [ 703.606790][ T6776] gt683r_led 0003:1770:FF00.0008: unbalanced collection at end of report description [ 703.725317][ T6776] gt683r_led 0003:1770:FF00.0008: hid parsing failed [ 703.732169][ T6776] gt683r_led: probe of 0003:1770:FF00.0008 failed with error -22 [ 703.764760][T11040] xt_l2tp: invalid flags combination: 8 [ 703.768948][ T6776] usb 3-1: USB disconnect, device number 11 [ 708.446645][T11074] rxe_eth0 speed is unknown, defaulting to 1000 [ 708.713194][T11089] xt_l2tp: invalid flags combination: 8 [ 710.048225][T11101] rxe_eth0 speed is unknown, defaulting to 1000 [ 711.829620][T11132] xt_l2tp: invalid flags combination: 8 [ 713.636910][T11149] Bluetooth: MGMT ver 1.22 [ 713.889659][T11138] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 713.925903][T11138] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 713.941289][T11138] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 713.950339][T11138] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 713.956889][T11138] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 714.180327][T11165] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 714.209391][T11167] xt_l2tp: invalid flags combination: 8 [ 715.251533][ T4288] Bluetooth: hci0: command 0x0c1a tx timeout [ 716.118388][ T4286] Bluetooth: hci3: command 0x0c1a tx timeout [ 716.118610][ T4288] Bluetooth: hci2: command 0x0c1a tx timeout [ 716.124430][ T4286] Bluetooth: hci1: command 0x0c1a tx timeout [ 717.542866][ T4279] Bluetooth: hci5: command 0x0c1a tx timeout [ 719.920659][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 719.927024][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 720.090627][T11211] xt_l2tp: invalid flags combination: 8 [ 722.942960][T11256] xt_l2tp: invalid flags combination: 8 [ 725.444245][T11283] tipc: Started in network mode [ 725.449410][T11283] tipc: Node identity 7f000001, cluster identity 4711 [ 725.465177][T11283] tipc: Enabling of bearer rejected, failed to enable media [ 726.609113][T11302] xt_l2tp: invalid flags combination: 8 [ 730.525462][T11346] xt_l2tp: invalid flags combination: 8 [ 731.780531][T11349] rxe_eth0 speed is unknown, defaulting to 1000 [ 736.019457][ T4351] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 736.885406][ T4351] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 736.903939][ T4351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.924910][ T4351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.935199][ T4351] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 736.958119][ T4351] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 736.998905][ T4351] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 737.017686][ T4351] usb 6-1: Manufacturer: syz [ 737.032662][ T4351] usb 6-1: config 0 descriptor?? [ 737.551778][ T4351] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 737.571480][ T4351] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 737.602261][ T4351] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 737.650074][T11434] udevd[11434]: open /dev/null failed: No such file or directory [ 739.845877][ T4384] usb 6-1: USB disconnect, device number 8 [ 742.738086][T11487] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1945'. [ 742.743027][T11488] syz.1.1947[11488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 742.750628][T11488] syz.1.1947[11488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 742.757435][T11487] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1945'. [ 742.784759][T11487] netlink: 'syz.4.1945': attribute type 6 has an invalid length. [ 742.794077][T11487] netlink: 'syz.4.1945': attribute type 5 has an invalid length. [ 742.802551][T11487] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1945'. [ 744.903385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 744.925050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 744.935891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 744.946732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 744.957564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 744.968401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 744.979241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 744.990078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 745.846271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 745.857099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 746.022576][T11516] tipc: Started in network mode [ 746.045559][T11516] tipc: Node identity 7f000001, cluster identity 4711 [ 746.101746][T11516] tipc: Enabling of bearer rejected, failed to enable media [ 746.253265][T11516] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 746.935972][T11516] tipc: Enabled bearer , priority 10 [ 748.155851][ T14] tipc: Node number set to 2130706433 [ 750.328506][T11560] xt_l2tp: invalid flags combination: 8 [ 