last executing test programs: 31.865696782s ago: executing program 1 (id=418): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x4) unshare(0x20000400) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x2ac, 0x0, 0x0, 0x15, 0x19, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000000d0f08e8ad896ba67a00973defa00", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee41b80000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000018000000008218040000db00", [0xc, 0xfffffffffffffffd]}) 31.865178097s ago: executing program 1 (id=419): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x94) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r1, 0x4) (async) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e459, 0x700000000000000) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)}, 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="de0f000000002000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000400"/28], 0x50) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) read$FUSE(r2, &(0x7f00000025c0)={0x2020}, 0x2020) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) (async) read$FUSE(r5, &(0x7f0000007100)={0x2020}, 0x2020) read$FUSE(r5, 0x0, 0x0) (async) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) (async) write$tun(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="00000806000003"], 0xfdef) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x121101, 0x0) write$UHID_INPUT2(r6, &(0x7f00000000c0)={0x6, {0x62, "fe813594089329e2b52f458c5ced477b93da5cfd7756771689ffc3307365820a8817c841bb7dd2eeed18037543e66eb8ea5594eefae4652e6903ba8dbee54f2a5350c0a6002463216f402780fa155eaa107ac1ee14dd54b78c0bfb4f795050e20a13"}}, 0x68) (async) r7 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000440)={0x80000000, 0x0, &(0x7f0000002c40)=[{{0x80000000, 0x0}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000400)={r9, &(0x7f00000007c0)=[{0x80000000}], &(0x7f0000000100)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000280)={r11, 0x0, &(0x7f0000000080)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r7, 0xc0347c03, &(0x7f000000a300)={{r10, r13, 0x2, [0x1, 0x8]}, {r12, r8, 0x0, [0xc1b, 0x4]}, 0x0, [0x7e, 0x8]}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0), &(0x7f0000000300)}) 31.638925885s ago: executing program 1 (id=422): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x800}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000004200), &(0x7f0000004240)=0x30) 28.586417708s ago: executing program 1 (id=436): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x371c, &(0x7f00000000c0)={0x0, 0x4ebd, 0x1000, 0x1, 0x164}, &(0x7f0000000000), &(0x7f0000000140)) r2 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x7, 0x288, 0x0, r1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x4, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x8000000, 0x0, 0x0) 28.516565247s ago: executing program 1 (id=438): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000), 0x610100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, 0x0, 0x20000000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, 0x0, 0x10004000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futex(&(0x7f00000001c0)=0x1, 0x8, 0x0, 0x0, 0x0, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) add_key$user(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000980)={0x23b, 0x7d, 0x0, {{0x500, 0xfa, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x1f00, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x13\xf6\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00', 0x5e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf6\x99\xfa\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xf6\xc6\x9ai\xd0\x17\xce\xc4Y\x06\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1a'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0xffffffffffffffff}}, 0x23b) 27.000390901s ago: executing program 4 (id=446): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01ffffe000000000000003000000280001801400040000000000000000000000ffffac1414aa060001000a00"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 26.398687363s ago: executing program 1 (id=448): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3], 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x1, &(0x7f00000002c0)=[0xffffffffffffffff], &(0x7f0000000340)=[{0x1, 0x8000001, 0x7, 0x2}], 0x10, 0xab}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) fsopen(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[@ANYBLOB="3c0000001000ffff25bd7000fbdbdf250000003b", @ANYRES32=0x0, @ANYBLOB="14140000212000001c001280090001007866726d000000000c0002800800020001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) readlinkat(0xffffffffffffffff, &(0x7f0000000400)='./bus\x00', 0x0, 0x0) socket(0x3, 0x1, 0x8) setitimer(0x2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000bc0)={{0x12, 0x1, 0x0, 0x38, 0x4c, 0xf8, 0x10, 0x6e1, 0x709, 0x204, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x0, 0x0, 0xc1, 0x54, 0xeb, 0xf}}]}}]}}, 0x0) prlimit64(r4, 0x0, &(0x7f0000000140)={0xb0, 0x516f}, &(0x7f0000000180)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsm_get_self_attr(0x64, &(0x7f00000002c0)={0x0, 0x0, 0x35, 0x15, ""/21}, &(0x7f0000001280)=0x35, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="01980000031300001c00128009000100697f3cf3706970000000000c00028008000300e0000001"], 0x3c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 26.232911876s ago: executing program 4 (id=449): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x0, @in=@empty}, {{@in=@remote, 0x0, 0x3c}, 0xa, @in6=@private0, 0x0, 0x5}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 25.943014509s ago: executing program 4 (id=451): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25000000000000007fffffff00000000002001000000000000000000000000000100000033000000000a00603004000000", @ANYRES32=0x0, @ANYBLOB="00000000000000007f00000000000000030000000000000000000000000000000000000000000000ffffffe6ffffffff0002000000000000fffffffffffffffe03e9000000000000000000000038080000000000000000000109000000000000060000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 25.586833216s ago: executing program 4 (id=454): socket$inet6(0xa, 0x1, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/dev\x00') setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x128, 0x148, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x7f, 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x4b, 0x1ff, 0x6, 0xb0e2, 0x80ffff, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0x0, 0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x80}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x7, 0x0, 0x41, 0x0, 0xb10f, 0x1000, 0x6, 0x3, 0x20}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x7f, 0x4, 0x1, '\x00', 'syz0\x00', {0xa6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000d9fca3c600000000c500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x18, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="24092cbd70000008000100ac1414de050000000000609580e3107c5e29a46a4b04dd81ebfde7a9e8a738505f060332c6216e029750c9ff14fa124a20eefb1d33de14d29abd40113096ad32c4f8de6972be065bfd3b39f67b60908af32c34e0eb1c0d7c478f75af35d47e1e97c160539fd1217f7b9af496d86b130e31f34fa3f771ada84090334f7e5400ba0cac4ccaec41e97dc99a"], 0x24}, 0x1, 0x0, 0x0, 0x6048090}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1}, 0x0, 0x0}, 0x20) clock_settime(0xfffffffb, &(0x7f0000000380)={0x77359400}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001", @ANYBLOB='\x00'/20, @ANYBLOB='\x00'/10], 0x48) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000006050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 24.33030521s ago: executing program 4 (id=457): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 23.933212311s ago: executing program 4 (id=458): execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) dup(0xffffffffffffffff) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x400aee2, 0x400, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x2, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47d6, 0x0, 0x2, 0x0, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) syz_emit_ethernet(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) syz_usb_connect(0x2, 0x1b, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x9a, 0x69, 0xad, 0x10, 0x7d1, 0x3c13, 0xbd0d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x9, 0x39, 0x10, 0x4}}]}}, 0x0) r6 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r6}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) writev(r7, &(0x7f00000006c0)=[{&(0x7f00000005c0)="f3", 0x1}, {&(0x7f0000000440)='Y', 0x1}], 0x2) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) 23.721014436s ago: executing program 0 (id=459): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x100, 0x47}}}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x64}, 0x1, 0x0, 0x0, 0x400c811}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x700, 0x7800, 0xfffffffc, 0x5, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x67, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x4, 0xa4, 0x0, 0x9}]}}}}}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='(\x00\x00\x00\b\x00\x00\x00', @ANYRES32, @ANYBLOB="97fef5836c843117641f5e4f36cfa3f04b634d523769e41439dda5615adae3f0efca06b12a6155b047a3db6338fa320cffd4c687b3a26ada04cfe76e99f8c3fbb231b8a4d18706dc7e74dd07897863137b641871b26375", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x2041, 0x0) write$binfmt_aout(r4, &(0x7f0000000ac0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r5 = syz_open_pts(r4, 0x80) r6 = dup3(r5, r4, 0x80000) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000000)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r7) r9 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000009c0)={'batadv0\x00', 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x1c, r8, 0x6d8167148338651d, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0401feffff69f6ca8d55243965fc1431a7bf76bc7d3627949f", @ANYRES16=r8, @ANYBLOB="040029bd7000fbdbdf250f00000008000600", @ANYRES32=r11, @ANYBLOB], 0x1c}}, 0x4000000) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r3, &(0x7f00000004c0)="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", 0x145, 0x805, 0x0, 0x0) 22.447125133s ago: executing program 0 (id=462): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72d0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_012={0x1, 0x1, 0x3, "8d"}, @global=@item_012={0x2, 0x1, 0x4, "b314"}]}}, 0x0}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', 0x0) r2 = semget$private(0x0, 0x6, 0x3b1) semtimedop(r2, &(0x7f0000000380)=[{0x4, 0x2, 0x800}, {0x4, 0x3, 0x800}, {0x1, 0xa}, {0x2, 0x6, 0x800}], 0x4, 0x0) semop(r2, &(0x7f0000000280)=[{0x0, 0x0, 0x1800}, {0x4, 0x7fff}], 0x2) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_NO_NEW_PRIVS(0x43, 0x1) r4 = memfd_create(&(0x7f0000000040)='\xa3\xac\xce\xe1\x88\x9d[\x10\x00\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9\x95\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd184]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xf3\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) execveat(r4, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x1000) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x101081) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x8, 0x1, 0xfffffff9}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r7 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x4, 0x4, 0x0, 0x0, @adapter={0x1532, 0xf, 0x20, 0x303d, 0x62}}]}) r9 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000080)={r9, 0x4}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x20040840}, 0x0) write$eventfd(r9, &(0x7f0000000080)=0x430f, 0x8) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x4003}, {{0x0, 0x0, 0x0}, 0x1}, {{&(0x7f0000000200)=@xdp, 0x80, &(0x7f0000000500), 0x0, &(0x7f00000005c0)=""/187, 0xbb}, 0x85e}], 0x3, 0x123, 0x0) 21.866611088s ago: executing program 2 (id=465): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000001c0)=@e={0xff, 0xa, 0xd, 0x2, @generic=0x8, 0x8, 0x7, 0x6e}) r1 = socket$tipc(0x1e, 0x2, 0x0) recvmmsg(r1, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/202, 0xca}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x3, &(0x7f0000000040)=""/10, 0xa}, 0x5}, {{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)=""/97, 0x61}, {&(0x7f0000002380)=""/127, 0x7f}, {&(0x7f0000002400)=""/175, 0xaf}], 0x3, &(0x7f00000024c0)=""/87, 0x57}, 0x5}, {{&(0x7f0000002540)=@can, 0x80, &(0x7f0000002900)=[{&(0x7f00000025c0)=""/239, 0xef}, {&(0x7f00000026c0)=""/69, 0x45}, {&(0x7f0000002740)=""/173, 0xad}, {&(0x7f0000002800)=""/130, 0x82}, {&(0x7f00000028c0)=""/22, 0x16}], 0x5, &(0x7f0000002980)=""/219, 0xdb}, 0x9}, {{&(0x7f0000002a80)=@alg, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002b00)=""/181, 0xb5}, {&(0x7f0000002bc0)=""/185, 0xb9}], 0x2}, 0x46b}, {{&(0x7f0000002cc0)=@can, 0x80, &(0x7f0000004240)=[{&(0x7f0000002d40)=""/206, 0xce}, {&(0x7f0000002e40)=""/1, 0x1}, {&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000003e80)=""/78, 0x4e}, {&(0x7f0000003f00)=""/241, 0xf1}, {&(0x7f0000004000)=""/229, 0xe5}, {&(0x7f0000004100)=""/231, 0xe7}, {&(0x7f0000004200)=""/43, 0x2b}], 0x8, &(0x7f00000042c0)=""/24, 0x18}}, {{&(0x7f0000004300)=@isdn, 0x80, &(0x7f00000057c0)=[{&(0x7f0000004380)=""/229, 0xe5}, {&(0x7f0000004480)=""/196, 0xc4}, {&(0x7f0000004580)=""/87, 0x57}, {&(0x7f0000004600)=""/14, 0xe}, {&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000005640)=""/86, 0x56}, {&(0x7f00000056c0)=""/206, 0xce}], 0x7, &(0x7f0000005840)=""/119, 0x77}, 0x6}, {{&(0x7f00000058c0)=@generic, 0x80, &(0x7f0000006000)=[{&(0x7f0000005940)=""/97, 0x61}, {&(0x7f00000059c0)=""/119, 0x77}, {&(0x7f0000005a40)}, {&(0x7f0000005a80)=""/174, 0xae}, {&(0x7f0000005b40)=""/70, 0x46}, {&(0x7f0000005bc0)=""/167, 0xa7}, {&(0x7f0000005c80)=""/246, 0xf6}, {&(0x7f0000005d80)=""/108, 0x6c}, {&(0x7f0000005e00)=""/208, 0xd0}, {&(0x7f0000005f00)=""/219, 0xdb}], 0xa, &(0x7f00000060c0)=""/99, 0x63}, 0x1}, {{0x0, 0x0, &(0x7f0000006300)=[{&(0x7f0000006140)=""/170, 0xaa}, {&(0x7f0000006200)=""/209, 0xd1}], 0x2, &(0x7f0000006340)=""/24, 0x18}}, {{0x0, 0x0, &(0x7f0000006380), 0x0, &(0x7f00000063c0)=""/29, 0x1d}, 0x5}, {{&(0x7f0000006400)=@un=@abs, 0x80, &(0x7f00000077c0)=[{&(0x7f0000006480)=""/55, 0x37}, {&(0x7f00000064c0)=""/160, 0xa0}, {&(0x7f0000006580)=""/79, 0x4f}, {&(0x7f0000006600)=""/251, 0xfb}, {&(0x7f0000006700)=""/4096, 0x1000}, {&(0x7f0000007700)=""/14, 0xe}, {&(0x7f0000007740)=""/84, 0x54}], 0x7, &(0x7f0000007840)=""/31, 0x1f}, 0x56}], 0xa, 0x10000, &(0x7f0000007b00)={0x77359400}) 21.4035445s ago: executing program 3 (id=466): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast1, @in=@remote, 0x4e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x67, 0x0, 0xffffffffffffffff}, {0xc}, {0x6, 0xffffffffffffffff, 0x80}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x18) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40103d0b, &(0x7f0000000040)={0x3ff, 0x8}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}]}, 0x4c}, 0x1, 0x8000000000000, 0x0, 0x2000c0c1}, 0x40000) 21.047146505s ago: executing program 3 (id=467): socket$nl_generic(0x11, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x1, "875ccbeca25ed2796456579335c7b8de4b0f29efa1c0fc50cce9de6f78aadfcf"}) socket$unix(0x1, 0x2, 0x0) socket$inet(0x2, 0x3, 0x33) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bff57002c1097f92e91002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8096d5742db41bd61080dcbe40e0f802fc12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1531497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1ea"], 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000050000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a00010000"], 0x64}}, 0x0) 20.802543812s ago: executing program 3 (id=468): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 20.660719236s ago: executing program 3 (id=469): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x7, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x2000c001) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000240)=[@code={0xa, 0x7c, {"2e450fe0dfb805000000b9e2e3ffff0f01c10fc7b80050000066ba210066edc74424000d000000c7442402fdffff7fc74424060000000066baf80cb804d9b68cef66bafc0c66b8003066ef0f20c035000000800f22c066420f2900c4a3e144fe5e420f01cbc421ee586f00"}}], 0x7c}) (async, rerun: 64) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async, rerun: 64) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async, rerun: 64) r6 = socket$unix(0x1, 0x2, 0x0) (rerun: 64) ppoll(&(0x7f0000000300)=[{r6, 0x4236}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) (async, rerun: 64) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @local, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r7, 0x8001}}, 0x48) (async, rerun: 64) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) (async, rerun: 64) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 19.567413483s ago: executing program 3 (id=470): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x24, 0x0, 0x801, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000040)={'veth0_to_team\x00', {0x2, 0x4e20, @rand_addr=0x64010101}}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r4, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffc8, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20008041) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) unshare(0x20060400) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2494dde32cd76aeabc8ca949257819f25159c532504978ed33d145658cce40a3dd867df925cbedfbd01f157cae933c958c5dfdc1e0132e03f60e3418410fe17f95bdb8090c4adb3636ea342fb8589cf4944e42579da1d2aa919fa78d9e27565fc30", 0x6d, 0xfffffffffffffffb) keyctl$revoke(0x3, r7) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) 19.102963485s ago: executing program 0 (id=471): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRESHEX=r4], 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x1, &(0x7f00000002c0)=[0xffffffffffffffff], &(0x7f0000000340)=[{0x1, 0x8000001, 0x7, 0x2}], 0x10, 0xab}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) fsopen(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[@ANYBLOB="3c0000001000ffff25bd7000fbdbdf250000003b", @ANYRES32=0x0, @ANYBLOB="14140000212000001c001280090001007866726d000000000c0002800800020001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) readlinkat(0xffffffffffffffff, &(0x7f0000000400)='./bus\x00', 0x0, 0x0) socket(0x3, 0x1, 0x8) setitimer(0x2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000bc0)={{0x12, 0x1, 0x0, 0x38, 0x4c, 0xf8, 0x10, 0x6e1, 0x709, 0x204, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x0, 0x0, 0xc1, 0x54, 0xeb, 0xf}}]}}]}}, 0x0) prlimit64(r5, 0x0, &(0x7f0000000140)={0xb0, 0x516f}, &(0x7f0000000180)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsm_get_self_attr(0x64, &(0x7f00000002c0)={0x0, 0x0, 0x35, 0x15, ""/21}, &(0x7f0000001280)=0x35, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 18.580687576s ago: executing program 2 (id=472): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, "00000000000600"/100}}}}}}, 0x0) 18.325923215s ago: executing program 2 (id=473): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, 0x0, 0x0, 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000002e00090027bd7000001000000400000004001d00070011"], 0x20}, 0x1, 0x0, 0xe00, 0x42804}, 0x0) 18.138747592s ago: executing program 2 (id=474): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000000000007112180000000000bc201000210000009500000000000000159bb11d55cd54f795ebc6c48b7ee57df364594defe47aa18c81fbb86c6042dbf743a90b61bae3a57ba478e003fe723b194058bc41fc8c6082cee0dce6c4e98c8804a03eb15abe991b86e1c207e4b9c2e545253ec3e0a8800fd697685e0d14ef22ee60615176aa2972a57268ec0127b3869d981e769df4fd0f63d8bde942339d7e8fa10c87b5562d7cd8a361f5801b6e29c575dac7f00846c103fa144116db9a8a8850b0715c590a250c52c2b47c7a4176a8c5e2702c9ad3df0cc0"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f0000000380)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5048}, 0x10}, 0x94) write$binfmt_register(r3, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237) socket(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_FLUSH(r2, 0x0, 0x480c4) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) r5 = dup(r4) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40603d07, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000100)={r6}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x5}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x33, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd, 0x4}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x8000, 0x100077}, {@remote, 0x4e20, 0x4, 0x8, 0x200}}, 0x44) 18.138143356s ago: executing program 3 (id=475): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @local, 0x3}], 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b7000000ffc0000007000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd8019ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b63976df609806c3b2a3667539dfd66a7400000000003be6026e60205f761ce85cdf75cdb95ca5d32b5bf87eed4184d49f8f48181ef2419efe82ebb18ee55772d562b3b49551714e805a5211a3f4e8e703c03e23b2074bc573dbb66d59e269b722637c4a2efb5241cae2f14774609ad91d66724c438455dc4fcf0b4c8fc235f6c190b4c82bb2556d1fbcd4468369e98e900c743162ce2c7e60610acf0c8e4ba94a7e7127c7de0e6c35acecee1b8434fdca4579f9ebc6a515f7d910b466eb583fb0a7e65fbecb2b8ee0e9da33afb88aa5da8da3a5e0e58fcb48de6f165826b046a8951a47e040bd419d0efa0f54e8e3694085a7bde6f6494968d8200000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x1000000000000f, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000040)=r3, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = dup2(r6, r4) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0)=r7, 0x4) 16.970364231s ago: executing program 2 (id=476): socket$nl_generic(0x11, 0x3, 0x10) r0 = socket$unix(0x1, 0x2, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) socket$inet(0x2, 0x3, 0x33) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e0ffe0000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r0], 0x64}}, 0x0) 16.737565144s ago: executing program 2 (id=477): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x26, 0x3, 0x2e, 0x8001, 0xfffffffe, 0xd, 0x2b, 0xfffffe0000000001, 0xfa11, 0x3}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000000)={0x6, 'veth0_to_team\x00', {0x9}, 0xff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e2000000", 0x1c) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x87da4854b9abaabb, &(0x7f00000000c0)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="11032bbd7000fbdbdf25000000001400020077673200"/34], 