last executing test programs: 14m51.210229651s ago: executing program 3 (id=4): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) r1 = syz_usb_connect(0x3, 0x40, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0xffffffffffffffac, &(0x7f0000000200)="9001000000000000") r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000240)=""/164, 0xa4) 14m47.421151113s ago: executing program 3 (id=9): mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000009c0)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe, 0x0}}, 0x10) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x1}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) 14m46.168469189s ago: executing program 3 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x38ff817, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x0) 14m45.781695536s ago: executing program 3 (id=17): syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902610002010484080000000001020d000005240600010524020006000606"], 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582"], 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000180)={0x6, 'bridge0\x00', {0x2}, 0xdd3c}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000001c0)={0x0, 'veth0_vlan\x00', {0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 14m43.735360206s ago: executing program 3 (id=24): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000600)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000680)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f00000006c0)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000b40)="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", 0xcb3}], 0x5, &(0x7f0000001800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) 14m43.550762121s ago: executing program 32 (id=24): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000600)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000680)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f00000006c0)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000b40)="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", 0xcb3}], 0x5, &(0x7f0000001800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) 14m42.82770696s ago: executing program 1 (id=31): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {0x5}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x4001) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x700, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) connect$inet(0xffffffffffffffff, 0x0, 0x0) 14m41.344324309s ago: executing program 1 (id=36): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xd7a10da4a7122766, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x2, 0x33d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 14m41.085318667s ago: executing program 1 (id=38): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 14m40.286113593s ago: executing program 1 (id=41): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x10000, 0x0) 14m40.012296184s ago: executing program 1 (id=42): syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x4) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x1) 14m38.150945136s ago: executing program 1 (id=49): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b788f8a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd905a", 0xc6}], 0x1}}], 0x1, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 14m37.894766155s ago: executing program 33 (id=49): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b788f8a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd905a", 0xc6}], 0x1}}], 0x1, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 12m42.411330489s ago: executing program 0 (id=374): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000880), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000008c0), 0x2, 0x141102) writev(r1, &(0x7f0000000900)=[{&(0x7f0000000940)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 12m41.310597649s ago: executing program 0 (id=379): setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100005938d740109730773396000000010902120001070000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001640)={0x44, &(0x7f00000016c0)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000001700)={0x44, &(0x7f0000001780)={0x0, 0x6, 0x2, "b9c6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 12m36.241236691s ago: executing program 0 (id=389): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1414aa0000000000000000000000000000000900000008000000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000000700000000000000fcffffffffffffff00000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000100000000000002000000200000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x29) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000640)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r2, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000800)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@remote, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xad, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) socket$key(0xf, 0x3, 0x2) write(r1, 0x0, 0x0) 12m34.15934953s ago: executing program 0 (id=393): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfc, 0x94, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000400)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) 12m33.772203085s ago: executing program 0 (id=397): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000700)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000019780)='./mnt\x00', 0x1ff) mount(&(0x7f00000197c0)=@filename='127.0.0.1:file0\x00', &(0x7f0000019800)='./mnt\x00', &(0x7f0000019840)='nfs4\x00', 0x0, &(0x7f0000019880)='addr=127.0.0.1,port=2049,clientaddr=127.0.0.1,minorversion=1\x00') 12m32.173709205s ago: executing program 0 (id=398): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c80), 0x1c1a41, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x2}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000180)=0xa, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/156, 0x9c}], 0x20, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/116, 0xd8d0481}], 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000cc0)={'syzkaller0\x00', 0xd132}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, r4, 0x701, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x75}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x28}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000d40)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_devices(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="01030a917fe501794db7"], 0xffdd) 12m15.812235806s ago: executing program 34 (id=398): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c80), 0x1c1a41, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x2}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000180)=0xa, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/156, 0x9c}], 0x20, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/116, 0xd8d0481}], 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000cc0)={'syzkaller0\x00', 0xd132}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, r4, 0x701, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x75}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x28}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000d40)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_devices(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="01030a917fe501794db7"], 0xffdd) 12m1.352525745s ago: executing program 4 (id=444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x54, 0x0, 0x2, {0xfffd, 0x1}, {0x38, 0x2}}) write$char_usb(r3, &(0x7f00000001c0)="e2", 0x2250) 11m54.071192795s ago: executing program 4 (id=449): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 11m52.31125859s ago: executing program 4 (id=451): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20004056) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, 0x0) 11m50.935079576s ago: executing program 4 (id=452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000002c0)) 11m49.366556947s ago: executing program 4 (id=454): ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x3, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000001f00)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f00000000c0)="f697079a16", 0x5}], 0x1, 0x0, 0x0) 11m39.712677978s ago: executing program 4 (id=462): write(0xffffffffffffffff, &(0x7f0000001b40)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143b7b87f2e34729b000000805e0ad338423d4200f349c545516c46", 0xbd) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001d00), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000019c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001a00)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x10000882) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000001ac0)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000040) 11m23.966464594s ago: executing program 35 (id=462): write(0xffffffffffffffff, &(0x7f0000001b40)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143b7b87f2e34729b000000805e0ad338423d4200f349c545516c46", 0xbd) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001d00), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000019c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001a00)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x10000882) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000001ac0)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000040) 10m50.204468212s ago: executing program 5 (id=518): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, &(0x7f0000000180), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b40)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000b80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000c80)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000d00), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000d40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d80)=0x6) r3 = syz_open_dev$video(&(0x7f0000000e40), 0xa7, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000f00)={0x1, @pix_mp={0x8, 0x5, 0x34524742, 0x5, 0x4, [{0x8, 0x9}, {0x7, 0x9}, {0x3}, {0xd, 0x5}, {0x8001, 0x1}, {0x1fc, 0x7ff}, {0x2, 0x3}, {0xfffffffc, 0xa}], 0xff, 0xac, 0x8, 0x1, 0x5}}) 10m48.791402666s ago: executing program 5 (id=520): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000002d40)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000002d80)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000002e40)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) close(0x3) socket$nl_xfrm(0x10, 0x3, 0x6) 10m45.843553501s ago: executing program 5 (id=526): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r3, &(0x7f0000000540)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000019580)='./trace\x00', &(0x7f00000195c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000019600)='trace/events/sched/sched_switch/filter\x00', 0x1, 0xb2) write(r4, &(0x7f0000019640)='prev_state.function ==x', 0x17) 10m44.317680518s ago: executing program 5 (id=527): openat(0xffffffffffffffff, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) write(r2, &(0x7f0000001640)="8b", 0x1) 10m41.205031031s ago: executing program 5 (id=529): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/events/sched/filter\x00', 0x1, 0x0) 10m34.153429064s ago: executing program 5 (id=536): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x5ae, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x8004) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 10m18.96998615s ago: executing program 36 (id=536): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x5ae, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x8004) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2m41.252855873s ago: executing program 9 (id=1542): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$peekuser(0x3, r1, 0x4) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000000c0)={0x6, 0x9, 0x2, 0x1fe, 0x15}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x8001) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002023a5d40f905ffff9f61810203010902120001bd00100209047fc700ff02c106"], &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x105200, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, 0x7, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x48004) openat$vcsu(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$netlink(0x10, 0x3, 0xc) 2m29.280840783s ago: executing program 9 (id=1554): prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000006c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000700)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000740), 0x0, 0x0) read$msr(r3, &(0x7f000000d000)=""/102392, 0x18ff8) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4}) 2m27.599945985s ago: executing program 9 (id=1556): r0 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) io_setup(0x5, &(0x7f0000000240)) sched_setattr(r2, 0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000280)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000540)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000600)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000004, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["ef0000000000cf9300", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$user(&(0x7f0000006400), 0x0, &(0x7f0000000980), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x2c) listen(r0, 0x5) socket$vsock_stream(0x28, 0x1, 0x0) 2m21.451737554s ago: executing program 9 (id=1561): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000008180)=""/102392, 0x18ff8) timer_create(0x3, 0x0, &(0x7f0000021180)) lseek(r0, 0x4, 0x0) 2m13.801212035s ago: executing program 9 (id=1571): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x7, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x409, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4c, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x404c000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m7.399064669s ago: executing program 9 (id=1578): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000005c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r4, &(0x7f00000007c0)=""/102392, 0x18ff8) gettid() timer_create(0x0, 0x0, 0x0) syz_io_uring_setup(0xefe, &(0x7f00000198c0)={0x0, 0xfffffffe, 0x2, 0x83, 0x3ae}, &(0x7f0000019940), &(0x7f0000019980), &(0x7f00000199c0)) 2m7.048936755s ago: executing program 37 (id=1578): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000005c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r4, &(0x7f00000007c0)=""/102392, 0x18ff8) gettid() timer_create(0x0, 0x0, 0x0) syz_io_uring_setup(0xefe, &(0x7f00000198c0)={0x0, 0xfffffffe, 0x2, 0x83, 0x3ae}, &(0x7f0000019940), &(0x7f0000019980), &(0x7f00000199c0)) 13.469747455s ago: executing program 7 (id=1737): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x103080) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0xa0, &(0x7f0000000340)={0x0, 0xb9d8, 0x2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000740)=[@ioring_restriction_register_op], 0x1) io_uring_setup(0x266b, &(0x7f0000000780)={0x0, 0x4abf, 0x3ff, 0x3, 0x2d3}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x19, 0x4, 0x4, 0x8}, 0x50) 11.635924728s ago: executing program 2 (id=1742): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000003800)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f000001c800)=0x410000002) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) readv(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f000001d940), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f000001da00)=[{r3, 0x2220}], 0x1, 0x0, 0x0, 0x0) close(r2) 11.573335455s ago: executing program 7 (id=1743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket(0x10, 0x3, 0x0) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x6) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010417000000000000000a00000a0900"], 0x78}, 0x1, 0x0, 0x0, 0x40090}, 0x200450c0) close(0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r3, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x4014}}, 0x40) 11.047622394s ago: executing program 2 (id=1744): signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0xbe}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r2, 0x20, &(0x7f0000000200)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) 10.930198881s ago: executing program 8 (id=1745): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000003800)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f000001c800)=0x410000002) syz_open_dev$usbfs(0x0, 0x205, 0x8401) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) readv(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f000001d940), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f000001da00)=[{r3, 0x2220}], 0x1, 0x0, 0x0, 0x0) close(r2) 10.660810302s ago: executing program 8 (id=1747): syz_usb_connect(0x0, 0x2e, &(0x7f0000000280)=ANY=[@ANYBLOB="32010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) sync() r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000180), 0xffffffffffffffff, r2}}, 0x18) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x4, &(0x7f0000000200)=[{0x6, 0x3, 0x0, 0x8}, {0x15, 0xa, 0x8}, {0x5, 0x2, 0x3, 0x8}, {0x421, 0x9, 0x4, 0x80000001}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r5, 0x89f2, &(0x7f0000000240)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0), 0x8) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)}], 0x1}, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000480)={{0x7, 0x3, 0xe, 0x10, '\x00', 0x8001}, 0x1, [0x6, 0x9, 0xf, 0xffffffffffff2d8c, 0x6, 0x5, 0x7, 0x3, 0x56ef, 0x6, 0x100, 0x7fffffffffffffff, 0x0, 0x3, 0xb03, 0xfffffffffffffffe, 0xffff, 0x100000001, 0x5, 0x4, 0x6, 0xfffffffffffffff7, 0x81, 0xea6b, 0xffffffffffffffc0, 0x6, 0x6, 0x7e, 0x7, 0xfffffffffffffffb, 0x100000001, 0x6, 0x40, 0x6, 0x7, 0x5, 0x800, 0x3, 0x7, 0x8, 0xcb9, 0x800, 0x3, 0x9, 0x10001, 0x4, 0x0, 0x1, 0x6, 0x9, 0x3, 0x2, 0x1, 0x4, 0x2, 0x1, 0xaabe, 0x7, 0xfffffffffffffff7, 0x6, 0x10000, 0x8, 0x101, 0xc, 0x80, 0xd09, 0x5e, 0x8489, 0xffffffffffffffff, 0x0, 0xe, 0x6, 0xfff, 0xed5, 0x6, 0x9, 0xffffffffffffffff, 0x9, 0x1, 0xfffffffffffffff9, 0xd, 0x1ff, 0x8, 0x1000, 0xffffffffffffffff, 0x9, 0x5, 0x7, 0x3, 0x2, 0x0, 0x9, 0x6e6, 0x1, 0x81, 0xffffffffffffffff, 0x0, 0xb, 0x8, 0x4, 0x6, 0x2, 0x800000, 0xf6, 0x6, 0x6, 0x8, 0xe, 0x100000001, 0x6, 0xce32, 0xfffffffffffffff9, 0x0, 0x4, 0x2, 0x1, 0x1261, 0x9, 0xfffffffffffffff8, 0xd75, 0xffffffff, 0x5, 0x667c9b49, 0xea6, 0x1, 0x4df21eb6, 0x100000000000001, 0x6]}) ioctl(r3, 0xc4c85513, &(0x7f0000000200)) 10.583233777s ago: executing program 7 (id=1748): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000003800)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f000001c800)=0x410000002) syz_open_dev$usbfs(0x0, 0x205, 0x8401) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f000001d940), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f000001da00)=[{r3, 0x2220}], 0x1, 0x0, 0x0, 0x0) close(r2) 9.934469796s ago: executing program 7 (id=1751): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) readv(r1, 0x0, 0x0) ppoll(&(0x7f000001da00)=[{r1, 0x2220}], 0x1, 0x0, 0x0, 0x0) close(r0) 9.928762725s ago: executing program 2 (id=1752): syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x2, 0x4}, {0x2, 0x9}}}}, 0x11) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='stat\x00') pread64(r0, &(0x7f0000000140)=""/15, 0xf, 0x4) 9.711381505s ago: executing program 7 (id=1753): r0 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) io_setup(0x5, &(0x7f0000000240)) sched_setattr(r2, 0x0, 0x0) r5 = inotify_init() r6 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000280)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000540)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000600)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000004, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["ef0000000000cf9300", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) inotify_add_watch(r5, &(0x7f0000000340)='.