751.580481][T11571] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1972'. [ 751.589570][T11571] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1972'. [ 751.713067][T11571] netlink: 'syz.2.1972': attribute type 6 has an invalid length. [ 752.010323][T11571] netlink: 'syz.2.1972': attribute type 5 has an invalid length. [ 752.020151][T11571] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1972'. [ 752.320602][T11583] rxe_eth0 speed is unknown, defaulting to 1000 [ 752.482523][ T4347] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 752.815610][ T4347] usb 3-1: Using ep0 maxpacket: 16 [ 752.976415][ T4347] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 753.010242][ T4347] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 754.093495][ T4347] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 754.114006][ T4347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.123522][ T4347] usb 3-1: Product: syz [ 754.127964][ T4347] usb 3-1: Manufacturer: syz [ 754.132854][ T4347] usb 3-1: SerialNumber: syz [ 754.547091][ T4347] usb 3-1: 0:2 : does not exist [ 754.556968][ T4347] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 754.588275][ T4347] usb 3-1: USB disconnect, device number 12 [ 755.807467][T11582] udevd[11582]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 760.857383][T11653] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1992'. [ 760.874626][T11653] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1992'. [ 760.905743][T11653] netlink: 'syz.0.1992': attribute type 6 has an invalid length. [ 760.927733][T11653] netlink: 'syz.0.1992': attribute type 5 has an invalid length. [ 760.947503][T11653] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1992'. [ 761.046627][T11654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.056435][T11654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.814842][T11678] Cannot find add_set index 6 as target [ 767.259574][T11697] udevd[11697]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 767.308661][T11697] udevd[11697]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 767.388364][T11697] udevd[11697]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 768.269522][T11708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.296795][T11708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.367899][T11713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2009'. [ 768.584073][ T4382] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 769.312042][ T4382] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 769.339096][ T4382] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.364279][ T4382] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 769.381570][ T4382] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 769.434246][ T4382] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 769.459264][ T4382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.557866][ T4382] usb 3-1: Product: syz [ 769.562494][ T4382] usb 3-1: Manufacturer: syz [ 769.567115][ T4382] usb 3-1: SerialNumber: syz [ 770.917317][ T4382] usb 3-1: USB disconnect, device number 13 [ 772.955443][T11745] udevd[11745]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 774.224309][T11767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2026'. [ 777.496536][ T26] audit: type=1326 audit(1792286627.149:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11792 comm="syz.4.2033" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbeb239e559 code=0x0 [ 780.749242][T11810] Set syz1 is full, maxelem 2076 reached [ 783.847970][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2055'. [ 784.927501][ T4288] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 784.959884][ T26] audit: type=1326 audit(1792286634.023:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11867 comm="syz.5.2058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff0d619e559 code=0x0 [ 785.264968][T11877] FAULT_INJECTION: forcing a failure. [ 785.264968][T11877] name failslab, interval 1, probability 0, space 0, times 0 [ 785.324059][T11877] CPU: 0 PID: 11877 Comm: syz.0.2062 Not tainted syzkaller #0 [ 785.331578][T11877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 785.341652][T11877] Call Trace: [ 785.344940][T11877] [ 785.347883][T11877] dump_stack_lvl+0x188/0x24e [ 785.352599][T11877] ? show_regs_print_info+0x12/0x12 [ 785.357818][T11877] ? load_image+0x410/0x410 [ 785.362376][T11877] ? __might_sleep+0xd0/0xd0 [ 785.366989][T11877] ? __lock_acquire+0x7ea0/0x7ea0 [ 785.372044][T11877] should_fail_ex+0x390/0x4c0 [ 785.376748][T11877] should_failslab+0x5/0x20 [ 785.381264][T11877] slab_pre_alloc_hook+0x59/0x300 [ 785.386314][T11877] kmem_cache_alloc+0x56/0x2f0 [ 785.391095][T11877] ? mas_alloc_nodes+0x2ec/0x880 [ 785.396056][T11877] mas_alloc_nodes+0x2ec/0x880 [ 785.400842][T11877] mas_preallocate+0x162/0x3b0 [ 785.405629][T11877] __vma_adjust+0x2ff/0x1d00 [ 785.410252][T11877] ? validate_mm+0x2e0/0x2e0 [ 785.414861][T11877] ? up_write+0x1b6/0x410 [ 785.419218][T11877] ? anon_vma_clone+0x475/0x4c0 [ 785.424096][T11877] __split_vma+0x3a2/0x4f0 [ 785.428536][T11877] do_mas_align_munmap+0x7b8/0x12d0 [ 785.433775][T11877] ? verify_lock_unused+0x140/0x140 [ 785.439005][T11877] ? do_mas_munmap+0x2b0/0x2b0 [ 785.443803][T11877] ? mtree_range_walk+0x664/0x780 [ 785.448871][T11877] ? mas_walk+0x15f/0x180 [ 785.453224][T11877] ? mas_find+0x1ba/0x220 [ 785.457570][T11877] do_mas_munmap+0x240/0x2b0 [ 785.462202][T11877] do_munmap+0xeb/0x140 [ 785.466379][T11877] ? mtree_load+0x100/0xa70 [ 785.470899][T11877] ? do_mas_align_munmap+0x12d0/0x12d0 [ 785.476380][T11877] ? mtree_load+0x91f/0xa70 [ 785.480906][T11877] ? mas_alloc_nodes+0x880/0x880 [ 785.485861][T11877] ? rwsem_write_trylock+0x135/0x1c0 [ 785.491169][T11877] mremap_to+0x310/0x5c0 [ 785.495443][T11877] __se_sys_mremap+0x691/0x1120 [ 785.500323][T11877] ? __ia32_sys_get_robust_list+0x100/0x100 [ 785.506323][T11877] ? fput+0x150/0x1a0 [ 785.510365][T11877] ? __x64_sys_mremap+0xc0/0xc0 [ 785.515242][T11877] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 785.521248][T11877] ? lock_chain_count+0x20/0x20 [ 785.526131][T11877] ? lockdep_hardirqs_on+0x94/0x140 [ 785.531356][T11877] ? __x64_sys_mremap+0x1c/0xc0 [ 785.536234][T11877] do_syscall_64+0x4c/0xa0 [ 785.540670][T11877] ? clear_bhb_loop+0x60/0xb0 [ 785.545365][T11877] ? clear_bhb_loop+0x60/0xb0 [ 785.550063][T11877] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 785.555979][T11877] RIP: 0033:0x7fc1edf9e559 [ 785.560412][T11877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.580032][T11877] RSP: 002b:00007fc1eef53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 785.588465][T11877] RAX: ffffffffffffffda RBX: 00007fc1ee225fa0 RCX: 00007fc1edf9e559 [ 785.596454][T11877] RDX: 0000000000400000 RSI: 0000000000002000 RDI: 0000200000097000 [ 785.604440][T11877] RBP: 00007fc1ee035ab8 R08: 0000200000bff000 R09: 0000000000000000 [ 785.612435][T11877] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 785.620418][T11877] R13: 00007fc1ee226038 R14: 00007fc1ee225fa0 R15: 00007ffcd70c3cd8 [ 785.628421][T11877] [ 785.918940][ T4351] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 786.413954][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 786.456239][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 787.162433][ T4351] usb 3-1: not running at top speed; connect to a high speed hub [ 787.179383][ T4351] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 787.189553][ T4351] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 787.199236][ T4351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.227364][ T4351] cyberjack 3-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 787.437403][ T4351] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 788.234096][ T4351] usb 3-1: USB disconnect, device number 14 [ 788.315996][ T4351] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 788.641283][ T4351] cyberjack 3-1:1.0: device disconnected [ 788.729364][T11919] rxe_eth0 speed is unknown, defaulting to 1000 [ 795.451416][ T4351] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 795.855723][ T4351] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 795.866125][ T4351] usb 3-1: config 0 interface 0 has no altsetting 0 [ 796.048325][ T4351] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 796.060952][ T4351] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 796.086526][ T4351] usb 3-1: Product: syz [ 796.091376][ T4351] usb 3-1: Manufacturer: syz [ 796.095992][ T4351] usb 3-1: SerialNumber: syz [ 796.430078][ T4351] usb 3-1: config 0 descriptor?? [ 796.687656][ T4351] usb 3-1: selecting invalid altsetting 0 [ 796.924495][ T4351] usb 3-1: USB disconnect, device number 15 [ 797.018457][T12021] netlink: 'syz.1.2100': attribute type 1 has an invalid length. [ 797.085829][T12023] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 797.111324][T12023] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 797.120362][T12023] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 797.129159][T12023] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 797.161503][T12023] bond1: (slave geneve2): making interface the new active one [ 797.172588][T12023] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 797.181357][T12021] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2100'. [ 797.192313][T12021] 8021q: adding VLAN 0 to HW filter on device bond1 [ 797.319623][T12016] udevd[12016]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 797.324185][T12023] syz.1.2100 (12023) used greatest stack depth: 18960 bytes left [ 802.822527][T12074] FAULT_INJECTION: forcing a failure. [ 802.822527][T12074] name failslab, interval 