last executing test programs: 6m33.225213492s ago: executing program 2 (id=10): bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 6m32.749915708s ago: executing program 1 (id=2): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func_proto, @func={0x2, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x5f, 0x2e, 0x5f]}}, 0x0, 0x35, 0x0, 0x1, 0x7}, 0x28) 6m32.621797048s ago: executing program 2 (id=13): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000500000a09000100737903000000000064000000030a01030000000000000000050000000900010073797a30"], 0xac}}, 0x24004000) 6m30.989164206s ago: executing program 1 (id=16): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)=ANY=[], 0xff70) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 6m30.125154485s ago: executing program 2 (id=19): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x40200c0) 6m29.734849795s ago: executing program 1 (id=21): unshare(0x22020600) r0 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/failslab/probability\x00', 0x1, 0x0) poll(&(0x7f0000000480)=[{r0, 0x224}], 0x1, 0x1b) 6m29.606578192s ago: executing program 2 (id=22): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004030000"], 0xfc}}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 6m27.841859953s ago: executing program 1 (id=25): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x6, 0x4}}, @TCA_FW_INDEV={0x14, 0x3, 'gretap0\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6m27.811017499s ago: executing program 2 (id=26): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f800000000000000", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d2", 0x6d}], 0x1}}], 0x2, 0x2090) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 6m27.558840382s ago: executing program 4 (id=27): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r2, 0x0, 0x8, 0xe) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r5, 0x2004, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0xfffffffffffffffd) writev(0xffffffffffffffff, 0x0, 0x0) 6m27.38401589s ago: executing program 2 (id=28): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000ec0)={'ip6tnl0\x00', &(0x7f0000000e40)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x9, 0xadf, 0x2e, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @loopback, 0x8000, 0x40, 0xe, 0x193}}) 6m25.152546136s ago: executing program 4 (id=35): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r0, &(0x7f0000000180)=""/4122, 0x101a) 6m24.994575898s ago: executing program 4 (id=36): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000140001032dbd7000fcdcdf250b00000008000100", @ANYRES32=r0], 0x1c}}, 0x0) 6m24.941952605s ago: executing program 4 (id=37): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x2c, 0x3, "fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f1"}]}], {0x14}}, 0x74}}, 0x0) 6m24.726820484s ago: executing program 4 (id=39): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 6m24.672112546s ago: executing program 4 (id=40): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xffffffff, 0x5, 0xb7a4, 0xd47, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x204, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x0, 0x9, 0x4, 0x0, 0xfff, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x6602, 0x10000, 0x405, 0x8, 0x240000, 0x91ba, 0x7, 0xb, 0x10000009, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x200, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x1, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0x40fd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x3, 0x10, 0x7, 0x3, 0x0, 0xfffffffe, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x2, 0xebe, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10020, 0x1, 0x100009, 0x9, 0xff, 0xfff, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x5, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x80008, 0x6, 0x400, 0x40, 0x0, 0x0, 0x1000, 0x546c, 0x981, 0x5aa, 0x10, 0x7, 0x2, 0x7, 0xc4a, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x2003, 0x942, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x10001, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x7, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x1, 0x1, 0x7, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x1ff, 0x19, 0x4, 0x1, 0xb, 0x1, 0x8, 0x400, 0x81, 0x80000004, 0x9, 0x9, 0x3, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x5, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0xfffffffd, 0x7, 0x6, 0x709, 0x2, 0x40000049, 0x10, 0xfffffff7, 0xfffff772, 0xf, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x4f, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x4, 