\x00', 0xa50003d1) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$user(&(0x7f0000006400), 0x0, &(0x7f0000000980), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x2c) listen(r0, 0x5) socket$vsock_stream(0x28, 0x1, 0x0) 8.027551627s ago: executing program 2 (id=1755): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000003800)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f000001c800)=0x410000002) syz_open_dev$usbfs(0x0, 0x205, 0x8401) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) readv(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f000001d940), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f000001da00)=[{r2, 0x2220}], 0x1, 0x0, 0x0, 0x0) close(r1) 7.833912923s ago: executing program 7 (id=1757): syz_emit_vhci(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='stat\x00') pread64(r0, &(0x7f0000000140)=""/15, 0xf, 0x4) 6.733216123s ago: executing program 2 (id=1758): syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c000000040000000400", @ANYRES32=r1], 0x50) r2 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000340)) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x17, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xd740c735f1c55f93}, 0x40) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x2, 0x4}, {0x2, 0x9}}}}, 0x11) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='stat\x00') pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4) 6.571237829s ago: executing program 6 (id=1759): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x1c8983, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = open$dir(&(0x7f0000000040)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0x40046607, 0x0) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000000200)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r2, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000100000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a") 3.005813229s ago: executing program 2 (id=1760): syz_usb_connect(0x0, 0x2e, &(0x7f0000000280)=ANY=[@ANYBLOB="32010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) sync() r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000180), 0xffffffffffffffff, r2}}, 0x18) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x4, &(0x7f0000000200)=[{0x6, 0x3, 0x0, 0x8}, {0x15, 0xa, 0x8}, {0x5, 0x2, 0x3, 0x8}, {0x421, 0x9, 0x4, 0x80000001}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r5, 0x89f2, &(0x7f0000000240)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000002c0), 0x8) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)}], 0x1}, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000480)={{0x7, 0x3, 0xe, 0x10, '\x00', 0x8001}, 0x1, [0x6, 0x9, 0xf, 0xffffffffffff2d8c, 0x6, 0x5, 0x7, 0x3, 0x56ef, 0x6, 0x100, 0x7fffffffffffffff, 0x0, 0x3, 0xb03, 0xfffffffffffffffe, 0xffff, 0x100000001, 0x5, 0x4, 0x6, 0xfffffffffffffff7, 0x81, 0xea6b, 0xffffffffffffffc0, 0x6, 0x6, 0x7e, 0x7, 0xfffffffffffffffb, 0x100000001, 0x6, 0x40, 0x6, 0x7, 0x5, 0x800, 0x3, 0x7, 0x8, 0xcb9, 0x800, 0x3, 0x9, 0x10001, 0x4, 0x0, 0x1, 0x6, 0x9, 0x3, 0x2, 0x1, 0x4, 0x2, 0x1, 0xaabe, 0x7, 0xfffffffffffffff7, 0x6, 0x10000, 0x8, 0x101, 0xc, 0x80, 0xd09, 0x5e, 0x8489, 0xffffffffffffffff, 0x0, 0xe, 0x6, 0xfff, 0xed5, 0x6, 0x9, 0xffffffffffffffff, 0x9, 0x1, 0xfffffffffffffff9, 0xd, 0x1ff, 0x8, 0x1000, 0xffffffffffffffff, 0x9, 0x5, 0x7, 0x3, 0x2, 0x0, 0x9, 0x6e6, 0x1, 0x81, 0xffffffffffffffff, 0x0, 0xb, 0x8, 0x4, 0x6, 0x2, 0x800000, 0xf6, 0x6, 0x6, 0x8, 0xe, 0x100000001, 0x6, 0xce32, 0xfffffffffffffff9, 0x0, 0x4, 0x2, 0x1, 0x1261, 0x9, 0xfffffffffffffff8, 0xd75, 0xffffffff, 0x5, 0x667c9b49, 0xea6, 0x1, 0x4df21eb6, 0x100000000000001, 0x6]}) 2.98028991s ago: executing program 6 (id=1761): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) set_mempolicy(0x5, &(0x7f0000000240)=0x3, 0x9) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x100000000000000}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, 0x0, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000440)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x10, 0x0, r7, 0x0, 0x0, 0x0, 0x2, 0x1}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000580)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x6, 0x6, 0x2, 0x8087, 0x6, 0xd}) ptrace(0x10, r3) 2.705994246s ago: executing program 8 (id=1762): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) readv(r1, 0x0, 0x0) ppoll(&(0x7f000001da00)=[{r1, 0x2220}], 0x1, 0x0, 0x0, 0x0) close(r0) 2.223184674s ago: executing program 8 (id=1763): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000003800)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f000001c800)=0x410000002) syz_open_dev$usbfs(0x0, 0x205, 0x8401) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) readv(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f000001d940), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f000001da00)=[{r2, 0x2220}], 0x1, 0x0, 0x0, 0x0) close(r1) 2.205939104s ago: executing program 6 (id=1764): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x4000074) setsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(r0, 0x84, 0x7d, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) getpgrp(0x0) r1 = syz_open_dev$sndmidi(0x0, 0xc7, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x47, &(0x7f000001ba40)=0x7) syz_open_dev$dri(&(0x7f0000000680), 0xe, 0x400000) fstat(r1, &(0x7f00000006c0)) bpf$PROG_LOAD(0x5, &(0x7f000001ba80)={0x2, 0x0, 0x0, &(0x7f000001bb80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res(&(0x7f0000000140), 0x8, 0x3) r2 = syz_open_dev$usbfs(&(0x7f0000000600), 0x77, 0x101041) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000640)={0x80, 0x6, 0x301, 0x3, 0x0, 0x0, 0x0}) 1.831000757s ago: executing program 6 (id=1765): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000300)=0x208) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r5, &(0x7f0000000680)='enable_event:', 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r6, &(0x7f0000000040)={'#! ', './file0', [{0x20, ')+'}, {0x20, '0\xa3\xa4\b\x93&3H'}, {0x20, 'no\x8f\x80\x85\xfe\x19\x17y\xb2\x82\xa0AR\x86lo-\xc5hX\xbbt\b\x86xookie'}], 0xa, "2d591c2a36c5ed079c4450fc4a55251cdda637889ef242428edac9d7454c9f9cefdf27b3a3765d915e758bf0ffbe33e0d014d50e1830598b4fe7d99bcdaf20f9129441ba9ebba990d064d9d45f4a4bc76fca7a4bcf7e77ded7364f9200"/103}, 0x9e) r7 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r7, 0x0) ftruncate(r7, 0x0) lseek(r6, 0x101, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r6, 0x80705864, &(0x7f0000000100)) 1.830743163s ago: executing program 8 (id=1766): r0 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) io_setup(0x5, &(0x7f0000000240)) sched_setattr(r2, 0x0, 0x0) r5 = inotify_init() r6 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000280)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000540)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000600)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000004, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["ef0000000000cf9300", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) inotify_add_watch(r5, &(0x7f0000000340)='.\x00', 0xa50003d1) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$user(&(0x7f0000006400), 0x0, &(0x7f0000000980), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x2c) listen(r0, 0x5) socket$vsock_stream(0x28, 0x1, 0x0) 322.965508ms ago: executing program 6 (id=1767): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000003800)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f000001c800)=0x410000002) syz_open_dev$usbfs(0x0, 0x205, 0x8401) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) readv(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f000001d940), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f000001da00)=[{r2, 0x2220}], 0x1, 0x0, 0x0, 0x0) close(r1) 188.30133ms ago: executing program 8 (id=1768): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) set_mempolicy(0x5, &(0x7f0000000240)=0x3, 0x9) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x100000000000000}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup(0xffffffffffffffff) write$UHID_INPUT(r5, 0x0, 0x0) write(r4, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000440)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x10, 0x0, r6, 0x0, 0x0, 0x0, 0x2, 0x1}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000580)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x6, 0x6, 0x2, 0x8087, 0x6, 0xd}) ptrace(0x10, r3) 0s ago: executing program 6 (id=1769): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000003800)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f000001c800)=0x410000002) syz_open_dev$usbfs(0x0, 0x205, 0x8401) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) readv(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f000001d940), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f000001da00)=[{r3, 0x2220}], 0x1, 0x0, 0x0, 0x0) close(r2) kernel console output (not intermixed with test programs): 9333] bridge_slave_0: entered allmulticast mode [ 571.974240][ T9333] bridge_slave_0: entered promiscuous mode [ 571.977243][ T9333] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.977371][ T9333] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.977529][ T9333] bridge_slave_1: entered allmulticast mode [ 572.016603][ T9333] bridge_slave_1: entered promiscuous mode [ 572.327804][ T9333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.466940][ T9333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.712784][ T9629] gfs2: error -5 reading superblock [ 573.737858][ T9333] team0: Port device team_slave_0 added [ 573.863083][ T9333] team0: Port device team_slave_1 added [ 573.863187][ T9208] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 573.914138][ T9208] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 573.992406][ T9208] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 574.045872][ T9208] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 574.405370][ T9208] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 574.495881][ T9208] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 574.501272][ T9333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.501288][ T9333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.501313][ T9333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.519924][ T9208] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 574.644768][ T9208] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 574.678775][ T9333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.678793][ T9333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.678818][ T9333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.347878][ T9333] hsr_slave_0: entered promiscuous mode [ 575.356686][ T9333] hsr_slave_1: entered promiscuous mode [ 575.357576][ T9333] debugfs: 'hsr0' already exists in 'hsr' [ 575.374940][ T9333] Cannot create hsr debugfs directory [ 578.294270][ T9699] gfs2: error -5 reading superblock [ 578.512375][ T9208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.600346][ T9208] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.077102][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.082677][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.101357][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.103191][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.909145][ T9738] syz.6.858 uses obsolete (PF_INET,SOCK_PACKET) [ 581.952679][ T9734] gfs2: error -5 reading superblock [ 582.615088][ T36] kauditd_printk_skb: 195 callbacks suppressed [ 582.615108][ T36] audit: type=1326 audit(1792507677.908:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9764 comm="syz.2.866" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc565b8f559 code=0x7ffc0000 [ 582.618236][ T36] audit: type=1326 audit(1792507677.908:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9764 comm="syz.2.866" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc565b8f559 code=0x7ffc0000 [ 582.618340][ T36] audit: type=1326 audit(1792507677.908:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9764 comm="syz.2.866" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc565b8f559 code=0x7ffc0000 [ 582.618605][ T36] audit: type=1326 audit(1792507677.908:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9764 comm="syz.2.866" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc565b8f559 code=0x7ffc0000 [ 582.621004][ T36] audit: type=1326 audit(1792507677.918:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9764 comm="syz.2.866" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc565b8f559 code=0x7ffc0000 [ 582.621048][ T36] audit: type=1326 audit(1792507677.918:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9764 comm="syz.2.866" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc565b8f559 code=0x7ffc0000 [ 582.621083][ T36] audit: type=1326 audit(1792507677.918:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9764 comm="syz.2.866" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc565b8f559 code=0x7ffc0000 [ 582.649937][ T9768] netlink: 56 bytes leftover after parsing attributes in process `syz.6.865'. [ 582.832090][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.6.868'. [ 584.659694][ T9779] gfs2: error -5 reading superblock [ 585.662555][ T12] bridge_slave_1: left allmulticast mode [ 585.662590][ T12] bridge_slave_1: left promiscuous mode [ 585.662859][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.841162][ T12] bridge_slave_0: left allmulticast mode [ 585.841197][ T12] bridge_slave_0: left promiscuous mode [ 585.841484][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.939118][ T5713] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 586.089146][ T5713] usb 3-1: Using ep0 maxpacket: 16 [ 586.089967][ T5713] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 586.091234][ T5713] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.091285][ T5713] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.091298][ T5713] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 586.091310][ T5713] usb 3-1: config 0 interface 0 has no altsetting 0 [ 586.091331][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.094020][ T5713] usb 3-1: config 0 descriptor?? [ 586.170629][ T12] bridge_slave_1: left allmulticast mode [ 586.170653][ T12] bridge_slave_1: left promiscuous mode [ 586.170806][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.291170][ T12] bridge_slave_0: left allmulticast mode [ 586.291225][ T12] bridge_slave_0: left promiscuous mode [ 586.291419][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.519864][ T12] bridge_slave_1: left allmulticast mode [ 586.519898][ T12] bridge_slave_1: left promiscuous mode [ 586.520105][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.565360][ T5713] elan 0003:04F3:074D.0001: failed to start in urb: -90 [ 586.568022][ T5713] input: HID 04f3:074d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:04F3:074D.0001/input/input12 [ 586.663724][ T5713] elan 0003:04F3:074D.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.2-1/input0 [ 586.682849][ T12] bridge_slave_0: left allmulticast mode [ 586.682883][ T12] bridge_slave_0: left promiscuous mode [ 586.683109][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.729637][ T5740] usb 3-1: USB disconnect, device number 18 [ 586.817945][ T9831] fido_id[9831]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 587.343141][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.452606][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.533788][ T12] bond0 (unregistering): Released all slaves [ 587.904092][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.020216][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.110599][ T12] bond0 (unregistering): Released all slaves [ 588.320433][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 588.379630][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.460868][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.470994][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 588.486430][ T10] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 588.487481][ T10] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 588.487529][ T10] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 588.487546][ T10] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 588.487560][ T10] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 588.545069][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.545096][ T10] usb 3-1: Product: syz [ 588.545109][ T10] usb 3-1: Manufacturer: syz [ 588.545122][ T10] usb 3-1: SerialNumber: syz [ 588.573820][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 588.576133][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input13 [ 588.631164][ T12] bond0 (unregistering): Released all slaves [ 588.822972][ T10] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 588.822994][ T10] (id 0x00) [ 589.059061][ T10] rc_core: IR keymap rc-imon-pad not found [ 589.059084][ T10] Registered IR keymap rc-empty [ 589.059268][ T10] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 589.059287][ T10] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 589.166411][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 589.288127][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input14 [ 589.471529][ T10] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:19> initialized [ 589.480858][ T10] usb 3-1: USB disconnect, device number 19 [ 590.023276][ T9208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.366195][ T9265] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 590.466596][ T9265] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 590.478118][ T9265] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 590.740345][ T9265] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 590.770090][ T9265] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 590.840103][ T9265] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 590.862103][ T9265] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 590.903508][ T9265] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 591.253364][ T9928] Bluetooth: MGMT ver 1.23 [ 591.941997][ T9333] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 592.170309][ T9333] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 592.192154][ T9333] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 592.260704][ T9333] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 592.280617][ T9208] veth0_vlan: entered promiscuous mode [ 592.285238][ T9333] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 592.351127][ T9333] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 592.547043][ T12] hsr_slave_0: left promiscuous mode [ 592.579155][ T12] hsr_slave_1: left promiscuous mode [ 592.580353][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.611466][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.713047][ T9949] Set syz1 is full, maxelem 6117 reached [ 592.799057][ T5713] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 592.829143][ T12] hsr_slave_0: left promiscuous mode [ 592.870001][ T12] hsr_slave_1: left promiscuous mode [ 592.871211][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.920564][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.949909][ T5713] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 592.955284][ T5713] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 592.955309][ T5713] usb 3-1: config 0 has no interface number 0 [ 592.955351][ T5713] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 592.955377][ T5713] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 592.955416][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.016824][ T5713] usb 3-1: config 0 descriptor?? [ 593.017679][ T9962] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 593.047558][ T5713] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 593.169136][ T12] hsr_slave_0: left promiscuous mode [ 593.209071][ T12] hsr_slave_1: left promiscuous mode [ 593.210374][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.239801][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.319204][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 593.343809][ T5713] usb 3-1: USB disconnect, device number 20 [ 593.740256][ T12] team0 (unregistering): Port device team_slave_1 removed [ 593.799536][ T12] team0 (unregistering): Port device team_slave_0 removed [ 594.314044][ T12] team0 (unregistering): Port device team_slave_1 removed [ 594.380202][ T12] team0 (unregistering): Port device team_slave_0 removed [ 594.901265][ T12] team0 (unregistering): Port device team_slave_1 removed [ 594.961964][ T12] team0 (unregistering): Port device team_slave_0 removed [ 595.141333][ T9333] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 595.187287][ T9333] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 595.224195][ T9208] veth1_vlan: entered promiscuous mode [ 595.594532][ T9208] veth0_macvtap: entered promiscuous mode [ 595.617414][ T9265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.623515][ T9208] veth1_macvtap: entered promiscuous mode [ 595.843506][ T9208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.966916][ T9265] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.983809][ T9208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.091804][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.092064][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.206105][ T1019] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.206233][ T1019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.277960][ T9333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.894056][ T9333] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.964569][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.964823][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.000442][ T3095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.000459][ T3095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.081256][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.081347][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.321653][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.321672][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.355466][ T48] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.529028][ T5741] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 597.570510][ T48] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.572146][ T1019] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.649087][ T2110] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.709374][ T5741] usb 3-1: Using ep0 maxpacket: 8 [ 597.710192][ T5741] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 597.711633][ T5741] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 597.711657][ T5741] usb 3-1: config 179 has no interface number 0 [ 597.711695][ T5741] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 597.711719][ T5741] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 597.711745][ T5741] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 597.711769][ T5741] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 597.711795][ T5741] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 597.711833][ T5741] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.854652][T10045] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 599.500228][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 599.500304][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 599.500360][ T9229] usb 3-1: USB disconnect, device number 21 [ 599.970451][ T9265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.560267][ T9333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.169956][ T9265] veth0_vlan: entered promiscuous mode [ 602.215789][ T9265] veth1_vlan: entered promiscuous mode [ 602.367321][ T9265] veth0_macvtap: entered promiscuous mode [ 602.381639][ T9265] veth1_macvtap: entered promiscuous mode [ 602.414226][T10114] netlink: 9 bytes leftover after parsing attributes in process `syz.8.963'. [ 602.416490][T10114] 0·: renamed from hsr0 (while UP) [ 602.472165][T10115] netlink: 9 bytes leftover after parsing attributes in process `syz.8.963'. [ 602.475593][T10114] 0·: entered allmulticast mode [ 602.475622][T10114] hsr_slave_0: entered allmulticast mode [ 602.475645][T10114] hsr_slave_1: entered allmulticast mode [ 602.476213][T10114] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 602.478864][ T9265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.528019][T10115] 1·: renamed from c0· (while UP) [ 602.551879][T10115] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 602.587646][ T9265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.848398][ T36] audit: type=1400 audit(1792507698.078:407): lsm=SMACK fn=smack_task_setpgid action=denied subject="w" object="_" requested=w pid=10116 comm="syz.8.965" opid=10116 ocomm="syz.8.965" [ 602.851740][T10119] capability: warning: `syz.2.964' uses 32-bit capabilities (legacy support in use) [ 602.905391][T10119] program syz.2.964 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 603.803976][ T9333] veth0_vlan: entered promiscuous mode [ 603.993201][ T9333] veth1_vlan: entered promiscuous mode [ 604.359110][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.359133][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.691483][ T3076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.691506][ T3076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.916295][ T9333] veth0_macvtap: entered promiscuous mode [ 605.015980][ T9333] veth1_macvtap: entered promiscuous mode [ 605.195329][ T1276] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.217556][ T9333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.299949][ T1276] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.303747][ T48] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.303866][ T48] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.316766][ T9333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.347446][ T3076] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.374722][ T3076] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.549981][ T48] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.550264][ T48] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.889479][T10174] gfs2: error -5 reading superblock [ 607.969765][ T1276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.969786][ T1276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.176577][T10175] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 609.492376][ T2110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.492398][ T2110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.779020][ T5740] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 610.932320][ T5740] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 610.951659][ T5740] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.951690][ T5740] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.951726][ T5740] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.998624][ T5740] usb 9-1: config 0 descriptor?? [ 611.277296][T10222] gadgetfs: bound to dummy_udc driver [ 611.682681][ T5740] usb 9-1: string descriptor 0 read error: -22 [ 611.789166][ T9435] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 611.789772][ C0] gadgetfs: connected [ 611.791851][ T9435] gadgetfs: disconnected [ 611.881986][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 611.902109][ T5740] uclogic 0003:256C:006D.0002: interface is invalid, ignoring [ 611.956643][ C0] gadgetfs: connected [ 611.959271][ T9435] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 611.959683][ T9435] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 611.959717][ T9435] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.032074][ T5740] usb 9-1: USB disconnect, device number 2 [ 612.147719][ C0] gadgetfs: configuration #1 [ 612.430381][T10222] gadgetfs: suspended from state 3 [ 612.445066][ T9435] usb 1-1: USB disconnect, device number 8 [ 612.463866][T10222] gadgetfs: disconnected [ 614.462630][ T5741] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 614.610477][ T5741] usb 8-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 614.616204][ T5741] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 614.616225][ T5741] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 614.657614][ T5741] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 614.657631][ T5741] usb 8-1: Product: syz [ 614.657639][ T5741] usb 8-1: Manufacturer: syz [ 614.801341][ T5741] mos7840 8-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 615.434118][ T5741] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 615.521938][ T5741] usb 8-1: USB disconnect, device number 2 [ 615.555744][ T5741] mos7840 8-1:1.0: device disconnected [ 618.937726][T10319] FAULT_INJECTION: forcing a failure. [ 618.937726][T10319] name failslab, interval 1, probability 0, space 0, times 0 [ 618.937762][T10319] CPU: 1 UID: 0 PID: 10319 Comm: syz.2.1031 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 618.937785][T10319] Tainted: [L]=SOFTLOCKUP [ 618.937791][T10319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 618.937801][T10319] Call Trace: [ 618.937809][T10319] [ 618.937817][T10319] dump_stack_lvl+0xe8/0x150 [ 618.937850][T10319] should_fail_ex+0x46b/0x600 [ 618.937885][T10319] should_failslab+0xa8/0x100 [ 618.937909][T10319] __kmalloc_cache_noprof+0xa1/0x680 [ 618.937934][T10319] ? pkcs7_parse_message+0x5a/0x640 [ 618.937956][T10319] ? pkcs7_parse_message+0x5a/0x640 [ 618.937983][T10319] pkcs7_parse_message+0x5a/0x640 [ 618.938023][T10319] verify_pkcs7_signature+0x30/0x90 [ 618.938051][T10319] pkcs7_preparse+0x8b/0xc0 [ 618.938073][T10319] ? __pfx_pkcs7_view_content+0x10/0x10 [ 618.938101][T10319] __key_create_or_update+0x354/0xa70 [ 618.938134][T10319] ? __pfx___key_create_or_update+0x10/0x10 [ 618.938161][T10319] ? lookup_user_key+0xb68/0x1150 [ 618.938194][T10319] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 618.938227][T10319] key_create_or_update+0x42/0x60 [ 618.938255][T10319] __se_sys_add_key+0x349/0x420 [ 618.938285][T10319] ? __pfx___se_sys_add_key+0x10/0x10 [ 618.938321][T10319] ? __x64_sys_add_key+0x20/0xc0 [ 618.938347][T10319] do_syscall_64+0x166/0x520 [ 618.938374][T10319] ? trace_irq_disable+0x3b/0x140 [ 618.938399][T10319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.938418][T10319] ? clear_bhb_loop+0x70/0xc0 [ 618.938443][T10319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.938462][T10319] RIP: 0033:0x7fc565b8f559 [ 618.938480][T10319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.938497][T10319] RSP: 002b:00007fc563de6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 618.938518][T10319] RAX: ffffffffffffffda RBX: 00007fc565e15fa0 RCX: 00007fc565b8f559 [ 618.938533][T10319] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 618.938545][T10319] RBP: 00007fc565c26b20 R08: fffffffffffffffb R09: 0000000000000000 [ 618.938559][T10319] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 618.938571][T10319] R13: 00007fc565e16038 R14: 00007fc565e15fa0 R15: 00007ffc57c46e08 [ 618.938603][T10319] [ 620.210682][T10338] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1038'. [ 620.250601][T10342] FAULT_INJECTION: forcing a failure. [ 620.250601][T10342] name failslab, interval 1, probability 0, space 0, times 0 [ 620.250640][T10342] CPU: 1 UID: 0 PID: 10342 Comm: syz.8.1040 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 620.250666][T10342] Tainted: [L]=SOFTLOCKUP [ 620.250672][T10342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 620.250683][T10342] Call Trace: [ 620.250690][T10342] [ 620.250699][T10342] dump_stack_lvl+0xe8/0x150 [ 620.250733][T10342] should_fail_ex+0x46b/0x600 [ 620.250768][T10342] should_failslab+0xa8/0x100 [ 620.250790][T10342] ? prepare_creds+0x30/0x820 [ 620.250811][T10342] kmem_cache_alloc_noprof+0x9e/0x690 [ 620.250839][T10342] ? prepare_creds+0x30/0x820 [ 620.250866][T10342] prepare_creds+0x30/0x820 [ 620.250892][T10342] lookup_user_key+0x1f2/0x1150 [ 620.250919][T10342] ? __pfx_lookup_user_key+0x10/0x10 [ 620.250942][T10342] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 620.250979][T10342] __se_sys_add_key+0x315/0x420 [ 620.251008][T10342] ? __pfx___se_sys_add_key+0x10/0x10 [ 620.251039][T10342] ? __x64_sys_add_key+0x20/0xc0 [ 620.251064][T10342] do_syscall_64+0x166/0x520 [ 620.251088][T10342] ? trace_irq_disable+0x3b/0x140 [ 620.251111][T10342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.251130][T10342] ? clear_bhb_loop+0x70/0xc0 [ 620.251152][T10342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.251170][T10342] RIP: 0033:0x7f5b3d75f559 [ 620.251187][T10342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.251203][T10342] RSP: 002b:00007f5b3b9ae028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 620.251233][T10342] RAX: ffffffffffffffda RBX: 00007f5b3d9e5fa0 RCX: 00007f5b3d75f559 [ 620.251247][T10342] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 00002000000000c0 [ 620.251260][T10342] RBP: 00007f5b3d7f6b20 R08: ffffffffffffffff R09: 0000000000000000 [ 620.251273][T10342] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 620.251285][T10342] R13: 00007f5b3d9e6038 R14: 00007f5b3d9e5fa0 R15: 00007fff0afcd888 [ 620.251316][T10342] [ 620.474642][T10345] loop5: detected capacity change from 0 to 7 [ 620.486271][T10345] Dev loop5: unable to read RDB block 7 [ 620.486396][T10345] loop5: AHDI p1 p2 p3 [ 620.486419][T10345] loop5: partition table partially beyond EOD, truncated [ 620.486683][T10345] loop5: p2 start 16777216 is beyond EOD, truncated [ 621.853770][T10361] Invalid argument reading file caps for ./file0 [ 622.967952][T10366] gfs2: error -5 reading superblock [ 623.599110][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 623.751769][T10387] FAULT_INJECTION: forcing a failure. [ 623.751769][T10387] name failslab, interval 1, probability 0, space 0, times 0 [ 623.751805][T10387] CPU: 0 UID: 0 PID: 10387 Comm: syz.8.1054 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 623.751831][T10387] Tainted: [L]=SOFTLOCKUP [ 623.751839][T10387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 623.751849][T10387] Call Trace: [ 623.751857][T10387] [ 623.751866][T10387] dump_stack_lvl+0xe8/0x150 [ 623.751900][T10387] should_fail_ex+0x46b/0x600 [ 623.751934][T10387] should_failslab+0xa8/0x100 [ 623.751954][T10387] __kmalloc_cache_noprof+0xa1/0x680 [ 623.751983][T10387] ? snd_pcm_oss_open+0xa3f/0x1c60 [ 623.752089][T10387] ? snd_pcm_oss_open+0xa3f/0x1c60 [ 623.752109][T10387] ? snd_pcm_oss_open+0x950/0x1c60 [ 623.752132][T10387] snd_pcm_oss_open+0xa3f/0x1c60 [ 623.752173][T10387] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 623.752208][T10387] ? rt_spin_unlock+0x159/0x200 [ 623.752233][T10387] ? __pfx_default_wake_function+0x10/0x10 [ 623.752260][T10387] ? rt_spin_unlock+0x165/0x200 [ 623.752294][T10387] chrdev_open+0x4dc/0x600 [ 623.752316][T10387] ? __pfx_chrdev_open+0x10/0x10 [ 623.752334][T10387] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 623.752369][T10387] ? __pfx_chrdev_open+0x10/0x10 [ 623.752386][T10387] do_dentry_open+0x841/0x1410 [ 623.752417][T10387] vfs_open_consume+0x4a/0x360 [ 623.752443][T10387] ? path_openat+0x16ea/0x2100 [ 623.752472][T10387] path_openat+0x1705/0x2100 [ 623.752517][T10387] do_file_open+0x23e/0x4a0 [ 623.752542][T10387] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 623.752612][T10387] ? __pfx_do_file_open+0x10/0x10 [ 623.752662][T10387] ? alloc_fd+0x6b2/0x760 [ 623.752695][T10387] do_sys_openat2+0x115/0x200 [ 623.752717][T10387] ? __se_sys_futex+0x3a8/0x450 [ 623.752737][T10387] ? __pfx_do_sys_openat2+0x10/0x10 [ 623.752764][T10387] ? rcu_is_watching+0x16/0xb0 [ 623.752787][T10387] __x64_sys_openat+0x138/0x170 [ 623.752813][T10387] do_syscall_64+0x166/0x520 [ 623.752839][T10387] ? trace_irq_disable+0x3b/0x140 [ 623.752863][T10387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.752883][T10387] ? clear_bhb_loop+0x70/0xc0 [ 623.752906][T10387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.752925][T10387] RIP: 0033:0x7f5b3d75f559 [ 623.752943][T10387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.752959][T10387] RSP: 002b:00007f5b3b9ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 623.752980][T10387] RAX: ffffffffffffffda RBX: 00007f5b3d9e5fa0 RCX: 00007f5b3d75f559 [ 623.752995][T10387] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 623.753008][T10387] RBP: 00007f5b3d7f6b20 R08: 0000000000000000 R09: 0000000000000000 [ 623.753021][T10387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.753033][T10387] R13: 00007f5b3d9e6038 R14: 00007f5b3d9e5fa0 R15: 00007fff0afcd888 [ 623.753066][T10387] [ 623.808956][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 623.820788][ T10] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 623.853371][ T10] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 623.853427][ T10] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 623.853449][ T10] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 623.853472][ T10] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 623.853501][ T10] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 623.853542][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.515027][ T10] usb 10-1: usb_control_msg returned -32 [ 624.515075][ T10] usbtmc 10-1:16.0: can't read capabilities [ 624.819952][ T5713] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 624.970615][ T5713] usb 8-1: Using ep0 maxpacket: 8 [ 624.971426][ T5713] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 625.028634][ T5713] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 625.028689][ T5713] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 625.028710][ T5713] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 625.028729][ T5713] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 625.028748][ T5713] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 625.028785][ T5713] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.309112][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 626.343502][ T5713] usb 10-1: USB disconnect, device number 2 [ 626.479753][ T10] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 626.552716][T10441] gfs2: error -5 reading superblock [ 626.683601][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.683629][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 626.748245][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 626.748273][ T10] usb 9-1: SerialNumber: syz [ 627.993956][ T10] usb 9-1: 0:2 : does not exist [ 628.326444][ T10] usb 9-1: USB disconnect, device number 3 [ 628.436428][T10333] udevd[10333]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 628.559064][ T5742] usb 8-1: USB disconnect, device number 3 [ 629.166707][T10471] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 629.385869][T10477] gfs2: error -5 reading superblock [ 629.490014][ T36] audit: type=1326 audit(1792507724.788:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10481 comm="syz.8.1091" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b3d75f559 code=0x0 [ 629.586913][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.586985][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.919035][ T5713] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 630.070071][ T5713] usb 10-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 630.071685][ T5713] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 630.071788][ T5713] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 630.071826][ T5713] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.316303][ T36] audit: type=1326 audit(1792507725.608:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10513 