1, probability 0, space 0, times 0 [ 802.936739][T12074] CPU: 1 PID: 12074 Comm: syz.0.2113 Not tainted syzkaller #0 [ 802.944239][T12074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 802.954302][T12074] Call Trace: [ 802.957588][T12074] [ 802.960522][T12074] dump_stack_lvl+0x188/0x24e [ 802.965223][T12074] ? show_regs_print_info+0x12/0x12 [ 802.970444][T12074] ? load_image+0x410/0x410 [ 802.974961][T12074] ? __might_sleep+0xd0/0xd0 [ 802.979581][T12074] ? __lock_acquire+0x7ea0/0x7ea0 [ 802.984641][T12074] should_fail_ex+0x390/0x4c0 [ 802.989348][T12074] should_failslab+0x5/0x20 [ 802.993862][T12074] slab_pre_alloc_hook+0x59/0x300 [ 802.998911][T12074] ? __request_module+0x338/0xa00 [ 803.003961][T12074] __kmem_cache_alloc_node+0x4f/0x270 [ 803.009355][T12074] ? __request_module+0x338/0xa00 [ 803.014402][T12074] __kmalloc_node_track_caller+0xa0/0x240 [ 803.020154][T12074] kstrdup+0x37/0x70 [ 803.024072][T12074] __request_module+0x338/0xa00 [ 803.028955][T12074] ? copy_regset_to_user+0x1f0/0x1f0 [ 803.034274][T12074] ? up_read+0x20/0x20 [ 803.038378][T12074] crypto_alg_mod_lookup+0x96/0x570 [ 803.043617][T12074] crypto_alloc_tfm_node+0x14e/0x360 [ 803.048925][T12074] ? memcpy+0x3c/0x60 [ 803.052926][T12074] tls_set_sw_offload+0xaee/0x12e0 [ 803.058068][T12074] tls_setsockopt+0xe0f/0x14c0 [ 803.062864][T12074] ? build_proto_ops+0x200/0x200 [ 803.067822][T12074] ? aa_sock_opt_perm+0x74/0x100 [ 803.072795][T12074] ? sock_common_setsockopt+0x32/0xb0 [ 803.078180][T12074] ? sock_common_recvmsg+0x190/0x190 [ 803.083484][T12074] __sys_setsockopt+0x2bf/0x3d0 [ 803.088357][T12074] __x64_sys_setsockopt+0xb1/0xc0 [ 803.093404][T12074] do_syscall_64+0x4c/0xa0 [ 803.097847][T12074] ? clear_bhb_loop+0x60/0xb0 [ 803.102544][T12074] ? clear_bhb_loop+0x60/0xb0 [ 803.107239][T12074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 803.113149][T12074] RIP: 0033:0x7fc1edf9e559 [ 803.117578][T12074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.137201][T12074] RSP: 002b:00007fc1eef53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 803.145634][T12074] RAX: ffffffffffffffda RBX: 00007fc1ee225fa0 RCX: 00007fc1edf9e559 [ 803.153619][T12074] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003 [ 803.161606][T12074] RBP: 00007fc1ee035ab8 R08: 0000000000000028 R09: 0000000000000000 [ 803.169591][T12074] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 803.177575][T12074] R13: 00007fc1ee226038 R14: 00007fc1ee225fa0 R15: 00007ffcd70c3cd8 [ 803.182996][ T4288] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 803.185581][T12074] [ 804.619512][ T4384] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 804.793595][ T4384] usb 3-1: device descriptor read/64, error -71 [ 805.034289][T12105] xt_l2tp: invalid flags combination: 8 [ 806.646140][ T4384] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 809.547079][T12151] xt_l2tp: invalid flags combination: 8 [ 810.953087][ T26] audit: type=1800 audit(1792286658.023:177): pid=12172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2140" name="idVendor" dev="configfs" ino=60677 res=0 errno=0 [ 811.774049][ T26] audit: type=1800 audit(1792286658.023:178): pid=12172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2140" name="idProduct" dev="configfs" ino=60678 res=0 errno=0 [ 811.834506][ T26] audit: type=1800 audit(1792286658.023:179): pid=12172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2140" name="serialnumber" dev="configfs" ino=60680 res=0 errno=0 [ 811.890300][ T26] audit: type=1800 audit(1792286658.041:180): pid=12172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2140" name="report_length" dev="configfs" ino=60683 res=0 errno=0 [ 811.973116][ T26] audit: type=1800 audit(1792286658.041:181): pid=12172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2140" name="report_desc" dev="configfs" ino=60684 res=0 errno=0 [ 812.027660][ T26] audit: type=1800 audit(1792286658.752:182): pid=12172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2140" name="UDC" dev="configfs" ino=59723 res=0 errno=0 [ 813.386859][T12202] netlink: 'syz.2.2150': attribute type 1 has an invalid length. [ 813.708202][T12208] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 813.829228][T12208] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 813.884153][T12208] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 814.300779][T12208] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 814.365012][T12208] bond1: (slave geneve2): making interface the new active one [ 814.373936][T12208] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 814.438640][T12221] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2155'. [ 814.463194][T12202] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2150'. [ 814.494905][T12202] 8021q: adding VLAN 0 to HW filter on device bond1 [ 