0x818a, 0x10, 0x3, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x7, 0xfffffffd, 0x8000004, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x6, 0xb6, 0x101, 0x401, 0x0, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x4, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x20000, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x5, 0x1, 0x8000000, 0xe, 0xf2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0xe, 0x8, 0x1, 0x5, 0x1, 0x5, 0x3, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xdd, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x202, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x6, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x7, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x9, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x7, 0x6, 0x9, 0x0, 0x8, 0x8, 0x8b6, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x202, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x20, 0x40, 0x0, 0x6, 0xfbffffff, 0x7, 0xa, 0x7, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0x200, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x7496, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0xb24, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x1ff, 0x4, 0x8, 0x4000ff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x200, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x9, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x80001, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x2, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0x4, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x6, 0x1, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x5, 0xffff, 0xfffffff9, 0x9, 0x800005, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x100, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x2d8, 0x3ff, 0x0, 0x1, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39f, 0x71, 0xfff, 0x7, 0x8]}) syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0xa8) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000003c0), 0x0) r2 = accept$phonet_pipe(r0, &(0x7f0000000080), &(0x7f0000000100)=0x10) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, &(0x7f0000000180)) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$RDMA_USER_CM_CMD_REJECT(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 6m14.912294925s ago: executing program 32 (id=17): syz_open_dev$evdev(0x0, 0x3, 0x400) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m11.923496934s ago: executing program 33 (id=25): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x6, 0x4}}, @TCA_FW_INDEV={0x14, 0x3, 'gretap0\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6m11.844717214s ago: executing program 34 (id=28): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000ec0)={'ip6tnl0\x00', &(0x7f0000000e40)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x9, 0xadf, 0x2e, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @loopback, 0x8000, 0x40, 0xe, 0x193}}) 6m9.273184577s ago: executing program 35 (id=40): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xffffffff, 0x5, 0xb7a4, 0xd47, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x204, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x0, 0x9, 0x4, 0x0, 0xfff, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x6602, 0x10000, 0x405, 0x8, 0x240000, 0x91ba, 0x7, 0xb, 0x10000009, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x200, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x1, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0x40fd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x3, 0x10, 0x7, 0x3, 0x0, 0xfffffffe, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x2, 0xebe, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10020, 0x1, 0x100009, 0x9, 0xff, 0xfff, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x5, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x80008, 0x6, 0x400, 0x40, 0x0, 0x0, 0x1000, 0x546c, 0x981, 0x5aa, 0x10, 0x7, 0x2, 0x7, 0xc4a, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x2003, 0x942, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x10001, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x7, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x1, 0x1, 0x7, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x1ff, 0x19, 0x4, 0x1, 0xb, 0x1, 0x8, 0x400, 0x81, 0x80000004, 0x9, 0x9, 0x3, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x5, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0xfffffffd, 0x7, 0x6, 0x709, 0x2, 0x40000049, 0x10, 0xfffffff7, 0xfffff772, 0xf, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x4f, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x4, 