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x4}, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0xc005, 0x0, 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r5], 0x20}}, 0x0) r7 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae\x01\x91&6n \xf2<\xd6\xcf\x15\xd3\xd7\x1d\xa7=\xef\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa0\xbbL}\xcc\'(;\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1b\b>Z\x8e\xb1\xc3j$v\xef,\x06/\x00\x00\x00\x00\x00\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x92) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0055e6fef47c7c862101bd1572d95f00001e54b427704a31391b79bd508f7d8e90885303b1f1742ed2817d6ef2fdb55b09f002395e88db9e917086e88fe110f18a59588fb28adc6a5542490160a088401650bbd14300dd82cc0f2174d848ae72f65c73234cae5ac30ce67384f994de09f489bccd558eaf6b23f7d03c656042803a91892027f87393068eaa44fae5dea1670b88a9b8e891eb180a024c3328db693c302b576812f3e9c723a23600c22dc1b23d2d0d83d0e018c2f7b40cc7585d92cbd0730c26e6b95afd93a573bd97ee63cfa98d2e721c10e014cbd0db871538b3f588b46dbcf62eed9bb665a5d600d8215b17", @ANYRESHEX=r8, @ANYRES16=r6, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 16.042262457s ago: executing program 0 (id=478): connect$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@setneightbl={0x14, 0x43, 0x1, 0x70bd26, 0x25dfdbfb, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x40) 15.707785196s ago: executing program 0 (id=479): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 15.625335186s ago: executing program 0 (id=480): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)=ANY=[@ANYBLOB="9c1500001200000829bd7076e20000fe86000004000000000000000600000004000000010000800700"/56, @ANYRES32=0x0, @ANYBLOB="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"], 0x159c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x9, 0x3, 0xfffffffe) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r8}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2404c0d0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ipvlan1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 11.018784794s ago: executing program 32 (id=448): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3], 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x1, &(0x7f00000002c0)=[0xffffffffffffffff], &(0x7f0000000340)=[{0x1, 0x8000001, 0x7, 0x2}], 0x10, 0xab}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) fsopen(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[@ANYBLOB="3c0000001000ffff25bd7000fbdbdf250000003b", @ANYRES32=0x0, @ANYBLOB="14140000212000001c001280090001007866726d000000000c0002800800020001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) readlinkat(0xffffffffffffffff, &(0x7f0000000400)='./bus\x00', 0x0, 0x0) socket(0x3, 0x1, 0x8) setitimer(0x2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000bc0)={{0x12, 0x1, 0x0, 0x38, 0x4c, 0xf8, 0x10, 0x6e1, 0x709, 0x204, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x0, 0x0, 0xc1, 0x54, 0xeb, 0xf}}]}}]}}, 0x0) prlimit64(r4, 0x0, &(0x7f0000000140)={0xb0, 0x516f}, &(0x7f0000000180)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsm_get_self_attr(0x64, &(0x7f00000002c0)={0x0, 0x0, 0x35, 0x15, ""/21}, &(0x7f0000001280)=0x35, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="01980000031300001c00128009000100697f3cf3706970000000000c00028008000300e0000001"], 0x3c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 8.512008556s ago: executing program 33 (id=458): execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) dup(0xffffffffffffffff) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x400aee2, 0x400, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x2, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47d6, 0x0, 0x2, 0x0, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) syz_emit_ethernet(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) syz_usb_connect(0x2, 0x1b, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x9a, 0x69, 0xad, 0x10, 0x7d1, 0x3c13, 0xbd0d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x9, 0x39, 0x10, 0x4}}]}}, 0x0) r6 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r6}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) writev(r7, &(0x7f00000006c0)=[{&(0x7f00000005c0)="f3", 0x1}, {&(0x7f0000000440)='Y', 0x1}], 0x2) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) 3.010944852s ago: executing program 34 (id=475): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @local, 0x3}], 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b7000000ffc0000007000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd8019ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b63976df609806c3b2a3667539dfd66a7400000000003be6026e60205f761ce85cdf75cdb95ca5d32b5bf87eed4184d49f8f48181ef2419efe82ebb18ee55772d562b3b49551714e805a5211a3f4e8e703c03e23b2074bc573dbb66d59e269b722637c4a2efb5241cae2f14774609ad91d66724c438455dc4fcf0b4c8fc235f6c190b4c82bb2556d1fbcd4468369e98e900c743162ce2c7e60610acf0c8e4ba94a7e7127c7de0e6c35acecee1b8434fdca4579f9ebc6a515f7d910b466eb583fb0a7e65fbecb2b8ee0e9da33afb88aa5da8da3a5e0e58fcb48de6f165826b046a8951a47e040bd419d0efa0f54e8e3694085a7bde6f6494968d8200000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x1000000000000f, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000040)=r3, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = dup2(r6, r4) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0)=r7, 0x4) 1.496135197s ago: executing program 35 (id=477): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x26, 0x3, 0x2e, 0x8001, 0xfffffffe, 0xd, 0x2b, 0xfffffe0000000001, 0xfa11, 0x3}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000000)={0x6, 'veth0_to_team\x00', {0x9}, 0xff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e2000000", 0x1c) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x87da4854b9abaabb, &(0x7f00000000c0)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="11032bbd7000fbdbdf25000000001400020077673200"/34], 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x4}, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0xc005, 0x0, 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r5], 0x20}}, 0x0) r7 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae\x01\x91&6n \xf2<\xd6\xcf\x15\xd3\xd7\x1d\xa7=\xef\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa0\xbbL}\xcc\'(;\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1b\b>Z\x8e\xb1\xc3j$v\xef,\x06/\x00\x00\x00\x00\x00\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x92) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0055e6fef47c7c862101bd1572d95f00001e54b427704a31391b79bd508f7d8e90885303b1f1742ed2817d6ef2fdb55b09f002395e88db9e917086e88fe110f18a59588fb28adc6a5542490160a088401650bbd14300dd82cc0f2174d848ae72f65c73234cae5ac30ce67384f994de09f489bccd558eaf6b23f7d03c656042803a91892027f87393068eaa44fae5dea1670b88a9b8e891eb180a024c3328db693c302b576812f3e9c723a23600c22dc1b23d2d0d83d0e018c2f7b40cc7585d92cbd0730c26e6b95afd93a573bd97ee63cfa98d2e721c10e014cbd0db871538b3f588b46dbcf62eed9bb665a5d600d8215b17", @ANYRESHEX=r8, @ANYRES16=r6, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 0s ago: executing program 36 (id=480): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)=ANY=[@ANYBLOB="9c1500001200000829bd7076e20000fe86000004000000000000000600000004000000010000800700"/56, @ANYRES32=0x0, @ANYBLOB="fa00000037d8706a01000000ff0f000001100100baaf7ef7232c0e07cf3d6ce371a9462848eb18684c48a214a4a1b5717769456fc8228eb434de45921e4dd352fd51af606aab92ee2e7464e7ce930386704eced7799886527eb735248496d317b0df67a8f7072f16a438201fdafa64fc7ed39d4f834f39b800bb4c3099665f3c9a81eb6cc3c660c7b122d72d4571ea95b1dd1a59298a6a9bbd5b03167d41b042f42c7c1909115421a9756355284c246bfcb478b01a3e396f1f55e1925efaec382cc1fa1de073992a1a3f709dd2477cdf3c664b765f64dd03a05cef0733e5277e0bbbe9b8deaac5f2b5bd5b9ca1d1146b89895c25637941817f280feb7e05a01aa9105a0bd31f4db8100eb0e96b6b51cb2b5c622e630025bb07ceb95b4ce2fd633acc870ab2346405d15e0043e8a5e87112fb52406ae608c75a8c9c044fbf7c45b8108cfa805a0ffe9244d2ab649dd49b742c5a8867d190d66914659ac259844d2908113a973ffb10be15c4bf931cd7e3e02bfc1bc0ef6ec483b37a54888bc2047948f1567876650bfbee49d225e12b89e0b3bbd88f5e146a2d4ed26571866f4d6dec483491ab30743d915631188d26e86c6884cfeeb2eea6f4a9e56b84db1de9d4a3d21bf6be98766aa6b582cc83949fc078ceac7c5f9c31c2d084be64d503393c03b68e8d3e1e37d0d1465b5fa8fee8a42b82f22aa9801fa9dbb0d98715fd7f16075b77aa09c96932935fa01d8e585132adae3c396732640b79b7f0828b1bf1183cfe728a381f819acf32c4fc0e3eac506f351d03cfdd7fa7ca4e7254be52eaa79e6d62a2429e5a9297f455003f586afe4acc2f68f94f48d1534019bb9523cb2a93727d694cd1a49e33d77dc1f1f1882c8575ccea16371f3dcc1d94fcff00498c26544406d958bb0d26c81ef53efc396ebfb8ba78062b9aea4180681ff83329da8f142684224d42df9236a1f9750de09b3bc3c1cd17fdaf2b73b6dbc7eba4d6c8d4107bd71dc893df15c9bf65e8d79cbd72f2556a2f779932b6d74fe92bc02f21abe49172dc274d549afdca2f4f6bb516565cdf18f8d9db92d4e7c49c0febf31420448c047fca29940d30d925ac80f9348fb876b5e478e9bf1325be9b09c684122ccb8eafd2914ca37c178937fe6a575863b25ed7673bbfde89d765a9248c4968392813c8c9c1923c0266f043682adb7304c4d1dbe4c31e82a183735ba05a017b58569f4fb5b16057813dac840d614f278cc2d57e8e07d973578f235fbf542b55b49027014e1b087d3d100639e4701245df67be2b0fa1b348aa2b18dd7284b54afab938148705bddfbcede505f393a75635177bf714f8b656442cf9fa7ec336e9ad765b00c928bcc4f03249f79fce8402c5efd16b45e24c465a69514b27ed51e4aec86accd03b73877c88fc3014b5a0e3dd8474f08647549c27006f509f9cd8a15e8aed8a496c166ce9050051c3f8585b98ef333ef226bed27a78b5b44395549d06aaae354e5ae28f7596f24230a987fde1d947ed4c04541c283a7c5e3b38a65a0ef1409cf59f0c9124e4360da70d3075ea2b53bc48e96b6deddbee0641e841e3cf7b6fdaa44ef6b2e242a001b3f28caf29958f07811abdda0e71bf379ffe798c25ff4c0d9e0fa1a9a51b8c329e6ba49b8ad294f7decdc3d2ccaf65c48cce18b0b2410900ca69344b3dff2b5836dc8200172a213164d0d6111fd6a97a29bebd3bc8b280c8c9b996ea2dc2edeaec06f0bc5f79607137e86588e2842e49f7e95bab5709f6abc301ef720f785f9047615b109d684071f76b25b408e4a7f5633e902ff70308973dc926e6d3c9f9e45d803813651f580587f8978922c4cdebf59ac02c6c14c751068505d49b39de9d8bdf53c78f5c15ddace78d9866c47f1e0360ca32e2734b24149959ef1af36acbc9f04efdb7ed0a3875d032e079e88146f99a2251ba762fd287727e789ec6019b863b1dd09b463153538d0d09d8a0dea9c83805b87ab7446299cdbe3af198a9bea2f756dc3f84d6b4495eed2b800bc4b0bee8d3dec39e9a5eb9700ac539bdf2ceef67421c75841deec4e9ebd6cfb05accb23757db56b779d7e3c428584ecc5bb6db78e54afd9e310fd0a22cee795121ad3f185ca44d877aae8d4066a399e8be13ba0a2e3b121635054d7749999d2756d114fdac56c9d57dc876b54ae2a2ede99a880b94c54773fb1d90f41f6b12ccc477a79469e58ac020212d43bd88bc6cbb6dba7a9d851b3d7f0d3353cc603ded84068adcc3018ffa28e6191f6e092163f493d3a343a7b65763d26c693681f089430a67a192ad88a47853a58b3d1be6793a443e51f5bb41edb422f84645f8f1537a4431dbd8237b4a7b7fae361d829fcae30e534f36e691c2a59067eee9e7746df7e4f6495265ce8020cb5355ef120fb6196cbeef5dbe0a165be34724def7a028c334b6304b1298e45ec23cbb9bcd186fb20ebe3ee68170e5bffaf2a19e36c90e04fbb455050b494aaccf1f724bd20a0583c019e4b3e676e17e597c50133352ffad4ae2d2bbe17c1c17ff6f82c28699c97f8cae97fdc480eb07e1994dc66ab84b68125846475d78c83bc4d627de4d2e00b7b07e9750c95fea31570993cc9f0ceab5b3571625f48f11e9430e23c6dbd99c7ecc67e6ed616ad06b20513ed477edc85857d263d23baabfeea19c934f094ae96ea18a9fb5f8cde0aaff4c3d1560dfb46430dffe7d61cf083ebba7fe1ae132cff1062384a26780902828663bcf84461ee9e66e1d821859dde6ba2ac0dd04dadf38c1d544460953d9b9959c853668fb91fd1206e04017343ae9e255c59d7dbda2c44a6fd400e658c937b2504ac5736ef7197a46c4f76138b54858c8b0db90cf73cca6f20b32448f20fef52d0c9dcbddceb641a8edc27785113f37c987154df145cd9cb125ef3065990adbe85a589236f39532c40573537bf9c3eba6c1a515361301438b3e9044fca9d70c670315579e4faef7c9da3c9d50da99be9870366687cafe70bd8651370bc51736ba57bd63022f6d93c9143cb737e798e2d59c207764d662e163672919aea5dc7e96bbfe62d60e611636f4853fb8ed01d84309c5d1cc9b221faa7c84999f4e15720e735e57ceb6d57ce3e7863162a9774147d544f0e83bb2bc89b2c4396fbdb052236041cd8d1de9a06368f2cfaecb2d5e21d9a11ce136d63b63fc9b8205e95ce1289abe8ed138e6f52647f87c30d449e6e86dcc643e52066cca7caa8923de46af46b29750fdc657c2f0457101c5afec524b1d1fad82f63b743106abcd8ee0f5865ca87fb675b47984ccfd378714c45b469784287101e9015470ab86e4393af4b58c45f86f233a0eb6999049da8fa879f67eb2d51f5d2110c7db7dc1b37fcf33160eaba389653514e1427867cd5322c486b97ddd562d82bc1c2ac6d8bda33ec9322f9b07d9c2cce9bb27aac4a1e1ea6ab2a574092c638dbfdfae86bde52aea450b6b10a9d1bc824f7935cf7114aa89922396d44e37f44d833d63d048f002cdc9c97f1c4d31b8419385205ced6ff85d5f4ce5726a8cb7fcbf733f1860bfaf58cb799c373980d04666b53ae15e6b8a43a404df427bf05ec23e0a79c9af780c58fcb021b8f113832738748a4c9504660a98717024b6712f36872c07374ec4da7e4588d881861b3e7f094154721edf0777c24a4cfa253d5839ffe958cde390504c77ab905cf797681b644818670cbf998192bd6667d5c7e2f0e101c2cbd5d9fb8d9ea7031b7eb3ee1363b8b49ef446c5be07fd9d24f894ce32d1c60631a9cd675dfeade1110f1449c2b481219e1a54b766296ff4d4b13decc41074f9b8efc04ab9f6d1b5bbcca77c118589b9ea240dbfc3a9dd7ca276319cbbf20cff86077cd9c2c04c7a5338516762e14d51a0877fd89aaf9e65a094b2081b22f6ec49769c15d4dcf508e4d5409b1812f567c55819acb1310e836109061cf3651032be7afeba9fb6b3783e9a4aa7333f21f200fa1121849a448666a8da4f36e4c2274f8504c1175cbbd2b2f2448f19d6ea94f906fd9007dc6761799e685115bb6d3ef0f423c86459ebe50a89f6753f2f25315049146499325f195dc136e96e882ec4c3f1309de031d96ffdb7d38e39b3d24633cc9a89e7dfeac423c901aa298895bf5f6b8326ba4563a51dda6d4948b69dc33eb8be92c3a495320a8211fd4b17252ca882538eab1cb5b4ec44d578fb7baa0543937e69c3af74848bda29c98dd860067b9ea4dcf3dab7881f2cdb66b19c358567535b9f9e4979ca58a966d4247e0c142a5d2abea1cddf3a6c7a577ef1d64aa1b1eb588780878169111138ce5af8c07c24aa8203f1bd9d1e2d33c5886b6c9ae0a4d325874cc34c88c6758e982a71a2f13bf0fcdfea4d1a60d397611be2bc051f15bf7e622064422e3c3eaa404e8c1503f5b8b5565b80799f9bfa6faeb7caf54e9c5b7f676d68392d61fae7b9b44aa9eee0c8566d604954170b71445d21e3137a59c7573a3652a2fe256ee7091566ba0995f8a719ce70b86b4b3e0880b36bdd07dd3f73fae905915eca5a33a749310f6aa7ce090a096f35f12aa1ea2d6193308d39681cd52168821d8ab426c559fc3d75da1c8e0c076ab390033fc93d2c468dfffbc16362e3f178db80b4fa0e3777a2662e35bbb99d4c2a8ad96df32989a5a0aa2e7e1491e811c1b4ebaa671c8f65d003907235117e523d3d36b98e4953e4b2aaa1326a46acce393f955ecf807b786c21e721ace747983ea0c118ddf07978c24279bbc9978f88b3bbf5859f7c3dd8a94f95b2d4523e166c27037cdac25244f4db5b0e6567876a04daa8a1166214c8fdb4c89b151e1d20e077c8aca11bf8d53da9e9f2eada07a4cfbac0e5c07b41e40b62005e896f97f12454f06afe00df00fbb40f9289aef636d13109b3901d3c20a9cefc0008d853d4eb9be7c1d072d76e625fb3bb32a33d698892b2608a59b69057f37e6906fc07fbd87fd55d4260792c42714275a575ecf12fd65a04e9f2c6c205ed6b7ee81ea8479695b6eefd43c4d53be01fecc77e5e327e340ceb6a3e40afd1482c820dc0ad9ec6aef8c1226297396a13960fdbf9c1f3d6c81760831b22b4ea2d49450f5d206457586b70c5811cb0fdd37443c04a30c063964a27ed016e858ceda0a37a6a656ec21f354c049153887a5a3aee3955d9c0807e393b4b34bb12c11985de1157242489310e6e2982ceafa8a187ed2262e26aa8a7ed5644cc8c9bc77899e6d1d4272105a3522100a237460320217ec0aad3d92060939aaa4d8df503f06dc5e8e42f6fd66d2b796247e7316f46297b6775418c024c96cf7a85bd805d4328092993ed92819404f7bdac3cc90bb1bad6a33c4ea9f9fdeebd6657c63435d76ae98f74e5a45d7a1562859d5ea3c9e22cdf78d12339a661f0e9964675d33fe2af29f7d1ed9324a8d5f718ccd2703c0ab148582f292fbc50621e877c5ed5af4530241be3637583d907e19eb061afb3e5eeaca8f24e9840d70c667ffdf8bf172c0930fc5d965b4a3c033d5076a70e2fbb6cb435627b2722aeca9c6893f7238c0acd6f00b7a716fdb638c7859e196dbd624bef25be255d631f90deefa4fa3bd090c334d569fb200a69c0ca46bd444fde4033627e615cdadcfa28f29e3e7be19599d2f6d1ffc0400124dd6d5dfd9181d05fffd22c6f4f33497e0e41db7610e5e537e13f9a85952204cbf838ea735afa29473512e43038bd4c4179c473ff90472b0b0f43453a2e73fdea68edbd4657c2e8456af39785abb7d5672ea57fc1be0771c6e335b7cca60fd58e22c15c6db5d733f39ee2cc353a7626d6086051ce5c2963bb74b74500000049050100a8a146f1bbd59a07d5934bdedef1d46472679d1e64d6ca503ae52ef6c60aaa43d2349f3619d0ae5a90158f57276e7c902679575c3d7a74e20042d51b6fedfe00cd62372219a968c1ab7ddf1516bbe3a753039a07a85a4d46227db6cf90555f0c55f80f45d3837f06295eb65490aeccb543d13c7fe4aecde4cf1ffa11472d83f1c7f53bcf870c4babbf40bf3a5f28a21910539a563e10295193d96557ec37c4a926b8876d2504a17cef3ec9f1213d04770f2272c32e07e60b523d609e637a67ab4693684d8ad0ed19134fd49185123a4b3c5bb3560a52d8c7f4812400e090ed67f22d4e9b414aaaf859a85b6b5d9d4619ed131b5bfdc875b9c7bb0a2acec60c8e9768db1e9217f4940824ff9e4e14fc4534de79b1db4a4980ab330e6040638e32083b49cafddca8ee89e0471ee05c501f1712174e6010a29ceeb4bd654f403b4e01638309a495a99e12bd923839f66a5dd57ca76847358dcc362f57e7f6b56b455606e989b3504d9cdf6255c3360f5258cb6c251875d0e11561749aba92e02573c4738ca9331910490bf2cec4aeafc07a155300093f87c4f2c1bdf7f701e4c7bb86ceb5e64563cf4faef7f8f536dcdcbee5f6494aa1fb6d9c9cfaa78abc68fb49c6ee63a625ac6843e62e38899001b9e28cdb2d3b445ccfae5a1573b1fee30fcccc0dbab22937c128fa3eff3342bb07fd4cd86530dbdbd0401a5e7454a34811a114175a516de1f8ad7614fd84ef41c59cd6c374eb62d7512307060f678b0c5b54071d23e3a472cff437819a3c06c0244d3a79022cffb5a94efd5f6e6adf3cca06f74a06b5312c46dc12148bc5c5a00e9878651ef8c1eaf5d49fc14e40ddb8f713fe1c6e633de13c6260820d35d8ca19deacf4254d607ea087810d591bcde153258c6ba33ee9232b712bf1cbc2280e714bec1bcfca23a8fc118be00d3db2acaf8edc4d7619b2a8496f70a1d20eb3e58c1bbf21d55d4192aaf1cd65c7884b95e832b7f43b1ccd200197fb534f3838881e3e1a036d4854f3903863e1407fb614f280d8c8abb44790078fee194fd3daa1fc1f1f6763f8c3538855015f96ec6b06652db6d3458b347d57c07ee44f9591a8bf21c387da885853ed4bebd7b260ff56ed0b303e11febc50f16572db979579c55897afba732e357c39c4765c817bcdf327177a88154377a9ad03f759cacc072656b81912a6037da6e60d971d3e598bd12ea6005483b00fb57efdf99e609d54dafd2bf178cd49ae8761e8966ee34d9967fc211af5be232a086d2a68c92c39781e006a37a3ba034f8bc01926e8561b03645d73ae70247360cd460ece1d1847341c0a850b84b5bd4e3f74809ec888c8c31f2ae322a8ab88ae8e2e89542228fe989eedb39edc0cb0edaf36630c960de1195efce2b1a7aca162653c9b2b31a5ef2f778e08d4d8d1ea3c0b83c94ce61151b7a25c83edd54ea85c92a3374cfa55ccc847c54a23ff1ee786a11af3ba256f0cfe8df1860f272e0035c197d47a23604361b83879e75d79555a8bfe4b7ae58d9678899225a46a6d9d65f7a43403758fc437d5f174efe0b8f11f48e9c8616bad6e1419c76acf736313e576535d2195a22e9b516e056a743fe68860d985030905ebaaaf2f0549155b72bc7e7c996931abe90ebdb4369b1c22bdd8d4566a89d6330c754224f8b53d59eb309567d32db1ae1bbb11fcd6d8cc68e55e55a2e6d01d5ef6ff2b2f09a17ae8f39f8ba2d503acfe6193dcfdd6d747f50b074f16b097ad3df5dfebc3791f421af5d418206154d85936f08aa9e8fd8171d04a5e77c87c396f589cde056b554af28393867bf36a1ef4c53643bd1ca4c2338f3b0684709c1483a061b17a7c3e5f1ceb0888391547095da7941ccb0c897d6f83f3c6fafab5bba21758543910419212c1e6"], 0x159c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x9, 0x3, 0xfffffffe) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r8}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2404c0d0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ipvlan1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) kernel console output (not intermixed with test programs): T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.022966][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.039930][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.060220][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.103156][ T5834] Bluetooth: hci0: command tx timeout [ 91.129466][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.148842][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.163702][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.182595][ T5839] Bluetooth: hci1: command tx timeout [ 91.188212][ T5834] Bluetooth: hci2: command tx timeout [ 91.191907][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.274224][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.299392][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.318414][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.331624][ T5839] Bluetooth: hci4: command tx timeout [ 91.337427][ T5834] Bluetooth: hci3: command tx timeout [ 91.354008][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.435609][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.478034][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.506919][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.526272][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.598060][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.624387][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.637060][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.662207][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.675116][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.708012][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.749148][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.798987][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.807009][ T3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.841299][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.852468][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.861090][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.887947][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.895665][ T3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.939467][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.947217][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.978858][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.047698][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.097415][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.105104][ T3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.127336][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.136110][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.145249][ T24] cfg80211: failed to load regulatory.db [ 92.168898][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.217975][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.268603][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.307050][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.314375][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.328818][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.355030][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.369535][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.381133][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.389640][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.429136][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.437783][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.471253][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.478634][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.573803][ T5844] veth0_vlan: entered promiscuous mode [ 92.590725][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.632738][ T5845] veth0_vlan: entered promiscuous mode [ 92.655179][ T5844] veth1_vlan: entered promiscuous mode [ 92.692957][ T5845] veth1_vlan: entered promiscuous mode [ 92.749255][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.815730][ T5844] veth0_macvtap: entered promiscuous mode [ 92.825805][ T5847] veth0_vlan: entered promiscuous mode [ 92.844890][ T5845] veth0_macvtap: entered