816.798926][T12263] xt_l2tp: invalid flags combination: 8 [ 823.278166][T12319] xt_l2tp: invalid flags combination: 8 [ 830.595432][T12382] xt_l2tp: invalid flags combination: 8 [ 831.538247][T12383] FAULT_INJECTION: forcing a failure. [ 831.538247][T12383] name failslab, interval 1, probability 0, space 0, times 0 [ 831.555155][T12389] netlink: 'syz.5.2204': attribute type 10 has an invalid length. [ 831.594730][T12383] CPU: 0 PID: 12383 Comm: syz.0.2202 Not tainted syzkaller #0 [ 831.602234][T12383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 831.612303][T12383] Call Trace: [ 831.615590][T12383] [ 831.618541][T12383] dump_stack_lvl+0x188/0x24e [ 831.623251][T12383] ? show_regs_print_info+0x12/0x12 [ 831.628473][T12383] ? load_image+0x410/0x410 [ 831.632997][T12383] ? __might_sleep+0xd0/0xd0 [ 831.637608][T12383] ? __lock_acquire+0x7ea0/0x7ea0 [ 831.642663][T12383] should_fail_ex+0x390/0x4c0 [ 831.647377][T12383] should_failslab+0x5/0x20 [ 831.651898][T12383] slab_pre_alloc_hook+0x59/0x300 [ 831.656939][T12383] ? free_zapped_rcu+0x1f0/0x1f0 [ 831.661900][T12383] ? tls_set_sw_offload+0x98f/0x12e0 [ 831.667196][T12383] __kmem_cache_alloc_node+0x4f/0x270 [ 831.672570][T12383] ? tls_set_sw_offload+0x98f/0x12e0 [ 831.677847][T12383] __kmalloc+0xa3/0x240 [ 831.681999][T12383] ? __raw_spin_lock_init+0x41/0x100 [ 831.687276][T12383] tls_set_sw_offload+0x98f/0x12e0 [ 831.692389][T12383] tls_setsockopt+0xe0f/0x14c0 [ 831.697155][T12383] ? build_proto_ops+0x200/0x200 [ 831.702087][T12383] ? aa_sock_opt_perm+0x74/0x100 [ 831.707021][T12383] ? sock_common_setsockopt+0x32/0xb0 [ 831.712384][T12383] ? sock_common_recvmsg+0x190/0x190 [ 831.717664][T12383] __sys_setsockopt+0x2bf/0x3d0 [ 831.722509][T12383] __x64_sys_setsockopt+0xb1/0xc0 [ 831.727529][T12383] do_syscall_64+0x4c/0xa0 [ 831.731943][T12383] ? clear_bhb_loop+0x60/0xb0 [ 831.736619][T12383] ? clear_bhb_loop+0x60/0xb0 [ 831.741289][T12383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 831.747185][T12383] RIP: 0033:0x7fc1edf9e559 [ 831.751610][T12383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.771227][T12383] RSP: 002b:00007fc1eef53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 831.779640][T12383] RAX: ffffffffffffffda RBX: 00007fc1ee225fa0 RCX: 00007fc1edf9e559 [ 831.787604][T12383] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003 [ 831.795563][T12383] RBP: 00007fc1ee035ab8 R08: 0000000000000028 R09: 0000000000000000 [ 831.803524][T12383] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 831.811485][T12383] R13: 00007fc1ee226038 R14: 00007fc1ee225fa0 R15: 00007ffcd70c3cd8 [ 831.819461][T12383] [ 831.950626][T12389] team0: Port device macvlan1 added [ 832.580873][T12392] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 832.625035][T12392] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 832.729208][T12389] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (1073741825) [ 833.719538][T12403] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2204'. [ 836.378299][T12433] xt_l2tp: invalid flags combination: 8 [ 839.949491][T12455] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 843.915668][T12470] xt_l2tp: invalid flags combination: 8 [ 849.102931][T12501] rxe_eth0 speed is unknown, defaulting to 1000 [ 851.282487][T12521] xt_l2tp: invalid flags combination: 8 [ 852.970402][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 852.976742][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 853.239929][T12533] 9pnet_virtio: no channels available for device syz [ 853.633803][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2249'. [ 853.689834][T12544] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.699765][T12544] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.708918][T12544] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.717802][T12544] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.813395][T12544] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 853.922287][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2250'. [ 854.348428][T12561] xt_l2tp: invalid flags combination: 8 [ 854.407282][T12564] rxe_eth0 speed is unknown, defaulting to 1000 [ 857.549755][T12611] 9pnet_virtio: no channels available for device syz [ 858.518664][T12615] xt_l2tp: invalid flags combination: 8 [ 863.389459][T12658] rxe_eth0 speed is unknown, defaulting to 1000 [ 864.803485][T12665] cgroup: fork rejected by pids controller in /syz4 [ 872.260725][T12827] rxe_eth0 speed is unknown, defaulting to 1000 [ 872.362833][T12834] 9pnet_virtio: no channels available for device syz [ 874.293694][T12857] xt_l2tp: invalid flags combination: 8 [ 877.785313][ T2183] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 877.869033][T12895] xt_l2tp: invalid flags combination: 8 [ 878.817266][ T2183] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 878.837836][ T2183] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 878.858350][ T2183] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 878.919269][ T2183] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 878.939627][ T2183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 878.961587][ T2183] usb 3-1: Product: syz [ 878.965767][ T2183] usb 3-1: Manufacturer: syz [ 878.988280][ T2183] usb 3-1: SerialNumber: syz [ 879.266516][ T2183] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 879.626947][ T2183] usb 3-1: USB disconnect, device number 18 [ 880.078316][ T2183] usblp0: removed [ 881.454402][T12931] xt_l2tp: invalid flags combination: 8 [ 881.500682][T12932] rxe_eth0 speed is unknown, defaulting to 1000 [ 883.309985][T12925] rxe_eth0 speed is unknown, defaulting to 1000 [ 886.021753][T12983] xt_l2tp: invalid flags combination: 8 [ 887.172819][T12990] FAULT_INJECTION: forcing a failure. [ 887.172819][T12990] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 887.255421][T12990] CPU: 1 PID: 12990 Comm: syz.2.2355 Not tainted syzkaller #0 [ 887.262939][T12990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 887.273012][T12990] Call Trace: [ 887.276303][T12990] [ 887.279246][T12990] dump_stack_lvl+0x188/0x24e [ 887.283948][T12990] ? show_regs_print_info+0x12/0x12 [ 887.289169][T12990] ? load_image+0x410/0x410 [ 887.293694][T12990] ? __lock_acquire+0x7ea0/0x7ea0 [ 887.298765][T12990] should_fail_ex+0x390/0x4c0 [ 887.303470][T12990] prepare_alloc_pages+0x1e1/0x5b0 [ 887.308607][T12990] __alloc_pages+0x130/0x4f0 [ 887.313219][T12990] ? zone_statistics+0x170/0x170 [ 887.318189][T12990] pte_alloc_one+0x7b/0x310 [ 887.322708][T12990] ? pfn_modify_allowed+0x560/0x560 [ 887.327937][T12990] ? __might_sleep+0xd0/0xd0 [ 887.332539][T12990] ? __lock_acquire+0x7ea0/0x7ea0 [ 887.337582][T12990] ? validate_mm_mt+0x398/0x420 [ 887.342454][T12990] __pte_alloc+0x21/0x150 [ 887.346805][T12990] ? move_page_tables+0x1b2/0x1950 [ 887.351938][T12990] move_page_tables+0x175c/0x1950 [ 887.357001][T12990] ? do_mprotect_pkey+0xba0/0xba0 [ 887.362054][T12990] ? __vm_enough_memory+0x116/0x370 [ 887.367271][T12990] move_vma+0x4eb/0xca0 [ 887.371451][T12990] ? vma_expandable+0xf0/0xf0 [ 887.376140][T12990] ? cap_mmap_addr+0x153/0x2c0 [ 887.380915][T12990] ? bpf_lsm_mmap_addr+0x5/0x10 [ 887.385780][T12990] ? security_mmap_addr+0x6e/0x90 [ 887.390818][T12990] ? get_unmapped_area+0x2f0/0x360 [ 887.395954][T12990] mremap_to+0x513/0x5c0 [ 887.400213][T12990] __se_sys_mremap+0x691/0x1120 [ 887.405087][T12990] ? __ia32_sys_get_robust_list+0x100/0x100 [ 887.410993][T12990] ? __lock_acquire+0x7ea0/0x7ea0 [ 887.416038][T12990] ? __x64_sys_mremap+0xc0/0xc0 [ 887.420912][T12990] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 887.426918][T12990] ? lock_chain_count+0x20/0x20 [ 887.431796][T12990] ? lockdep_hardirqs_on+0x94/0x140 [ 887.437009][T12990] ? __x64_sys_mremap+0x1c/0xc0 [ 887.441886][T12990] do_syscall_64+0x4c/0xa0 [ 887.446317][T12990] ? clear_bhb_loop+0x60/0xb0 [ 887.451004][T12990] ? clear_bhb_loop+0x60/0xb0 [ 887.455698][T12990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 887.461607][T12990] RIP: 0033:0x7fe07059e559 [ 887.466030][T12990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.485648][T12990] RSP: 002b:00007fe0713cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 887.494081][T12990] RAX: ffffffffffffffda RBX: 00007fe070825fa0 RCX: 00007fe07059e559 [ 887.502061][T12990] RDX: 0000000000400000 RSI: 0000000000002000 RDI: 0000200000097000 [ 887.510041][T12990] RBP: 00007fe070635ab8 R08: 0000200000bff000 R09: 0000000000000000 [ 887.518025][T12990] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 887.526008][T12990] R13: 00007fe070826038 R14: 00007fe070825fa0 R15: 00007ffd07f92438 [ 887.534008][T12990] [ 887.786986][T13000] FAULT_INJECTION: forcing a failure. [ 887.786986][T13000] name failslab, interval 1, probability 0, space 0, times 0 [ 887.851026][T13000] CPU: 0 PID: 13000 Comm: syz.5.2358 Not tainted syzkaller #0 [ 887.858540][T13000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 887.868608][T13000] Call Trace: [ 887.871895][T13000] [ 887.874835][T13000] dump_stack_lvl+0x188/0x24e [ 887.879538][T13000] ? show_regs_print_info+0x12/0x12 [ 887.884758][T13000] ? load_image+0x410/0x410 [ 887.889282][T13000] ? __might_sleep+0xd0/0xd0 [ 887.893891][T13000] ? __lock_acquire+0x7ea0/0x7ea0 [ 887.898942][T13000] should_fail_ex+0x390/0x4c0 [ 887.903644][T13000] should_failslab+0x5/0x20 [ 887.908163][T13000] slab_pre_alloc_hook+0x59/0x300 [ 887.913203][T13000] ? free_vm_area+0x50/0x50 [ 887.917723][T13000] ? bpf_prog_alloc_no_stats+0xae/0x3a0 [ 887.923293][T13000] __kmem_cache_alloc_node+0x4f/0x270 [ 887.928684][T13000] ? bpf_prog_alloc_no_stats+0xae/0x3a0 [ 887.934256][T13000] kmalloc_trace+0x26/0xe0 [ 