0x818a, 0x10, 0x3, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x7, 0xfffffffd, 0x8000004, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x6, 0xb6, 0x101, 0x401, 0x0, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x4, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x20000, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x5, 0x1, 0x8000000, 0xe, 0xf2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0xe, 0x8, 0x1, 0x5, 0x1, 0x5, 0x3, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xdd, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x202, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x6, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x7, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x9, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x7, 0x6, 0x9, 0x0, 0x8, 0x8, 0x8b6, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x202, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x20, 0x40, 0x0, 0x6, 0xfbffffff, 0x7, 0xa, 0x7, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0x200, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x7496, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0xb24, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x1ff, 0x4, 0x8, 0x4000ff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x200, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x9, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x80001, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x2, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0x4, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x6, 0x1, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x5, 0xffff, 0xfffffff9, 0x9, 0x800005, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x100, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x2d8, 0x3ff, 0x0, 0x1, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39f, 0x71, 0xfff, 0x7, 0x8]}) syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0xa8) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000003c0), 0x0) r2 = accept$phonet_pipe(r0, &(0x7f0000000080), &(0x7f0000000100)=0x10) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, &(0x7f0000000180)) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$RDMA_USER_CM_CMD_REJECT(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 2m42.90409187s ago: executing program 5 (id=751): msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) 2m42.752711459s ago: executing program 5 (id=753): syz_open_dev$tty1(0xc, 0x4, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='offline', 0x7) 2m42.478487603s ago: executing program 5 (id=755): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) socket$inet(0x2, 0x3, 0xbd4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x54040081}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xa}, {0xffff, 0xffff}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0xe2, 0x10}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1c8, 0xa, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPRESSIONS={0x180, 0x12, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_TARGET_NAME={0xb, 0x1, 'NETMAP\x00'}, @NFTA_TARGET_REV={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x3c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xb3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x59}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xca}]}}}, {0x90, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x80, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'nfacct\x00'}, @NFTA_MATCH_INFO={0x55, 0x3, "fb13e92ceaaa28487cc75f223c276d7be7bff79dd2aa21a3ded74e4410ba26630ec07d15852351a39e21b91f89c8b68e218f99f6f5dd0d7180f84d9894c8bac4009ecc01110ebf314dff22af540bb42b7c"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_REV={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4c800}, 0x80) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x90, 0x0, 0x1, 0x70bd26, 0xffffffff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_a, @from_mac=@broadcast, {0xf, 0x5}}, 0xffffffffffffffff, @random=0x4, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x3f, 0x6}}}}]}, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) connect$pppoe(r1, &(0x7f0000000240)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) 2m41.190638135s ago: executing program 5 (id=758): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002fffffffffffffff7fe061250400000007000b2005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)={0x208, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x1d0, 0x1, 'n\x01l\xb1\xd7jt/l\xdc\x82{V \xb82cap\x00\x83\xf2\xa6L6\xeb;\xe6\xd9\xa7\x1bsj\xb0$\x96\xda\xf5/\x9ct\xdb@\x82-\x97.O\xd6w\xce\xe5\xe1Mz\xd6\x85\xc1\xb1B<\xa6S\x96\x0fr2\x9c\xdc\a\x90\xcc\x198\xf3\r\x96\x8fM*F\xa2Y7\xc3\xfd\x1br.