comm="syz.6.1104" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5e57f559 code=0x7ffc0000 [ 630.316844][ T36] audit: type=1326 audit(1792507725.608:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10513 comm="syz.6.1104" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5e57f559 code=0x7ffc0000 [ 630.316888][ T36] audit: type=1326 audit(1792507725.608:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10513 comm="syz.6.1104" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5e57f559 code=0x7ffc0000 [ 630.316926][ T36] audit: type=1326 audit(1792507725.608:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10513 comm="syz.6.1104" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5e57f559 code=0x7ffc0000 [ 630.316963][ T36] audit: type=1326 audit(1792507725.608:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10513 comm="syz.6.1104" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcd5e57f559 code=0x7ffc0000 [ 630.317002][ T36] audit: type=1326 audit(1792507725.608:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10513 comm="syz.6.1104" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5e57f559 code=0x7ffc0000 [ 630.317239][ T36] audit: type=1326 audit(1792507725.608:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10513 comm="syz.6.1104" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5e57f559 code=0x7ffc0000 [ 630.317595][ T36] audit: type=1326 audit(1792507725.608:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10513 comm="syz.6.1104" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5e57f559 code=0x7ffc0000 [ 630.317876][ T36] audit: type=1326 audit(1792507725.608:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10513 comm="syz.6.1104" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5e57f559 code=0x7ffc0000 [ 630.582371][ T5713] usb 10-1: USB disconnect, device number 3 [ 630.668489][T10519] overlayfs: failed to clone upperpath [ 632.372409][ T60] Bluetooth: hci5: command 0x0406 tx timeout [ 632.442877][T10526] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 632.473827][T10533] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 632.547965][ T9229] team_slave_0: entered promiscuous mode [ 632.548027][ T9229] team_slave_1: entered promiscuous mode [ 633.106246][ T57] Bluetooth: hci3: Frame reassembly failed (-84) [ 633.229026][ T5592] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 633.429038][ T5592] usb 3-1: Using ep0 maxpacket: 8 [ 633.433576][ T5592] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 633.460311][ T5592] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.460338][ T5592] usb 3-1: Product: syz [ 633.460349][ T5592] usb 3-1: Manufacturer: syz [ 633.460357][ T5592] usb 3-1: SerialNumber: syz [ 633.463939][ T5592] usb 3-1: config 0 descriptor?? [ 633.723052][ T5592] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 635.193436][ T60] Bluetooth: hci3: command 0x1003 tx timeout [ 635.205078][ T4903] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 635.678994][ T5592] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 635.687854][ T5592] usb 3-1: USB disconnect, device number 22 [ 635.885306][T10572] netlink: 'syz.7.1127': attribute type 4 has an invalid length. [ 636.288597][T10585] FAULT_INJECTION: forcing a failure. [ 636.288597][T10585] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 636.288633][T10585] CPU: 1 UID: 0 PID: 10585 Comm: syz.2.1134 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 636.288659][T10585] Tainted: [L]=SOFTLOCKUP [ 636.288666][T10585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 636.288678][T10585] Call Trace: [ 636.288685][T10585] [ 636.288694][T10585] dump_stack_lvl+0xe8/0x150 [ 636.288728][T10585] should_fail_ex+0x46b/0x600 [ 636.288764][T10585] _copy_from_iter+0x1d3/0x1660 [ 636.288784][T10585] ? __alloc_frozen_pages_noprof+0x2b7/0x5c0 [ 636.288814][T10585] ? __pfx__copy_from_iter+0x10/0x10 [ 636.288849][T10585] copy_page_from_iter+0x219/0x2d0 [ 636.288873][T10585] anon_pipe_write+0xdbd/0x1aa0 [ 636.288910][T10585] ? __pfx_anon_pipe_write+0x10/0x10 [ 636.288934][T10585] ? futex_wake+0x51e/0x600 [ 636.288960][T10585] ? bpf_lsm_file_permission+0x9/0x20 [ 636.288982][T10585] ? security_file_permission+0x75/0x260 [ 636.289018][T10585] vfs_write+0x61e/0xbb0 [ 636.289048][T10585] ? __pfx_vfs_write+0x10/0x10 [ 636.289073][T10585] ? __fget_files+0x3a8/0x420 [ 636.289099][T10585] ? __fget_files+0x2a/0x420 [ 636.289119][T10585] ? fdget+0x1b2/0x250 [ 636.289147][T10585] ksys_write+0x156/0x270 [ 636.289174][T10585] ? __pfx_ksys_write+0x10/0x10 [ 636.289208][T10585] do_syscall_64+0x166/0x520 [ 636.289234][T10585] ? trace_irq_disable+0x3b/0x140 [ 636.289253][T10585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.289271][T10585] ? clear_bhb_loop+0x70/0xc0 [ 636.289295][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.289314][T10585] RIP: 0033:0x7fc565b8f559 [ 636.289330][T10585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.289345][T10585] RSP: 002b:00007fc563de6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 636.289366][T10585] RAX: ffffffffffffffda RBX: 00007fc565e15fa0 RCX: 00007fc565b8f559 [ 636.289380][T10585] RDX: 00000000ffffff9a RSI: 0000200000000180 RDI: 0000000000000005 [ 636.289393][T10585] RBP: 00007fc565c26b20 R08: 0000000000000000 R09: 0000000000000000 [ 636.289404][T10585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.289413][T10585] R13: 00007fc565e16038 R14: 00007fc565e15fa0 R15: 00007ffc57c46e08 [ 636.289440][T10585] [ 636.822005][T10590] gfs2: error -5 reading superblock [ 637.709132][ T5592] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 637.920873][ T5592] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 637.924900][ T5592] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 637.924954][ T5592] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 637.924978][ T5592] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 637.924999][ T5592] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 637.925022][ T5592] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 637.926269][ T5592] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 637.926316][ T5592] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 637.926340][ T5592] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 637.926363][ T5592] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 637.926388][ T5592] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 637.927788][ T5592] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 637.927835][ T5592] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 637.927859][ T5592] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 637.927882][ T5592] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 637.927906][ T5592] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 637.931346][ T5592] usb 3-1: string descriptor 0 read error: -22 [ 637.931478][ T5592] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.948077][ T5592] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 638.174787][T10598] gfs2: error -5 reading superblock [ 638.459140][ T5742] usb 3-1: USB disconnect, device number 23 [ 639.649879][T10619] FAULT_INJECTION: forcing a failure. [ 639.649879][T10619] name failslab, interval 1, probability 0, space 0, times 0 [ 639.649912][T10619] CPU: 0 UID: 0 PID: 10619 Comm: syz.9.1146 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 639.649935][T10619] Tainted: [L]=SOFTLOCKUP [ 639.649942][T10619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 639.649952][T10619] Call Trace: [ 639.649959][T10619] [ 639.649967][T10619] dump_stack_lvl+0xe8/0x150 [ 639.650002][T10619] should_fail_ex+0x46b/0x600 [ 639.650046][T10619] should_failslab+0xa8/0x100 [ 639.650067][T10619] ? dst_alloc+0x105/0x170 [ 639.650168][T10619] kmem_cache_alloc_noprof+0x9e/0x690 [ 639.650208][T10619] ? dst_alloc+0x105/0x170 [ 639.650231][T10619] ? __pfx_ip6_dst_gc+0x10/0x10 [ 639.650378][T10619] dst_alloc+0x105/0x170 [ 639.650401][T10619] ip6_pol_route+0xba1/0x14d0 [ 639.650430][T10619] ? ip6_pol_route+0x163/0x14d0 [ 639.650459][T10619] ? __pfx_ip6_pol_route+0x10/0x10 [ 639.650488][T10619] ? __lock_acquire+0x747/0x2de0 [ 639.650520][T10619] fib6_rule_lookup+0x512/0x6e0 [ 639.650585][T10619] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 639.650613][T10619] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 639.650641][T10619] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 639.650669][T10619] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 639.650697][T10619] ? inet6_ehashfn+0x2f/0x3b0 [ 639.650758][T10619] ? __inet6_lookup_established+0xbc2/0xc60 [ 639.650796][T10619] ip6_route_input+0x78d/0xb20 [ 639.650833][T10619] ? __pfx_ip6_route_input+0x10/0x10 [ 639.650886][T10619] ? tcp_v6_early_demux+0x56e/0x970 [ 639.650951][T10619] ? ip6_rcv_finish_core+0x222/0x420 [ 639.650976][T10619] ip6_rcv_finish+0x141/0x280 [ 639.651003][T10619] NF_HOOK+0x336/0x3c0 [ 639.651024][T10619] ? __pfx_sock_wfree+0x10/0x10 [ 639.651086][T10619] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 639.651107][T10619] ? NF_HOOK+0x9e/0x3c0 [ 639.651128][T10619] ? __pfx_NF_HOOK+0x10/0x10 [ 639.651147][T10619] ? ip6_rcv_core+0xa1/0x1870 [ 639.651170][T10619] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 639.651208][T10619] ? netif_receive_skb+0x102/0xbf0 [ 639.651263][T10619] netif_receive_skb+0x278/0xbf0 [ 639.651292][T10619] ? __pfx_netif_receive_skb+0x10/0x10 [ 639.651313][T10619] ? rcu_is_watching+0x16/0xb0 [ 639.651332][T10619] ? __local_bh_disable_ip+0x3d/0x420 [ 639.651361][T10619] ? tun_rx_batched+0x194/0x760 [ 639.651445][T10619] ? tun_rx_batched+0x194/0x760 [ 639.651468][T10619] tun_rx_batched+0x1f1/0x760 [ 639.651494][T10619] ? rcu_is_watching+0x16/0xb0 [ 639.651514][T10619] ? __pfx_tun_rx_batched+0x10/0x10 [ 639.651543][T10619] ? lock_acquire+0x115/0x350 [ 639.651574][T10619] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 639.651601][T10619] ? lockdep_hardirqs_on+0x7b/0x110 [ 639.651632][T10619] tun_get_user+0x2bc0/0x4470 [ 639.651665][T10619] ? tun_get_user+0x27a6/0x4470 [ 639.651694][T10619] ? __futex_wait+0x1ff/0x480 [ 639.651720][T10619] ? __pfx_tun_get_user+0x10/0x10 [ 639.651746][T10619] ? __lock_acquire+0x747/0x2de0 [ 639.651788][T10619] ? ref_tracker_alloc+0x353/0x4c0 [ 639.651817][T10619] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 639.651842][T10619] ? lock_acquire+0x115/0x350 [ 639.651869][T10619] ? tun_get+0x1c/0x2f0 [ 639.651897][T10619] ? tun_get+0x1c/0x2f0 [ 639.651916][T10619] ? tun_get+0x1c/0x2f0 [ 639.651941][T10619] tun_chr_write_iter+0x119/0x200 [ 639.651967][T10619] vfs_write+0x61e/0xbb0 [ 639.651998][T10619] ? __pfx_vfs_write+0x10/0x10 [ 639.652028][T10619] ? __fget_files+0x3a8/0x420 [ 639.652070][T10619] ? __fget_files+0x2a/0x420 [ 639.652098][T10619] ? fdget+0x1b2/0x250 [ 639.652130][T10619] ksys_write+0x156/0x270 [ 639.652160][T10619] ? __pfx_ksys_write+0x10/0x10 [ 639.652208][T10619] do_syscall_64+0x166/0x520 [ 639.652238][T10619] ? trace_irq_disable+0x3b/0x140 [ 639.652266][T10619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.652287][T10619] ? clear_bhb_loop+0x70/0xc0 [ 639.652314][T10619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.652335][T10619] RIP: 0033:0x7fbcb0f8fd8e [ 639.652355][T10619] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 639.652371][T10619] RSP: 002b:00007fbcaf21dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 639.652393][T10619] RAX: ffffffffffffffda RBX: 00007fbcaf21e6c0 RCX: 00007fbcb0f8fd8e [ 639.652408][T10619] RDX: 000000000000004a RSI: 0000200000000140 RDI: 00000000000000c8 [ 639.652422][T10619] RBP: 00007fbcb1066b20 R08: 0000000000000000 R09: 0000000000000000 [ 639.652436][T10619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.652448][T10619] R13: 00007fbcb1256038 R14: 00007fbcb1255fa0 R15: 00007ffff2e1a308 [ 639.652483][T10619] [ 644.262903][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 644.262931][ T36] audit: type=1326 audit(1792507739.558:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10663 comm="syz.6.1162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd5e57f559 code=0x0 [ 650.142670][T10695] loop2: detected capacity change from 0 to 8 [ 650.594891][T10695] Dev loop2: unable to read RDB block 8 [ 650.594938][T10695] loop2: unable to read partition table [ 650.595137][T10695] loop2: partition table beyond EOD, truncated [ 650.595184][T10695] loop_reread_partitions: partition scan of loop2 (þ被xü^>Ñà– ) failed (rc=-5) [ 650.858562][T10704] FAULT_INJECTION: forcing a failure. [ 650.858562][T10704] name failslab, interval 1, probability 0, space 0, times 0 [ 650.858600][T10704] CPU: 1 UID: 0 PID: 10704 Comm: syz.8.1168 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 650.858628][T10704] Tainted: [L]=SOFTLOCKUP [ 650.858636][T10704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 650.858647][T10704] Call Trace: [ 650.858654][T10704] [ 650.858663][T10704] dump_stack_lvl+0xe8/0x150 [ 650.858698][T10704] should_fail_ex+0x46b/0x600 [ 650.858733][T10704] should_failslab+0xa8/0x100 [ 650.858757][T10704] __kmalloc_cache_noprof+0xa1/0x680 [ 650.858787][T10704] ? __kthread_create_on_node+0x115/0x3d0 [ 650.858812][T10704] ? __kthread_create_on_node+0x115/0x3d0 [ 650.858839][T10704] ? __init_swait_queue_head+0xa8/0x150 [ 650.858868][T10704] ? __pfx_rescuer_thread+0x10/0x10 [ 650.858895][T10704] __kthread_create_on_node+0x115/0x3d0 [ 650.858923][T10704] ? __pfx___kthread_create_on_node+0x10/0x10 [ 650.858959][T10704] ? __pfx_rescuer_thread+0x10/0x10 [ 650.858987][T10704] ? __pfx_rescuer_thread+0x10/0x10 [ 650.859014][T10704] kthread_create_on_node+0xeb/0x140 [ 650.859039][T10704] ? rcu_is_watching+0x16/0xb0 [ 650.859060][T10704] ? __pfx_kthread_create_on_node+0x10/0x10 [ 650.859089][T10704] ? init_rescuer+0x167/0x530 [ 650.859108][T10704] ? init_rescuer+0x167/0x530 [ 650.859137][T10704] init_rescuer+0x312/0x530 [ 650.859157][T10704] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 650.859185][T10704] ? __pfx_init_rescuer+0x10/0x10 [ 650.859214][T10704] ? __alloc_workqueue+0x1b29/0x1fe0 [ 650.859238][T10704] __alloc_workqueue+0x1bd7/0x1fe0 [ 650.859274][T10704] alloc_workqueue_noprof+0xe3/0x210 [ 650.859299][T10704] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 650.859325][T10704] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 650.859355][T10704] nci_register_device+0x22b/0x9a0 [ 650.859463][T10704] ? __pfx_nci_register_device+0x10/0x10 [ 650.859485][T10704] ? __rt_spin_lock_init+0x3e/0x50 [ 650.859506][T10704] ? __init_waitqueue_head+0xad/0x160 [ 650.859528][T10704] virtual_ncidev_open+0x129/0x190 [ 650.859594][T10704] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 650.859618][T10704] misc_open+0x2de/0x350 [ 650.859709][T10704] chrdev_open+0x4dc/0x600 [ 650.859733][T10704] ? __pfx_chrdev_open+0x10/0x10 [ 650.859751][T10704] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 650.859783][T10704] ? __pfx_chrdev_open+0x10/0x10 [ 650.859799][T10704] do_dentry_open+0x841/0x1410 [ 650.859830][T10704] vfs_open_consume+0x4a/0x360 [ 650.859846][T10704] ? path_openat+0x16ea/0x2100 [ 650.859883][T10704] path_openat+0x1705/0x2100 [ 650.859925][T10704] do_file_open+0x23e/0x4a0 [ 650.859947][T10704] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 650.859981][T10704] ? __pfx_do_file_open+0x10/0x10 [ 650.860028][T10704] ? alloc_fd+0x6b2/0x760 [ 650.860062][T10704] do_sys_openat2+0x115/0x200 [ 650.860081][T10704] ? __se_sys_futex+0x3a8/0x450 [ 650.860099][T10704] ? __pfx_do_sys_openat2+0x10/0x10 [ 650.860123][T10704] ? rcu_is_watching+0x16/0xb0 [ 650.860145][T10704] __x64_sys_openat+0x138/0x170 [ 650.860170][T10704] do_syscall_64+0x166/0x520 [ 650.860197][T10704] ? trace_irq_disable+0x3b/0x140 [ 650.860219][T10704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.860238][T10704] ? clear_bhb_loop+0x70/0xc0 [ 650.860260][T10704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.860278][T10704] RIP: 0033:0x7f5b3d75f559 [ 650.860297][T10704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.860312][T10704] RSP: 002b:00007f5b3b9ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 650.860334][T10704] RAX: ffffffffffffffda RBX: 00007f5b3d9e5fa0 RCX: 00007f5b3d75f559 [ 650.860348][T10704] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: ffffffffffffff9c [ 650.860359][T10704] RBP: 00007f5b3d7f6b20 R08: 0000000000000000 R09: 0000000000000000 [ 650.860371][T10704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 650.860382][T10704] R13: 00007f5b3d9e6038 R14: 00007f5b3d9e5fa0 R15: 00007fff0afcd888 [ 650.860413][T10704] [ 652.834444][T10704] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -ENOMEM [ 653.382056][T10725] FAULT_INJECTION: forcing a failure. [ 653.382056][T10725] name failslab, interval 1, probability 0, space 0, times 0 [ 653.382095][T10725] CPU: 0 UID: 0 PID: 10725 Comm: syz.7.1181 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 653.382130][T10725] Tainted: [L]=SOFTLOCKUP [ 653.382137][T10725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 653.382148][T10725] Call Trace: [ 653.382155][T10725] [ 653.382164][T10725] dump_stack_lvl+0xe8/0x150 [ 653.382197][T10725] should_fail_ex+0x46b/0x600 [ 653.382232][T10725] should_failslab+0xa8/0x100 [ 653.382253][T10725] __kmalloc_cache_noprof+0xa1/0x680 [ 653.382281][T10725] ? snd_card_file_add+0x58/0x250 [ 653.382376][T10725] ? snd_card_file_add+0x58/0x250 [ 653.382397][T10725] ? snd_lookup_oss_minor_data+0x11e/0x150 [ 653.382456][T10725] snd_card_file_add+0x58/0x250 [ 653.382482][T10725] snd_pcm_oss_open+0x17f/0x1c60 [ 653.382511][T10725] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 653.382547][T10725] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 653.382576][T10725] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 653.382598][T10725] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 653.382628][T10725] ? rt_spin_unlock+0x159/0x200 [ 653.382652][T10725] ? rt_spin_unlock+0x165/0x200 [ 653.382683][T10725] chrdev_open+0x4dc/0x600 [ 653.382705][T10725] ? __pfx_chrdev_open+0x10/0x10 [ 653.382722][T10725] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 653.382756][T10725] ? __pfx_chrdev_open+0x10/0x10 [ 653.382774][T10725] do_dentry_open+0x841/0x1410 [ 653.382813][T10725] vfs_open_consume+0x4a/0x360 [ 653.382831][T10725] ? path_openat+0x16ea/0x2100 [ 653.382859][T10725] path_openat+0x1705/0x2100 [ 653.382903][T10725] do_file_open+0x23e/0x4a0 [ 653.382927][T10725] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 653.382961][T10725] ? __pfx_do_file_open+0x10/0x10 [ 653.383009][T10725] ? alloc_fd+0x6b2/0x760 [ 653.383042][T10725] do_sys_openat2+0x115/0x200 [ 653.383062][T10725] ? __se_sys_futex+0x3a8/0x450 [ 653.383083][T10725] ? __pfx_do_sys_openat2+0x10/0x10 [ 653.383109][T10725] ? rcu_is_watching+0x16/0xb0 [ 653.383139][T10725] __x64_sys_openat+0x138/0x170 [ 653.383165][T10725] do_syscall_64+0x166/0x520 [ 653.383192][T10725] ? trace_irq_disable+0x3b/0x140 [ 653.383218][T10725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.383237][T10725] ? clear_bhb_loop+0x70/0xc0 [ 653.383260][T10725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.383279][T10725] RIP: 0033:0x7fe8782af559 [ 653.383298][T10725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.383315][T10725] RSP: 002b:00007fe876506028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 653.383336][T10725] RAX: ffffffffffffffda RBX: 00007fe878535fa0 RCX: 00007fe8782af559 [ 653.383350][T10725] RDX: 00000000000a0201 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 653.383364][T10725] RBP: 00007fe878346b20 R08: 0000000000000000 R09: 0000000000000000 [ 653.383376][T10725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.383388][T10725] R13: 00007fe878536038 R14: 00007fe878535fa0 R15: 00007fff78b4fdd8 [ 653.383420][T10725] [ 653.902709][T10729] FAULT_INJECTION: forcing a failure. [ 653.902709][T10729] name failslab, interval 1, probability 0, space 0, times 0 [ 653.902748][T10729] CPU: 0 UID: 0 PID: 10729 Comm: syz.7.1182 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 653.902775][T10729] Tainted: [L]=SOFTLOCKUP [ 653.902782][T10729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 653.902793][T10729] Call Trace: [ 653.902801][T10729] [ 653.902809][T10729] dump_stack_lvl+0xe8/0x150 [ 653.902843][T10729] should_fail_ex+0x46b/0x600 [ 653.902879][T10729] should_failslab+0xa8/0x100 [ 653.902899][T10729] ? security_file_alloc+0x34/0x310 [ 653.902927][T10729] kmem_cache_alloc_noprof+0x9e/0x690 [ 653.902953][T10729] ? rcu_is_watching+0x16/0xb0 [ 653.902971][T10729] ? security_file_alloc+0x34/0x310 [ 653.902998][T10729] ? alloc_empty_file+0x5b/0x1d0 [ 653.903022][T10729] security_file_alloc+0x34/0x310 [ 653.903051][T10729] init_file+0x96/0x2d0 [ 653.903073][T10729] alloc_empty_file+0x74/0x1d0 [ 653.903094][T10729] dentry_open+0x44/0xa0 [ 653.903114][T10729] open_detached_copy+0x3ff/0x550 [ 653.903146][T10729] vfs_open_tree+0x41b/0x490 [ 653.903171][T10729] ? rt_spin_unlock+0x165/0x200 [ 653.903208][T10729] ? __pfx_vfs_open_tree+0x10/0x10 [ 653.903246][T10729] __x64_sys_open_tree+0x93/0x110 [ 653.903271][T10729] do_syscall_64+0x166/0x520 [ 653.903298][T10729] ? trace_irq_disable+0x3b/0x140 [ 653.903323][T10729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.903342][T10729] ? clear_bhb_loop+0x70/0xc0 [ 653.903366][T10729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.903388][T10729] RIP: 0033:0x7fe8782af559 [ 653.903406][T10729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.903422][T10729] RSP: 002b:00007fe876506028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 653.903444][T10729] RAX: ffffffffffffffda RBX: 00007fe878535fa0 RCX: 00007fe8782af559 [ 653.903458][T10729] RDX: 0000000000089901 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 653.903472][T10729] RBP: 00007fe878346b20 R08: 0000000000000000 R09: 0000000000000000 [ 653.903484][T10729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.903496][T10729] R13: 00007fe878536038 R14: 00007fe878535fa0 R15: 00007fff78b4fdd8 [ 653.903528][T10729] [ 655.618351][T10748] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 656.467507][T10753] gfs2: error -5 reading superblock [ 659.503715][T10784] FAULT_INJECTION: forcing a failure. [ 659.503715][T10784] name failslab, interval 1, probability 0, space 0, times 0 [ 659.503753][T10784] CPU: 1 UID: 0 PID: 10784 Comm: syz.7.1193 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 659.503779][T10784] Tainted: [L]=SOFTLOCKUP [ 659.503785][T10784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 659.503796][T10784] Call Trace: [ 659.503804][T10784] [ 659.503813][T10784] dump_stack_lvl+0xe8/0x150 [ 659.503843][T10784] should_fail_ex+0x46b/0x600 [ 659.503874][T10784] should_failslab+0xa8/0x100 [ 659.503895][T10784] ? security_inode_alloc+0x39/0x310 [ 659.503920][T10784] kmem_cache_alloc_noprof+0x9e/0x690 [ 659.503946][T10784] ? security_inode_alloc+0x39/0x310 [ 659.503974][T10784] security_inode_alloc+0x39/0x310 [ 659.504001][T10784] inode_init_always_gfp+0x983/0xd40 [ 659.504030][T10784] alloc_inode+0x82/0x1b0 [ 659.504052][T10784] iget_locked+0x131/0x6a0 [ 659.504078][T10784] kernfs_get_inode+0x4f/0x770 [ 659.504107][T10784] kernfs_iop_lookup+0x1fe/0x320 [ 659.504131][T10784] lookup_open+0x95f/0x1990 [ 659.504180][T10784] path_openat+0x715/0x2100 [ 659.504234][T10784] do_file_open+0x23e/0x4a0 [ 659.504257][T10784] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 659.504289][T10784] ? __pfx_do_file_open+0x10/0x10 [ 659.504340][T10784] ? alloc_fd+0x6b2/0x760 [ 659.504375][T10784] do_sys_openat2+0x115/0x200 [ 659.504397][T10784] ? __se_sys_futex+0x3a8/0x450 [ 659.504417][T10784] ? __pfx_do_sys_openat2+0x10/0x10 [ 659.504438][T10784] ? ksys_write+0x248/0x270 [ 659.504459][T10784] ? __pfx___se_sys_futex+0x10/0x10 [ 659.504477][T10784] ? __pfx_ksys_write+0x10/0x10 [ 659.504502][T10784] __x64_sys_openat+0x138/0x170 [ 659.504527][T10784] do_syscall_64+0x166/0x520 [ 659.504553][T10784] ? trace_irq_disable+0x3b/0x140 [ 659.504576][T10784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.504595][T10784] ? clear_bhb_loop+0x70/0xc0 [ 659.504619][T10784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.504637][T10784] RIP: 0033:0x7fe8782af559 [ 659.504655][T10784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.504671][T10784] RSP: 002b:00007fe876506028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 659.504692][T10784] RAX: ffffffffffffffda RBX: 00007fe878535fa0 RCX: 00007fe8782af559 [ 659.504706][T10784] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 659.504719][T10784] RBP: 00007fe878346b20 R08: 0000000000000000 R09: 0000000000000000 [ 659.504731][T10784] R10: 0000000000000086 R11: 0000000000000246 R12: 0000000000000000 [ 659.504743][T10784] R13: 00007fe878536038 R14: 00007fe878535fa0 R15: 00007fff78b4fdd8 [ 659.504776][T10784] [ 659.739141][ T9320] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 659.961213][ T9320] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 659.962562][ T9320] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 659.970879][ T9320] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 659.970903][ T9320] usb 10-1: Product: syz [ 659.970916][ T9320] usb 10-1: Manufacturer: syz [ 659.970929][ T9320] usb 10-1: SerialNumber: syz [ 660.158845][T10793] overlayfs: failed to set uuid (34/file0, err=-1); falling back to uuid=null. [ 660.159903][T10793] overlayfs: failed to verify upper root origin [ 660.201948][ T9320] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 661.704349][T10819] netlink: 'syz.6.1209': attribute type 10 has an invalid length. [ 661.768214][T10816] kvm: emulating exchange as write [ 661.908177][T10819] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 661.922071][T10819] team0: Port device netdevsim1 added [ 662.049149][ T5741] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 662.198953][ T5741] usb 8-1: Using ep0 maxpacket: 32 [ 662.202493][ T5741] usb 8-1: unable to get BOS descriptor or descriptor too short [ 662.202554][ T5741] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 662.204145][ T5741] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 662.204169][ T5741] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 662.204189][ T5741] usb 8-1: config 14 has no interface number 0 [ 662.204205][ T5741] usb 8-1: config 14 has no interface number 1 [ 662.204270][ T5741] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 662.204291][ T5741] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 662.204314][ T5741] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 662.204338][ T5741] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 662.204363][ T5741] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 662.204386][ T5741] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 662.204409][ T5741] usb 8-1: config 14 interface 57 has no altsetting 0 [ 662.204425][ T5741] usb 8-1: config 14 interface 228 has no altsetting 0 [ 662.299288][ T5741] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.299313][ T5741] usb 8-1: Product: syz [ 662.299327][ T5741] usb 8-1: Manufacturer: syz [ 662.299342][ T5741] usb 8-1: SerialNumber: syz [ 662.877323][ T5741] legousbtower 8-1:14.57: interrupt endpoints not found [ 662.963411][T10843] jffs2: notice: (10843) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 663.265275][ T5741] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 663.307884][ T5741] legousbtower 8-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 663.556083][ T5741] usb 8-1: USB disconnect, device number 4 [ 663.682980][ T5741] legousbtower 8-1:14.228: LEGO USB Tower #-159 now disconnected [ 663.857641][T10851] FAULT_INJECTION: forcing a failure. [ 663.857641][T10851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.857678][T10851] CPU: 1 UID: 0 PID: 10851 Comm: syz.2.1223 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 663.857705][T10851] Tainted: [L]=SOFTLOCKUP [ 663.857711][T10851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 663.857722][T10851] Call Trace: [ 663.857730][T10851] [ 663.857738][T10851] dump_stack_lvl+0xe8/0x150 [ 663.857772][T10851] should_fail_ex+0x46b/0x600 [ 663.857806][T10851] _copy_from_user+0x2d/0xb0 [ 663.857829][T10851] do_fcntl+0x987/0x1a50 [ 663.857869][T10851] ? smack_file_fcntl+0x27c/0x320 [ 663.857896][T10851] ? __pfx_do_fcntl+0x10/0x10 [ 663.857925][T10851] ? __pfx_smack_file_fcntl+0x10/0x10 [ 663.857960][T10851] ? __fget_files+0x2a/0x420 [ 663.857989][T10851] ? bpf_lsm_file_fcntl+0x9/0x20 [ 663.858016][T10851] __se_sys_fcntl+0xcb/0x160 [ 663.858043][T10851] do_syscall_64+0x166/0x520 [ 663.858070][T10851] ? trace_irq_disable+0x3b/0x140 [ 663.858094][T10851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.858113][T10851] ? clear_bhb_loop+0x70/0xc0 [ 663.858136][T10851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.858156][T10851] RIP: 0033:0x7fc565b8f559 [ 663.858173][T10851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.858189][T10851] RSP: 002b:00007fc563de6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 663.858209][T10851] RAX: ffffffffffffffda RBX: 00007fc565e15fa0 RCX: 00007fc565b8f559 [ 663.858223][T10851] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 663.858235][T10851] RBP: 00007fc565c26b20 R08: 0000000000000000 R09: 0000000000000000 [ 663.858248][T10851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.858260][T10851] R13: 00007fc565e16038 R14: 00007fc565e15fa0 R15: 00007ffc57c46e08 [ 663.858291][T10851] [ 664.294439][T10857] mmap: syz.7.1225 (10857) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 664.297256][T10857] FAULT_INJECTION: forcing a failure. [ 664.297256][T10857] name failslab, interval 1, probability 0, space 0, times 0 [ 664.297292][T10857] CPU: 1 UID: 0 PID: 10857 Comm: syz.7.1225 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 664.297318][T10857] Tainted: [L]=SOFTLOCKUP [ 664.297325][T10857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 664.297335][T10857] Call Trace: [ 664.297344][T10857] [ 664.297353][T10857] dump_stack_lvl+0xe8/0x150 [ 664.297386][T10857] should_fail_ex+0x46b/0x600 [ 664.297420][T10857] should_failslab+0xa8/0x100 [ 664.297441][T10857] __kmalloc_cache_noprof+0xa1/0x680 [ 664.297466][T10857] ? up_read+0x34/0x180 [ 664.297486][T10857] ? afs_lookup_cell+0x487/0x1ce0 [ 664.297504][T10857] ? afs_lookup_cell+0x487/0x1ce0 [ 664.297531][T10857] afs_lookup_cell+0x487/0x1ce0 [ 664.297561][T10857] ? __pfx_afs_lookup_cell+0x10/0x10 [ 664.297583][T10857] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 664.297614][T10857] ? rwbase_write_lock+0x5ad/0x780 [ 664.297639][T10857] afs_cell_init+0x17a/0x340 [ 664.297663][T10857] afs_proc_rootcell_write+0x175/0x200 [ 664.297695][T10857] proc_simple_write+0x10b/0x140 [ 664.297719][T10857] ? __pfx_proc_simple_write+0x10/0x10 [ 664.297737][T10857] proc_reg_write+0x1f6/0x2f0 [ 664.297757][T10857] ? __pfx_proc_reg_write+0x10/0x10 [ 664.297784][T10857] vfs_write+0x29f/0xbb0 [ 664.297817][T10857] ? __pfx_vfs_write+0x10/0x10 [ 664.297845][T10857] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 664.297875][T10857] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 664.297899][T10857] ? mutex_lock_nested+0x152/0x1d0 [ 664.297919][T10857] ? fdget_pos+0x11e/0x160 [ 664.297948][T10857] ksys_write+0x156/0x270 [ 664.297974][T10857] ? __pfx_ksys_write+0x10/0x10 [ 664.298010][T10857] do_syscall_64+0x166/0x520 [ 664.298035][T10857] ? trace_irq_disable+0x3b/0x140 [ 664.298059][T10857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.298077][T10857] ? clear_bhb_loop+0x70/0xc0 [ 664.298099][T10857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.298116][T10857] RIP: 0033:0x7fe8782af559 [ 664.298134][T10857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.298149][T10857] RSP: 002b:00007fe876506028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 664.298171][T10857] RAX: ffffffffffffffda RBX: 00007fe878535fa0 RCX: 00007fe8782af559 [ 664.298188][T10857] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 664.298201][T10857] RBP: 00007fe878346b20 R08: 0000000000000000 R09: 0000000000000000 [ 664.298213][T10857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.298225][T10857] R13: 00007fe878536038 R14: 00007fe878535fa0 R15: 00007fff78b4fdd8 [ 664.298257][T10857] [ 664.393900][T10861] netlink: zone id is out of range [ 664.393960][T10861] netlink: zone id is out of range [ 664.393968][T10861] netlink: zone id is out of range [ 665.534316][T10881] fuse: fd is not a fuse device [ 667.409653][ T5742] usb 10-1: USB disconnect, device number 4 [ 667.479211][ T5742] usblp0: removed [ 667.491412][ T60] Bluetooth: hci5: command 0x0406 tx timeout [ 667.643847][T10912] gfs2: error -5 reading superblock [ 667.705945][ T36] audit: type=1800 audit(1792507762.998:429): pid=10914 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.1248" name=06 dev="sda1" ino=2071 res=0 errno=0 [ 669.876032][T10932] syz.7.1251 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=1000 [ 669.876074][T10932] CPU: 0 UID: 0 PID: 10932 Comm: syz.7.1251 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 669.876101][T10932] Tainted: [L]=SOFTLOCKUP [ 669.876109][T10932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 669.876120][T10932] Call Trace: [ 669.876128][T10932] [ 669.876137][T10932] dump_stack_lvl+0xe8/0x150 [ 669.876172][T10932] dump_header+0xd3/0x4b0 [ 669.876202][T10932] oom_kill_process+0x3ab/0x9e0 [ 669.876231][T10932] out_of_memory+0x1064/0x1480 [ 669.876266][T10932] ? __pfx_out_of_memory+0x10/0x10 [ 669.876287][T10932] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 669.876315][T10932] ? _mutex_lock_killable+0x152/0x1d0 [ 669.876339][T10932] ? try_charge_memcg+0xcc3/0x16f0 [ 669.876363][T10932] try_charge_memcg+0xd82/0x16f0 [ 669.876401][T10932] ? __pfx_try_charge_memcg+0x10/0x10 [ 669.876426][T10932] ? percpu_ref_tryget+0x15/0x180 [ 669.876458][T10932] ? __obj_cgroup_charge+0x36/0x2c0 [ 669.876489][T10932] __obj_cgroup_charge+0x1fd/0x2c0 [ 669.876515][T10932] ? __obj_cgroup_charge+0x36/0x2c0 [ 669.876546][T10932] __memcg_slab_post_alloc_hook+0x7a2/0xde0 [ 669.876596][T10932] __kvmalloc_node_noprof+0x6a5/0x890 [ 669.876614][T10932] ? nla_strdup+0x9d/0x140 [ 669.876638][T10932] ? nf_tables_newchain+0x1c9a/0x28b0 [ 669.876768][T10932] ? nf_tables_newchain+0x1c9a/0x28b0 [ 669.876804][T10932] nf_tables_newchain+0x1c9a/0x28b0 [ 669.876849][T10932] ? __pfx_nf_tables_newchain+0x10/0x10 [ 669.876923][T10932] ? nfnl_pernet+0x23/0x240 [ 669.876992][T10932] ? __nla_parse+0x40/0x60 [ 669.877020][T10932] nfnetlink_rcv+0x1291/0x28d0 [ 669.877084][T10932] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 669.877128][T10932] ? ref_tracker_free+0x668/0x820 [ 669.877174][T10932] ? skb_clone+0x246/0x3a0 [ 669.877239][T10932] ? __netlink_deliver_tap+0x811/0x860 [ 669.877297][T10932] ? netlink_deliver_tap+0x2e/0x1b0 [ 669.877316][T10932] ? netlink_deliver_tap+0x2e/0x1b0 [ 669.877342][T10932] netlink_unicast+0x90c/0xac0 [ 669.877388][T10932] netlink_sendmsg+0x884/0xba0 [ 669.877492][T10932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.877515][T10932] ? __lock_acquire+0x747/0x2de0 [ 669.877545][T10932] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 669.877578][T10932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.877595][T10932] sock_sendmsg_nosec+0x13a/0x180 [ 669.877619][T10932] ____sys_sendmsg+0x565/0x870 [ 669.877717][T10932] ? __pfx_____sys_sendmsg+0x10/0x10 [ 669.877754][T10932] ? import_iovec+0x73/0xa0 [ 669.877780][T10932] ___sys_sendmsg+0x2a5/0x360 [ 669.877805][T10932] ? __lock_acquire+0x747/0x2de0 [ 669.877835][T10932] ? __pfx____sys_sendmsg+0x10/0x10 [ 669.877876][T10932] ? futex_wait+0x2a2/0x390 [ 669.877935][T10932] ? __fget_files+0x3a8/0x420 [ 669.877958][T10932] ? __fget_files+0x2a/0x420 [ 669.877992][T10932] __x64_sys_sendmsg+0x1b7/0x290 [ 669.878022][T10932] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 669.878072][T10932] do_syscall_64+0x166/0x520 [ 669.878099][T10932] ? trace_irq_disable+0x3b/0x140 [ 669.878123][T10932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.878143][T10932] ? clear_bhb_loop+0x70/0xc0 [ 669.878168][T10932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.878186][T10932] RIP: 0033:0x7fe8782af559 [ 669.878205][T10932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.878222][T10932] RSP: 002b:00007fe876506028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 669.878243][T10932] RAX: ffffffffffffffda RBX: 00007fe878535fa0 RCX: 00007fe8782af559 [ 669.878258][T10932] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 669.878270][T10932] RBP: 00007fe878346b20 R08: 0000000000000000 R09: 0000000000000000 [ 669.878282][T10932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 669.878294][T10932] R13: 00007fe878536038 R14: 00007fe878535fa0 R15: 00007fff78b4fdd8 [ 669.878329][T10932] [ 670.064421][T10932] memory: usage 8kB, limit 8kB, failcnt 21 [ 670.064442][T10932] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 670.064456][T10932] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 670.064469][T10932] Memory cgroup stats for /syz7/test: [ 670.064714][T10932] cache 0 [ 670.064723][T10932] rss 0 [ 670.064730][T10932] shmem 0 [ 670.064736][T10932] mapped_file 0 [ 670.064743][T10932] dirty 0 [ 670.064749][T10932] writeback 0 [ 670.064756][T10932] workingset_refault_anon 0 [ 670.064763][T10932] workingset_refault_file 0 [ 670.064770][T10932] swap 0 [ 670.064776][T10932] swapcached 0 [ 670.064782][T10932] pgpgin 0 [ 670.064788][T10932] pgpgout 0 [ 670.064795][T10932] pgfault 0 [ 670.064801][T10932] pgmajfault 0 [ 670.064807][T10932] inactive_anon 0 [ 670.064814][T10932] active_anon 0 [ 670.064820][T10932] inactive_file 0 [ 670.064827][T10932] active_file 0 [ 670.064833][T10932] unevictable 0 [ 670.064848][T10932] hierarchical_memory_limit 8192 [ 670.064856][T10932] hierarchical_memsw_limit 9223372036854771712 [ 670.064864][T10932] total_cache 0 [ 670.064871][T10932] total_rss 0 [ 670.064878][T10932] total_shmem 0 [ 670.064884][T10932] total_mapped_file 0 [ 670.064891][T10932] total_dirty 0 [ 670.064898][T10932] total_writeback 0 [ 670.064904][T10932] total_workingset_refault_anon 0 [ 670.064912][T10932] total_workingset_refault_file 0 [ 670.064919][T10932] total_swap 0 [ 670.064926][T10932] total_swapcached 0 [ 670.064933][T10932] total_pgpgin 0 [ 670.064940][T10932] total_pgpgout 0 [ 670.064947][T10932] total_pgfault 0 [ 670.064954][T10932] total_pgmajfault 0 [ 670.064960][T10932] total_inactive_anon 0 [ 670.064967][T10932] total_active_anon 0 [ 670.064974][T10932] total_inactive_file 0 [ 670.064980][T10932] total_active_file 0 [ 670.064986][T10932] total_unevictable 0 [ 670.064993][T10932] anon_cost 0 [ 670.064999][T10932] file_cost 0 [ 670.065013][T10932] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz7/test,task_memcg=/syz7/test,task=syz.7.1251,pid=10931,uid=0 [ 670.497051][T10932] Memory cgroup out of memory: Killed process 10931 (syz.7.1251) total-vm:102280kB, anon-rss:1452kB, file-rss:22868kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 670.949247][ T9435] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 671.100547][ T9435] usb 3-1: not running at top speed; connect to a high speed hub [ 671.100587][ T9435] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 671.101884][ T9435] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 671.101942][ T9435] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.264198][ T9435] uvcvideo 3-1:1.0: Found UVC 1.00 device (046d:0825) [ 671.264443][ T9435] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 671.363628][ T9435] usb 3-1: USB disconnect, device number 24 [ 671.418069][T10952] FAULT_INJECTION: forcing a failure. [ 671.418069][T10952] name failslab, interval 1, probability 0, space 0, times 0 [ 671.418109][T10952] CPU: 1 UID: 0 PID: 10952 