887.938690][T13000] bpf_prog_alloc_no_stats+0xae/0x3a0 [ 887.944089][T13000] bpf_prog_alloc+0x1c/0x1b0 [ 887.948704][T13000] bpf_prog_create_from_user+0xa2/0x420 [ 887.954267][T13000] ? seccomp_notify_detach+0x220/0x220 [ 887.959747][T13000] do_seccomp+0x806/0xe00 [ 887.964102][T13000] ? prctl_set_seccomp+0x60/0x60 [ 887.969066][T13000] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 887.975078][T13000] ? lockdep_hardirqs_on+0x94/0x140 [ 887.980296][T13000] do_syscall_64+0x4c/0xa0 [ 887.984728][T13000] ? clear_bhb_loop+0x60/0xb0 [ 887.989421][T13000] ? clear_bhb_loop+0x60/0xb0 [ 887.994118][T13000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 888.000035][T13000] RIP: 0033:0x7ff0d619e559 [ 888.004460][T13000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.024083][T13000] RSP: 002b:00007ff0d7105028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 888.032524][T13000] RAX: ffffffffffffffda RBX: 00007ff0d6425fa0 RCX: 00007ff0d619e559 [ 888.040508][T13000] RDX: 0000200000000a00 RSI: 0000000000000000 RDI: 0000000000000001 [ 888.048489][T13000] RBP: 00007ff0d6235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 888.056473][T13000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.064457][T13000] R13: 00007ff0d6426038 R14: 00007ff0d6425fa0 R15: 00007ffe31962328 [ 888.072458][T13000] [ 890.196263][T13034] xt_l2tp: invalid flags combination: 8 [ 891.310752][ T4352] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 891.517445][ T4352] usb 6-1: Using ep0 maxpacket: 32 [ 891.529108][ T4352] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 892.130546][ T4352] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.143913][ T4352] usb 6-1: config 0 descriptor?? [ 892.182921][ T4352] as10x_usb: device has been detected [ 892.209805][ T4352] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 892.365001][ T4352] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 892.379978][T13032] ------------[ cut here ]------------ [ 892.385604][T13032] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 892.397265][T13032] WARNING: CPU: 1 PID: 13032 at kernel/locking/mutex.c:582 __mutex_lock+0xa1c/0xae0 [ 892.412546][T13032] Modules linked in: [ 892.416563][T13032] CPU: 1 PID: 13032 Comm: syz.5.2366 Not tainted syzkaller #0 [ 892.424031][T13032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 892.434154][T13032] RIP: 0010:__mutex_lock+0xa1c/0xae0 [ 892.439485][T13032] Code: 04 20 84 c0 0f 85 b3 00 00 00 83 3d d5 16 c4 04 00 0f 85 f5 f6 ff ff 48 c7 c7 20 04 8c 8a 48 c7 c6 c0 04 8c 8a e8 94 c9 10 f7 <0f> 0b e9 db f6 ff ff 0f 0b e9 89 f9 ff ff 48 c7 c1 40 b1 a3 97 80 [ 892.459132][T13032] RSP: 0018:ffffc90004e17ac0 EFLAGS: 00010246 [ 892.465235][T13032] RAX: 797ef2878e6dbc00 RBX: ffff88802a016ce0 RCX: 0000000000080000 [ 892.473247][T13032] RDX: ffffc9001c03c000 RSI: 0000000000002196 RDI: 0000000000002197 [ 892.481407][T13032] RBP: ffffc90004e17c20 R08: ffff8880b8c279db R09: 1ffff11017184f3b [ 892.489391][T13032] R10: dffffc0000000000 R11: ffffed1017184f3c R12: dffffc0000000000 [ 892.497403][T13032] R13: 0000000000000000 R14: ffff88802a016000 R15: 0000000000000000 [ 892.505566][T13032] FS: 00007ff0d71056c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 892.514556][T13032] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 892.521150][T13032] CR2: 0000001b2fe23ffc CR3: 000000007d7a3000 CR4: 00000000003506e0 [ 892.529161][T13032] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 892.537162][T13032] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 892.545141][T13032] Call Trace: [ 892.548455][T13032] [ 892.551395][T13032] ? trace_contention_end+0x5f/0x170 [ 892.556716][T13032] ? __mutex_lock+0x1ab/0xae0 [ 892.561439][T13032] ? as102_dvb_dmx_start_feed+0x6c/0x280 [ 892.567092][T13032] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 892.572771][T13032] ? mutex_lock_nested+0x10/0x10 [ 892.577727][T13032] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 892.583750][T13032] ? dmx_ts_feed_start_filtering+0x4e/0x210 [ 892.589681][T13032] ? mutex_unlock+0x10/0x10 [ 892.594202][T13032] ? mutex_lock_nested+0x10/0x10 [ 892.599153][T13032] ? _raw_spin_lock_irq+0xb7/0xf0 [ 892.604220][T13032] ? _raw_spin_unlock_irq+0x1f/0x40 [ 892.609430][T13032] as102_dvb_dmx_start_feed+0x6c/0x280 [ 892.614990][T13032] dmx_ts_feed_start_filtering+0x11c/0x210 [ 892.620824][T13032] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 892.626774][T13032] dvb_dmxdev_filter_start+0x422/0x1060 [ 892.632343][T13032] dvb_demux_do_ioctl+0x47e/0x530 [ 892.637557][T13032] dvb_usercopy+0x191/0x2b0 [ 892.642076][T13032] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 892.647663][T13032] ? dvb_generic_ioctl+0xb0/0xb0 [ 892.652623][T13032] ? dvb_demux_poll+0x210/0x210 [ 892.657654][T13032] dvb_demux_ioctl+0x25/0x30 [ 892.662263][T13032] __se_sys_ioctl+0xfa/0x170 [ 