<\x1b\xbd)^\x9f\xaar\xaexpW%\xf7L\xc9\x1d:\xb1\xc5f\xe3K{\xa3\xb1\xd5N\xf4Yj\x9fz\x03w\xd3\x8f\x11\xefC\x8d\xa9\xfe\"T=4\x89\xe6S6G)\xef\x8c\x0fm\xab\xa4\x15\x0f\x84\x15\xdf\x87\xc8\x82$\x18.~\xdf8\x92\xf5\xd9c\xd8.\xceyZ\xed\xfb\xd22\x86\xc7Q\xd5\x99\xf3Mbs\xb4n\x8d#\x04\x99qBF\r\x0f\xa9!<\xben\n\x802l\x05I\x1e\xbf=\xfd\x1a\xff\xaa=R\x19\xc6L\xb3./9\x00\x00\x00\x00s\xba\xc5\xf8\xda(\xfe\x9cty\xb0:PE\xee\xd2\x176\x10L\xf9\x9a\x1d\xe8\xcbx\x88\x18\xe9#\xf4\x0e\xb5t\x825\x94\x1b\xa0\x11a\x8d\xab\xbfL\x88\x0e\xfb\xc3\xb1\xab\x04&KO-\x19\xe4\x00\x94\xa8\xc6\xe1L\xb82\x1ed\xa6W\xed|\xafM7\xab\xc9R\xef\xcfgp\x94>]fk\xe9\x15\x93K\xdeUDUdQ\xb7\xc4\x19\xd3\xda\xcd\x91;C`\x90\'\x9b\x80\xf0\xb7\xc7\x1eb\x0e\xe2\xa2\xb9\x8b\x8d\x98\xca\x96\xe1\xbf]\x8b\xc7\xaa\xbb6\xa2f\xd8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97\xb0\xe2\x9c#Q\xed\x12\xe9\x96\xf0\xad\x02q\x13\xa7\xbaL\xbey\xb4\xf5j\x82,\x1ep\xa4\x01|\x1f\x88\xd4\x19<\x1e\x7f\xc1\x7f\xcbB\xb9\xe0gW\xa0w\xe8\b\xcb\x8bj\xf0\xef\xf1\x93\xd0J\xc2\f\xa9\xde2\xc0\x89\x83\x99\xc7o3\xabs:\x8c\xf9\xc5=\x8d/\xdf6\xe1\x0e\x97\xf0\xa7\xb8'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x41}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x208}}, 0x8080) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x17, &(0x7f0000000340)=0x1, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, 0x0, 0x0) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00') socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14) close(0x4) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c000000071401002abd7000fbdbdf2505005400010000000900020073797a3100000000080044006b64a9506a9daf2c942b9bc585dd71b1474869314dd6a80b7e2376000f2c9de2f8d4dec7bc542a17cd558040f0882c16da7677cc880896109200d2d4c844b9b0375843788e31bae6", @ANYRES32=r8, @ANYBLOB='\b\x00D\x00', @ANYRES32=r9, @ANYBLOB='\b\x00D\x00', @ANYRES32=r10, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x800) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x3d0, 0xffffffff, 0x250, 0x1b8, 0x250, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @multicast2, 0x0, 0x0, 'geneve0\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x190, 0x1b8, 0x0, {0x100000000000000}, [@common=@inet=@recent0={{0xf8}, {0xd06, 0x2, 0x2, 0x0, 'syz0\x00', 0x4}}, @common=@unspec=@cgroup0={{0x28}, {0x7, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0xff}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x6b7, 0x500, 0x1}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, &(0x7f0000000580)={r7, 0x7, 0x4, "7917cc3f8063ea9103e770035e992386404cca6757e3c50da25fec1b156239aff2500524dba4d686ae2f9b0f3a1901e34d45f7c96252e5c8131a5d92520fe4876c814e5dd1b9b0a8d2c966bfdeadbb27ad8c728b05a3858e8b313c1e29e0debc10a6de3dbc302f860ccc59d1cc2d13b0c0924db61868076d959458d5920be74548f19f12a076c67dd96f50be3dc68768282d374c44"}) 2m39.288134339s ago: executing program 5 (id=764): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040007020000020008000100030000000500020003000000050002000800000024"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 2m38.700501662s ago: executing program 5 (id=766): syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x5000, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000200)={0x2, 0x5000, @loopback}, 0x10) accept4$inet(r2, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r5, &(0x7f0000001800), 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r6, &(0x7f00000091c0)=""/16384, 0x4000) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000629000/0x4000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c150000410007012cbd7000fadbdf25037c00000400c280341501802d15108004000b8014000c"], 0x154c}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x145842, 0x0) mount$nfs(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f00000006c0)={[{'udp\x00'}]}) landlock_restrict_self(r8, 0x1) 2m23.585174709s ago: executing program 36 (id=766): syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x5000, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000200)={0x2, 0x5000, @loopback}, 0x10) accept4$inet(r2, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r5, &(0x7f0000001800), 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r6, &(0x7f00000091c0)=""/16384, 0x4000) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000629000/0x4000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c150000410007012cbd7000fadbdf25037c00000400c280341501802d15108004000b8014000c"], 