Comm: syz.8.1260 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 671.418139][T10952] Tainted: [L]=SOFTLOCKUP [ 671.418147][T10952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 671.418159][T10952] Call Trace: [ 671.418168][T10952] [ 671.418177][T10952] dump_stack_lvl+0xe8/0x150 [ 671.418209][T10952] should_fail_ex+0x46b/0x600 [ 671.418242][T10952] ? alloc_inode+0xb8/0x1b0 [ 671.418275][T10952] should_failslab+0xa8/0x100 [ 671.418299][T10952] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 671.418329][T10952] ? alloc_inode+0xb8/0x1b0 [ 671.418356][T10952] alloc_inode+0xb8/0x1b0 [ 671.418379][T10952] new_inode+0x1f/0x170 [ 671.418404][T10952] devpts_fill_super+0x145/0x520 [ 671.418429][T10952] ? cap_capable+0x123/0x460 [ 671.418456][T10952] ? __pfx_devpts_fill_super+0x10/0x10 [ 671.418481][T10952] get_tree_nodev+0xbb/0x150 [ 671.418510][T10952] vfs_get_tree+0x92/0x2a0 [ 671.418540][T10952] vfs_cmd_create+0xa2/0x200 [ 671.418566][T10952] __se_sys_fsconfig+0x6bf/0x810 [ 671.418594][T10952] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 671.418616][T10952] ? rcu_is_watching+0x16/0xb0 [ 671.418641][T10952] ? __x64_sys_fsconfig+0x20/0xc0 [ 671.418661][T10952] do_syscall_64+0x166/0x520 [ 671.418688][T10952] ? trace_irq_disable+0x3b/0x140 [ 671.418715][T10952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.418735][T10952] ? clear_bhb_loop+0x70/0xc0 [ 671.418760][T10952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.418780][T10952] RIP: 0033:0x7f5b3d75f559 [ 671.418799][T10952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.418815][T10952] RSP: 002b:00007f5b3b9ae028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 671.418835][T10952] RAX: ffffffffffffffda RBX: 00007f5b3d9e5fa0 RCX: 00007f5b3d75f559 [ 671.418853][T10952] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 671.418863][T10952] RBP: 00007f5b3d7f6b20 R08: 0000000000000000 R09: 0000000000000000 [ 671.418874][T10952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 671.418886][T10952] R13: 00007f5b3d9e6038 R14: 00007f5b3d9e5fa0 R15: 00007fff0afcd888 [ 671.418914][T10952] [ 672.946074][ T4903] Bluetooth: hci0: command 0x0406 tx timeout [ 675.162627][T10976] syz.6.1268 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 680.368220][T11014] gfs2: error -5 reading superblock [ 680.675162][ T36] audit: type=1326 audit(1792507775.968:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11021 comm="syz.6.1283" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5e57f559 code=0x7ffc0000 [ 680.675213][ T36] audit: type=1326 audit(1792507775.968:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11021 comm="syz.6.1283" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5e57f559 code=0x7ffc0000 [ 680.675250][ T36] audit: type=1326 audit(1792507775.968:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11021 comm="syz.6.1283" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5e57f559 code=0x7ffc0000 [ 680.675288][ T36] audit: type=1326 audit(1792507775.968:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11021 comm="syz.6.1283" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5e57f559 code=0x7ffc0000 [ 680.675327][ T36] audit: type=1326 audit(1792507775.968:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11021 comm="syz.6.1283" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fcd5e57f559 code=0x7ffc0000 [ 680.675489][ T36] audit: type=1326 audit(1792507775.968:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11021 comm="syz.6.1283" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5e57f559 code=0x7ffc0000 [ 680.675636][ T36] audit: type=1326 audit(1792507775.968:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11021 comm="syz.6.1283" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5e57f559 code=0x7ffc0000 [ 680.678276][ T36] audit: type=1326 audit(1792507775.968:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11021 comm="syz.6.1283" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5e57f559 code=0x7ffc0000 [ 680.678631][ T36] audit: type=1326 audit(1792507775.968:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11021 comm="syz.6.1283" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5e57f559 code=0x7ffc0000 [ 680.683388][ T36] audit: type=1326 audit(1792507775.978:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11021 comm="syz.6.1283" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fcd5e57f559 code=0x7ffc0000 [ 680.928662][T11026] FAULT_INJECTION: forcing a failure. [ 680.928662][T11026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.928700][T11026] CPU: 1 UID: 0 PID: 11026 Comm: syz.8.1285 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 680.928727][T11026] Tainted: [L]=SOFTLOCKUP [ 680.928734][T11026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 680.928745][T11026] Call Trace: [ 680.928753][T11026] [ 680.928760][T11026] dump_stack_lvl+0xe8/0x150 [ 680.928793][T11026] should_fail_ex+0x46b/0x600 [ 680.928828][T11026] _copy_from_user+0x2d/0xb0 [ 680.928852][T11026] sctp_getsockopt_peeloff_flags+0xcc/0x240 [ 680.928981][T11026] ? __local_bh_enable+0x1e3/0x2f0 [ 680.929017][T11026] ? __pfx_sctp_getsockopt_peeloff_flags+0x10/0x10 [ 680.929036][T11026] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 680.929058][T11026] ? lockdep_hardirqs_on+0x7b/0x110 [ 680.929086][T11026] sctp_getsockopt+0x3a5/0xb90 [ 680.929108][T11026] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 680.929130][T11026] do_sock_getsockopt+0x51d/0x7e0 [ 680.929156][T11026] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 680.929195][T11026] ? __fget_files+0x2a/0x420 [ 680.929220][T11026] __x64_sys_getsockopt+0x1aa/0x250 [ 680.929254][T11026] do_syscall_64+0x166/0x520 [ 680.929278][T11026] ? trace_irq_disable+0x3b/0x140 [ 680.929300][T11026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.929318][T11026] ? clear_bhb_loop+0x70/0xc0 [ 680.929340][T11026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.929359][T11026] RIP: 0033:0x7f5b3d75f559 [ 680.929378][T11026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.929393][T11026] RSP: 002b:00007f5b3b9ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 680.929413][T11026] RAX: ffffffffffffffda RBX: 00007f5b3d9e5fa0 RCX: 00007f5b3d75f559 [ 680.929427][T11026] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 680.929438][T11026] RBP: 00007f5b3d7f6b20 R08: 0000200000002640 R09: 0000000000000000 [ 680.929451][T11026] R10: 0000200000002580 R11: 0000000000000246 R12: 0000000000000000 [ 680.929463][T11026] R13: 00007f5b3d9e6038 R14: 00007f5b3d9e5fa0 R15: 00007fff0afcd888 [ 680.929493][T11026] [ 681.673810][T11048] bridge_slave_0: left allmulticast mode [ 681.673854][T11048] bridge_slave_0: left promiscuous mode [ 681.674119][T11048] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.455638][ T9320] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 683.457272][ T12] IPVS: starting estimator thread 0... [ 683.571237][T11063] syzkaller1: entered promiscuous mode [ 683.571265][T11063] syzkaller1: entered allmulticast mode [ 683.619053][ T9320] usb 9-1: Using ep0 maxpacket: 16 [ 683.619982][ T9320] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 683.621351][ T9320] usb 9-1: config index 0 descriptor too short (expected 51443, got 18) [ 683.621374][ T9320] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.621391][ T9320] usb 9-1: config 0 has no interfaces? [ 683.627485][ T9320] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.627512][ T9320] usb 9-1: Product: syz [ 683.627525][ T9320] usb 9-1: Manufacturer: syz [ 683.627539][ T9320] usb 9-1: SerialNumber: syz [ 683.660570][T11064] IPVS: using max 9 ests per chain, 21600 per kthread [ 683.712175][ T9320] r8152-cfgselector 9-1: Unknown version 0x0000 [ 683.712199][ T9320] r8152-cfgselector 9-1: config 0 descriptor?? [ 684.204898][T11077] loop6: detected capacity change from 0 to 4096 [ 684.331853][T11077] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 684.331884][T11077] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 684.331937][T11077] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 684.332087][T11077] loop6: [ 684.689204][ T5713] r8152-cfgselector 9-1: USB disconnect, device number 4 [ 685.666986][T11110] fuse: fd is not a fuse device [ 690.569625][ T5713] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 691.511816][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.511885][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.161758][ T5713] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 692.163582][ T5713] usb 10-1: config 0 has no interfaces? [ 692.167610][ T5713] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.167635][ T5713] usb 10-1: Product: syz [ 692.167648][ T5713] usb 10-1: Manufacturer: syz [ 692.167661][ T5713] usb 10-1: SerialNumber: syz [ 692.212140][ T5713] usb 10-1: config 0 descriptor?? [ 693.806643][ T5741] usb 10-1: USB disconnect, device number 5 [ 696.789119][ T5741] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 696.939692][ T5741] usb 3-1: Using ep0 maxpacket: 32 [ 696.940617][ T5741] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 696.942206][ T5741] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.942233][ T5741] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.942267][ T5741] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.980249][ T5741] usb 3-1: config 0 descriptor?? [ 697.167861][ T5741] usbhid 3-1:0.0: can't add hid device: -71 [ 697.167974][ T5741] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 697.272283][ T5741] usb 3-1: USB disconnect, device number 25 [ 698.880861][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 699.029092][ T9320] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 699.032020][T11269] overlayfs: failed to clone upperpath [ 699.195478][ T9320] usb 9-1: unable to get BOS descriptor or descriptor too short [ 699.195532][ T9320] usb 9-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=36.8b [ 699.196699][ T9320] usb 9-1: config 1 has an invalid interface number: 46 but max is 0 [ 699.196721][ T9320] usb 9-1: config 1 has no interface number 0 [ 699.196751][ T9320] usb 9-1: config 1 interface 46 has no altsetting 0 [ 699.209013][ T9320] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.209039][ T9320] usb 9-1: Product: syz [ 699.209053][ T9320] usb 9-1: Manufacturer: syz [ 699.209066][ T9320] usb 9-1: SerialNumber: syz [ 700.253249][ T9320] comedi comedi5: could not set alternate setting 3 in high speed [ 700.253275][ T9320] usbduxsigma 9-1:1.46: driver 'usbduxsigma' failed to auto-configure device. [ 700.285142][ T9320] usbduxsigma 9-1:1.46: probe with driver usbduxsigma failed with error -71 [ 700.306021][ T9320] usb 9-1: USB disconnect, device number 5 [ 700.461808][T11294] fuse: fd is not a fuse device [ 700.599012][ T9435] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 700.649058][ T5713] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 700.758940][ T9435] usb 3-1: Using ep0 maxpacket: 32 [ 700.759858][ T9435] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 700.761333][ T9435] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 700.761355][ T9435] usb 3-1: config 0 has no interface number 0 [ 700.761398][ T9435] usb 3-1: config 0 interface 12 has no altsetting 0 [ 700.764039][ T9435] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.764061][ T9435] usb 3-1: Product: syz [ 700.764074][ T9435] usb 3-1: Manufacturer: syz [ 700.764087][ T9435] usb 3-1: SerialNumber: syz [ 700.813000][ T5713] usb 10-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 700.815865][ T5713] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.815894][ T5713] usb 10-1: config 0 interface 0 has no altsetting 0 [ 700.815924][ T5713] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.873948][ T5713] usb 10-1: config 0 descriptor?? [ 700.884578][ T9435] usb 3-1: config 0 descriptor?? [ 701.327482][ T5713] logitech 0003:046D:C218.0003: unknown main item tag 0x0 [ 701.327523][ T5713] logitech 0003:046D:C218.0003: unknown main item tag 0x0 [ 701.327549][ T5713] logitech 0003:046D:C218.0003: unknown main item tag 0x0 [ 701.327574][ T5713] logitech 0003:046D:C218.0003: unknown main item tag 0x0 [ 701.327598][ T5713] logitech 0003:046D:C218.0003: unknown main item tag 0x0 [ 701.327623][ T5713] logitech 0003:046D:C218.0003: unknown main item tag 0x0 [ 701.327647][ T5713] logitech 0003:046D:C218.0003: unknown main item tag 0x0 [ 701.327672][ T5713] logitech 0003:046D:C218.0003: unknown main item tag 0x0 [ 701.327697][ T5713] logitech 0003:046D:C218.0003: unknown main item tag 0x0 [ 701.327721][ T5713] logitech 0003:046D:C218.0003: unknown main item tag 0x0 [ 701.379019][ T5713] logitech 0003:046D:C218.0003: hidraw0: USB HID v80.00 Device [HID 046d:c218] on usb-dummy_hcd.9-1/input0 [ 701.379147][ T5713] logitech 0003:046D:C218.0003: no inputs found [ 701.561995][ T9320] usb 10-1: USB disconnect, device number 6 [ 703.106026][ T9435] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 703.106079][ T9435] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 703.106171][ T9435] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 703.106255][ T9435] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 703.225739][ T9435] usb 3-1: USB disconnect, device number 26 [ 703.569105][ T9229] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 704.551489][ T9229] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 704.555781][ T9229] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.555834][ T9229] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.570337][ T9229] usb 8-1: config 0 descriptor?? [ 704.582444][ T9229] pwc: Askey VC010 type 2 USB webcam detected. [ 704.815964][ T9229] pwc: send_video_command error -71 [ 704.816001][ T9229] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 704.816080][ T9229] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 704.819997][ T9229] usb 8-1: USB disconnect, device number 5 [ 705.389036][ T9229] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 705.602759][ T9229] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 705.604264][ T9229] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.604311][ T9229] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.704174][ T9229] usb 8-1: config 0 descriptor?? [ 706.720003][ T9229] usb 8-1: can't set config #0, error -71 [ 706.738808][ T9229] usb 8-1: USB disconnect, device number 6 [ 706.754602][T11159] udevd[11159]: setting owner of /dev/bus/usb/008/006 to uid=0, gid=0 failed: No such file or directory [ 707.019070][ T5742] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 707.170138][ T5742] usb 10-1: Using ep0 maxpacket: 8 [ 707.211573][ T5742] usb 10-1: unable to get BOS descriptor or descriptor too short [ 707.211630][ T5742] usb 10-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 707.217521][ T5742] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 707.217558][ T5742] usb 10-1: can't read configurations, error -71 [ 711.789714][T11411] fuse: fd is not a fuse device [ 714.555880][T11435] gfs2: error -5 reading superblock [ 716.101876][T11441] netlink: 'syz.9.1392': attribute type 10 has an invalid length. [ 716.630218][T11441] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 716.631821][T11441] team0: Port device netdevsim1 added [ 725.472603][T11499] binder: 11492:11499 ioctl c0306201 200000000380 returned -14 [ 727.365563][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 727.365583][ T36] audit: type=1326 audit(1792507822.658:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11513 comm="syz.9.1418" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbcb0fcf559 code=0x0 [ 730.787295][T11541] FAULT_INJECTION: forcing a failure. [ 730.787295][T11541] name failslab, interval 1, probability 0, space 0, times 0 [ 730.787345][T11541] CPU: 0 UID: 0 PID: 11541 Comm: syz.9.1424 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 730.787373][T11541] Tainted: [L]=SOFTLOCKUP [ 730.787380][T11541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 730.787392][T11541] Call Trace: [ 730.787400][T11541] [ 730.787410][T11541] dump_stack_lvl+0xe8/0x150 [ 730.787445][T11541] should_fail_ex+0x46b/0x600 [ 730.787484][T11541] should_failslab+0xa8/0x100 [ 730.787509][T11541] __kmalloc_cache_node_noprof+0xac/0x670 [ 730.787537][T11541] ? lock_acquire+0x115/0x350 [ 730.787561][T11541] ? kyber_init_hctx+0x7e/0xeb0 [ 730.787583][T11541] ? kyber_init_hctx+0x7e/0xeb0 [ 730.787614][T11541] kyber_init_hctx+0x7e/0xeb0 [ 730.787637][T11541] ? queue_hctx+0x1e/0x240 [ 730.787659][T11541] ? queue_hctx+0x1e/0x240 [ 730.787689][T11541] blk_mq_init_sched+0x432/0x620 [ 730.787724][T11541] elevator_switch+0x26f/0x7b0 [ 730.787753][T11541] elevator_change+0x2fa/0x480 [ 730.787777][T11541] ? down_write_trylock+0x1ec/0x280 [ 730.787804][T11541] elv_iosched_store+0x504/0x630 [ 730.787834][T11541] ? __pfx_elv_iosched_store+0x10/0x10 [ 730.787867][T11541] ? __pfx_elv_iosched_store+0x10/0x10 [ 730.787889][T11541] ? queue_attr_store+0x1df/0x2b0 [ 730.787924][T11541] queue_attr_store+0x207/0x2b0 [ 730.787957][T11541] ? __pfx_queue_attr_store+0x10/0x10 [ 730.787987][T11541] ? lock_acquire+0x115/0x350 [ 730.788011][T11541] ? sysfs_file_kobj+0x1a/0x230 [ 730.788043][T11541] ? sysfs_file_kobj+0x1a/0x230 [ 730.788065][T11541] ? sysfs_file_kobj+0x1a/0x230 [ 730.788085][T11541] ? sysfs_file_kobj+0x1a/0x230 [ 730.788109][T11541] ? sysfs_file_kobj+0x1e4/0x230 [ 730.788133][T11541] ? sysfs_kf_write+0x166/0x260 [ 730.788162][T11541] ? __pfx_sysfs_kf_write+0x10/0x10 [ 730.788184][T11541] kernfs_fop_write_iter+0x3a5/0x540 [ 730.788212][T11541] vfs_write+0x61e/0xbb0 [ 730.788248][T11541] ? __pfx_vfs_write+0x10/0x10 [ 730.788276][T11541] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 730.788310][T11541] ? mutex_lock_nested+0x152/0x1d0 [ 730.788332][T11541] ? fdget_pos+0x11e/0x160 [ 730.788372][T11541] ksys_write+0x156/0x270 [ 730.788401][T11541] ? __pfx_ksys_write+0x10/0x10 [ 730.788441][T11541] do_syscall_64+0x166/0x520 [ 730.788468][T11541] ? trace_irq_disable+0x3b/0x140 [ 730.788492][T11541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.788512][T11541] ? clear_bhb_loop+0x70/0xc0 [ 730.788536][T11541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.788555][T11541] RIP: 0033:0x7fbcb0fcf559 [ 730.788573][T11541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.788590][T11541] RSP: 002b:00007fbcaf21e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 730.788611][T11541] RAX: ffffffffffffffda RBX: 00007fbcb1255fa0 RCX: 00007fbcb0fcf559 [ 730.788625][T11541] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 730.788638][T11541] RBP: 00007fbcb1066b20 R08: 0000000000000000 R09: 0000000000000000 [ 730.788650][T11541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.788661][T11541] R13: 00007fbcb1256038 R14: 00007fbcb1255fa0 R15: 00007ffff2e1a308 [ 730.788698][T11541] [ 730.802317][T11541] elv: switch to "kyber" failed, falling back to "none" [ 732.576506][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 736.854723][T11580] gfs2: error -5 reading superblock [ 747.290838][ T4903] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 750.913242][T11645] binder: 11641:11645 ioctl c0306201 0 returned -14 [ 753.538941][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.539012][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.089431][ T5713] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 754.239757][ T5713] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 754.241066][ T5713] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.241115][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.284041][ T5713] usb 3-1: config 0 descriptor?? [ 754.304044][ T5713] pwc: Askey VC010 type 2 USB webcam detected. [ 754.507070][ T5713] pwc: send_video_command error -71 [ 754.507091][ T5713] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 