promiscuous mode [ 92.859714][ T5844] veth1_macvtap: entered promiscuous mode [ 92.872549][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.885309][ T5845] veth1_macvtap: entered promiscuous mode [ 92.920064][ T5847] veth1_vlan: entered promiscuous mode [ 92.971244][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.985683][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.010327][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.028003][ T5841] veth0_vlan: entered promiscuous mode [ 93.036771][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.064523][ T1012] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.078886][ T1012] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.096457][ T1012] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.119453][ T1012] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.130216][ T1012] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.146855][ T5841] veth1_vlan: entered promiscuous mode [ 93.155823][ T1012] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.165957][ T1012] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.175242][ T5834] Bluetooth: hci0: command tx timeout [ 93.190242][ T1012] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.230275][ T5847] veth0_macvtap: entered promiscuous mode [ 93.238398][ T5848] veth0_vlan: entered promiscuous mode [ 93.252119][ T5839] Bluetooth: hci1: command tx timeout [ 93.257739][ T5834] Bluetooth: hci2: command tx timeout [ 93.287739][ T5847] veth1_macvtap: entered promiscuous mode [ 93.365897][ T5848] veth1_vlan: entered promiscuous mode [ 93.407897][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.417881][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.424300][ T5839] Bluetooth: hci4: command tx timeout [ 93.432722][ T5834] Bluetooth: hci3: command tx timeout [ 93.439829][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.448335][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.465804][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.488271][ T5841] veth0_macvtap: entered promiscuous mode [ 93.524690][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.553880][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.562643][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.564368][ T5841] veth1_macvtap: entered promiscuous mode [ 93.596240][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.596434][ T1012] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.606042][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.638592][ T1012] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.675152][ T1012] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.691071][ T1012] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.710312][ T5848] veth0_macvtap: entered promiscuous mode [ 93.725017][ T5848] veth1_macvtap: entered promiscuous mode [ 93.740801][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.794409][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.858120][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.917288][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.947609][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.995620][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.033122][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.055542][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6'. [ 94.070092][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.088319][ T5929] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 94.100800][ T5929] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 94.131326][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.141406][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.170147][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.222217][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.256540][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.294801][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.316310][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.327316][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.337753][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.522505][ T5938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 94.537756][ T5938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 94.875103][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.924637][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.979102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.062479][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.064877][ T5938] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 95.153214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.163733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.173829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 95.282776][ T5834] Bluetooth: hci0: command tx timeout [ 95.333345][ T5839] Bluetooth: hci1: command tx timeout [ 95.339315][ T5834] Bluetooth: hci2: command tx timeout [ 95.346666][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.362883][ T5951] xt_hashlimit: max too large, truncated to 1048576 [ 95.393204][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.492778][ T5834] Bluetooth: hci4: command tx timeout [ 95.516579][ T5839] Bluetooth: hci3: command tx timeout [ 95.678861][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.697184][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.738630][ T5952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.786796][ T5952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.861825][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.112097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.333051][ T5966] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 96.374736][ T5966] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 96.470196][ T5972] xt_connbytes: Forcing CT accounting to be enabled [ 96.644512][ T5972] Cannot find del_set index 1 as target [ 96.678993][ T5974] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14'. [ 96.682095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.851985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.853881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.290165][ T5986] program syz.1.17 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.738628][ T6006] netlink: 56 bytes leftover after parsing attributes in process `syz.0.23'. [ 98.863747][ T6006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23'. [ 99.557790][ T6013] xt_CONNSECMARK: invalid mode: 0 [ 99.644629][ T6015] input: syz0 as /devices/virtual/input/input5 [ 99.889824][ T6018] syz.2.26 uses obsolete (PF_INET,SOCK_PACKET) [ 100.114846][ T6023] syzkaller1: entered promiscuous mode [ 100.120527][ T6023] syzkaller1: entered allmulticast mode [ 100.128394][ T6023] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.963477][ T6038] syz.3.30 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 101.373410][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.535163][ T5953] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.685919][ T6044] netlink: 20 bytes leftover after parsing attributes in process `syz.4.32'. [ 101.691643][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 101.701552][ T5953] usb 2-1: Using ep0 maxpacket: 16 [ 101.730656][ T9] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 101.827503][ T9] usb 4-1: config 0 has no interface number 0 [ 101.973762][ T9] usb 4-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 101.987746][ T5953] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 102.003784][ T5953] usb 2-1: config 0 has no interface number 0 [ 102.014859][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.051322][ T9] usb 4-1: Product: syz [ 102.072112][ T9] usb 4-1: Manufacturer: syz [ 102.101903][ T9] usb 4-1: SerialNumber: syz [ 102.108191][ T5953] usb 2-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 102.118268][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.152303][ T5953] usb 2-1: Product: syz [ 102.165539][ T5953] usb 2-1: Manufacturer: syz [ 102.193235][ T9] usb 4-1: config 0 descriptor?? [ 102.200956][ T5953] usb 2-1: SerialNumber: syz [ 102.251894][ T5953] usb 2-1: config 0 descriptor?? [ 102.598654][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29'. [ 102.610229][ T30] audit: type=1326 audit(1764908537.280:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 102.716412][ T30] audit: type=1326 audit(1764908537.280:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 102.821133][ T30] audit: type=1326 audit(1764908537.280:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 102.942470][ T30] audit: type=1326 audit(1764908537.280:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 103.004646][ T30] audit: type=1326 audit(1764908537.280:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 103.057650][ T30] audit: type=1326 audit(1764908537.350:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.3.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cef98f749 code=0x7ffc0000 [ 103.143406][ T30] audit: type=1326 audit(1764908537.350:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.3.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cef98f749 code=0x7ffc0000 [ 103.263184][ T30] audit: type=1326 audit(1764908537.940:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 103.498177][ T30] audit: type=1326 audit(1764908537.940:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 104.164621][ T9] go7007 4-1:0.41: probe with driver go7007 failed with error -12 [ 104.281375][ T30] audit: type=1326 audit(1764908538.960:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ae38f749 code=0x7ffc0000 [ 104.405230][ T6068] netlink: 'syz.2.37': attribute type 1 has an invalid length. [ 104.428750][ T9] usb 4-1: USB disconnect, device number 2 [ 104.640717][ T5953] go7007 2-1:0.41: probe with driver go7007 failed with error -12 [ 104.727737][ T5953] usb 2-1: USB disconnect, device number 2 [ 104.957215][ T6081] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 105.205869][ T6080] loop2: detected capacity change from 0 to 7 [ 105.243674][ T6084] vlan2: entered allmulticast mode [ 105.252471][ T6080] Dev loop2: unable to read RDB block 7 [ 105.272750][ T6086] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 105.291159][ T6080] loop2: AHDI p1 p2 p3 [ 105.295653][ T6080] loop2: partition table partially beyond EOD, truncated [ 105.304116][ T6080] loop2: p1 start 1601398130 is beyond EOD, truncated [ 105.311546][ T6080] loop2: p2 start 1702059890 is beyond EOD, truncated [ 105.401726][ T6084] erspan0: entered allmulticast mode [ 107.812793][ T6108] program syz.0.45 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.837659][ T5838] IPVS: starting estimator thread 0... [ 107.972358][ T6109] IPVS: using max 27 ests per chain, 64800 per kthread [ 108.028302][ T6113] program syz.2.46 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.961612][ T5914] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 109.153261][ T5914] usb 4-1: config 253 has an invalid interface number: 1 but max is 0 [ 109.181674][ T5914] usb 4-1: config 253 has no interface number 0 [ 109.193553][ T5914] usb 4-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 109.226855][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.288795][ T5914] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 109.332008][ T5914] usb 4-1: no configuration chosen from 1 choice [ 109.992377][ T6134] FAULT_INJECTION: forcing a failure. [ 109.992377][ T6134] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 110.011655][ T6134] CPU: 1 UID: 0 PID: 6134 Comm: syz.2.54 Not tainted syzkaller #0 PREEMPT(full) [ 110.011682][ T6134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.011701][ T6134] Call Trace: [ 110.011709][ T6134] [ 110.011718][ T6134] dump_stack_lvl+0x189/0x250 [ 110.011753][ T6134] ? __pfx____ratelimit+0x10/0x10 [ 110.011778][ T6134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.011800][ T6134] ? __pfx__printk+0x10/0x10 [ 110.011827][ T6134] ? __might_fault+0xb0/0x130 [ 110.011863][ T6134] should_fail_ex+0x414/0x560 [ 110.011904][ T6134] _copy_from_iter+0x1cd/0x1630 [ 110.011937][ T6134] ? __build_skb_around+0x22d/0x3c0 [ 110.011971][ T6134] ? __pfx__copy_from_iter+0x10/0x10 [ 110.011997][ T6134] ? __alloc_skb+0x2f1/0x430 [ 110.012016][ T6134] ? __pfx___alloc_skb+0x10/0x10 [ 110.012054][ T6134] ? netlink_sendmsg+0x642/0xb30 [ 110.012075][ T6134] ? skb_put+0x11b/0x210 [ 110.012096][ T6134] netlink_sendmsg+0x6b2/0xb30 [ 110.012125][ T6134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.012151][ T6134] ? aa_sock_msg_perm+0xf1/0x1b0 [ 110.012175][ T6134] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 110.012202][ T6134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.012225][ T6134] __sock_sendmsg+0x21c/0x270 [ 110.012252][ T6134] ____sys_sendmsg+0x505/0x820 [ 110.012278][ T6134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.012307][ T6134] ? import_iovec+0x74/0xa0 [ 110.012330][ T6134] ___sys_sendmsg+0x21f/0x2a0 [ 110.012352][ T6134] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.012379][ T6134] ? rcu_read_lock_any_held+0xb3/0x120 [ 110.012425][ T6134] ? __fget_files+0x2a/0x420 [ 110.012443][ T6134] ? __fget_files+0x3a0/0x420 [ 110.012467][ T6134] __x64_sys_sendmsg+0x19b/0x260 [ 110.012487][ T6134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 110.012514][ T6134] ? __pfx_ksys_write+0x10/0x10 [ 110.012543][ T6134] ? do_syscall_64+0xbe/0xf80 [ 110.012574][ T6134] do_syscall_64+0xfa/0xf80 [ 110.012602][ T6134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.012621][ T6134] ? clear_bhb_loop+0x60/0xb0 [ 110.012644][ T6134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.012662][ T6134] RIP: 0033:0x7f0c1af8f749 [ 110.012686][ T6134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.012703][ T6134] RSP: 002b:00007f0c1bed9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.012724][ T6134] RAX: ffffffffffffffda RBX: 00007f0c1b1e5fa0 RCX: 00007f0c1af8f749 [ 110.012738][ T6134] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 110.012750][ T6134] RBP: 00007f0c1bed9090 R08: 0000000000000000 R09: 0000000000000000 [ 110.012761][ T6134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.012771][ T6134] R13: 00007f0c1b1e6038 R14: 00007f0c1b1e5fa0 R15: 00007f0c1b30fa28 [ 110.012800][ T6134] [ 110.602865][ T6139] Zero length message leads to an empty skb [ 110.744178][ T6131] netlink: 100 bytes leftover after parsing attributes in process `syz.1.53'. [ 111.144972][ T5953] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.394493][ T5953] usb 5-1: Using ep0 maxpacket: 16 [ 111.421379][ T5953] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 111.454912][ T5953] usb 5-1: config 0 has no interface number 0 [ 111.476665][ T5953] usb 5-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 111.486581][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.496798][ T5953] usb 5-1: Product: syz [ 111.500963][ T5953] usb 5-1: Manufacturer: syz [ 111.514228][ T5953] usb 5-1: SerialNumber: syz [ 111.527824][ T5953] usb 5-1: config 0 descriptor?? [ 111.752312][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 111.752328][ T30] audit: type=1326 audit(1764908546.430:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039b98f749 code=0x7ffc0000 [ 111.789692][ T30] audit: type=1326 audit(1764908546.430:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f039b98f749 code=0x7ffc0000 [ 111.884710][ T981] usb 4-1: USB disconnect, device number 3 [ 112.098110][ T30] audit: type=1326 audit(1764908546.430:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039b98f749 code=0x7ffc0000 [ 112.158381][ T30] audit: type=1326 audit(1764908546.430:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f039b98f749 code=0x7ffc0000 [ 112.272934][ T30] audit: type=1326 audit(1764908546.430:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039b98f749 code=0x7ffc0000 [ 112.319685][ T30] audit: type=1326 audit(1764908546.430:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f039b98f34b code=0x7ffc0000 [ 112.363600][ T30] audit: type=1326 audit(1764908546.430:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039b98f749 code=0x7ffc0000 [ 112.411931][ T5900] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.452186][ T30] audit: type=1326 audit(1764908546.430:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f039b98f749 code=0x7ffc0000 [ 112.506833][ T30] audit: type=1326 audit(1764908546.580:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039b98f749 code=0x7ffc0000 [ 112.580664][ T5900] usb 2-1: unable to get BOS descriptor or descriptor too short [ 112.591799][ T5900] usb 2-1: config 13 has an invalid interface number: 50 but max is 3 [ 112.611429][ T30] audit: type=1326 audit(1764908546.580:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039b98f749 code=0x7ffc0000 [ 112.638800][ T5900] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 112.692903][ T5900] usb 2-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 112.727017][ T5900] usb 2-1: config 13 has no interface number 0 [ 112.765463][ T5900] usb 2-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 112.823862][ T5900] usb 2-1: config 13 interface 50 has no altsetting 0 [ 112.848853][ T5900] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 112.871704][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.882792][ T5900] usb 2-1: Product: syz [ 112.887160][ T5900] usb 2-1: Manufacturer: syz [ 112.892655][ T5900] usb 2-1: SerialNumber: syz [ 112.983000][ T6162] IPVS: sh: FWM 3 0x00000003 - no destination available [ 112.990293][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 113.006089][ T6162] program syz.3.62 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.033457][ T851] IPVS: starting estimator thread 0... [ 113.128852][ T6163] IPVS: using max 49 ests per chain, 117600 per kthread [ 113.540180][ T6169] netlink: 84 bytes leftover after parsing attributes in process `syz.2.64'. [ 114.291985][ T5921] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.464691][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 114.481907][ T5921] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 114.509991][ T5921] usb 3-1: config 0 has no interface number 0 [ 114.526168][ T5921] usb 3-1: config 0 interface 12 has no altsetting 0 [ 114.549510][ T5921] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 114.559141][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.661639][ T5921] usb 3-1: Product: syz [ 114.666055][ T5921] usb 3-1: Manufacturer: syz [ 114.671784][ T5921] usb 3-1: SerialNumber: syz [ 114.723778][ T5921] usb 3-1: config 0 descriptor?? [ 115.064192][ T5953] go7007 5-1:0.41: probe with driver go7007 failed with error -12 [ 115.074751][ T5953] usb 5-1: USB disconnect, device number 2 [ 115.155125][ T6174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.193862][ T6174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.316765][ T5900] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 115.329695][ T36] usb 2-1: Failed to submit usb control message: -71 [ 115.338301][ T36] usb 2-1: unable to send the bmi data to the device: -71 [ 115.366635][ T5900] usb 2-1: USB disconnect, device number 3 [ 115.378827][ T36] usb 2-1: unable to get target info from device [ 115.398620][ T36] usb 2-1: could not get target info (-71) [ 115.421043][ T36] usb 2-1: could not probe fw (-71) [ 115.512726][ T6184] vlan2: entered allmulticast mode [ 115.517906][ T6184] erspan0: entered allmulticast mode [ 115.922570][ T5900] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.091576][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 116.109118][ T5900] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 116.145784][ T5900] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.164670][ T6195] netlink: 'syz.4.72': attribute type 10 has an invalid length. [ 116.182976][ T5900] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.204583][ T6195] macvlan1: entered allmulticast mode [ 116.214268][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.236145][ T6195] veth1_vlan: entered allmulticast mode [ 116.246175][ T5900] usb 2-1: Product: syz [ 116.261964][ T5900] usb 2-1: Manufacturer: syz [ 116.285264][ T5900] usb 2-1: SerialNumber: syz [ 116.294841][ T6195] team0: Port device macvlan1 added [ 116.517562][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.74'. [ 116.532222][ T5900] usb 2-1: 0:2 : does not exist [ 116.553054][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.74'. [ 116.575813][ T5900] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 116.608521][ T6203] netlink: 40 bytes leftover after parsing attributes in process `syz.0.73'. [ 116.705799][ T5900] usb 2-1: USB disconnect, device number 4 [ 116.843277][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.999145][ T5921] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 117.038981][ T5921] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 117.072105][ T5921] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 117.100007][ T5921] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 117.151747][ T5921] usb 3-1: USB disconnect, device number 2 [ 117.383885][ T6220] program syz.3.77 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.068501][ T6224] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.099364][ T6242] xt_connbytes: Forcing CT accounting to be enabled [ 119.199801][ T6250] netlink: 40 bytes leftover after parsing attributes in process `syz.1.86'. [ 119.414750][ T30] audit: type=1800 audit(1764908554.100:59): pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.87" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 119.764703][ T6242] Cannot find del_set index 1 as target [ 120.168329][ T6260] input: syz1 as /devices/virtual/input/input7 [ 120.264996][ T6265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.89'. [ 121.461950][ T5953] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.535967][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 121.694227][ T5953] usb 5-1: Using ep0 maxpacket: 16 [ 121.718853][ T5953] usb 5-1: config 0 has no interfaces? [ 121.728538][ T6288] input: syz1 as /devices/virtual/input/input9 [ 121.748204][ T5953] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 121.766665][ T5953] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 121.814773][ T5953] usb 5-1: Manufacturer: syz [ 121.963483][ T5953] usb 5-1: config 0 descriptor?? [ 122.676472][ T30] audit: type=1800 audit(1764908557.360:60): pid=6285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.90" name="bus" dev="ramfs" ino=10477 res=0 errno=0 [ 123.041759][ T6248] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.091912][ T5968] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.215019][ T6248] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 123.225458][ T6248] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.240217][ T6248] usb 4-1: config 0 descriptor?? [ 123.251633][ T5968] usb 3-1: Using ep0 maxpacket: 16 [ 123.262713][ T5968] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 123.275117][ T5968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 123.288794][ T5968] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 123.299455][ T5968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.308250][ T5968] usb 3-1: Product: syz [ 123.313023][ T5968] usb 3-1: Manufacturer: syz [ 123.317878][ T5968] usb 3-1: SerialNumber: syz [ 123.326574][ T5968] usb 3-1: config 0 descriptor?? [ 123.342069][ T5968] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 123.352456][ T5968] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 123.459522][ T6295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.476854][ T6295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.510793][ T6248] kaweth 4-1:0.0: Firmware present in device. [ 123.549634][ T6311] netlink: 'syz.1.104': attribute type 10 has an invalid length. [ 123.560619][ T6311] macvlan1: entered allmulticast mode [ 123.572714][ T6311] veth1_vlan: entered allmulticast mode [ 123.586663][ T6311] team0: Port device macvlan1 added [ 123.711089][ T6248] kaweth 4-1:0.0: Statistics collection: 0 [ 123.718378][ T6248] kaweth 4-1:0.0: Multicast filter limit: 0 [ 123.726816][ T6248] kaweth 4-1:0.0: MTU: 0 [ 123.732446][ T6248] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 123.911977][ T5838] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 123.948158][ T5968] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 123.958294][ T5968] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 124.084693][ T5838] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 124.103575][ T5838] usb 2-1: config 0 has no interface number 0 [ 124.110284][ T5838] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 124.164869][ T6248] kaweth 4-1:0.0: Error setting SOFS wait [ 124.171071][ T5838] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 124.210146][ T6248] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 124.231518][ T5838] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 124.262385][ T5838] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 124.293929][ T6248] usb 4-1: USB disconnect, device number 4 [ 124.324385][ T5838] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 124.338503][ T5921] usb 5-1: USB disconnect, device number 3 [ 124.354576][ T5838] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 124.390636][ T5838] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 124.406340][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.437616][ T5838] usb 2-1: config 0 descriptor?? [ 124.444919][ T6313] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 124.463784][ T6313] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 124.468557][ T6319] IPVS: sh: FWM 3 0x00000003 - no destination available [ 124.479123][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 124.504046][ T6319] program syz.4.107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.520985][ T5838] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 124.550122][ T10] IPVS: starting estimator thread 0... [ 124.641693][ T6320] IPVS: using max 28 ests per chain, 67200 per kthread [ 124.693653][ T5921] usb 2-1: USB disconnect, device number 5 [ 124.700321][ C1] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 124.728671][ T5921] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 124.797987][ T6297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.812182][ T6297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.905029][ T6313] ldusb: No device or device unplugged -19 [ 124.912581][ T6321] ldusb: No device or device unplugged -19 [ 125.106577][ T5968] em28xx 3-1:0.0: AC97 vendor ID = 0x00fc00fe [ 125.321995][ T5968] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 125.342890][ T5968] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 125.344367][ T6329] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.534078][ T5968] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 125.555995][ T5968] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 125.584058][ T5968] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 125.590899][ T5968] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 125.629085][ T6333] FAULT_INJECTION: forcing a failure. [ 125.629085][ T6333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.635337][ T5968] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 125.649972][ T6333] CPU: 0 UID: 0 PID: 6333 Comm: syz.1.112 Not tainted syzkaller #0 PREEMPT(full) [ 125.649996][ T6333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.650006][ T6333] Call Trace: [ 125.650013][ T6333] [ 125.650020][ T6333] dump_stack_lvl+0x189/0x250 [ 125.650046][ T6333] ? __pfx____ratelimit+0x10/0x10 [ 125.650070][ T6333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.650089][ T6333] ? __pfx__printk+0x10/0x10 [ 125.650116][ T6333] ? __might_fault+0xb0/0x130 [ 125.650152][ T6333] should_fail_ex+0x414/0x560 [ 125.650184][ T6333] _copy_from_user+0x2d/0xb0 [ 125.650206][ T6333] vhost_net_ioctl+0xb47/0x15c0 [ 125.650239][ T6333] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 125.650272][ T6333] ? __fget_files+0x3a0/0x420 [ 125.650302][ T6333] ? __fget_files+0x2a/0x420 [ 125.650324][ T6333] ? bpf_lsm_file_ioctl+0x9/0x20 [ 125.650343][ T6333] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 125.650367][ T6333] __se_sys_ioctl+0xfc/0x170 [ 125.650396][ T6333] do_syscall_64+0xfa/0xf80 [ 125.650424][ T6333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.650443][ T6333] ? clear_bhb_loop+0x60/0xb0 [ 125.650465][ T6333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.650484][ T6333] RIP: 0033:0x7f301198f749 [ 125.650500][ T6333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.650514][ T6333] RSP: 002b:00007f3012758038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.650536][ T6333] RAX: ffffffffffffffda RBX: 00007f3011be5fa0 RCX: 00007f301198f749 [ 125.650625][ T6333] RDX: 0000200000000400 RSI: 000000004008af83 RDI: 0000000000000004 [ 125.650639][ T6333] RBP: 00007f3012758090 R08: 0000000000000000 R09: 0000000000000000 [ 125.650649][ T6333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.650658][ T6333] R13: 00007f3011be6038 R14: 00007f3011be5fa0 R15: 00007f3011d0fa28 [ 125.650686][ T6333] [ 125.853308][ T5968] usb 3-1: USB disconnect, device number 3 [ 126.398121][ T6346] input: syz1 as /devices/virtual/input/input10 [ 126.526324][ T6349] xt_connbytes: Forcing CT accounting to be enabled [ 126.556547][ T6349] Cannot find del_set index 1 as target [ 126.611952][ T6351] input: syz0 as /devices/virtual/input/input11 [ 128.057601][ T6365] xt_hashlimit: max too large, truncated to 1048576 [ 128.112113][ T30] audit: type=1326 audit(1764908562.790:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cef98f749 code=0x7ffc0000 [ 128.155883][ T30] audit: type=1326 audit(1764908562.790:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cef98f749 code=0x7ffc0000 [ 128.187255][ T30] audit: type=1326 audit(1764908562.820:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8cef98f749 code=0x7ffc0000 [ 128.296242][ T30] audit: type=1326 audit(1764908562.820:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cef98f749 code=0x7ffc0000 [ 128.345127][ T30] audit: type=1326 audit(1764908562.820:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cef98f749 code=0x7ffc0000 [ 128.383046][ T6375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.124'. [ 128.397895][ T30] audit: type=1326 audit(1764908562.860:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f8cef98f749 code=0x7ffc0000 [ 128.526581][ T30] audit: type=1326 audit(1764908562.860:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cef98f749 code=0x7ffc0000 [ 128.748672][ T30] audit: type=1326 audit(1764908562.860:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cef98f749 code=0x7ffc0000 [ 128.778967][ T6375] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 128.813869][ T30] audit: type=1326 audit(1764908562.860:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8cef98f749 code=0x7ffc0000 [ 128.850206][ T6382] loop5: detected capacity change from 0 to 7 [ 128.850975][ T30] audit: type=1326 audit(1764908562.860:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6366 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cef98f749 code=0x7ffc0000 [ 128.880317][ T6375] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 128.888096][ T6382] Dev loop5: unable to read RDB block 7 [ 128.895697][ T6382] loop5: unable to read partition table [ 128.906864][ T6382] loop5: partition table beyond EOD, truncated [ 128.945445][ T6382] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 129.651748][ T5953] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 129.769107][ T6399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.809579][ T6399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.817535][ T5953] usb 5-1: Using ep0 maxpacket: 16 [ 129.826828][ T5953] usb 5-1: config 0 has no interfaces? [ 129.834937][ T5953] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 129.846776][ T5953] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 129.871104][ T5953] usb 5-1: Manufacturer: syz [ 129.887513][ T5953] usb 5-1: config 0 descriptor?? [ 130.001648][ T981] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 130.171585][ T981] usb 4-1: Using ep0 maxpacket: 32 [ 130.286174][ T981] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 130.368279][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.389591][ T981] usb 4-1: Product: syz [ 130.399022][ T981] usb 4-1: Manufacturer: syz [ 130.408253][ T981] usb 4-1: SerialNumber: syz [ 130.641573][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 130.666407][ T981] usb 4-1: config 0 descriptor?? [ 130.725114][ T981] ati_remote 4-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 130.831730][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 130.841999][ T10] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 130.863834][ T10] usb 3-1: config 0 has no interface number 0 [ 130.890890][ T10] usb 3-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 8.d0 [ 130.914443][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.919745][ T981] usb 4-1: USB disconnect, device number 5 [ 130.958122][ T10] usb 3-1: config 0 descriptor?? [ 130.979990][ T10] usb 3-1: NDI device with a latency value of 1 [ 131.101587][ T5900] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 131.290208][ T5900] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 131.299782][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.308986][ T5900] usb 2-1: Product: syz [ 131.316858][ T5900] usb 2-1: Manufacturer: syz [ 131.338105][ T5900] usb 2-1: SerialNumber: syz [ 131.513128][ T6415] batadv0: entered promiscuous mode [ 131.519389][ T6415] vlan2: entered promiscuous mode [ 132.097073][ T6422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.116912][ T6421] input: syz0 as /devices/virtual/input/input12 [ 132.122074][ T5953] usb 5-1: USB disconnect, device number 4 [ 132.213831][ T6422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.382993][ T5900] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 132.395314][ T5900] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 132.517112][ T5900] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 132.738584][ T6434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.142'. [ 132.751981][ T6438] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 132.866816][ T6434] team_slave_0: entered promiscuous mode [ 132.873500][ T6434] team_slave_1: entered promiscuous mode [ 132.909759][ T5900] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 132.953758][ T6434] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 132.968751][ T6434] team_slave_0: left promiscuous mode [ 132.974544][ T6434] team_slave_1: left promiscuous mode [ 133.060596][ T5900] usb 2-1: USB disconnect, device number 6 [ 133.096779][ T851] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 133.098949][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.112119][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.252546][ T851] usb 5-1: device descriptor read/64, error -71 [ 133.573904][ T851] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 133.771729][ T851] usb 5-1: device descriptor read/64, error -71 [ 133.845477][ T6444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.144'. [ 133.892383][ T851] usb usb5-port1: attempt power cycle [ 133.954157][ T10] ftdi_sio 3-1:0.255: FTDI USB Serial Device converter detected [ 133.986136][ T10] ftdi_sio ttyUSB0: unknown device type: 0x8d0 [ 134.034794][ T10] usb 3-1: USB disconnect, device number 4 [ 134.064820][ T10] ftdi_sio 3-1:0.255: device disconnected [ 134.199347][ T6449] program syz.1.145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.217101][ T5900] IPVS: starting estimator thread 0... [ 134.281546][ T851] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 134.322576][ T851] usb 5-1: device descriptor read/8, error -71 [ 134.332255][ T6450] IPVS: using max 49 ests per chain, 117600 per kthread [ 134.601579][ T851] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 134.632542][ T851] usb 5-1: device descriptor read/8, error -71 [ 134.661746][ T6455] netlink: 56 bytes leftover after parsing attributes in process `syz.3.148'. [ 134.681784][ T6455] netlink: 24 bytes leftover after parsing attributes in process `syz.3.148'. [ 134.764968][ T851] usb usb5-port1: unable to enumerate USB device [ 134.821838][ T981] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 135.093814][ T981] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 135.103287][ T981] usb 3-1: config 0 has no interface number 0 [ 135.185199][ T981] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 135.339453][ T981] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 135.370221][ T981] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.381018][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.416477][ T981] usb 3-1: config 0 descriptor?? [ 135.435183][ T6466] xt_hashlimit: max too large, truncated to 1048576 [ 135.439048][ T6453] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 135.526315][ T981] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 135.773730][ T981] usb 3-1: USB disconnect, device number 5 [ 135.779642][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 135.808995][ T6470] netlink: 'syz.4.152': attribute type 1 has an invalid length. [ 135.906076][ T6472] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 135.958356][ T6472] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 135.972925][ T6453] netlink: 'syz.2.147': attribute type 1 has an invalid length. [ 136.209001][ T6470] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 136.295613][ T6474] macvlan2: entered promiscuous mode [ 136.338653][ T6474] macvlan2: entered allmulticast mode [ 136.368058][ T6474] bond1: entered promiscuous mode [ 136.399726][ T6474] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 136.432959][ T6474] bond1: left promiscuous mode [ 137.116205][ T6490] fuse: Unknown parameter 'group_d' [ 137.214876][ T6495] netlink: 84 bytes leftover after parsing attributes in process `syz.4.158'. [ 137.872895][ T6511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.163'. [ 138.174023][ T6516] program syz.4.164 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.167463][ T6529] FAULT_INJECTION: forcing a failure. [ 139.167463][ T6529] name failslab, interval 1, probability 0, space 0, times 0 [ 139.181878][ T6529] CPU: 1 UID: 0 PID: 6529 Comm: syz.2.169 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.181910][ T6529] Tainted: [L]=SOFTLOCKUP [ 139.181916][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.181927][ T6529] Call Trace: [ 139.181934][ T6529] [ 139.181941][ T6529] dump_stack_lvl+0x189/0x250 [ 139.181968][ T6529] ? __pfx____ratelimit+0x10/0x10 [ 139.181999][ T6529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.182020][ T6529] ? __pfx__printk+0x10/0x10 [ 139.182053][ T6529] ? __pfx___might_resched+0x10/0x10 [ 139.182073][ T6529] ? fs_reclaim_acquire+0x7d/0x100 [ 139.182105][ T6529] should_fail_ex+0x414/0x560 [ 139.182134][ T6529] should_failslab+0xa8/0x100 [ 139.182153][ T6529] __kmalloc_noprof+0xcb/0x800 [ 139.182175][ T6529] ? tomoyo_encode+0x28b/0x550 [ 139.182203][ T6529] tomoyo_encode+0x28b/0x550 [ 139.182231][ T6529] tomoyo_realpath_from_path+0x58d/0x5d0 [ 139.182265][ T6529] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 139.182284][ T6529] tomoyo_path_number_perm+0x1e8/0x5a0 [ 139.182307][ T6529] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 139.182343][ T6529] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 139.182391][ T6529] ? __fget_files+0x2a/0x420 [ 139.182415][ T6529] ? __fget_files+0x3a0/0x420 [ 139.182433][ T6529] ? __fget_files+0x2a/0x420 [ 139.182457][ T6529] security_file_ioctl+0xcb/0x2d0 [ 139.182492][ T6529] __se_sys_ioctl+0x47/0x170 [ 139.182520][ T6529] do_syscall_64+0xfa/0xf80 [ 139.182547][ T6529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.182566][ T6529] ? clear_bhb_loop+0x60/0xb0 [ 139.182589][ T6529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.182615][ T6529] RIP: 0033:0x7f0c1af8f749 [ 139.182632][ T6529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.182649][ T6529] RSP: 002b:00007f0c1bed9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.182671][ T6529] RAX: ffffffffffffffda RBX: 00007f0c1b1e5fa0 RCX: 00007f0c1af8f749 [ 139.182685][ T6529] RDX: 0000200000000100 RSI: 00000000c034564b RDI: 0000000000000003 [ 139.182698][ T6529] RBP: 00007f0c1bed9090 R08: 0000000000000000 R09: 0000000000000000 [ 139.182710][ T6529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.182721][ T6529] R13: 00007f0c1b1e6038 R14: 00007f0c1b1e5fa0 R15: 00007f0c1b30fa28 [ 139.182753][ T6529] [ 139.186534][ T6529] ERROR: Out of memory at tomoyo_realpath_from_path. [ 139.231638][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 139.911271][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 139.949229][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 139.961673][ T10] usb 4-1: device descriptor read/64, error -71 [ 140.103809][ T6543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.174'. [ 140.125029][ T6543] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 140.142133][ T6543] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 140.186637][ T6545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.173'. [ 140.214169][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 140.361549][ T10] usb 4-1: device descriptor read/64, error -71 [ 140.487232][ T10] usb usb4-port1: attempt power cycle [ 140.882027][ T6552] program syz.2.176 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.922501][ T6248] IPVS: starting estimator thread 0... [ 140.984204][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 141.032254][ T6553] IPVS: using max 48 ests per chain, 115200 per kthread [ 141.044229][ T10] usb 4-1: device descriptor read/8, error -71 [ 141.124724][ T6560] syzkaller1: entered promiscuous mode [ 141.136385][ T6560] syzkaller1: entered allmulticast mode [ 141.191797][ T5953] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 141.301594][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 141.322234][ T10] usb 4-1: device descriptor read/8, error -71 [ 141.372844][ T5953] usb 5-1: Using ep0 maxpacket: 16 [ 141.380144][ T5953] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 141.392617][ T5953] usb 5-1: config 0 has no interface number 0 [ 141.551679][ T10] usb usb4-port1: unable to enumerate USB device [ 141.601184][ T5953] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 141.618327][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.658940][ T5953] usb 5-1: Product: syz [ 141.669066][ T5953] usb 5-1: Manufacturer: syz [ 141.687557][ T5953] usb 5-1: SerialNumber: syz [ 141.720688][ T5953] usb 5-1: config 0 descriptor?? [ 141.737407][ T5953] hub 5-1:0.132: bad descriptor, ignoring hub [ 141.748407][ T5953] hub 5-1:0.132: probe with driver hub failed with error -5 [ 141.781753][ T5953] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input13 [ 141.883983][ T6568] xt_hashlimit: max too large, truncated to 1048576 [ 141.929660][ T6556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.948677][ T6556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.004493][ T6556] input: syz1 as /devices/virtual/input/input14 [ 142.309250][ T6584] netlink: 84 bytes leftover after parsing attributes in process `syz.3.186'. [ 142.881525][ T5838] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 142.902687][ T6594] capability: warning: `syz.1.189' uses deprecated v2 capabilities in a way that may be insecure [ 143.372308][ T5838] usb 4-1: unable to get BOS descriptor or descriptor too short [ 143.397620][ T5838] usb 4-1: not running at top speed; connect to a high speed hub [ 143.423342][ T5838] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 143.434971][ T5838] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 143.454086][ T5838] usb 4-1: config 4 has no interface number 0 [ 143.463920][ T5838] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 143.476046][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.495708][ T5838] usb 4-1: Product: syz [ 143.499899][ T5838] usb 4-1: Manufacturer: syz [ 143.525767][ T5838] usb 4-1: SerialNumber: syz [ 143.915228][ T6590] xt_socket: unknown flags 0xc [ 143.927029][ T6600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.191'. [ 143.959431][ T5838] uvcvideo 4-1:4.147: Found multiple Units with ID 6 [ 143.968960][ T5838] uvcvideo 4-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 144.068598][ T5838] uvcvideo 4-1:4.147: No streaming interface found for terminal 65535. [ 144.255667][ T5838] usb 4-1: USB disconnect, device number 10 [ 144.449469][ T6602] ip6t_srh: unknown srh match flags 4000 [ 144.726863][ T6616] program syz.0.194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.750624][ T6615] pim6reg: entered allmulticast mode [ 145.832531][ T851] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 145.991592][ T851] usb 2-1: Using ep0 maxpacket: 32 [ 146.012867][ T851] usb 2-1: config 0 has an invalid interface number: 59 but max is 0 [ 146.022135][ T851] usb 2-1: config 0 has no interface number 0 [ 146.115198][ T851] usb 2-1: New USB device found, idVendor=1d2a, idProduct=0801, bcdDevice= b.f2 [ 146.191982][ T851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.349000][ T851] usb 2-1: Product: syz [ 146.366783][ T5953] usb 5-1: USB disconnect, device number 9 [ 146.399666][ T851] usb 2-1: Manufacturer: syz [ 146.437602][ T851] usb 2-1: SerialNumber: syz [ 146.462775][ T851] usb 2-1: config 0 descriptor?? [ 146.580755][ T851] asix 2-1:0.59: probe with driver asix failed with error -22 [ 146.649884][ T6634] netlink: 'syz.2.199': attribute type 16 has an invalid length. [ 146.686307][ T6634] netlink: 'syz.2.199': attribute type 17 has an invalid length. [ 146.867538][ T6634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.157584][ T6641] FAULT_INJECTION: forcing a failure. [ 147.157584][ T6641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.157609][ T6641] CPU: 0 UID: 0 PID: 6641 Comm: syz.4.203 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.157623][ T6641] Tainted: [L]=SOFTLOCKUP [ 147.157627][ T6641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.157633][ T6641] Call Trace: [ 147.157637][ T6641] [ 147.157642][ T6641] dump_stack_lvl+0x189/0x250 [ 147.157659][ T6641] ? __pfx____ratelimit+0x10/0x10 [ 147.157673][ T6641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.157685][ T6641] ? __pfx__printk+0x10/0x10 [ 147.157700][ T6641] ? __might_fault+0xb0/0x130 [ 147.157720][ T6641] should_fail_ex+0x414/0x560 [ 147.157737][ T6641] _copy_from_iter+0x1cd/0x1630 [ 147.157756][ T6641] ? __build_skb_around+0x22d/0x3c0 [ 147.157774][ T6641] ? __pfx__copy_from_iter+0x10/0x10 [ 147.157789][ T6641] ? __alloc_skb+0x2f1/0x430 [ 147.157798][ T6641] ? __pfx___alloc_skb+0x10/0x10 [ 147.157815][ T6641] ? netlink_sendmsg+0x642/0xb30 [ 147.157826][ T6641] ? skb_put+0x11b/0x210 [ 147.157837][ T6641] netlink_sendmsg+0x6b2/0xb30 [ 147.157853][ T6641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.157866][ T6641] ? aa_sock_msg_perm+0xf1/0x1b0 [ 147.157880][ T6641] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 147.157895][ T6641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.157907][ T6641] __sock_sendmsg+0x21c/0x270 [ 147.157922][ T6641] ____sys_sendmsg+0x505/0x820 [ 147.157937][ T6641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.157952][ T6641] ? import_iovec+0x74/0xa0 [ 147.157964][ T6641] ___sys_sendmsg+0x21f/0x2a0 [ 147.157976][ T6641] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.157990][ T6641] ? rcu_read_lock_any_held+0xb3/0x120 [ 147.158016][ T6641] ? __fget_files+0x2a/0x420 [ 147.158027][ T6641] ? __fget_files+0x3a0/0x420 [ 147.158042][ T6641] __x64_sys_sendmsg+0x19b/0x260 [ 147.158054][ T6641] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.158069][ T6641] ? __pfx_ksys_write+0x10/0x10 [ 147.158085][ T6641] ? do_syscall_64+0xbe/0xf80 [ 147.158102][ T6641] do_syscall_64+0xfa/0xf80 [ 147.158116][ T6641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.158126][ T6641] ? clear_bhb_loop+0x60/0xb0 [ 147.158138][ T6641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.158148][ T6641] RIP: 0033:0x7f039b98f749 [ 147.158158][ T6641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.158167][ T6641] RSP: 002b:00007f039c747038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.158179][ T6641] RAX: ffffffffffffffda RBX: 00007f039bbe5fa0 RCX: 00007f039b98f749 [ 147.158186][ T6641] RDX: 0000000004000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 147.158193][ T6641] RBP: 00007f039c747090 R08: 0000000000000000 R09: 0000000000000000 [ 147.158199][ T6641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.158204][ T6641] R13: 00007f039bbe6038 R14: 00007f039bbe5fa0 R15: 00007f039bd0fa28 [ 147.158220][ T6641] [ 147.399867][ T6646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.407872][ T6646] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 147.662424][ T6650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.207'. [ 147.669799][ T851] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 147.829164][ T851] usb 5-1: Using ep0 maxpacket: 32 [ 147.839855][ T851] usb 5-1: config index 0 descriptor too short (expected 2084, got 36) [ 147.839884][ T851] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 147.839905][ T851] usb 5-1: config 0 has no interface number 0 [ 147.839935][ T851] usb 5-1: config 0 interface 184 has no altsetting 0 [ 147.866846][ T851] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 147.866876][ T851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.866886][ T851] usb 5-1: Product: syz [ 147.866894][ T851] usb 5-1: Manufacturer: syz [ 147.866902][ T851] usb 5-1: SerialNumber: syz [ 147.868882][ T851] usb 5-1: config 0 descriptor?? [ 147.872453][ T851] smsc75xx v1.0.0 [ 148.059404][ T5968] usb 2-1: USB disconnect, device number 7 [ 148.108693][ T6638] tty tty27: ldisc open failed (-12), clearing slot 26 [ 148.357824][ T6654] netlink: 56 bytes leftover after parsing attributes in process `syz.1.209'. [ 148.367419][ T6654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.209'. [ 148.566368][ T6661] warning: `syz.2.211' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 148.811659][ T5953] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 148.974617][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.988740][ T5953] usb 2-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 149.009300][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.054092][ T5953] usb 2-1: config 0 descriptor?? [ 149.307934][ T851] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 149.319058][ T851] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 149.332139][ T851] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 149.356215][ T851] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 149.367432][ T851] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 149.405970][ T851] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 149.435176][ T851] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 149.463673][ T851] usb 5-1: USB disconnect, device number 10 [ 149.676038][ T6658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.686334][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 149.686349][ T30] audit: type=1326 audit(1764908584.360:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 149.702377][ T6658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.735466][ T30] audit: type=1326 audit(1764908584.360:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 149.778471][ T6658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.823738][ T6658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.843830][ T30] audit: type=1326 audit(1764908584.360:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 149.874282][ T30] audit: type=1326 audit(1764908584.360:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f301198df90 code=0x7ffc0000 [ 149.897756][ T30] audit: type=1326 audit(1764908584.360:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f301198f34b code=0x7ffc0000 [ 149.919317][ T6694] netlink: 36 bytes leftover after parsing attributes in process `syz.1.210'. [ 149.932677][ T30] audit: type=1326 audit(1764908584.360:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f301198f34b code=0x7ffc0000 [ 149.957091][ T6693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.221'. [ 149.991168][ T30] audit: type=1326 audit(1764908584.460:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 150.060324][ T6694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.071549][ T30] audit: type=1326 audit(1764908584.460:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 150.094318][ T6694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.101173][ T6694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.122526][ T30] audit: type=1326 audit(1764908584.460:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 150.147919][ T30] audit: type=1326 audit(1764908584.460:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.1.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 150.194131][ T6694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.215405][ T5953] usbhid 2-1:0.0: can't add hid device: -71 [ 150.223788][ T5953] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 150.241648][ T5953] usb 2-1: USB disconnect, device number 8 [ 150.431577][ T851] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 150.586146][ T851] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 150.599290][ T851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.617162][ T851] usb 4-1: config 0 descriptor?? [ 150.629114][ T851] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 150.827366][ T6698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.844634][ T6698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.861542][ T5953] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 150.973599][ T6716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.230'. [ 151.034576][ T5953] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 151.043634][ T5953] usb 3-1: config 0 has no interface number 0 [ 151.050004][ T5953] usb 3-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 151.063080][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.077490][ T5953] usb 3-1: config 0 descriptor?? [ 151.167607][ T6723] tipc: Started in network mode [ 151.173499][ T6723] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 151.185766][ T6723] tipc: Enabled bearer , priority 10 [ 151.195421][ T6723] netlink: 84 bytes leftover after parsing attributes in process `syz.4.233'. [ 151.279506][ T6728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.289076][ T6698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.289128][ T851] gspca_cpia1: usb_control_msg 01, error -32 [ 151.298670][ T6728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.299172][ T6698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.347523][ T5953] usb 3-1: string descriptor 0 read error: -71 [ 151.366037][ T5953] usb 3-1: selecting invalid altsetting 1 [ 151.376737][ T5953] dvb_ttusb_budget: ttusb_init_controller: error [ 151.377817][ T6732] netlink: 'syz.4.235': attribute type 1 has an invalid length. [ 151.384852][ T5953] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 151.585753][ T851] gspca_cpia1: usb_control_msg 02, error -71 [ 151.612818][ T6735] bond2: (slave bridge2): making interface the new active one [ 151.620442][ T851] cpia1 4-1:0.0: only firmware version 1 is supported (got: 2) [ 151.631834][ T5968] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 151.645105][ T6735] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 151.656795][ T851] usb 4-1: USB disconnect, device number 11 [ 151.689268][ T5953] DVB: Unable to find symbol ves1820_attach() [ 151.795916][ T5968] usb 2-1: Using ep0 maxpacket: 16 [ 151.832889][ T5968] usb 2-1: config 0 has no interfaces? [ 151.840890][ T5968] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 151.850749][ T5968] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 151.860448][ T5968] usb 2-1: Manufacturer: syz [ 151.867632][ T5968] usb 2-1: config 0 descriptor?? [ 151.897495][ T5953] DVB: Unable to find symbol stv0297_attach() [ 151.924442][ T5953] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 151.946311][ T6740] netlink: 24 bytes leftover after parsing attributes in process `syz.4.236'. [ 151.971265][ T5953] usb 3-1: USB disconnect, device number 6 [ 152.302726][ T5968] tipc: Node number set to 4269801488 [ 152.636147][ T6750] netlink: 20 bytes leftover after parsing attributes in process `syz.2.240'. [ 152.685342][ T6750] gretap0: entered promiscuous mode [ 152.713997][ T6750] gretap0: left promiscuous mode [ 152.722340][ T5968] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 152.979988][ T6758] program syz.2.242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.998508][ T5968] usb 4-1: config 0 has no interfaces? [ 153.006182][ T5968] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.024450][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.044416][ T5968] usb 4-1: Product: syz [ 153.071063][ T5968] usb 4-1: Manufacturer: syz [ 153.110019][ T5968] usb 4-1: config 0 descriptor?? [ 153.295938][ T6761] kernel profiling enabled (shift: 6) [ 154.232983][ T5968] usb 4-1: USB disconnect, device number 12 [ 154.592918][ T5968] usb 2-1: USB disconnect, device number 9 [ 154.738594][ T6768] netlink: 'syz.0.245': attribute type 10 has an invalid length. [ 154.874298][ T6779] program syz.1.247 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.112610][ T6768] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 155.139937][ T6768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.586713][ T6772] netlink: 100 bytes leftover after parsing attributes in process `syz.4.244'. [ 156.233977][ T6795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.251'. [ 156.674917][ T6802] program syz.3.253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.000281][ T6806] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.748309][ T6814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.256'. [ 157.791576][ T5838] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 157.841589][ T6816] netlink: 16 bytes leftover after parsing attributes in process `syz.3.257'. [ 157.852450][ T6814] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 157.863984][ T6814] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 157.971983][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 157.983993][ T5838] usb 3-1: config 0 has no interfaces? [ 158.003882][ T5838] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 158.038385][ T5838] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 158.077954][ T5838] usb 3-1: Manufacturer: syz [ 158.113254][ T5838] usb 3-1: config 0 descriptor?? [ 158.181561][ T5933] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 158.351558][ T5933] usb 4-1: Using ep0 maxpacket: 8 [ 158.376661][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.424943][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.434848][ T5933] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 158.444637][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.467963][ T5933] usb 4-1: config 0 descriptor?? [ 158.949661][ T5933] cherry 0003:046A:0027.0001: item fetching failed at offset 2/69 [ 158.968349][ T5933] cherry 0003:046A:0027.0001: probe with driver cherry failed with error -22 [ 159.149872][ T5933] usb 4-1: USB disconnect, device number 13 [ 159.971888][ T5968] usb 3-1: USB disconnect, device number 7 [ 160.342853][ T6847] ip6t_srh: unknown srh match flags 4000 [ 160.686598][ T6859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.272'. [ 160.722634][ T6859] bond_slave_0: entered promiscuous mode [ 160.728669][ T6859] bond_slave_1: entered promiscuous mode [ 160.773765][ T6859] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 160.804331][ T6859] bond_slave_0: left promiscuous mode [ 160.810039][ T6859] bond_slave_1: left promiscuous mode [ 160.869962][ T6864] batadv0: entered promiscuous mode [ 160.875775][ T6864] vlan2: entered promiscuous mode [ 160.942574][ T5968] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 161.142183][ T5968] usb 2-1: Using ep0 maxpacket: 16 [ 161.150159][ T5968] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 161.159679][ T5968] usb 2-1: config 0 has no interface number 0 [ 161.174717][ T5968] usb 2-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 161.188194][ T5968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.201548][ T5968] usb 2-1: Product: syz [ 161.209221][ T5968] usb 2-1: Manufacturer: syz [ 161.220711][ T5968] usb 2-1: SerialNumber: syz [ 161.250564][ T5968] usb 2-1: config 0 descriptor?? [ 161.407106][ T6872] pim6reg: entered allmulticast mode [ 161.468993][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 161.505095][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 161.505114][ T30] audit: type=1326 audit(1764908596.150:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 161.794899][ T30] audit: type=1326 audit(1764908596.150:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 161.873665][ T30] audit: type=1326 audit(1764908596.150:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 161.902065][ T30] audit: type=1326 audit(1764908596.150:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 161.931981][ T30] audit: type=1326 audit(1764908596.150:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 161.974351][ T6882] netlink: 84 bytes leftover after parsing attributes in process `syz.4.277'. [ 162.046549][ T30] audit: type=1326 audit(1764908596.440:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 162.171245][ T30] audit: type=1326 audit(1764908596.440:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 162.364204][ T6884] loop5: detected capacity change from 0 to 7 [ 162.411387][ T6077] Dev loop5: unable to read RDB block 7 [ 162.436939][ T6077] loop5: unable to read partition table [ 162.455613][ T6077] loop5: partition table beyond EOD, truncated [ 162.513286][ T6884] Dev loop5: unable to read RDB block 7 [ 162.521705][ T6884] loop5: unable to read partition table [ 162.527767][ T6884] loop5: partition table beyond EOD, truncated [ 162.537760][ T6884] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 162.776940][ T6889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.021218][ T6889] netlink: 56 bytes leftover after parsing attributes in process `syz.3.279'. [ 163.623058][ T5933] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 163.733103][ T5968] go7007 2-1:0.41: probe with driver go7007 failed with error -12 [ 163.812940][ T5933] usb 3-1: Using ep0 maxpacket: 16 [ 163.838044][ T5968] usb 2-1: USB disconnect, device number 10 [ 163.860209][ T5933] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 163.910130][ T6902] binder_alloc: 6901: pid 6901 spamming oneway? 1 buffers allocated for a total size of 4096 [ 163.933275][ T5933] usb 3-1: config 0 has no interface number 0 [ 163.956640][ T5933] usb 3-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 163.977779][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.056193][ T6905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.283'. [ 164.130097][ T30] audit: type=1326 audit(1764908598.740:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 164.171664][ T5933] usb 3-1: Product: syz [ 164.198425][ T5933] usb 3-1: Manufacturer: syz [ 164.209692][ T30] audit: type=1326 audit(1764908598.740:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 164.235206][ T5933] usb 3-1: SerialNumber: syz [ 164.257575][ T5933] usb 3-1: config 0 descriptor?? [ 164.421609][ T30] audit: type=1326 audit(1764908598.740:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 165.616622][ T6928] input: syz0 as /devices/virtual/input/input16 [ 165.864605][ T6932] binder: BINDER_SET_CONTEXT_MGR already set [ 165.911673][ T6932] binder: 6930:6932 ioctl 4018620d 200000000140 returned -16 [ 166.112319][ T6937] pim6reg: entered allmulticast mode [ 167.086376][ T6944] veth1_to_hsr: entered promiscuous mode [ 167.123889][ T6944] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 167.400753][ T6946] syzkaller1: entered promiscuous mode [ 167.451542][ T6946] syzkaller1: entered allmulticast mode [ 167.462896][ T5933] go7007 3-1:0.41: probe with driver go7007 failed with error -12 [ 167.490059][ T5933] usb 3-1: USB disconnect, device number 8 [ 167.747851][ T6958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.299'. [ 169.002961][ T6956] syz.4.298 (6956): drop_caches: 2 [ 169.132669][ T6964] netlink: 84 bytes leftover after parsing attributes in process `syz.1.300'. [ 169.332864][ T6972] program syz.2.301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.541907][ T6974] netlink: 'syz.1.303': attribute type 4 has an invalid length. [ 169.632456][ T6976] program syz.4.302 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.686300][ T6977] netlink: 'syz.1.303': attribute type 4 has an invalid length. [ 170.716339][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 170.716356][ T30] audit: type=1326 audit(1764908605.400:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 170.800025][ T30] audit: type=1326 audit(1764908605.450:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 170.990167][ T30] audit: type=1326 audit(1764908605.460:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 171.118257][ T30] audit: type=1326 audit(1764908605.460:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 171.222592][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 171.240395][ T30] audit: type=1326 audit(1764908605.460:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 171.272167][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 171.321612][ T30] audit: type=1326 audit(1764908605.480:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 171.425773][ T30] audit: type=1326 audit(1764908605.480:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 171.512751][ T30] audit: type=1326 audit(1764908605.480:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 171.577239][ T7004] netlink: 'syz.4.315': attribute type 4 has an invalid length. [ 171.631202][ T30] audit: type=1326 audit(1764908605.480:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 171.677437][ T7004] netlink: 'syz.4.315': attribute type 4 has an invalid length. [ 171.752579][ T30] audit: type=1326 audit(1764908605.480:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.1.