0x154c}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x145842, 0x0) mount$nfs(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f00000006c0)={[{'udp\x00'}]}) landlock_restrict_self(r8, 0x1) 1m19.511871574s ago: executing program 8 (id=1099): r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd20", 0x27}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x11, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 1m19.305233548s ago: executing program 8 (id=1101): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0004, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}, 0x48) 1m18.895369973s ago: executing program 8 (id=1104): setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r0 = msgget$private(0x0, 0x790) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000600)={{0x1, 0x0, 0x0, 0xee01, 0x0, 0x120, 0x1}, 0x0, 0x0, 0x8000, 0x800, 0x1, 0x4, 0x0, 0x7fff, 0x5}) syz_usb_connect$uac1(0x0, 0x81, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7fd, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x8d, 0xa0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x4, 0x4, 0x1}, @as_header={0x7, 0x24, 0x1, 0x4, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0xf1, 0x9, {0x7, 0x25, 0x1, 0x8, 0x70, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xe6, 0x1, 0x7, {0x7, 0x25, 0x1, 0x0, 0xf, 0x4}}}}}}}}]}}, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) mlockall(0x7) syz_emit_ethernet(0x118b, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) 1m17.044989826s ago: executing program 8 (id=1115): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xa65400, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m16.861248109s ago: executing program 8 (id=1117): bpf$BPF_PROG_DETACH(0x8, &(0x7f00000017c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0400", @ANYRES32], 0x10) 1m15.753279495s ago: executing program 8 (id=1127): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) recvmsg$kcm(r0, 0x0, 0x102) 1m15.408866389s ago: executing program 37 (id=1127): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) recvmsg$kcm(r0, 0x0, 0x102) 5.616704895s ago: executing program 0 (id=1519): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000805000001"], 0x88) r3 = accept(r2, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0x12, &(0x7f0000000340)={0x0}}, 0x80) 5.321221542s ago: executing program 3 (id=1522): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000100)=0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x3, 0x4, 0x4, 0x2, 0x3, 0xf1, 0x0, 0x7fffffffffffb, 0x8000, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c53c5}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x0, 0xe, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0xfffffffffffffffe, 0x4, 0x20000000009, 0x2, 0x1fd, 0x8, 0x0, 0x7, 0x8, 0x5, 0x2, 0x4ff, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x1, 0xfffffffffffffffc, 0x6, 0x20008, 0x2e2, 0x103, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000000, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x2, 0x7, 0x7fffffffffffffff, 0x8, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x3, 0x7, 0x7, 0xae8f, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa7, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x3, 0x4, 0x10001, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffc, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x0, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xffff, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) 5.007124152s ago: executing program 6 (id=1525): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 4.667413302s ago: executing program 3 (id=1528): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='8', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='9', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='10', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='1', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0xa0) mount$cgroup2(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0), 0x202008, &(0x7f0000000180)={[{@memory_localevents}, {@subsystem='pids'}, {@memory_hugetlb_accounting}], [{@fsmagic={'fsmagic', 0x3d, 0x1}}, {@fsname={'fsname', 0x3d, 'proc\x00'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}]}) unshare(0x6a040000) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r0, &(0x7f0000000000)='14', 0x2) write(r0, &(0x7f0000000000)='1', 0x1) 3.490720629s ago: executing program 0 (id=1533): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='/'], 0x20) 3.43994107s ago: executing program 7 (id=1534): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(0xffffffffffffffff, 0x8010aebc, &(0x7f0000000040)={0x10000, 