754.507203][ T5713] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 754.543226][ T5713] usb 3-1: USB disconnect, device number 27 [ 755.970296][ T5713] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 756.169692][ T5713] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 756.170747][ T5713] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.170797][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.174666][ T5713] usb 3-1: config 0 descriptor?? [ 756.223377][ T5713] pwc: Askey VC010 type 2 USB webcam detected. [ 756.358989][ T9435] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 756.391623][T11656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.392193][T11656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.508943][ T9435] usb 10-1: Using ep0 maxpacket: 32 [ 756.509896][ T9435] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 756.554039][ T9435] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 756.554067][ T9435] usb 10-1: config 0 has no interface number 0 [ 756.554129][ T9435] usb 10-1: config 0 interface 184 has no altsetting 0 [ 756.597605][ T9435] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.597624][ T9435] usb 10-1: Product: syz [ 756.597640][ T9435] usb 10-1: Manufacturer: syz [ 756.597654][ T9435] usb 10-1: SerialNumber: syz [ 756.615428][ T9435] usb 10-1: config 0 descriptor?? [ 756.615694][ T5713] pwc: recv_control_msg error -32 req 02 val 2b00 [ 756.632793][ T5713] pwc: recv_control_msg error -32 req 02 val 2700 [ 756.633517][ T5713] pwc: recv_control_msg error -32 req 02 val 2c00 [ 756.634295][ T5713] pwc: recv_control_msg error -32 req 04 val 1000 [ 756.653293][ T5713] pwc: recv_control_msg error -32 req 04 val 1300 [ 756.667445][ T5713] pwc: recv_control_msg error -32 req 04 val 1400 [ 756.676043][ T5713] pwc: recv_control_msg error -32 req 02 val 2000 [ 756.677251][ T5713] pwc: recv_control_msg error -32 req 02 val 2100 [ 756.736963][T11682] FAULT_INJECTION: forcing a failure. [ 756.736963][T11682] name failslab, interval 1, probability 0, space 0, times 0 [ 756.737000][T11682] CPU: 1 UID: 0 PID: 11682 Comm: syz.8.1455 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 756.737027][T11682] Tainted: [L]=SOFTLOCKUP [ 756.737034][T11682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 756.737046][T11682] Call Trace: [ 756.737054][T11682] [ 756.737063][T11682] dump_stack_lvl+0xe8/0x150 [ 756.737098][T11682] should_fail_ex+0x46b/0x600 [ 756.737137][T11682] should_failslab+0xa8/0x100 [ 756.737169][T11682] __kmalloc_cache_noprof+0xa1/0x680 [ 756.737198][T11682] ? device_add+0xb6/0xb80 [ 756.737293][T11682] ? device_add+0xb6/0xb80 [ 756.737321][T11682] device_add+0xb6/0xb80 [ 756.737340][T11682] ? device_create+0x248/0x300 [ 756.737366][T11682] device_create+0x269/0x300 [ 756.737391][T11682] ? vgacon_build_attr+0x167/0x1f0 [ 756.737415][T11682] ? __pfx_vgacon_build_attr+0x10/0x10 [ 756.737440][T11682] ? __pfx_device_create+0x10/0x10 [ 756.737471][T11682] ? is_console_locked+0x9/0x20 [ 756.737488][T11682] ? csi_J+0x9d2/0xe80 [ 756.737578][T11682] vcs_make_sysfs+0x32/0x80 [ 756.737603][T11682] vc_allocate+0x61a/0x6f0 [ 756.737626][T11682] ? lock_acquire+0x115/0x350 [ 756.737653][T11682] ? __pfx_vc_allocate+0x10/0x10 [ 756.737678][T11682] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 756.737713][T11682] con_install+0x9f/0x770 [ 756.737746][T11682] ? __pfx_con_install+0x10/0x10 [ 756.737773][T11682] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 756.737799][T11682] ? mutex_lock_nested+0x152/0x1d0 [ 756.737821][T11682] ? tty_init_dev+0x74/0x4d0 [ 756.737850][T11682] tty_init_dev+0xd7/0x4d0 [ 756.737879][T11682] tty_open+0x7ea/0xd90 [ 756.737910][T11682] ? __pfx_tty_open+0x10/0x10 [ 756.737927][T11682] ? rt_spin_unlock+0x159/0x200 [ 756.737954][T11682] ? rt_spin_unlock+0x165/0x200 [ 756.737979][T11682] chrdev_open+0x4dc/0x600 [ 756.738002][T11682] ? __pfx_chrdev_open+0x10/0x10 [ 756.738020][T11682] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 756.738055][T11682] ? __pfx_chrdev_open+0x10/0x10 [ 756.738073][T11682] do_dentry_open+0x841/0x1410 [ 756.738106][T11682] vfs_open_consume+0x4a/0x360 [ 756.738124][T11682] ? path_openat+0x16ea/0x2100 [ 756.738162][T11682] path_openat+0x1705/0x2100 [ 756.738209][T11682] do_file_open+0x23e/0x4a0 [ 756.738234][T11682] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 756.738267][T11682] ? __pfx_do_file_open+0x10/0x10 [ 756.738319][T11682] ? alloc_fd+0x6b2/0x760 [ 756.738353][T11682] do_sys_openat2+0x115/0x200 [ 756.738373][T11682] ? __se_sys_futex+0x3a8/0x450 [ 756.738393][T11682] ? __pfx_do_sys_openat2+0x10/0x10 [ 756.738419][T11682] ? rcu_is_watching+0x16/0xb0 [ 756.738443][T11682] __x64_sys_openat+0x138/0x170 [ 756.738470][T11682] do_syscall_64+0x166/0x520 [ 756.738496][T11682] ? trace_irq_disable+0x3b/0x140 [ 756.738520][T11682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.738539][T11682] ? clear_bhb_loop+0x70/0xc0 [ 756.738563][T11682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.738582][T11682] RIP: 0033:0x7f5b3d71fd8e [ 756.738600][T11682] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 756.738617][T11682] RSP: 002b:00007f5b3b9adb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 756.738638][T11682] RAX: ffffffffffffffda RBX: 00007f5b3b9ae6c0 RCX: 00007f5b3d71fd8e [ 756.738652][T11682] RDX: 0000000000000002 RSI: 00007f5b3b9adc00 RDI: ffffffffffffff9c [ 756.738664][T11682] RBP: 00007f5b3d7f6b20 R08: 0000000000000000 R09: 0000000000000000 [ 756.738677][T11682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 756.738688][T11682] R13: 00007f5b3d9e6038 R14: 00007f5b3d9e5fa0 R15: 00007fff0afcd888 [ 756.738721][T11682] [ 756.892806][ T5713] pwc: recv_control_msg error -71 req 02 val 2500 [ 756.893375][ T5713] pwc: recv_control_msg error -71 req 02 val 2400 [ 756.915907][ T5713] pwc: recv_control_msg error -71 req 02 val 2600 [ 756.980449][ T5713] pwc: recv_control_msg error -71 req 02 val 2900 [ 756.990550][ T5713] pwc: recv_control_msg error -71 req 02 val 2800 [ 757.002838][ T5713] pwc: recv_control_msg error -71 req 04 val 1100 [ 757.010772][ T5713] pwc: recv_control_msg error -71 req 04 val 1200 [ 757.347508][ T5713] pwc: Registered as video103. [ 757.366370][ T5713] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 757.394366][ T5713] usb 3-1: USB disconnect, device number 28 [ 759.375968][ T9435] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 759.375997][ T9435] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 759.376753][ T9435] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 759.376778][ T9435] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 759.376796][ T9435] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 759.376811][ T9435] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 759.377076][ T9435] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71 [ 759.472607][ T9435] usb 10-1: USB disconnect, device number 9 [ 760.119611][T11702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 763.925277][T11726] gfs2: error -5 reading superblock [ 765.262744][ T4903] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 767.003456][T11738] netlink: 'syz.2.1472': attribute type 16 has an invalid length. [ 772.731316][T11761] syz.2.1479 (11761) used greatest stack depth: 14824 bytes left [ 773.723418][T11772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 789.442586][T11850] gfs2: error -5 reading superblock [ 809.533783][T11950] overlayfs: failed to clone upperpath [ 813.864123][T11967] binder: 11965:11967 ioctl c0306201 0 returned -14 [ 814.723481][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.723549][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 824.815809][T12014] jffs2: notice: (12014) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 827.200560][ T9273] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 827.449422][ T9273] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 827.451626][ T9273] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 827.451653][ T9273] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 827.451690][ T9273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.575198][ T9273] usb 3-1: probing VID:PID(0424:012C) [ 828.623809][ T9273] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 828.623836][ T9273] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 828.623853][ T9273] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 828.623870][ T9273] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 828.623887][ T9273] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 828.839487][ T9273] usb 3-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 828.932233][ T9273] usb 3-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 829.983316][ T9273] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 830.075324][ T9273] usb 3-1: USB disconnect, device number 29 [ 830.121438][ T6368] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 830.278998][ T6368] usb 10-1: Using ep0 maxpacket: 32 [ 830.281152][ T6368] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 830.283760][ T6368] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 830.283786][ T6368] usb 10-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 830.283808][ T6368] usb 10-1: config 0 interface 0 has no altsetting 0 [ 830.285984][ T6368] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.286006][ T6368] usb 10-1: Product: syz [ 830.286020][ T6368] usb 10-1: Manufacturer: syz [ 830.286032][ T6368] usb 10-1: SerialNumber: syz [ 830.311712][ T6368] usb 10-1: config 0 descriptor?? [ 831.093622][T12038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.094226][T12038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.833409][ T6368] gs_usb 10-1:0.0: Couldn't get device config: (err=-110) [ 831.836522][ T6368] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -110 [ 833.408008][T12043] syz.8.1546 (12043): drop_caches: 2 [ 834.799676][ T6368] usb 10-1: USB disconnect, device number 10 [ 845.499197][T12121] fuse: fd is not a fuse device [ 847.518696][T12126] Can't find ip_set type h [ 853.889943][T12152] jffs2: notice: (12152) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 854.090880][T12152] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 857.938513][ T3075] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.434977][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 859.469424][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 859.478687][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 859.500180][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 859.501890][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 861.041770][ T3075] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.653282][ T60] Bluetooth: hci0: command tx timeout [ 864.720253][ T60] Bluetooth: hci0: command tx timeout [ 865.500524][ T3075] team0: Port device netdevsim1 removed [ 865.503789][ T3075] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.005659][ T60] Bluetooth: hci0: command tx timeout [ 869.045818][ T60] Bluetooth: hci0: command tx timeout [ 869.177149][ T3075] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.299299][T12247] syz_tun: entered allmulticast mode [ 870.494003][T12190] rxe_eth0 speed is unknown, defaulting to 1000 [ 876.204679][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.204748][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 882.619240][ T36] audit: type=1326 audit(1792507977.908:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12290 comm="syz.2.1601" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc565b8f559 code=0x0 [ 882.958963][ T5742] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 883.130064][ T5742] usb 8-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 883.133135][ T5742] usb 8-1: config 0 has an invalid interface number: 255 but max is 0 [ 883.133162][ T5742] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 883.133181][ T5742] usb 8-1: config 0 has no interface number 0 [ 883.133209][ T5742] usb 8-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 883.133244][ T5742] usb 8-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 883.133270][ T5742] usb 8-1: config 0 interface 255 has no altsetting 0 [ 883.215725][ T5742] usb 8-1: New USB device strings: Mfr=0, Product=237, SerialNumber=3 [ 883.215754][ T5742] usb 8-1: Product: syz [ 883.215767][ T5742] usb 8-1: SerialNumber: syz [ 883.246943][ T5742] usb 8-1: config 0 descriptor?? [ 884.576314][T12304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.586644][T12304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.615777][T12304] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1605'. [ 885.837917][ T3075] bridge_slave_1: left allmulticast mode [ 885.837953][ T3075] bridge_slave_1: left promiscuous mode [ 885.838229][ T3075] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.252921][ T9320] usb 8-1: USB disconnect, device number 7 [ 888.531769][T12321] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.1604'. [ 888.700952][ T3075] bridge_slave_0: left allmulticast mode [ 888.700989][ T3075] bridge_slave_0: left promiscuous mode [ 888.701244][ T3075] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.301718][T12369] gfs2: error -5 reading superblock [ 892.389630][ T3075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 892.432478][ T3075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 892.461808][ T3075] bond0 (unregistering): Released all slaves [ 892.489464][T12342] tipc: Enabling of bearer rejected, failed to enable media [ 892.937066][ T5248] 8021q: adding VLAN 0 to HW filter on device eth21 [ 892.937600][T12345] syzkaller0: entered promiscuous mode [ 892.937622][T12345] syzkaller0: entered allmulticast mode [ 899.417083][ T9320] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 900.901277][ T9320] usb 8-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 900.902767][ T9320] usb 8-1: config 2 has an invalid interface number: 79 but max is 0 [ 900.902792][ T9320] usb 8-1: config 2 has no interface number 0 [ 900.902820][ T9320] usb 8-1: config 2 interface 79 has no altsetting 0 [ 900.914310][ T9320] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.914336][ T9320] usb 8-1: Product: syz [ 900.914348][ T9320] usb 8-1: Manufacturer: syz [ 900.914374][ T9320] usb 8-1: SerialNumber: syz [ 901.622920][T12416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.623523][T12416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.424256][ T9320] usb 8-1: USB disconnect, device number 8 [ 911.728583][ T5248] 8021q: adding VLAN 0 to HW filter on device eth22 [ 913.146771][T12190] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.147066][T12190] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.147246][T12190] bridge_slave_0: entered allmulticast mode [ 913.180474][T12190] bridge_slave_0: entered promiscuous mode [ 913.199933][T12190] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.200840][T12190] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.202739][T12190] bridge_slave_1: entered allmulticast mode [ 913.251632][T12190] bridge_slave_1: entered promiscuous mode [ 913.386064][T12190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.414134][T12190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.333155][ T3075] hsr_slave_0: left promiscuous mode [ 914.409565][ T3075] hsr_slave_1: left promiscuous mode [ 914.427679][ T3075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 914.427764][ T3075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 915.887270][ T3075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 915.887299][ T3075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 917.010700][ T3075] veth1_macvtap: left promiscuous mode [ 917.010804][ T3075] veth0_macvtap: left promiscuous mode [ 917.011045][ T3075] veth1_vlan: left promiscuous mode [ 917.081091][ T3075] veth0_vlan: left promiscuous mode [ 917.724183][T12498] program syz.8.1640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 922.284538][ T4903] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 922.341523][ T4903] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 922.348417][ T4903] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 922.354036][ T4903] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 922.385808][ T4903] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 923.429705][ T5592] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 923.582382][ T5592] usb 8-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 923.583828][ T5592] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 923.583854][ T5592] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 923.583876][ T5592] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 923.586337][ T5592] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.586371][ T5592] usb 8-1: Product: syz [ 923.586383][ T5592] usb 8-1: Manufacturer: syz [ 923.586397][ T5592] usb 8-1: SerialNumber: syz [ 923.623258][ T5592] usb 8-1: config 0 descriptor?? [ 923.652677][ T5592] kvaser_usb 8-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 924.579685][ T60] Bluetooth: hci3: command tx timeout [ 924.735696][T12541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.736273][T12541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.311078][ T60] Bluetooth: hci3: command tx timeout [ 927.404273][ T9320] usb 8-1: USB disconnect, device number 9 [ 927.499514][ T3075] team0 (unregistering): Port device team_slave_1 removed [ 927.583952][ T3075] team0 (unregistering): Port device team_slave_0 removed [ 928.324706][T12568] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 929.085681][T12190] team0: Port device team_slave_0 added [ 929.215544][ T5248] 8021q: adding VLAN 0 to HW filter on device eth23 [ 929.328875][ T60] Bluetooth: hci3: command tx timeout [ 931.408838][ T60] Bluetooth: hci3: command tx timeout [ 932.791839][T12628] overlayfs: missing 'lowerdir' [ 934.535832][T12518] rxe_eth0 speed is unknown, defaulting to 1000 [ 936.066814][ T5248] 8021q: adding VLAN 0 to HW filter on device eth24 [ 936.781905][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.781973][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.000190][ T3075] bridge_slave_1: left allmulticast mode [ 938.000274][ T3075] bridge_slave_1: left promiscuous mode [ 938.001048][ T3075] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.280689][ T3075] bridge_slave_0: left allmulticast mode [ 938.280715][ T3075] bridge_slave_0: left promiscuous mode [ 938.280919][ T3075] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.738553][ T3075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 945.087089][ T3075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 946.288523][ T3075] bond0 (unregistering): Released all slaves [ 947.791889][T12518] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.792063][T12518] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.792249][T12518] bridge_slave_0: entered allmulticast mode [ 947.806480][T12518] bridge_slave_0: entered promiscuous mode [ 947.814931][T12518] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.815056][T12518] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.815211][T12518] bridge_slave_1: entered allmulticast mode [ 947.836963][T12518] bridge_slave_1: entered promiscuous mode [ 948.244832][T12518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 948.269450][T12518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 948.478396][T12807] tipc: Started in network mode [ 948.478426][T12807] tipc: Node identity b2a6c9bbddea, cluster identity 4711 [ 948.478600][T12807] tipc: Enabled bearer , priority 0 [ 948.483548][T12804] syzkaller0: entered promiscuous mode [ 948.483573][T12804] syzkaller0: entered allmulticast mode [ 948.505308][T12518] team0: Port device team_slave_0 added [ 948.510962][T12804] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 