892.666914][T13032] do_syscall_64+0x4c/0xa0 [ 892.671346][T13032] ? clear_bhb_loop+0x60/0xb0 [ 892.676045][T13032] ? clear_bhb_loop+0x60/0xb0 [ 892.680771][T13032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 892.686685][T13032] RIP: 0033:0x7ff0d619e559 [ 892.691295][T13032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.710953][T13032] RSP: 002b:00007ff0d7105028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 892.719384][T13032] RAX: ffffffffffffffda RBX: 00007ff0d6425fa0 RCX: 00007ff0d619e559 [ 892.727397][T13032] RDX: 0000200000000200 RSI: 0000000040146f2c RDI: 0000000000000004 [ 892.735398][T13032] RBP: 00007ff0d6235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 892.743507][T13032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.751501][T13032] R13: 00007ff0d6426038 R14: 00007ff0d6425fa0 R15: 00007ffe31962328 [ 892.759525][T13032] [ 892.762570][T13032] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 892.769843][T13032] CPU: 1 PID: 13032 Comm: syz.5.2366 Not tainted syzkaller #0 [ 892.777294][T13032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 892.787350][T13032] Call Trace: [ 892.790616][T13032] [ 892.793559][T13032] dump_stack_lvl+0x188/0x24e [ 892.798236][T13032] ? memcpy+0x3c/0x60 [ 892.802206][T13032] ? show_regs_print_info+0x12/0x12 [ 892.807406][T13032] ? load_image+0x410/0x410 [ 892.811906][T13032] panic+0x2d3/0x710 [ 892.815796][T13032] ? bpf_jit_dump+0xd0/0xd0 [ 892.820299][T13032] __warn+0x2f8/0x4f0 [ 892.824301][T13032] ? __mutex_lock+0xa1c/0xae0 [ 892.828971][T13032] ? __mutex_lock+0xa1c/0xae0 [ 892.833639][T13032] report_bug+0x2ba/0x4f0 [ 892.837964][T13032] ? __mutex_lock+0xa1c/0xae0 [ 892.842645][T13032] handle_bug+0x3a/0x70 [ 892.846795][T13032] exc_invalid_op+0x16/0x40 [ 892.851297][T13032] asm_exc_invalid_op+0x16/0x20 [ 892.856138][T13032] RIP: 0010:__mutex_lock+0xa1c/0xae0 [ 892.861421][T13032] Code: 04 20 84 c0 0f 85 b3 00 00 00 83 3d d5 16 c4 04 00 0f 85 f5 f6 ff ff 48 c7 c7 20 04 8c 8a 48 c7 c6 c0 04 8c 8a e8 94 c9 10 f7 <0f> 0b e9 db f6 ff ff 0f 0b e9 89 f9 ff ff 48 c7 c1 40 b1 a3 97 80 [ 892.881040][T13032] RSP: 0018:ffffc90004e17ac0 EFLAGS: 00010246 [ 892.887112][T13032] RAX: 797ef2878e6dbc00 RBX: ffff88802a016ce0 RCX: 0000000000080000 [ 892.895073][T13032] RDX: ffffc9001c03c000 RSI: 0000000000002196 RDI: 0000000000002197 [ 892.903030][T13032] RBP: ffffc90004e17c20 R08: ffff8880b8c279db R09: 1ffff11017184f3b [ 892.910991][T13032] R10: dffffc0000000000 R11: ffffed1017184f3c R12: dffffc0000000000 [ 892.918950][T13032] R13: 0000000000000000 R14: ffff88802a016000 R15: 0000000000000000 [ 892.926920][T13032] ? trace_contention_end+0x5f/0x170 [ 892.932217][T13032] ? __mutex_lock+0x1ab/0xae0 [ 892.936900][T13032] ? as102_dvb_dmx_start_feed+0x6c/0x280 [ 892.942524][T13032] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 892.948151][T13032] ? mutex_lock_nested+0x10/0x10 [ 892.953083][T13032] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 892.959056][T13032] ? dmx_ts_feed_start_filtering+0x4e/0x210 [ 892.964953][T13032] ? mutex_unlock+0x10/0x10 [ 892.969450][T13032] ? mutex_lock_nested+0x10/0x10 [ 892.974386][T13032] ? _raw_spin_lock_irq+0xb7/0xf0 [ 892.979405][T13032] ? _raw_spin_unlock_irq+0x1f/0x40 [ 892.984609][T13032] as102_dvb_dmx_start_feed+0x6c/0x280 [ 892.990072][T13032] dmx_ts_feed_start_filtering+0x11c/0x210 [ 892.995888][T13032] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 893.001772][T13032] dvb_dmxdev_filter_start+0x422/0x1060 [ 893.007313][T13032] dvb_demux_do_ioctl+0x47e/0x530 [ 893.012328][T13032] dvb_usercopy+0x191/0x2b0 [ 893.016820][T13032] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 893.022353][T13032] ? dvb_generic_ioctl+0xb0/0xb0 [ 893.027303][T13032] ? dvb_demux_poll+0x210/0x210 [ 893.032144][T13032] dvb_demux_ioctl+0x25/0x30 [ 893.036722][T13032] __se_sys_ioctl+0xfa/0x170 [ 893.041314][T13032] do_syscall_64+0x4c/0xa0 [ 893.045736][T13032] ? clear_bhb_loop+0x60/0xb0 [ 893.050403][T13032] ? clear_bhb_loop+0x60/0xb0 [ 893.055071][T13032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 893.060950][T13032] RIP: 0033:0x7ff0d619e559 [ 893.065354][T13032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.084949][T13032] RSP: 002b:00007ff0d7105028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 893.093352][T13032] RAX: ffffffffffffffda RBX: 00007ff0d6425fa0 RCX: 00007ff0d619e559 [ 893.101329][T13032] RDX: 0000200000000200 RSI: 0000000040146f2c RDI: 0000000000000004 [ 893.109297][T13032] RBP: 00007ff0d6235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 893.117252][T13032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 893.125213][T13032] R13: 00007ff0d6426038 R14: 00007ff0d6425fa0 R15: 00007ffe31962328 [ 893.133199][T13032] [ 893.136458][T13032] Kernel Offset: disabled [ 893.140764][T13032] Rebooting in 86400 seconds..