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 171.903751][ T7010] vlan2: entered allmulticast mode [ 171.910395][ T7010] erspan0: entered allmulticast mode [ 172.122102][ T6248] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 172.293576][ T6248] usb 2-1: Using ep0 maxpacket: 8 [ 172.305002][ T6248] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 172.313991][ T6248] usb 2-1: config 0 has no interface number 0 [ 172.332841][ T6248] usb 2-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 8.d0 [ 172.358982][ T6248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.381537][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 172.394887][ T6248] usb 2-1: config 0 descriptor?? [ 172.406687][ T6248] usb 2-1: NDI device with a latency value of 1 [ 172.553178][ T10] usb 3-1: device descriptor read/64, error -71 [ 172.841722][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 173.027883][ T10] usb 3-1: device descriptor read/64, error -71 [ 173.156926][ T10] usb usb3-port1: attempt power cycle [ 173.304470][ T5953] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 173.471516][ T5953] usb 4-1: Using ep0 maxpacket: 16 [ 173.482023][ T5953] usb 4-1: config 0 has no interfaces? [ 173.491777][ T5953] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 173.501771][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 173.520430][ T5953] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 173.530341][ T10] usb 3-1: device descriptor read/8, error -71 [ 173.554736][ T5953] usb 4-1: Manufacturer: syz [ 173.590823][ T5953] usb 4-1: config 0 descriptor?? [ 173.781709][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 173.812397][ T10] usb 3-1: device descriptor read/8, error -71 [ 174.007122][ T10] usb usb3-port1: unable to enumerate USB device [ 174.729175][ T7034] netlink: 32 bytes leftover after parsing attributes in process `syz.4.323'. [ 174.971095][ T6248] ftdi_sio 2-1:0.255: FTDI USB Serial Device converter detected [ 174.986844][ T6248] ftdi_sio ttyUSB0: unknown device type: 0x8d0 [ 175.028362][ T6248] usb 2-1: USB disconnect, device number 11 [ 175.060018][ T6248] ftdi_sio 2-1:0.255: device disconnected [ 175.146654][ T7040] netlink: 'syz.1.326': attribute type 4 has an invalid length. [ 175.166034][ T7042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.327'. [ 175.197747][ T7042] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 175.206586][ T7043] netlink: 'syz.1.326': attribute type 4 has an invalid length. [ 175.234551][ T7042] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 175.251687][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 175.350736][ T7046] geneve1: entered promiscuous mode [ 175.387980][ T7046] bridge0: port 3(macsec1) entered blocking state [ 175.421626][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 175.431239][ T10] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 175.450910][ T7046] bridge0: port 3(macsec1) entered disabled state [ 175.470065][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 175.489696][ T7046] macsec1: entered allmulticast mode [ 175.496855][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 175.507373][ T7046] geneve1: entered allmulticast mode [ 175.512946][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 175.524105][ T7046] macsec1: entered promiscuous mode [ 175.529599][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 175.540725][ T7046] bridge0: port 3(macsec1) entered blocking state [ 175.547696][ T7046] bridge0: port 3(macsec1) entered forwarding state [ 175.566397][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 175.588340][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.598038][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 175.618415][ T10] usb 5-1: SerialNumber: syz [ 175.636939][ T7038] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 175.655324][ T7038] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 175.706033][ T7061] FAULT_INJECTION: forcing a failure. [ 175.706033][ T7061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.751607][ T7061] CPU: 0 UID: 0 PID: 7061 Comm: syz.1.332 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.751652][ T7061] Tainted: [L]=SOFTLOCKUP [ 175.751659][ T7061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.751670][ T7061] Call Trace: [ 175.751678][ T7061] [ 175.751687][ T7061] dump_stack_lvl+0x189/0x250 [ 175.751715][ T7061] ? __pfx____ratelimit+0x10/0x10 [ 175.751740][ T7061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.751762][ T7061] ? __pfx__printk+0x10/0x10 [ 175.751789][ T7061] ? __might_fault+0xb0/0x130 [ 175.751825][ T7061] should_fail_ex+0x414/0x560 [ 175.751857][ T7061] _copy_from_user+0x2d/0xb0 [ 175.751879][ T7061] vhost_net_ioctl+0xb47/0x15c0 [ 175.751913][ T7061] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 175.751946][ T7061] ? __fget_files+0x3a0/0x420 [ 175.751964][ T7061] ? __fget_files+0x2a/0x420 [ 175.751987][ T7061] ? bpf_lsm_file_ioctl+0x9/0x20 [ 175.752007][ T7061] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 175.752030][ T7061] __se_sys_ioctl+0xfc/0x170 [ 175.752058][ T7061] do_syscall_64+0xfa/0xf80 [ 175.752086][ T7061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.752105][ T7061] ? clear_bhb_loop+0x60/0xb0 [ 175.752128][ T7061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.752146][ T7061] RIP: 0033:0x7f301198f749 [ 175.752163][ T7061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.752179][ T7061] RSP: 002b:00007f3012758038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.752199][ T7061] RAX: ffffffffffffffda RBX: 00007f3011be5fa0 RCX: 00007f301198f749 [ 175.752212][ T7061] RDX: 0000200000000400 RSI: 000000004008af83 RDI: 0000000000000004 [ 175.752224][ T7061] RBP: 00007f3012758090 R08: 0000000000000000 R09: 0000000000000000 [ 175.752234][ T7061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 175.752244][ T7061] R13: 00007f3011be6038 R14: 00007f3011be5fa0 R15: 00007f3011d0fa28 [ 175.752274][ T7061] [ 176.169509][ T7038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.192710][ T7038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.216106][ T43] usb 5-1: USB disconnect, device number 11 [ 176.671872][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 176.683374][ T43] usb 4-1: USB disconnect, device number 14 [ 176.794980][ T7072] ip6t_srh: unknown srh match flags 4000 [ 176.926729][ T7076] veth1_to_hsr: entered promiscuous mode [ 176.942006][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 177.005878][ T7078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.337'. [ 177.173707][ T7076] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 177.221121][ T10] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 177.230027][ T10] usb 2-1: config 0 has no interface number 0 [ 177.263086][ T10] usb 2-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 177.290555][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.331336][ T10] usb 2-1: Product: syz [ 177.366439][ T10] usb 2-1: Manufacturer: syz [ 177.380920][ T10] usb 2-1: SerialNumber: syz [ 177.438193][ T10] usb 2-1: config 0 descriptor?? [ 177.482739][ T7082] netlink: 'syz.2.339': attribute type 4 has an invalid length. [ 177.514475][ T7082] netlink: 'syz.2.339': attribute type 4 has an invalid length. [ 177.837944][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 177.837958][ T30] audit: type=1326 audit(1764908612.420:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 178.020053][ T30] audit: type=1326 audit(1764908612.420:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 178.045884][ T7089] fuseblk: Bad value for 'fd' [ 178.067420][ T30] audit: type=1326 audit(1764908612.420:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 178.098435][ T30] audit: type=1326 audit(1764908612.420:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f301198f34b code=0x7ffc0000 [ 178.226621][ T30] audit: type=1326 audit(1764908612.420:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 178.481170][ T30] audit: type=1326 audit(1764908612.420:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 178.724671][ T5838] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 178.835895][ T30] audit: type=1326 audit(1764908612.680:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 178.896931][ T5838] usb 4-1: Using ep0 maxpacket: 16 [ 178.931600][ T30] audit: type=1326 audit(1764908612.690:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 178.955839][ T5838] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 178.985288][ T5838] usb 4-1: config 0 has no interface number 0 [ 179.074235][ T5838] usb 4-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 179.117737][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.178008][ T5838] usb 4-1: Product: syz [ 179.217877][ T5838] usb 4-1: Manufacturer: syz [ 179.247844][ T5838] usb 4-1: SerialNumber: syz [ 179.292782][ T5838] usb 4-1: config 0 descriptor?? [ 179.538692][ T7095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.342'. [ 179.549474][ T30] audit: type=1326 audit(1764908614.220:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.3.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cef98f749 code=0x7ffc0000 [ 179.658914][ T30] audit: type=1326 audit(1764908614.220:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7090 comm="syz.3.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f8cef98f749 code=0x7ffc0000 [ 180.091270][ T7113] netlink: 84 bytes leftover after parsing attributes in process `syz.4.348'. [ 180.435879][ T10] go7007 2-1:0.41: probe with driver go7007 failed with error -12 [ 180.516438][ T10] usb 2-1: USB disconnect, device number 12 [ 180.972703][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 181.047784][ T7128] netlink: 'syz.2.351': attribute type 4 has an invalid length. [ 181.160479][ T7129] netlink: 'syz.2.351': attribute type 4 has an invalid length. [ 181.231559][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 181.292942][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.310447][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.320662][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 181.346489][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 181.382868][ T5838] go7007 4-1:0.41: probe with driver go7007 failed with error -12 [ 181.397077][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.442444][ T5838] usb 4-1: USB disconnect, device number 15 [ 181.456033][ T10] usb 2-1: config 0 descriptor?? [ 181.519185][ T7135] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 182.045174][ T7146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.051958][ T5953] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 182.058386][ T7146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.222297][ T5953] usb 3-1: Using ep0 maxpacket: 32 [ 182.239326][ T5953] usb 3-1: unable to get BOS descriptor or descriptor too short [ 182.252102][ T5953] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 182.265526][ T5953] usb 3-1: can't read configurations, error -71 [ 182.313654][ T10] microsoft 0003:045E:07DA.0002: item fetching failed at offset 7/34 [ 182.325409][ T10] microsoft 0003:045E:07DA.0002: parse failed [ 182.342563][ T10] microsoft 0003:045E:07DA.0002: probe with driver microsoft failed with error -22 [ 183.530763][ T5953] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 183.726462][ T5921] usb 2-1: USB disconnect, device number 13 [ 183.771544][ T5953] usb 3-1: Using ep0 maxpacket: 16 [ 183.777442][ T7169] netlink: 'syz.1.361': attribute type 1 has an invalid length. [ 183.796354][ T5953] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 183.804629][ T5953] usb 3-1: config 0 has no interface number 0 [ 183.881658][ T5953] usb 3-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 183.908856][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.917230][ T5953] usb 3-1: Product: syz [ 183.921741][ T5953] usb 3-1: Manufacturer: syz [ 183.927070][ T5953] usb 3-1: SerialNumber: syz [ 183.937652][ T5953] usb 3-1: config 0 descriptor?? [ 184.305695][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 184.307007][ T30] audit: type=1326 audit(1764908618.980:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1af8f749 code=0x7ffc0000 [ 184.353426][ T30] audit: type=1326 audit(1764908618.980:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1af8f749 code=0x7ffc0000 [ 184.406486][ T30] audit: type=1326 audit(1764908618.980:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f0c1af8f749 code=0x7ffc0000 [ 184.475174][ T30] audit: type=1326 audit(1764908618.980:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1af8f749 code=0x7ffc0000 [ 184.529028][ T30] audit: type=1326 audit(1764908618.990:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c1af8f34b code=0x7ffc0000 [ 184.592950][ T30] audit: type=1326 audit(1764908618.990:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1af8f749 code=0x7ffc0000 [ 184.616128][ T30] audit: type=1326 audit(1764908618.990:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c1af8f749 code=0x7ffc0000 [ 184.641659][ T30] audit: type=1326 audit(1764908619.020:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1af8f749 code=0x7ffc0000 [ 184.672769][ T30] audit: type=1326 audit(1764908619.020:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1af8f749 code=0x7ffc0000 [ 184.825143][ T7157] : renamed from bridge_slave_0 (while UP) [ 184.933878][ T7170] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 184.953294][ T7170] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 185.194869][ T7171] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 185.227264][ T7172] macvlan2: entered promiscuous mode [ 185.258571][ T7172] macvlan2: entered allmulticast mode [ 185.278600][ T7172] bond2: entered promiscuous mode [ 185.278600][ T7186] netlink: 'syz.4.363': attribute type 4 has an invalid length. [ 185.295745][ T7172] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 185.349420][ T7188] netlink: 'syz.4.363': attribute type 4 has an invalid length. [ 185.366656][ T7172] bond2: left promiscuous mode [ 185.571720][ T5921] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 185.739581][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 185.748629][ T5921] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 185.757360][ T5921] usb 4-1: config 0 has no interface number 0 [ 185.773304][ T5921] usb 4-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 185.782903][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.791282][ T5921] usb 4-1: Product: syz [ 185.797064][ T5921] usb 4-1: Manufacturer: syz [ 185.807486][ T5921] usb 4-1: SerialNumber: syz [ 185.861244][ T5921] usb 4-1: config 0 descriptor?? [ 186.233533][ T7198] netlink: 84 bytes leftover after parsing attributes in process `syz.0.366'. [ 186.386438][ T30] audit: type=1326 audit(1764908621.070:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.3.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cef98f749 code=0x7ffc0000 [ 186.420689][ T7187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.362'. [ 187.228760][ T5953] go7007 3-1:0.41: probe with driver go7007 failed with error -12 [ 187.283019][ T5953] usb 3-1: USB disconnect, device number 15 [ 187.884683][ T7229] netlink: 'syz.2.374': attribute type 4 has an invalid length. [ 187.946445][ T7231] netlink: 'syz.2.374': attribute type 4 has an invalid length. [ 189.157008][ T5921] go7007 4-1:0.41: probe with driver go7007 failed with error -12 [ 189.194980][ T5921] usb 4-1: USB disconnect, device number 16 [ 189.237050][ T7243] netlink: 52 bytes leftover after parsing attributes in process `syz.4.377'. [ 189.791820][ T5933] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 189.983482][ T5933] usb 3-1: device descriptor read/64, error -71 [ 190.312150][ T5933] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 190.358424][ T7267] netlink: 'syz.4.383': attribute type 10 has an invalid length. [ 190.373127][ T7267] veth1_vlan: left allmulticast mode [ 190.451625][ T5933] usb 3-1: device descriptor read/64, error -71 [ 190.473934][ T7269] netlink: 'syz.0.385': attribute type 4 has an invalid length. [ 190.521576][ T7269] netlink: 'syz.0.385': attribute type 4 has an invalid length. [ 190.573413][ T5933] usb usb3-port1: attempt power cycle [ 190.858413][ T7282] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 190.941593][ T5933] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 190.962295][ T5933] usb 3-1: device descriptor read/8, error -71 [ 191.211489][ T5933] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 191.233474][ T5933] usb 3-1: device descriptor read/8, error -71 [ 191.311649][ T5968] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 191.352965][ T5933] usb usb3-port1: unable to enumerate USB device [ 191.461618][ T5968] usb 4-1: Using ep0 maxpacket: 16 [ 191.469486][ T5968] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 191.477860][ T5968] usb 4-1: config 0 has no interface number 0 [ 191.493268][ T5968] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 191.527160][ T5968] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 191.609448][ T5968] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 191.618758][ T5968] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 191.635085][ T5968] usb 4-1: Product: syz [ 191.640980][ T5968] usb 4-1: SerialNumber: syz [ 191.660726][ T7294] tmpfs: Unknown parameter 'r%Ҵ\wӠR(4;a; [ 191.660726][ T7294] MUg6&x@2<5ʍ2TZ5wVU]TmPZ<M;xY9]gŞn;O훌u [ 191.660726][ T7294] ~^>Ƥr&Dq.;쀯<2AU,00000000000000000000004' [ 191.693407][ T5968] usb 4-1: config 0 descriptor?? [ 191.705607][ T5968] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 191.843328][ T7296] netlink: 172 bytes leftover after parsing attributes in process `syz.2.392'. [ 191.855828][ T5968] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input17 [ 191.913585][ T7296] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 191.937091][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 191.946351][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 191.954017][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 191.961651][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 191.969006][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 191.976604][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 191.983842][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 191.990947][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 191.998085][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 192.005221][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 192.071226][ T5968] usb 4-1: USB disconnect, device number 17 [ 192.071263][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 192.093040][ T7296] mmap: syz.2.392 (7296) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 192.216568][ T5968] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 192.983131][ T7309] netlink: 'syz.2.397': attribute type 4 has an invalid length. [ 193.043452][ T7311] netlink: 'syz.2.397': attribute type 4 has an invalid length. [ 193.549887][ T7322] vlan2: entered allmulticast mode [ 193.555464][ T7322] erspan0: entered allmulticast mode [ 194.049858][ T7326] netlink: 100 bytes leftover after parsing attributes in process `syz.2.400'. [ 194.521529][ T5921] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 194.533891][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.540346][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.815582][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 194.825059][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 194.861550][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 194.981626][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 195.024742][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 195.117202][ T7353] netlink: 'syz.2.410': attribute type 4 has an invalid length. [ 195.126717][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 195.152864][ T5921] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 195.152884][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.152895][ T5921] usb 4-1: Product: syz [ 195.152903][ T5921] usb 4-1: Manufacturer: syz [ 195.152911][ T5921] usb 4-1: SerialNumber: syz [ 195.159260][ T5921] usb 4-1: config 0 descriptor?? [ 195.179840][ T7353] netlink: 'syz.2.410': attribute type 4 has an invalid length. [ 196.213173][ T5921] iforce 4-1:0.0: usb_submit_urb failed: -110 [ 196.230015][ T5921] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 196.250228][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 196.250244][ T30] audit: type=1326 audit(1764908630.930:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1af8f749 code=0x7ffc0000 [ 196.299481][ T5921] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 196.309499][ T5921] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 196.329833][ T5921] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 196.349597][ T30] audit: type=1326 audit(1764908630.960:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1af8f749 code=0x7ffc0000 [ 196.393186][ T5921] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 196.399782][ T5921] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 196.420936][ T5921] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 196.429665][ T7369] netlink: 'syz.2.414': attribute type 1 has an invalid length. [ 196.449022][ T5921] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 196.467635][ T5921] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 196.482130][ T5921] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 196.488799][ T5921] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 196.496730][ T5921] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 196.512438][ T5921] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 196.521587][ T5921] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 196.528288][ T5921] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 196.535222][ T5921] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 196.536401][ T7374] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 196.541989][ T5921] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 196.558812][ T5921] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 196.565365][ T5921] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 196.571531][ T5921] input input18: Timeout waiting for response from device. [ 196.571750][ T7369] bond1: (slave bridge1): making interface the new active one [ 196.616464][ T7369] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 197.050543][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.420'. [ 197.074409][ T5838] usb 4-1: USB disconnect, device number 18 [ 197.127901][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.138292][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.420'. [ 197.158431][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.167949][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.180668][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.219115][ T7391] netlink: 'syz.3.421': attribute type 4 has an invalid length. [ 197.238436][ T7391] netlink: 'syz.3.421': attribute type 4 has an invalid length. [ 197.451748][ T5933] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 197.630403][ T5933] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 197.640249][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.649790][ T5933] usb 2-1: Product: syz [ 197.656023][ T5933] usb 2-1: Manufacturer: syz [ 197.758549][ T7407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.761515][ T5933] usb 2-1: SerialNumber: syz [ 197.774674][ T5933] usb 2-1: config 0 descriptor?? [ 197.817291][ T5933] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 197.971507][ T7402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.423'. [ 198.275752][ T7414] program syz.0.428 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.386956][ T7416] netlink: 'syz.3.429': attribute type 1 has an invalid length. [ 198.489166][ T7416] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 198.518230][ T7416] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 198.822544][ T7418] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 199.092297][ T7421] macvlan2: entered promiscuous mode [ 199.099687][ T7421] macvlan2: entered allmulticast mode [ 199.110532][ T7421] bond1: entered promiscuous mode [ 199.122337][ T7421] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 199.163282][ T7421] bond1: left promiscuous mode [ 199.305588][ T7427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.364075][ T7427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.414754][ T43] usb 2-1: USB disconnect, device number 14 [ 199.522000][ T5921] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 199.684005][ T5921] usb 3-1: unable to get BOS descriptor or descriptor too short [ 199.697587][ T5921] usb 3-1: not running at top speed; connect to a high speed hub [ 199.707916][ T5921] usb 3-1: config index 0 descriptor too short (expected 56677, got 101) [ 199.723835][ T5921] usb 3-1: config 45 has too many interfaces: 229, using maximum allowed: 32 [ 199.741550][ T5921] usb 3-1: config 45 has an invalid descriptor of length 161, skipping remainder of the config [ 199.752482][ T5921] usb 3-1: config 45 has 0 interfaces, different from the descriptor's value: 229 [ 199.765312][ T5921] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 199.775059][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.796987][ T5921] usb 3-1: Product: syz [ 199.805455][ T5921] usb 3-1: Manufacturer: syz [ 199.813996][ T5921] usb 3-1: SerialNumber: syz [ 199.895029][ T7433] input: syz0 as /devices/virtual/input/input20 [ 199.997763][ T7435] netlink: 'syz.3.434': attribute type 4 has an invalid length. [ 200.041512][ T7435] netlink: 'syz.3.434': attribute type 4 has an invalid length. [ 200.062516][ T5921] usb 3-1: USB disconnect, device number 20 [ 200.753145][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.439'. [ 201.018322][ T7460] ip6t_srh: unknown srh match flags 4000 [ 201.328812][ T7453] block device autoloading is deprecated and will be removed. [ 201.690402][ T7470] netlink: 'syz.2.445': attribute type 4 has an invalid length. [ 201.802489][ T7470] netlink: 'syz.2.445': attribute type 4 has an invalid length. [ 202.106269][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.446'. [ 202.881874][ T5953] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 203.068032][ T5953] usb 2-1: Using ep0 maxpacket: 16 [ 203.083721][ T5953] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 203.112709][ T5953] usb 2-1: config 0 has no interface number 0 [ 203.150455][ T5953] usb 2-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 203.160428][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.175134][ T5953] usb 2-1: Product: syz [ 203.179354][ T5953] usb 2-1: Manufacturer: syz [ 203.193916][ T5953] usb 2-1: SerialNumber: syz [ 203.226341][ T5953] usb 2-1: config 0 descriptor?? [ 203.384257][ T7495] xt_hashlimit: max too large, truncated to 1048576 [ 203.502156][ T30] audit: type=1326 audit(1764908638.180:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 203.738912][ T30] audit: type=1326 audit(1764908638.300:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 203.763101][ T7504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.448'. [ 203.983540][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 204.366543][ T30] audit: type=1326 audit(1764908638.420:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 204.470760][ T30] audit: type=1326 audit(1764908638.420:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 204.553875][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 204.571168][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.597629][ T7514] netlink: 'syz.4.457': attribute type 4 has an invalid length. [ 204.605726][ T30] audit: type=1326 audit(1764908638.470:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f301198f34b code=0x7ffc0000 [ 204.628871][ T10] usb 4-1: Product: syz [ 204.641108][ T10] usb 4-1: Manufacturer: syz [ 204.661031][ T10] usb 4-1: SerialNumber: syz [ 204.711172][ T7515] netlink: 'syz.4.457': attribute type 4 has an invalid length. [ 204.736632][ T30] audit: type=1326 audit(1764908638.470:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 204.818262][ T30] audit: type=1326 audit(1764908638.470:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 204.923522][ T30] audit: type=1326 audit(1764908638.650:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 204.954905][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 204.986132][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 205.001550][ T30] audit: type=1326 audit(1764908638.650:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.1.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301198f749 code=0x7ffc0000 [ 205.034925][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 205.092045][ T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 205.117736][ T10] usb 4-1: USB disconnect, device number 19 [ 205.461574][ T5921] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 205.631511][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 205.641011][ T5921] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 205.662499][ T5921] usb 5-1: config 0 has no interface number 0 [ 205.686412][ T5921] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 205.723832][ T5921] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 205.838461][ T5921] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 205.882538][ T5921] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 205.933579][ T5921] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 206.009914][ T7526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.460'. [ 206.054015][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.091183][ T5921] usb 5-1: config 0 descriptor?? [ 206.137508][ T5921] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 206.419889][ T7533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.541273][ T7533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.575410][ T7537] ip6t_srh: unknown srh match flags 4000 [ 206.730904][ T43] usb 5-1: USB disconnect, device number 12 [ 206.830088][ T43] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 207.306960][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 207.441015][ T7553] netlink: 'syz.3.466': attribute type 1 has an invalid length. [ 207.464678][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 207.482761][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 207.505356][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 207.522979][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.537319][ T7547] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 207.549889][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 207.614642][ T7553] bond2: (slave bridge2): making interface the new active one [ 207.653845][ T7553] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 207.824788][ T7562] vlan2: entered promiscuous mode [ 208.031021][ T7570] netlink: 'syz.3.468': attribute type 4 has an invalid length. [ 208.061729][ T7570] netlink: 'syz.3.468': attribute type 4 has an invalid length. [ 208.182151][ T7519] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 208.189930][ T7519] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 208.227225][ T7519] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 208.241759][ T7519] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 208.295047][ T7519] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 208.301018][ T7519] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 208.312732][ T5953] go7007 2-1:0.41: probe with driver go7007 failed with error -12 [ 208.360811][ T7519] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 208.375633][ T7519] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 208.401244][ T7519] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 208.414054][ T7519] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 209.399579][ T7596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.470'. [ 210.186274][ T5953] usb 3-1: USB disconnect, device number 21 [ 210.828188][ T7628] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20001 [ 211.912858][ T7642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.476'. [ 212.815149][ T7663] batman_adv: batadv0: Adding interface: dummy0 [ 212.828717][ T7663] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.869766][ T7663] batman_adv: batadv0: Interface activated: dummy0 [ 212.902598][ T7664] batadv0: mtu less than device minimum [ 212.918486][ T7664] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 212.930354][ T7664] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 212.942143][ T7664] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 212.953473][ T7664] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 212.964692][ T7664] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 212.976415][ T7664] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 212.987706][ T7664] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 212.998829][ T7664] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 213.009962][ T7664] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 213.095453][ T7666] netlink: 'syz.0.479': attribute type 4 has an invalid length. [ 213.122818][ T7666] netlink: 'syz.0.479': attribute type 4 has an invalid length. [ 255.976260][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.982714][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.415005][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.421313][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 366.701942][ T31] INFO: task syz-executor:5841 blocked for more than 143 seconds. [ 366.709790][ T31] Tainted: G L syzkaller #0 [ 366.719676][ T31] Blocked by coredump. [ 366.724386][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 366.733114][ T31] task:syz-executor state:D stack:20704 pid:5841 tgid:5841 ppid:1 task_flags:0x40054c flags:0x00080003 [ 366.745165][ T31] Call Trace: [ 366.748474][ T31] [ 366.751499][ T31] __schedule+0x14bc/0x5000 [ 366.756157][ T31] ? __pfx___schedule+0x10/0x10 [ 366.761063][ T31] ? schedule+0x91/0x360 [ 366.765434][ T31] schedule+0x165/0x360 [ 366.769668][ T31] schedule_preempt_disabled+0x13/0x30 [ 366.777669][ T31] __mutex_lock+0x7e6/0x1350 [ 366.783314][ T31] ? __mutex_lock+0x5bb/0x1350 [ 366.788127][ T31] ? rfkill_unregister+0xc8/0x220 [ 366.794225][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 366.799300][ T31] ? __pfx_device_del+0x10/0x10 [ 366.805151][ T31] ? hci_sock_dev_event+0x42d/0x600 [ 366.810388][ T31] ? __cancel_work_sync+0x5c/0x110 [ 366.815592][ T31] rfkill_unregister+0xc8/0x220 [ 366.820535][ T31] hci_unregister_dev+0x374/0x510 [ 366.826182][ T31] vhci_release+0x152/0x1a0 [ 366.831035][ T31] ? __pfx_vhci_release+0x10/0x10 [ 366.837020][ T31] __fput+0x44c/0xa70 [ 366.841047][ T31] task_work_run+0x1d4/0x260 [ 366.845736][ T31] ? __pfx_task_work_run+0x10/0x10 [ 366.850891][ T31] ? kmem_cache_free+0x197/0x620 [ 366.855922][ T31] ? do_exit+0x6c0/0x2310 [ 366.860284][ T31] do_exit+0x6c5/0x2310 [ 366.864539][ T31] ? do_raw_spin_lock+0x121/0x290 [ 366.869594][ T31] ? __pfx_do_exit+0x10/0x10 [ 366.874344][ T31] do_group_exit+0x21c/0x2d0 [ 366.878977][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 366.884293][ T31] get_signal+0x1285/0x1340 [ 366.888836][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 366.895070][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 366.901475][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 366.907000][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 366.913360][ T31] ? rcu_is_watching+0x15/0xb0 [ 366.918168][ T31] do_syscall_64+0x2e3/0xf80 [ 366.922948][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.929038][ T31] ? clear_bhb_loop+0x60/0xb0 [ 366.934160][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.940517][ T31] RIP: 0033:0x7f3011985897 [ 366.945987][ T31] RSP: 002b:00007f3011d0fd80 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 366.954558][ T31] RAX: fffffffffffffe00 RBX: 0000000000000123 RCX: 00007f3011985897 [ 366.962594][ T31] RDX: 0000000040000000 RSI: 00007f3011d0fdec RDI: 00000000ffffffff [ 366.970562][ T31] RBP: 00007f3011d0fdec R08: 0000000000000000 R09: 0000000000000000 [ 366.978648][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000055 [ 366.986704][ T31] R13: 000055556311a590 R14: 0000000000031e87 R15: 00007f3011d0fe40 [ 366.994945][ T31] [ 366.998051][ T31] INFO: task syz-executor:5844 blocked for more than 143 seconds. [ 367.005944][ T31] Tainted: G L syzkaller #0 [ 367.013371][ T31] Blocked by coredump. [ 367.017979][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 367.028319][ T31] task:syz-executor state:D stack:19776 pid:5844 tgid:5844 ppid:1 task_flags:0x40054c flags:0x00080003 [ 367.040668][ T31] Call Trace: [ 367.044609][ T31] [ 367.047569][ T31] __schedule+0x14bc/0x5000 [ 367.053070][ T31] ? __pfx___schedule+0x10/0x10 [ 367.058143][ T31] ? schedule+0x91/0x360 [ 367.062533][ T31] schedule+0x165/0x360 [ 367.066744][ T31] schedule_preempt_disabled+0x13/0x30 [ 367.072306][ T31] __mutex_lock+0x7e6/0x1350 [ 367.076933][ T31] ? __mutex_lock+0x5bb/0x1350 [ 367.081777][ T31] ? rfkill_unregister+0xc8/0x220 [ 367.086804][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 367.093308][ T31] ? __pfx_device_del+0x10/0x10 [ 367.098170][ T31] ? hci_sock_dev_event+0x42d/0x600 [ 367.103438][ T31] ? __cancel_work_sync+0x5c/0x110 [ 367.108574][ T31] rfkill_unregister+0xc8/0x220 [ 367.113518][ T31] hci_unregister_dev+0x374/0x510 [ 367.118555][ T31] vhci_release+0x152/0x1a0 [ 367.123702][ T31] ? __pfx_vhci_release+0x10/0x10 [ 367.128829][ T31] __fput+0x44c/0xa70 [ 367.133808][ T31] task_work_run+0x1d4/0x260 [ 367.138436][ T31] ? __pfx_task_work_run+0x10/0x10 [ 367.143626][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 367.148861][ T31] do_exit+0x6c5/0x2310 [ 367.153133][ T31] ? do_raw_spin_lock+0x121/0x290 [ 367.158180][ T31] ? __pfx_do_exit+0x10/0x10 [ 367.162913][ T31] do_group_exit+0x21c/0x2d0 [ 367.167529][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 367.172904][ T31] get_signal+0x1285/0x1340 [ 367.177435][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 367.183496][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 367.189690][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 367.195316][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 367.200719][ T31] ? rcu_is_watching+0x15/0xb0 [ 367.205575][ T31] do_syscall_64+0x2e3/0xf80 [ 367.210196][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.216324][ T31] ? clear_bhb_loop+0x60/0xb0 [ 367.221036][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.226994][ T31] RIP: 0033:0x7f039b985897 [ 367.231702][ T31] RSP: 002b:00007f039bd0fd80 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 367.240132][ T31] RAX: fffffffffffffe00 RBX: 0000000000000140 RCX: 00007f039b985897 [ 367.248256][ T31] RDX: 0000000040000000 RSI: 00007f039bd0fdec RDI: 00000000ffffffff [ 367.256321][ T31] RBP: 00007f039bd0fdec R08: 0000000000000000 R09: 0000000000000000 [ 367.264493][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000067 [ 367.272578][ T31] R13: 00005555653d9590 R14: 00000000000327e5 R15: 00007f039bd0fe40 [ 367.280585][ T31] [ 367.284452][ T31] INFO: task kworker/1:6:5921 blocked for more than 143 seconds. [ 367.292435][ T31] Tainted: G L syzkaller #0 [ 367.299076][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 367.308093][ T31] task:kworker/1:6 state:D stack:22432 pid:5921 tgid:5921 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 367.321237][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 367.328110][ T31] Call Trace: [ 367.331505][ T31] [ 367.334453][ T31] __schedule+0x14bc/0x5000 [ 367.339003][ T31] ? __pfx___schedule+0x10/0x10 [ 367.344117][ T31] ? schedule+0x91/0x360 [ 367.348389][ T31] schedule+0x165/0x360 [ 367.353592][ T31] schedule_preempt_disabled+0x13/0x30 [ 367.359162][ T31] __mutex_lock+0x7e6/0x1350 [ 367.363861][ T31] ? __mutex_lock+0x5bb/0x1350 [ 367.368645][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 367.374953][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 367.380008][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 367.385977][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 367.391830][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 367.398195][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 367.404936][ T31] process_scheduled_works+0xad1/0x1770 [ 367.410502][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 367.416633][ T31] worker_thread+0x8a0/0xda0 [ 367.421488][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 367.427927][ T31] ? __kthread_parkme+0x7b/0x200 [ 367.433217][ T31] kthread+0x711/0x8a0 [ 367.437925][ T31] ? __pfx_worker_thread+0x10/0x10 [ 367.443219][ T31] ? __pfx_kthread+0x10/0x10 [ 367.448132][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 367.453524][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 367.459002][ T31] ? __pfx_kthread+0x10/0x10 [ 367.463885][ T31] ret_from_fork+0x599/0xb30 [ 367.468518][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 367.473712][ T31] ? __switch_to_asm+0x39/0x70 [ 367.478568][ T31] ? __switch_to_asm+0x33/0x70 [ 367.483383][ T31] ? __pfx_kthread+0x10/0x10 [ 367.488006][ T31] ret_from_fork_asm+0x1a/0x30 [ 367.493447][ T31] [ 367.496493][ T31] INFO: task syz.1.448:7480 blocked for more than 144 seconds. [ 367.504255][ T31] Tainted: G L syzkaller #0 [ 367.510762][ T31] Blocked by coredump. [ 367.515786][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 367.524805][ T31] task:syz.1.448 state:D stack:24776 pid:7480 tgid:7475 ppid:5841 task_flags:0x40044c flags:0x00080003 [ 367.536819][ T31] Call Trace: [ 367.540122][ T31] [ 367.543200][ T31] __schedule+0x14bc/0x5000 [ 367.547762][ T31] ? __pfx___schedule+0x10/0x10 [ 367.552771][ T31] ? schedule+0x91/0x360 [ 367.557058][ T31] schedule+0x165/0x360 [ 367.561217][ T31] schedule_preempt_disabled+0x13/0x30 [ 367.566776][ T31] __mutex_lock+0x7e6/0x1350 [ 367.571732][ T31] ? __mutex_lock+0x5bb/0x1350 [ 367.576558][ T31] ? rfkill_unregister+0xc8/0x220 [ 367.581821][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 367.586961][ T31] ? __pfx_device_del+0x10/0x10 [ 367.591875][ T31] ? __cancel_work_sync+0x5c/0x110 [ 367.597116][ T31] rfkill_unregister+0xc8/0x220 [ 367.602030][ T31] nfc_unregister_device+0x96/0x2a0 [ 367.607341][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 367.613212][ T31] virtual_ncidev_close+0x56/0x90 [ 367.618252][ T31] __fput+0x44c/0xa70 [ 367.622570][ T31] task_work_run+0x1d4/0x260 [ 367.627166][ T31] ? __pfx_task_work_run+0x10/0x10 [ 367.632957][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 367.638211][ T31] do_exit+0x6c5/0x2310 [ 367.642460][ T31] ? do_raw_spin_lock+0x121/0x290 [ 367.647603][ T31] ? __pfx_do_exit+0x10/0x10 [ 367.652253][ T31] ? __might_fault+0xb0/0x130 [ 367.657197][ T31] do_group_exit+0x21c/0x2d0 [ 367.661988][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 367.667225][ T31] get_signal+0x1285/0x1340 [ 367.671807][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 367.677388][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 367.683722][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 367.689293][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 367.694734][ T31] ? rcu_is_watching+0x15/0xb0 [ 367.699523][ T31] do_syscall_64+0x2e3/0xf80 [ 367.704269][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.710464][ T31] ? clear_bhb_loop+0x60/0xb0 [ 367.715281][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.721198][ T31] RIP: 0033:0x7f301198f749 [ 367.725710][ T31] RSP: 002b:00007f300fbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 367.734414][ T31] RAX: 0000000000010106 RBX: 00007f3011be6090 RCX: 00007f301198f749 [ 367.742702][ T31] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 367.750698][ T31] RBP: 00007f3011a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 367.758750][ T31] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 367.766887][ T31] R13: 00007f3011be6128 R14: 00007f3011be6090 R15: 00007f3011d0fa28 [ 367.775120][ T31] [ 367.778151][ T31] INFO: task syz.4.458:7519 blocked for more than 144 seconds. [ 367.785872][ T31] Tainted: G L syzkaller #0 [ 367.792459][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 367.801488][ T31] task:syz.4.458 state:D stack:24176 pid:7519 tgid:7518 ppid:5844 task_flags:0x400140 flags:0x00080002 [ 367.813896][ T31] Call Trace: [ 367.817200][ T31] [ 367.820175][ T31] __schedule+0x14bc/0x5000 [ 367.825130][ T31] ? __pfx___schedule+0x10/0x10 [ 367.830454][ T31] ? schedule+0x91/0x360 [ 367.834780][ T31] schedule+0x165/0x360 [ 367.838958][ T31] schedule_preempt_disabled+0x13/0x30 [ 367.844678][ T31] __mutex_lock+0x7e6/0x1350 [ 367.849455][ T31] ? __mutex_lock+0x5bb/0x1350 [ 367.854291][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 367.859615][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 367.864792][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 367.870013][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 367.876059][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 367.882630][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 367.888370][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 367.893611][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 367.899414][ T31] rfkill_set_block+0x1d2/0x440 [ 367.904573][ T31] rfkill_fop_write+0x44b/0x570 [ 367.909458][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 367.914883][ T31] ? security_kernfs_init_security+0x240/0x290 [ 367.921076][ T31] ? rw_verify_area+0x255/0x4d0 [ 367.925987][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 367.931455][ T31] vfs_write+0x27e/0xb30 [ 367.935830][ T31] ? __pfx_vfs_write+0x10/0x10 [ 367.940711][ T31] ? __fget_files+0x2a/0x420 [ 367.945648][ T31] ? __fget_files+0x2a/0x420 [ 367.950255][ T31] ? __fget_files+0x3a0/0x420 [ 367.955188][ T31] ? __fget_files+0x2a/0x420 [ 367.960074][ T31] ksys_write+0x145/0x250 [ 367.964480][ T31] ? __pfx_ksys_write+0x10/0x10 [ 367.969349][ T31] ? do_syscall_64+0xbe/0xf80 [ 367.974106][ T31] do_syscall_64+0xfa/0xf80 [ 367.978771][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.985079][ T31] ? clear_bhb_loop+0x60/0xb0 [ 367.989783][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.995738][ T31] RIP: 0033:0x7f039b98f749 [ 368.000256][ T31] RSP: 002b:00007f039c747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 368.008753][ T31] RAX: ffffffffffffffda RBX: 00007f039bbe5fa0 RCX: 00007f039b98f749 [ 368.016812][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006 [ 368.025023][ T31] RBP: 00007f039ba13f91 R08: 0000000000000000 R09: 0000000000000000 [ 