948.677207][T12518] team0: Port device team_slave_1 added [ 950.249468][ T3075] team0 (unregistering): Port device team_slave_0 removed [ 951.059049][T12804] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 951.136685][T12805] tipc: Resetting bearer [ 951.602039][T12801] tipc: Resetting bearer [ 951.919390][T12801] tipc: Disabling bearer [ 952.060832][ T5742] tipc: Node number set to 1867303355 [ 952.138974][T12518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.138991][T12518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.139015][T12518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.147606][T12518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.147621][T12518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.147644][T12518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.426653][T12518] hsr_slave_0: entered promiscuous mode [ 952.427653][T12518] hsr_slave_1: entered promiscuous mode [ 954.392716][T12855] gfs2: error -5 reading superblock [ 957.275219][ T60] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 960.432956][ T60] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 969.170088][T12942] tmpfs: Unsupported parameter 'huge' [ 974.178896][ T999] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 974.414646][ T999] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 974.415937][ T999] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 974.415959][ T999] usb 9-1: config 1 has no interface number 0 [ 974.418284][ T999] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.418306][ T999] usb 9-1: Product: syz [ 974.418319][ T999] usb 9-1: Manufacturer: syz [ 974.418332][ T999] usb 9-1: SerialNumber: syz [ 974.445718][ T999] usb 9-1: 3:0 : does not exist [ 974.445739][ T999] usb 9-1: 3:0 : does not exist [ 981.388503][ T999] usb 9-1: USB disconnect, device number 6 [ 981.554546][ T4903] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 981.615709][ T4903] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 981.624405][ T4903] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 981.627947][ T4903] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 981.628889][ T4903] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 981.854193][T13020] udevd[13020]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.3/sound/card3/controlC3/../uevent} for writing: No such device [ 983.916721][ T4903] Bluetooth: hci0: command tx timeout [ 984.136694][ T38] INFO: task kworker/1:0:9229 blocked for more than 143 seconds. [ 984.136721][ T38] Tainted: G L syzkaller #0 [ 984.136732][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 984.136742][ T38] task:kworker/1:0 state:D stack:22120 pid:9229 tgid:9229 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 984.136792][ T38] Workqueue: events_freezable mmc_rescan [ 984.136890][ T38] Call Trac ** replaying previous printk message ** [ 984.136890][ T38] Call Trace: [ 984.136897][ T38] [ 984.136910][ T38] __schedule+0x171d/0x5800 [ 984.136966][ T38] ? __pfx___schedule+0x10/0x10 [ 984.137001][ T38] ? schedule+0x90/0x2b0 [ 984.137028][ T38] schedule+0x164/0x2b0 [ 984.137055][ T38] schedule_timeout+0xc0/0x2c0 [ 984.137079][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 984.137107][ T38] ? wait_for_completion+0x272/0x5e0 [ 984.137142][ T38] ? wait_for_completion+0x272/0x5e0 [ 984.137168][ T38] wait_for_completion+0x2ca/0x5e0 [ 984.137213][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 984.137242][ T38] ? vub300_mmc_request+0x1000/0x1910 [ 984.137297][ T38] ? trace_mmc_request_start+0x81/0x1e0 [ 984.137354][ T38] mmc_wait_for_req_done+0x37/0x490 [ 984.137383][ T38] ? mmc_start_request+0x202/0x2d0 [ 984.137409][ T38] ? mmc_wait_for_req+0x1b5/0x240 [ 984.137435][ T38] mmc_wait_for_cmd+0x183/0x2a0 [ 984.137462][ T38] ? __pfx_mmc_wait_for_cmd+0x10/0x10 [ 984.137506][ T38] ? __pfx_mmc_wait_done+0x10/0x10 [ 984.137535][ T38] ? rt_spin_unlock+0x165/0x200 [ 984.137564][ T38] sdio_reset+0xf4/0x3a0 [ 984.137619][ T38] ? __pfx_sdio_reset+0x10/0x10 [ 984.137651][ T38] ? __mmc_claim_host+0x15d/0x640 [ 984.137688][ T38] ? mmc_power_up+0x5d/0x650 [ 984.137711][ T38] ? mmc_attach_sd_uhs2+0x5e/0x900 [ 984.137738][ T38] mmc_rescan+0x6ee/0x1040 [ 984.137776][ T38] ? process_scheduled_works+0x97a/0x1630 [ 984.137801][ T38] process_scheduled_works+0xc3d/0x1630 [ 984.137857][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 984.137887][ T38] ? assign_work+0x3cf/0x5d0 [ 984.137917][ T38] worker_thread+0xa47/0xfb0 [ 984.137955][ T38] ? __kthread_parkme+0x71/0x1f0 [ 984.142642][ T38] kthread+0x38b/0x470 [ 984.142672][ T38] ? __pfx_worker_thread+0x10/0x10 [ 984.142696][ T38] ? __pfx_kthread+0x10/0x10 [ 984.142715][ T38] ret_from_fork+0x514/0xb70 [ 984.142742][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 984.142761][ T38] ? __switch_to+0xc89/0x1420 [ 984.142789][ T38] ? __pfx_kthread+0x10/0x10 [ 984.142808][ T38] ret_from_fork_asm+0x1a/0x30 [ 984.142845][ T38] [ 984.142857][ T38] INFO: task kworker/1:4:9273 blocked for more than 143 seconds. [ 984.142874][ T38] Tainted: G L syzkaller #0 [ 984.142884][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 984.142893][ T38] task:kworker/1:4 state:D stack:20320 pid:9273 tgid:9273 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 984.142939][ T38] Workqueue: usb_hub_wq hub_event [ 984.143021][ T38] Call Trace: [ 984.143028][ T38] [ 984.143039][ T38] __schedule+0x171d/0x5800 [ 984.143091][ T38] ? __pfx___schedule+0x10/0x10 [ 984.143124][ T38] ? schedule+0x90/0x2b0 [ 984.143150][ T38] schedule+0x164/0x2b0 [ 984.143176][ T38] schedule_timeout+0xc0/0x2c0 [ 984.143199][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 984.143231][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 984.143261][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 984.143286][ T38] ? wait_for_completion+0x272/0x5e0 [ 984.143311][ T38] wait_for_completion+0x2ca/0x5e0 [ 984.143348][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 984.143379][ T38] ? __flush_work+0x101/0xd70 [ 984.143408][ T38] __flush_work+0x9c2/0xd70 [ 984.143431][ T38] ? __flush_work+0x101/0xd70 [ 984.143460][ T38] ? __pfx___flush_work+0x10/0x10 [ 984.143486][ T38] ? __pfx_wq_barrier_func+0x10/0x10 [ 984.143532][ T38] ? __cancel_work_sync+0x5c/0x110 [ 984.143551][ T38] __cancel_work_sync+0xbf/0x110 [ 984.143570][ T38] mmc_stop_host+0xd9/0x460 [ 984.143592][ T38] mmc_remove_host+0x15/0x60 [ 984.143611][ T38] vub300_disconnect+0x154/0x2f0 [ 984.143641][ T38] usb_unbind_interface+0x295/0x9f0 [ 984.143702][ T38] ? kernfs_remove_by_name_ns+0x101/0x140 [ 984.143722][ T38] ? __pfx_usb_unbind_interface+0x10/0x10 [ 984.143742][ T38] device_release_driver_internal+0x4f5/0x880 [ 984.143807][ T38] bus_remove_device+0x449/0x560 [ 984.143833][ T38] ? __pfx_bus_remove_device+0x10/0x10 [ 984.143852][ T38] ? up_read+0x34/0x180 [ 984.143871][ T38] ? kernfs_remove_by_name_ns+0x101/0x140 [ 984.143893][ T38] device_del+0x528/0x8f0 [ 984.143922][ T38] ? __pfx_device_del+0x10/0x10 [ 984.143943][ T38] ? kobject_put+0x516/0x550 [ 984.144007][ T38] usb_disable_device+0x3d4/0x8d0 [ 984.144039][ T38] usb_disconnect+0x32d/0x990 [ 984.144068][ T38] hub_event+0x1bb7/0x4cf0 [ 984.149786][ T38] ? __lock_acquire+0x747/0x2de0 [ 984.149821][ T38] ? register_lock_class+0x31/0x2e0 [ 984.149875][ T38] ? __pfx_hub_event+0x10/0x10 [ 984.149907][ T38] ? rcu_is_watching+0x16/0xb0 [ 984.149927][ T38] ? process_scheduled_works+0x97a/0x1630 [ 984.149951][ T38] process_scheduled_works+0xc3d/0x1630 [ 984.150004][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 984.150033][ T38] ? assign_work+0x3cf/0x5d0 [ 984.150061][ T38] worker_thread+0xa47/0xfb0 [ 984.150098][ T38] ? __kthread_parkme+0x71/0x1f0 [ 984.150133][ T38] kthread+0x38b/0x470 [ 984.150151][ T38] ? __pfx_worker_thread+0x10/0x10 [ 984.150173][ T38] ? __pfx_kthread+0x10/0x10 [ 984.150192][ T38] ret_from_fork+0x514/0xb70 [ 984.150222][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 984.150241][ T38] ? __switch_to+0xc89/0x1420 [ 984.150267][ T38] ? __pfx_kthread+0x10/0x10 [ 984.150287][ T38] ret_from_fork_asm+0x1a/0x30 [ 984.154383][ T38] [ 984.154446][ T38] [ 984.154446][ T38] Showing all locks held in the system: [ 984.154456][ T38] locks held by rcuc/0/19: 4, last CPU#0: [ 984.154470][ T38] #0: ffffffff8f259580 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 984.154523][ T38] #1: ffffffff8f3c3d80 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 984.154570][ T38] #2: ffffffff8f3c3ea0 (rcu_callback){....}-{0:0}, at: rcu_cpu_kthread+0x217/0x1740 [ 984.154617][ T38] #3: ffffffff8f3c3d80 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 984.154664][ T38] locks held by rcuc/1/27: 3, last CPU#1: [ 984.154677][ T38] #0: ffffffff8f259580 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 984.154721][ T38] #1: ffffffff8f3c3d80 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 984.154767][ T38] #2: ffffffff8f3c3ea0 (rcu_callback){....}-{0:0}, at: rcu_cpu_kthread+0x217/0x1740 [ 984.154814][ T38] locks held by pr/ttyS0/37: 3, last CPU#0: [ 984.154827][ T38] #0: ffffffff8f29d898 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 984.154876][ T38] #1: ffffffff9b0b4f58 (&port_lock_key){+.+.}-{3:3}, at: nbcon_kthread_func+0x6ac/0x8e0 [ 984.154923][ T38] #2: ffffffff8f3c3d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 984.154981][ T38] locks held by khungtaskd/38: 1, last CPU#1: [ 984.154993][ T38] #0: ffffffff8f3c3d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 984.155063][ T38] locks held by klogd/4942: 3, last CPU#1: [ 984.155076][ T38] #0: ffffffff8f259580 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 984.155121][ T38] #1: ffffffff8f3c3d80 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 984.155167][ T38] #2: ffffffff8f3c3d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 984.155219][ T38] locks held by getty/5341: 2, on CPU#0: [ 984.155231][ T38] #0: ffff888037f220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 984.160495][ T38] #1: ffffc900044db2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 984.160546][ T38] locks held by kworker/1:6/5741: 2, on CPU#1: [ 984.160561][ T38] #0: ffff88813ff6b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 984.160611][ T38] #1: ffffc90005eb7c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 984.160662][ T38] locks held by kworker/1:7/5742: 2, on CPU#1: [ 984.160675][ T38] #0: ffff88813ff6b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 984.160736][ T38] #1: ffffc90005ec7c40 (key_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 984.160787][ T38] locks held by syz-executor/5977: 10, last CPU#1: [ 984.160800][ T38] #0: ffffffff8f49f430 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 984.160850][ T38] #1: ffff888030d19db8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x18e/0x1d80 [ 984.160900][ T38] #2: ffff88803962aab8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x27d/0x1d80 [ 984.160955][ T38] #3: ffffffff8f3c3d80 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 984.161002][ T38] #4: ffff8880426c8b98 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 984.161055][ T38] #5: ffffffff8f3c3d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 984.161102][ T38] #6: ffffffff8f3c3d80 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 984.161148][ T38] #7: ffff888034fe1e98 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x569/0x58f0 [ 984.161214][ T38] #8: ffffffff8f3c3d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock_nested+0x1e0/0x400 [ 984.161261][ T38] #9: ffffffff8f3c3d80 (rcu_read_lock){....}-{1:3}, at: page_table_check_set+0x127/0x530 [ 984.161309][ T38] locks held by kworker/u8:18/6957: 2, on CPU#0: [ 984.161321][ T38] #0: ffff88813fe2c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 984.161372][ T38] #1: ffffc900076cfc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 984.161424][ T38] locks held by syz-executor/9208: 5, last CPU#1: [ 984.161437][ T38] #0: ffff88806d4f0510 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 984.161492][ T38] #1: ffff88802c937370 (&sb->s_type->i_lock_key){+.+.}-{3:3}, at: filemap_remove_folio+0xdb/0x3a0 [ 984.161544][ T38] #2: ffffffff8f3c3d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 984.161590][ T38] #3: ffff88802c937548 (&xa->xa_lock#7){+.+.}-{3:3}, at: filemap_remove_folio+0xe7/0x3a0 [ 984.161644][ T38] #4: ffffffff8f3c3d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 984.161694][ T38] locks held by kworker/1:0/9229: 2, on CPU#1: [ 984.161707][ T38] #0: ffff88813ff6a938 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 984.161756][ T38] #1: ffffc90004937c40 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 984.161807][ T38] locks held by kworker/1:4/9273: 5, on CPU#1: [ 984.161821][ T38] #0: ffff888021686538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 984.161870][ T38] #1: ffffc90004ff7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 984.161921][ T38] #2: ffff88802b5be210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 984.170572][ T38] #3: ffff8880633cc210 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xe3/0x990 [ 984.170616][ T38] #4: ffff88802a3971d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 984.170670][ T38] locks held by kworker/u8:4/11619: 6, last CPU#0: [ 984.170683][ T38] #0: ffff88801bef0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 984.170730][ T38] #1: ffffc90007a5fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 984.170777][ T38] #2: ffffffff907c90a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 984.170890][ T38] #3: ffff88802b9d9160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 984.170997][ T38] #4: ffff888063b00310 (&devlink->lock_key#13){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 984.171048][ T38] #5: ffff88806495bda0 (&sb->s_type->i_mutex_key#8/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x9a/0x520 [ 984.171107][ T38] locks held by dhcpcd-run-hook/13113: 9, last CPU#1: [ 984.171119][ T38] #0: ffffffff8f49f430 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 984.171165][ T38] #1: ffff888042156bb8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x18e/0x1d80 [ 984.171220][ T38] #2: ffff8880417783b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x27d/0x1d80 [ 984.171272][ T38] #3: ffffffff8f3c3d80 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 984.171317][ T38] #4: ffff88806d961358 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 984.171367][ T38] #5: ffffffff8f3c3d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 984.171412][ T38] #6: ffffffff8f3c3d80 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 984.171456][ T38] #7: ffff888060494f58 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x569/0x58f0 [ 984.171513][ T38] #8: ffffffff8f3c3d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock_nested+0x1e0/0x400 [ 984.171557][ T38] locks held by modprobe/13123: 1, last CPU#1: [ 984.171570][ T38] #0: ffffffff8fb532b8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 984.171622][ T38] [ 984.171628][ T38] ============================================= [ 984.171628][ T38] [ 984.171635][ T38] NMI backtrace for cpu 1 [ 984.171652][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 984.171675][ T38] Tainted: [L]=SOFTLOCKUP [ 984.171681][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 984.171691][ T38] Call Trace: [ 984.171699][ T38] [ 984.171706][ T38] dump_stack_lvl+0xe8/0x150 [ 984.171732][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 984.171788][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 984.171809][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 984.171833][ T38] sys_info+0x135/0x170 [ 984.171852][ T38] watchdog+0xfd7/0x1030 [ 984.171882][ T38] ? watchdog+0x1c7/0x1030 [ 984.171913][ T38] kthread+0x38b/0x470 [ 984.171932][ T38] ? __pfx_watchdog+0x10/0x10 [ 984.171952][ T38] ? __pfx_kthread+0x10/0x10 [ 984.171972][ T38] ret_from_fork+0x514/0xb70 [ 984.171992][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 984.172010][ T38] ? __switch_to+0xc89/0x1420 [ 984.172036][ T38] ? __pfx_kthread+0x10/0x10 [ 984.172055][ T38] ret_from_fork_asm+0x1a/0x30 [ 984.172086][ T38] [ 984.172109][ T38] Sending NMI from CPU 1 to CPUs 0: [ 984.172146][ C0] NMI backtrace for cpu 0 [ 984.172160][ C0] CPU: 0 UID: 0 PID: 37 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 984.172180][ C0] Tainted: [L]=SOFTLOCKUP [ 984.172186][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 984.172195][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 984.172278][ C0] Code: e8 ce 44 63 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 7f 08 d0 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 984.172292][ C0] RSP: 0018:ffffc90000ae78b8 EFLAGS: 00000202 [ 984.172306][ C0] RAX: 1ffffffff3616900 RBX: 00000000000003fd RCX: 0000000000000000 [ 984.172317][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 984.172326][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 984.172336][ C0] R10: dffffc0000000000 R11: ffffffff8563b920 R12: dffffc0000000000 [ 984.172347][ C0] R13: 0000000000000000 R14: ffffffff9b0b4f80 R15: 0000000000000000 [ 984.172357][ C0] FS: 0000000000000000(0000) GS:ffff8881247b8000(0000) knlGS:0000000000000000 [ 984.172370][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 984.172380][ C0] CR2: 00007fb3bd5e8000 CR3: 000000003cfee000 CR4: 00000000003526f0 [ 984.172394][ C0] Call Trace: [ 984.172400][ C0] [ 984.172408][ C0] wait_for_lsr+0x190/0x300 [ 984.172425][ C0] __serial8250_console_fifo_write+0xd0/0x3f0 [ 984.172448][ C0] serial8250_console_write+0xaa2/0x1220 [ 984.172468][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 984.172491][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 984.172520][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 984.172543][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 984.172573][ C0] nbcon_kthread_func+0x6d9/0x8e0 [ 984.172597][ C0] ? nbcon_kthread_func+0x163/0x8e0 [ 984.172615][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 984.172638][ C0] ? __kthread_parkme+0x71/0x1f0 [ 984.172659][ C0] ? __kthread_parkme+0x199/0x1f0 [ 984.172682][ C0] kthread+0x38b/0x470 [ 984.172696][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 984.172722][ C0] ? __pfx_kthread+0x10/0x10 [ 984.172738][ C0] ret_from_fork+0x514/0xb70 [ 984.172753][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 984.172768][ C0] ? __switch_to+0xc89/0x1420 [ 984.172789][ C0] ? __pfx_kthread+0x10/0x10 [ 984.172804][ C0] ret_from_fork_asm+0x1a/0x30 [ 984.172827][ C0] [ 984.184863][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 985.768346][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 985.779535][ T38] Tainted: [L]=SOFTLOCKUP [ 985.783846][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 985.793885][ T38] Call Trace: [ 985.797154][ T38] [ 985.800073][ T38] vpanic+0x56d/0xa60 [ 985.804045][ T38] ? __pfx___schedule+0x10/0x10 [ 985.808883][ T38] ? __pfx_vpanic+0x10/0x10 [ 985.813379][ T38] panic+0xc5/0xd0 [ 985.817081][ T38] ? __pfx_panic+0x10/0x10 [ 985.821485][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 985.826948][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 985.832319][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 985.838470][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 985.844618][ T38] watchdog+0x1030/0x1030 [ 985.848952][ T38] ? watchdog+0x1c7/0x1030 [ 985.853364][ T38] kthread+0x38b/0x470 [ 985.857425][ T38] ? __pfx_watchdog+0x10/0x10 [ 985.862094][ T38] ? __pfx_kthread+0x10/0x10 [ 985.866690][ T38] ret_from_fork+0x514/0xb70 [ 985.871275][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 985.876372][ T38] ? __switch_to+0xc89/0x1420 [ 985.881045][ T38] ? __pfx_kthread+0x10/0x10 [ 985.885623][ T38] ret_from_fork_asm+0x1a/0x30 [ 985.890382][ T38] [ 985.893636][ T38] Kernel Offset: disabled [ 985.897948][ T38] Rebooting in 86400 seconds..