368.033209][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.041190][ T31] R13: 00007f039bbe6038 R14: 00007f039bbe5fa0 R15: 00007f039bd0fa28 [ 368.049288][ T31] [ 368.052789][ T31] INFO: task syz.3.475:7621 blocked for more than 144 seconds. [ 368.060459][ T31] Tainted: G L syzkaller #0 [ 368.067297][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 368.076131][ T31] task:syz.3.475 state:D stack:28152 pid:7621 tgid:7620 ppid:5845 task_flags:0x400040 flags:0x00080002 [ 368.088346][ T31] Call Trace: [ 368.091703][ T31] [ 368.094640][ T31] __schedule+0x14bc/0x5000 [ 368.099259][ T31] ? __pfx___schedule+0x10/0x10 [ 368.104298][ T31] ? schedule+0x91/0x360 [ 368.108575][ T31] schedule+0x165/0x360 [ 368.112888][ T31] schedule_preempt_disabled+0x13/0x30 [ 368.118365][ T31] __mutex_lock+0x7e6/0x1350 [ 368.123019][ T31] ? __mutex_lock+0x5bb/0x1350 [ 368.127897][ T31] ? rfkill_fop_open+0x12d/0x820 [ 368.133042][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 368.138356][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 368.143800][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 368.149284][ T31] rfkill_fop_open+0x12d/0x820 [ 368.154112][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 368.159418][ T31] misc_open+0x2d5/0x350 [ 368.163748][ T31] chrdev_open+0x4cc/0x5e0 [ 368.168349][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 368.173568][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 368.180067][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 368.185202][ T31] do_dentry_open+0x7ce/0x1420 [ 368.190014][ T31] vfs_open+0x3b/0x340 [ 368.194321][ T31] ? path_openat+0x33f3/0x3dd0 [ 368.199109][ T31] path_openat+0x340e/0x3dd0 [ 368.203826][ T31] ? do_sys_openat2+0xbc/0x200 [ 368.208610][ T31] ? __x64_sys_openat+0x138/0x170 [ 368.213742][ T31] ? __pfx_path_openat+0x10/0x10 [ 368.218878][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 368.223978][ T31] do_filp_open+0x1fa/0x410 [ 368.228601][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 368.233834][ T31] ? _raw_spin_unlock+0x28/0x50 [ 368.238880][ T31] ? alloc_fd+0x64c/0x6c0 [ 368.243315][ T31] do_sys_openat2+0x121/0x200 [ 368.248093][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 368.253455][ T31] ? exc_page_fault+0x82/0x100 [ 368.258241][ T31] __x64_sys_openat+0x138/0x170 [ 368.263238][ T31] do_syscall_64+0xfa/0xf80 [ 368.267776][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.273910][ T31] ? clear_bhb_loop+0x60/0xb0 [ 368.278602][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.285013][ T31] RIP: 0033:0x7f8cef98f749 [ 368.289535][ T31] RSP: 002b:00007f8cf07b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 368.301703][ T31] RAX: ffffffffffffffda RBX: 00007f8cefbe5fa0 RCX: 00007f8cef98f749 [ 368.309808][ T31] RDX: 0000000000000801 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 368.318015][ T31] RBP: 00007f8cefa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 368.326057][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.334243][ T31] R13: 00007f8cefbe6038 R14: 00007f8cefbe5fa0 R15: 00007f8cefd0fa28 [ 368.342573][ T31] [ 368.345620][ T31] INFO: task syz.2.477:7657 blocked for more than 145 seconds. [ 368.353439][ T31] Tainted: G L syzkaller #0 [ 368.360131][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 368.369112][ T31] task:syz.2.477 state:D stack:24312 pid:7657 tgid:7649 ppid:5847 task_flags:0x400140 flags:0x00080002 [ 368.381560][ T31] Call Trace: [ 368.384969][ T31] [ 368.387899][ T31] __schedule+0x14bc/0x5000 [ 368.392706][ T31] ? __pfx___schedule+0x10/0x10 [ 368.397589][ T31] ? schedule+0x91/0x360 [ 368.402200][ T31] schedule+0x165/0x360 [ 368.406679][ T31] schedule_preempt_disabled+0x13/0x30 [ 368.412194][ T31] __mutex_lock+0x7e6/0x1350 [ 368.416801][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 368.421868][ T31] ? __mutex_lock+0x5bb/0x1350 [ 368.426669][ T31] ? misc_open+0x51/0x350 [ 368.431081][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 368.436201][ T31] misc_open+0x51/0x350 [ 368.440727][ T31] chrdev_open+0x4cc/0x5e0 [ 368.445216][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 368.450161][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 368.456645][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 368.461835][ T31] do_dentry_open+0x7ce/0x1420 [ 368.466639][ T31] vfs_open+0x3b/0x340 [ 368.470891][ T31] ? path_openat+0x33f3/0x3dd0 [ 368.475781][ T31] path_openat+0x340e/0x3dd0 [ 368.480598][ T31] ? __pfx___schedule+0x10/0x10 [ 368.485554][ T31] ? __x64_sys_openat+0x138/0x170 [ 368.490719][ T31] ? __pfx_path_openat+0x10/0x10 [ 368.496157][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 368.501878][ T31] do_filp_open+0x1fa/0x410 [ 368.506615][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 368.511939][ T31] ? _raw_spin_unlock+0x28/0x50 [ 368.516904][ T31] ? alloc_fd+0x64c/0x6c0 [ 368.521584][ T31] do_sys_openat2+0x121/0x200 [ 368.526849][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 368.532323][ T31] ? rcu_is_watching+0x15/0xb0 [ 368.537396][ T31] __x64_sys_openat+0x138/0x170 [ 368.542427][ T31] do_syscall_64+0xfa/0xf80 [ 368.547401][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.553543][ T31] ? clear_bhb_loop+0x60/0xb0 [ 368.558878][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.564929][ T31] RIP: 0033:0x7f0c1af8f749 [ 368.569797][ T31] RSP: 002b:00007f0c1be97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 368.578547][ T31] RAX: ffffffffffffffda RBX: 00007f0c1b1e6180 RCX: 00007f0c1af8f749 [ 368.586729][ T31] RDX: 0000000000000002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 368.594777][ T31] RBP: 00007f0c1b013f91 R08: 0000000000000000 R09: 0000000000000000 [ 368.603032][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.615836][ T31] R13: 00007f0c1b1e6218 R14: 00007f0c1b1e6180 R15: 00007f0c1b30fa28 [ 368.625552][ T31] [ 368.628881][ T31] INFO: task syz.0.480:7669 blocked for more than 145 seconds. [ 368.636494][ T31] Tainted: G L syzkaller #0 [ 368.643143][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 368.651989][ T31] task:syz.0.480 state:D stack:28152 pid:7669 tgid:7667 ppid:5848 task_flags:0x400040 flags:0x00080002 [ 368.664375][ T31] Call Trace: [ 368.667757][ T31] [ 368.670680][ T31] __schedule+0x14bc/0x5000 [ 368.675276][ T31] ? __pfx___schedule+0x10/0x10 [ 368.680166][ T31] ? schedule+0x91/0x360 [ 368.684523][ T31] schedule+0x165/0x360 [ 368.688709][ T31] schedule_preempt_disabled+0x13/0x30 [ 368.694424][ T31] __mutex_lock+0x7e6/0x1350 [ 368.699052][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 368.704195][ T31] ? __mutex_lock+0x5bb/0x1350 [ 368.708986][ T31] ? misc_open+0x51/0x350 [ 368.713595][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 368.718787][ T31] misc_open+0x51/0x350 [ 368.723214][ T31] chrdev_open+0x4cc/0x5e0 [ 368.727848][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 368.733580][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 368.740030][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 368.745198][ T31] do_dentry_open+0x7ce/0x1420 [ 368.750210][ T31] vfs_open+0x3b/0x340 [ 368.754367][ T31] ? path_openat+0x33f3/0x3dd0 [ 368.759242][ T31] path_openat+0x340e/0x3dd0 [ 368.763932][ T31] ? do_sys_openat2+0xbc/0x200 [ 368.768710][ T31] ? __x64_sys_openat+0x138/0x170 [ 368.774439][ T31] ? __pfx_path_openat+0x10/0x10 [ 368.779879][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 368.785128][ T31] do_filp_open+0x1fa/0x410 [ 368.789846][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 368.795379][ T31] ? _raw_spin_unlock+0x28/0x50 [ 368.800292][ T31] ? alloc_fd+0x64c/0x6c0 [ 368.805104][ T31] do_sys_openat2+0x121/0x200 [ 368.809958][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 368.815823][ T31] ? exc_page_fault+0x82/0x100 [ 368.820803][ T31] __x64_sys_openat+0x138/0x170 [ 368.825826][ T31] do_syscall_64+0xfa/0xf80 [ 368.831002][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.837889][ T31] ? clear_bhb_loop+0x60/0xb0 [ 368.842987][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.849057][ T31] RIP: 0033:0x7f07ae38f749 [ 368.854023][ T31] RSP: 002b:00007f07af205038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 368.863069][ T31] RAX: ffffffffffffffda RBX: 00007f07ae5e6090 RCX: 00007f07ae38f749 [ 368.871412][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 368.879690][ T31] RBP: 00007f07ae413f91 R08: 0000000000000000 R09: 0000000000000000 [ 368.888029][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.896165][ T31] R13: 00007f07ae5e6128 R14: 00007f07ae5e6090 R15: 00007f07ae70fa28 [ 368.904298][ T31] [ 368.907349][ T31] INFO: task syz-executor:7671 blocked for more than 145 seconds. [ 368.915599][ T31] Tainted: G L syzkaller #0 [ 368.922283][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 368.931044][ T31] task:syz-executor state:D stack:24408 pid:7671 tgid:7671 ppid:5820 task_flags:0x400000 flags:0x00080002 [ 368.943381][ T31] Call Trace: [ 368.946763][ T31] [ 368.949953][ T31] __schedule+0x14bc/0x5000 [ 368.954606][ T31] ? __pfx___schedule+0x10/0x10 [ 368.959535][ T31] ? schedule+0x91/0x360 [ 368.963850][ T31] schedule+0x165/0x360 [ 368.968024][ T31] schedule_preempt_disabled+0x13/0x30 [ 368.973557][ T31] __mutex_lock+0x7e6/0x1350 [ 368.978177][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 368.983189][ T31] ? __mutex_lock+0x5bb/0x1350 [ 368.988065][ T31] ? misc_open+0x51/0x350 [ 368.992462][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 368.997534][ T31] misc_open+0x51/0x350 [ 369.001784][ T31] chrdev_open+0x4cc/0x5e0 [ 369.006997][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 369.012018][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 369.019502][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 369.025109][ T31] do_dentry_open+0x7ce/0x1420 [ 369.029914][ T31] vfs_open+0x3b/0x340 [ 369.034164][ T31] ? path_openat+0x33f3/0x3dd0 [ 369.038955][ T31] path_openat+0x340e/0x3dd0 [ 369.043783][ T31] ? do_syscall_64+0xfa/0xf80 [ 369.048512][ T31] ? do_sys_openat2+0xbc/0x200 [ 369.054062][ T31] ? __x64_sys_openat+0x138/0x170 [ 369.059122][ T31] ? __pfx_path_openat+0x10/0x10 [ 369.064406][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 369.069549][ T31] do_filp_open+0x1fa/0x410 [ 369.074232][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 369.079493][ T31] ? _raw_spin_unlock+0x28/0x50 [ 369.084534][ T31] ? alloc_fd+0x64c/0x6c0 [ 369.089173][ T31] do_sys_openat2+0x121/0x200 [ 369.094794][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 369.100111][ T31] ? fd_install+0x95/0x3d0 [ 369.104610][ T31] ? fd_install+0x307/0x3d0 [ 369.109214][ T31] __x64_sys_openat+0x138/0x170 [ 369.114361][ T31] do_syscall_64+0xfa/0xf80 [ 369.118895][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.125071][ T31] ? clear_bhb_loop+0x60/0xb0 [ 369.129782][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.135777][ T31] RIP: 0033:0x7f859658df11 [ 369.140227][ T31] RSP: 002b:00007ffe8843f670 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 369.148739][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f859658df11 [ 369.156777][ T31] RDX: 0000000000000002 RSI: 00007f85966149b7 RDI: 00000000ffffff9c [ 369.165009][ T31] RBP: 00007f85966149b7 R08: 00000000000000d7 R09: 0000000000000000 [ 369.173063][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 369.181133][ T31] R13: 0000000000000003 R14: 00007ffe8843fa48 R15: 0000000000000000 [ 369.189208][ T31] [ 369.192301][ T31] INFO: task syz-executor:7673 blocked for more than 145 seconds. [ 369.200420][ T31] Tainted: G L syzkaller #0 [ 369.207136][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.215950][ T31] task:syz-executor state:D stack:24408 pid:7673 tgid:7673 ppid:5820 task_flags:0x400000 flags:0x00080000 [ 369.228034][ T31] Call Trace: [ 369.231457][ T31] [ 369.234400][ T31] __schedule+0x14bc/0x5000 [ 369.238928][ T31] ? __pfx___schedule+0x10/0x10 [ 369.243858][ T31] ? schedule+0x91/0x360 [ 369.248117][ T31] schedule+0x165/0x360 [ 369.252491][ T31] schedule_preempt_disabled+0x13/0x30 [ 369.257979][ T31] __mutex_lock+0x7e6/0x1350 [ 369.262670][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 369.267631][ T31] ? __mutex_lock+0x5bb/0x1350 [ 369.272654][ T31] ? misc_open+0x51/0x350 [ 369.277101][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 369.282217][ T31] misc_open+0x51/0x350 [ 369.286477][ T31] chrdev_open+0x4cc/0x5e0 [ 369.290901][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 369.296029][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 369.302423][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 369.307369][ T31] do_dentry_open+0x7ce/0x1420 [ 369.312229][ T31] vfs_open+0x3b/0x340 [ 369.316490][ T31] ? path_openat+0x33f3/0x3dd0 [ 369.321504][ T31] path_openat+0x340e/0x3dd0 [ 369.326151][ T31] ? do_syscall_64+0xfa/0xf80 [ 369.330927][ T31] ? do_sys_openat2+0xbc/0x200 [ 369.339575][ T31] ? __x64_sys_openat+0x138/0x170 [ 369.344793][ T31] ? __pfx_path_openat+0x10/0x10 [ 369.349938][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 369.354972][ T31] do_filp_open+0x1fa/0x410 [ 369.359591][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 369.364703][ T31] ? _raw_spin_unlock+0x28/0x50 [ 369.369570][ T31] ? alloc_fd+0x64c/0x6c0 [ 369.374487][ T31] do_sys_openat2+0x121/0x200 [ 369.379262][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 369.384768][ T31] ? fd_install+0x95/0x3d0 [ 369.389388][ T31] ? fd_install+0x307/0x3d0 [ 369.393970][ T31] __x64_sys_openat+0x138/0x170 [ 369.398953][ T31] do_syscall_64+0xfa/0xf80 [ 369.403555][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.409662][ T31] ? clear_bhb_loop+0x60/0xb0 [ 369.414519][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.420440][ T31] RIP: 0033:0x7f506418df11 [ 369.424930][ T31] RSP: 002b:00007ffc5aa94090 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 369.433582][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f506418df11 [ 369.441643][ T31] RDX: 0000000000000002 RSI: 00007f50642149b7 RDI: 00000000ffffff9c [ 369.449642][ T31] RBP: 00007f50642149b7 R08: 00000000000000d7 R09: 0000000000000000 [ 369.457756][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 369.465793][ T31] R13: 0000000000000003 R14: 00007ffc5aa94468 R15: 0000000000000000 [ 369.474028][ T31] [ 369.477056][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 369.486215][ T31] [ 369.486215][ T31] Showing all locks held in the system: [ 369.494184][ T31] 1 lock held by khungtaskd/31: [ 369.499024][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 369.508987][ T31] 2 locks held by getty/5593: [ 369.513764][ T31] #0: ffff88814df270a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 369.523850][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 369.534641][ T31] 1 lock held by syz-executor/5841: [ 369.540052][ T31] #0: ffffffff8f5ecfa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 369.550404][ T31] 1 lock held by syz-executor/5844: [ 369.555792][ T31] #0: ffffffff8f5ecfa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 369.565983][ T31] 3 locks held by kworker/1:6/5921: [ 369.571293][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 369.582978][ T31] #1: ffffc90004aafb80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 369.596579][ T31] #2: ffffffff8f5ecfa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 369.608148][ T31] 2 locks held by syz.1.448/7480: [ 369.613224][ T31] #0: ffff888075d15100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 369.623483][ T31] #1: ffffffff8f5ecfa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 369.633806][ T31] 2 locks held by syz.4.458/7519: [ 369.638825][ T31] #0: ffffffff8f5ecfa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 369.649018][ T31] #1: ffff888075d15100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 369.659324][ T31] 2 locks held by syz.3.475/7621: [ 369.664561][ T31] #0: ffffffff8e7911c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 369.673167][ T31] #1: ffffffff8f5ecfa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 369.683462][ T31] 1 lock held by syz.2.477/7657: [ 369.688417][ T31] #0: ffffffff8e7911c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 369.697054][ T31] 1 lock held by syz.0.480/7669: [ 369.702070][ T31] #0: ffffffff8e7911c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 369.710695][ T31] 1 lock held by syz-executor/7671: [ 369.716162][ T31] #0: ffffffff8e7911c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 369.724708][ T31] 1 lock held by syz-executor/7673: [ 369.729900][ T31] #0: ffffffff8e7911c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 369.738433][ T31] 1 lock held by syz-executor/7674: [ 369.743682][ T31] #0: ffffffff8e7911c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 369.752181][ T31] 1 lock held by syz-executor/7675: [ 369.757603][ T31] #0: ffffffff8e7911c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 369.766192][ T31] 1 lock held by syz-executor/7676: [ 369.771566][ T31] #0: ffffffff8e7911c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 369.780137][ T31] [ 369.782512][ T31] ============================================= [ 369.782512][ T31] [ 369.790971][ T31] NMI backtrace for cpu 1 [ 369.790994][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 369.791009][ T31] Tainted: [L]=SOFTLOCKUP [ 369.791013][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 369.791020][ T31] Call Trace: [ 369.791025][ T31] [ 369.791031][ T31] dump_stack_lvl+0x189/0x250 [ 369.791049][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.791061][ T31] ? __pfx__printk+0x10/0x10 [ 369.791082][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 369.791095][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 369.791108][ T31] ? __pfx__printk+0x10/0x10 [ 369.791124][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 369.791141][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 369.791154][ T31] watchdog+0xf3c/0xf80 [ 369.791171][ T31] ? watchdog+0x1e2/0xf80 [ 369.791186][ T31] kthread+0x711/0x8a0 [ 369.791202][ T31] ? __pfx_watchdog+0x10/0x10 [ 369.791215][ T31] ? __pfx_kthread+0x10/0x10 [ 369.791229][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 369.791243][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 369.791256][ T31] ? __pfx_kthread+0x10/0x10 [ 369.791280][ T31] ret_from_fork+0x599/0xb30 [ 369.791292][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 369.791316][ T31] ? __switch_to_asm+0x39/0x70 [ 369.791334][ T31] ? __switch_to_asm+0x33/0x70 [ 369.791351][ T31] ? __pfx_kthread+0x10/0x10 [ 369.791372][ T31] ret_from_fork_asm+0x1a/0x30 [ 369.791404][ T31] [ 369.938174][ T31] Sending NMI from CPU 1 to CPUs 0: [ 369.943515][ C0] NMI backtrace for cpu 0 [ 369.943538][ C0] CPU: 0 UID: 0 PID: 6041 Comm: kworker/u8:18 Tainted: G L syzkaller #0 PREEMPT(full) [ 369.943562][ C0] Tainted: [L]=SOFTLOCKUP [ 369.943569][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 369.943580][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 369.943612][ C0] RIP: 0010:lock_release+0x141/0x3b0 [ 369.943632][ C0] Code: 89 f6 e8 a2 fb ad 09 44 89 64 24 14 45 89 e5 85 c0 0f 84 d7 00 00 00 48 85 ed 0f 84 13 01 00 00 83 7d 24 00 0f 85 d0 01 00 00 <8b> 45 20 3d 00 00 20 00 48 8b 5c 24 08 8b 54 24 14 72 25 89 c1 81 [ 369.943647][ C0] RSP: 0018:ffffc90004fa71d0 EFLAGS: 00000046 [ 369.943661][ C0] RAX: 0000000000000001 RBX: 0000000000000014 RCX: 11d0bd539740ab00 [ 369.943674][ C0] RDX: ffffc90004fa7301 RSI: ffffffff8df41cc0 RDI: ffff888033aae750 [ 369.943687][ C0] RBP: ffff888033aae750 R08: ffffc90004fa7698 R09: 0000000000000000 [ 369.943699][ C0] R10: ffffc90004fa7358 R11: fffff520009f4e6d R12: 0000000000000004 [ 369.943712][ C0] R13: 0000000000000004 R14: ffffffff8df41cc0 R15: ffff888033aadb80 [ 369.943724][ C0] FS: 0000000000000000(0000) GS:ffff888126092000(0000) knlGS:0000000000000000 [ 369.943739][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 369.943751][ C0] CR2: 00005652c157f168 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 369.943767][ C0] Call Trace: [ 369.943773][ C0] [ 369.943781][ C0] ? unwind_next_frame+0xa5/0x2390 [ 369.943802][ C0] ? unwind_next_frame+0xa5/0x2390 [ 369.943821][ C0] unwind_next_frame+0x19a9/0x2390 [ 369.943842][ C0] ? unwind_next_frame+0xa5/0x2390 [ 369.943860][ C0] ? __kasan_slab_free+0x5c/0x80 [ 369.943886][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 369.943912][ C0] arch_stack_walk+0x11c/0x150 [ 369.943933][ C0] ? kfree+0x1c0/0x660 [ 369.943954][ C0] stack_trace_save+0x9c/0xe0 [ 369.943978][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 369.944006][ C0] kasan_save_track+0x3e/0x80 [ 369.944028][ C0] ? kasan_save_track+0x3e/0x80 [ 369.944048][ C0] ? __kasan_save_free_info+0x46/0x50 [ 369.944067][ C0] ? __kasan_slab_free+0x5c/0x80 [ 369.944108][ C0] __kasan_save_free_info+0x46/0x50 [ 369.944127][ C0] __kasan_slab_free+0x5c/0x80 [ 369.944150][ C0] ? batadv_tt_local_commit_changes_nolock+0xc7b/0xd90 [ 369.944171][ C0] kfree+0x1c0/0x660 [ 369.944192][ C0] batadv_tt_local_commit_changes_nolock+0xc7b/0xd90 [ 369.944216][ C0] ? do_raw_spin_lock+0x121/0x290 [ 369.944238][ C0] ? batadv_tt_local_commit_changes+0x1e/0x40 [ 369.944258][ C0] ? __pfx_batadv_tt_local_commit_changes_nolock+0x10/0x10 [ 369.944279][ C0] ? batadv_primary_if_get_selected+0x7a/0x410 [ 369.944301][ C0] ? __pfx_batadv_primary_if_get_selected+0x10/0x10 [ 369.944325][ C0] ? batadv_tt_local_commit_changes+0x1e/0x40 [ 369.944345][ C0] batadv_tt_local_commit_changes+0x26/0x40 [ 369.944365][ C0] batadv_iv_ogm_schedule+0x276/0xf00 [ 369.944393][ C0] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 369.944416][ C0] ? batadv_send_skb_packet+0x426/0x690 [ 369.944444][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x6c6/0x7e0 [ 369.944472][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 369.944490][ C0] process_scheduled_works+0xad1/0x1770 [ 369.944524][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 369.944547][ C0] worker_thread+0x8a0/0xda0 [ 369.944565][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 369.944591][ C0] ? __kthread_parkme+0x7b/0x200 [ 369.944613][ C0] kthread+0x711/0x8a0 [ 369.944634][ C0] ? __pfx_worker_thread+0x10/0x10 [ 369.944651][ C0] ? __pfx_kthread+0x10/0x10 [ 369.944672][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 369.944693][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 369.944716][ C0] ? __pfx_kthread+0x10/0x10 [ 369.944736][ C0] ret_from_fork+0x599/0xb30 [ 369.944752][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 369.944771][ C0] ? __switch_to_asm+0x39/0x70 [ 369.944792][ C0] ? __switch_to_asm+0x33/0x70 [ 369.944812][ C0] ? __pfx_kthread+0x10/0x10 [ 369.944832][ C0] ret_from_fork_asm+0x1a/0x30 [ 369.944859][ C0]