0x10000}) 3.352403224s ago: executing program 6 (id=1535): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000050000000200000004000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10) 3.186655458s ago: executing program 7 (id=1536): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) writev(0xffffffffffffffff, &(0x7f0000000780), 0x0) r1 = add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000580)="880780416de061c9247dd5c2e3dd377a1b047980ada2c82cbf82be45", 0x1c, r0) keyctl$clear(0x7, r1) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, 0x0) r3 = memfd_create(&(0x7f0000000280)='-B\xd5N4\xa6\xa3y\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xff\x7f\xac\xacva}knh#\xcfJ\x0f\xc8\xc0:\x9cc\xa5\x10\xf7=\b\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xafQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xacM\xcc\v#cos7\xa1b1\xb1;i)j\x0e\x1e\xedI\xaa\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\x90\xae\x96J\xe2]\x00\x86\xb7.<\xf5N\xd3\x94W1\xf7\x18z>\xa7q,\xf7\x96\xb8{\x8e\x024\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGUh\x06\xb3[\xb0>e\xf7\n\xbamj\xd1\xa1\xbf\x01\xc3\\\xce0\xa6q.\'L\x8c\xed\xb6\xa8\xd2{\"Qm\x00\x13\xbd\x8f\xba\t\x89\a\xc9[\x06f\x8e\xdc\x0fG4\x12k;3\xbbW\xf7\x00d\tE\xc05\xdb_\xb8\xf9\xd3\x9f\xa2\xb1X\xf8H}F.(\xd7\x0f\x81\xeds\xf0\xc0\xbbx\xd8,\xef\xd4\xd1M\xa2K\xe1\xb0qR\'\xbb\xf7\x905]\xc8=\xe3\xc6\n\x85\x94\xa0\x1eL\x8c@#%5\xa6\xc3\xd9\xf7\xdb\xecC\x9f\x8a\xa5$\xb3\x16O\x13:\xa4/=\xc9\xd6R\x90\xaf\x99%\xbc\x17\xda0\xeb\xceC\xc4\xf0\xdc\x0f\xf6\xba}\xca-\"\x1a\xc3cK\xdcN\xd1-\v\x1c\r\xf0\xd0\x0f\xae\xe6bh\x95\xda\x03\xb30Kv79;\x03\xfa\xe1\xe8\xa7\xd5\x0fs\x97\x81\x9b\xab\x86\xac\x93\xa5\xb9_51\xad\x97\x18\xa2}\xf7bc\xd2\x87\xac\xcdPP\xfc=\x9f\v\xc0d\x8a\xd5\xe1\xd8PKk\xb97[\x18\xca\x8e\x05+/\x90m3\xddp\xb99\a\xb5Q*A\xb5\xb7\xe7\xbb\xe8\xbdL$qu\xb9E\x18\xd8;\x12r$\xfa\xcfc\x11y6\xe8\xfb\x9dU\n\x00\xa6/M\xc5\xcb_\xbe\xbc \x10\x8dM\xa7\x93en\xac\xe3k\xba\xfc\f\xf7\x87\xc7\x1e\x15d\x9a\xfd\xc9\xfe\x82\x95cO\x80\xbcA]23\xc1y\xb0\xceo/\xad\xeeOzi\xb6\xd8|7\x9f\x87\xd3\xca\xfe\x00\x93\x8a\xb80\xdbZW\xf1.\x9c\xd4\'7\xff\x92\x9f\xacV\xc5;\x00\xfa\xca\xb8\xc4\xa0pU\x9f3W\xeb\xf6\xf5\x008\x1dY\xd7\x18\x8f\xab\x80\xc1z\x8d\x0e\xb4<\xde\x83c\x964\x8aZ\xc0A\x8d\xc1RU\t\xd0\x0e\xb0\xc4h\x92\xe87^\xc0\xf4Y\xbb3o\xa1+\x1a\x04\x8dS~wr\x8619\xc1Y\xa3Z`\x02h&\x86\x86\x81=\xfdM\x1b\xf1\x89~\x16}\xddI$\xb4\'~\xb4\\\x1cQ', 0x0) r4 = dup(r3) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) unshare(0x600) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000008) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 3.177986286s ago: executing program 6 (id=1537): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf670000000000001606fdff0fff52007607000010000000d60600000ee60000bf050000000000001f63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999f9d60bb39d0af449deaa27ea949e8f9000d885dfea2783835e29eb532ba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f2686ee970d6482a2e7ddbf51c74ccac1c7b21bde7d1af255d6ebff9bff35e3888a0e356d82e43407a6d7fa94b2100204000000000000009ab62d7b07ba0a71a72145edade9941f04000000000000004ea9e4c70ef8b7407740ab3312edee62a4dc2fc85755d387bfa1bc8eb71fbe11b2216cc8d1f0160c237d929b49da28724b95555b74be2f76fb5f330b015a68587a75c0130000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 3.02178735s ago: executing program 6 (id=1538): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{0x2, 0x0, 0x0, 0x1}, 0x2, 0x0, 0x0, 0x0, "42c8902288087d30"}}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) close_range(r0, 0xffffffffffffffff, 0x0) 2.651911221s ago: executing program 6 (id=1541): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e61b3a40fd080200"], 0x0) 2.632231936s ago: executing program 0 (id=1542): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x110, 0x6, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x800, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x300, 0x7, 0x1]}) 2.554721503s ago: executing program 9 (id=1543): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0011802e"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) 2.507333224s ago: executing program 3 (id=1544): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000300)) 2.459522154s ago: executing program 0 (id=1545): dup(0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='100000', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='0', 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2.232901356s ago: executing program 7 (id=1546): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) 2.098709947s ago: executing program 7 (id=1547): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000050000000200000004000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10) 2.027081594s ago: executing program 9 (id=1548): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 2.008646425s ago: executing program 7 (id=1549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1a3081, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe800000000000"], 0xcfa4) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @multicast}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)=0x1) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 1.816113171s ago: executing program 3 (id=1550): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000100)=0x5) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x3, 0x4, 0x4, 0x2, 0x3, 0xf1, 0x0, 0x7fffffffffffb, 0x8000, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c53c5}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x0, 0xe, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0xfffffffffffffffe, 0x4, 0x20000000009, 0x2, 0x1fd, 0x8, 0x0, 0x7, 0x8, 0x5, 0x2, 0x4ff, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x1, 0xfffffffffffffffc, 0x6, 0x20008, 0x2e2, 0x103, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000000, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x2, 0x7, 0x7fffffffffffffff, 0x8, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x3, 0x7, 0x7, 0xae8f, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa7, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x3, 0x4, 0x10001, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffc, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x0, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xffff, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) 1.657629682s ago: executing program 9 (id=1551): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.590657106s ago: executing program 3 (id=1552): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='/'], 0x20) 1.389257373s ago: executing program 9 (id=1553): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='a'], 0x8) 1.238754549s ago: executing program 9 (id=1554): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) 1.227905465s ago: executing program 3 (id=1555): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="05005300000000000800050008"], 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write(r3, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) 1.095124704s ago: executing program 0 (id=1556): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) writev(0xffffffffffffffff, &(0x7f0000000780), 0x0) r1 = add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000580)="880780416de061c9247dd5c2e3dd377a1b047980ada2c82cbf82be45", 0x1c, r0) keyctl$clear(0x7, r1) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, 0x0) r3 = memfd_create(&(0x7f0000000280)='-B\xd5N4\xa6\xa3y\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xff\x7f\xac\xacva}knh#\xcfJ\x0f\xc8\xc0:\x9cc\xa5\x10\xf7=\b\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xafQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xacM\xcc\v#cos7\xa1b1\xb1;i)j\x0e\x1e\xedI\xaa\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\x90\xae\x96J\xe2]\x00\x86\xb7.<\xf5N\xd3\x94W1\xf7\x18z>\xa7q,\xf7\x96\xb8{\x8e\x024\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGUh\x06\xb3[\xb0>e\xf7\n\xbamj\xd1\xa1\xbf\x01\xc3\\\xce0\xa6q.\'L\x8c\xed\xb6\xa8\xd2{\"Qm\x00\x13\xbd\x8f\xba\t\x89\a\xc9[\x06f\x8e\xdc\x0fG4\x12k;3\xbbW\xf7\x00d\tE\xc05\xdb_\xb8\xf9\xd3\x9f\xa2\xb1X\xf8H}F.(\xd7\x0f\x81\xeds\xf0\xc0\xbbx\xd8,\xef\xd4\xd1M\xa2K\xe1\xb0qR\'\xbb\xf7\x905]\xc8=\xe3\xc6\n\x85\x94\xa0\x1eL\x8c@#%5\xa6\xc3\xd9\xf7\xdb\xecC\x9f\x8a\xa5$\xb3\x16O\x13:\xa4/=\xc9\xd6R\x90\xaf\x99%\xbc\x17\xda0\xeb\xceC\xc4\xf0\xdc\x0f\xf6\xba}\xca-\"\x1a\xc3cK\xdcN\xd1-\v\x1c\r\xf0\xd0\x0f\xae\xe6bh\x95\xda\x03\xb30Kv79;\x03\xfa\xe1\xe8\xa7\xd5\x0fs\x97\x81\x9b\xab\x86\xac\x93\xa5\xb9_51\xad\x97\x18\xa2}\xf7bc\xd2\x87\xac\xcdPP\xfc=\x9f\v\xc0d\x8a\xd5\xe1\xd8PKk\xb97[\x18\xca\x8e\x05+/\x90m3\xddp\xb99\a\xb5Q*A\xb5\xb7\xe7\xbb\xe8\xbdL$qu\xb9E\x18\xd8;\x12r$\xfa\xcfc\x11y6\xe8\xfb\x9dU\n\x00\xa6/M\xc5\xcb_\xbe\xbc \x10\x8dM\xa7\x93en\xac\xe3k\xba\xfc\f\xf7\x87\xc7\x1e\x15d\x9a\xfd\xc9\xfe\x82\x95cO\x80\xbcA]23\xc1y\xb0\xceo/\xad\xeeOzi\xb6\xd8|7\x9f\x87\xd3\xca\xfe\x00\x93\x8a\xb80\xdbZW\xf1.\x9c\xd4\'7\xff\x92\x9f\xacV\xc5;\x00\xfa\xca\xb8\xc4\xa0pU\x9f3W\xeb\xf6\xf5\x008\x1dY\xd7\x18\x8f\xab\x80\xc1z\x8d\x0e\xb4<\xde\x83c\x964\x8aZ\xc0A\x8d\xc1RU\t\xd0\x0e\xb0\xc4h\x92\xe87^\xc0\xf4Y\xbb3o\xa1+\x1a\x04\x8dS~wr\x8619\xc1Y\xa3Z`\x02h&\x86\x86\x81=\xfdM\x1b\xf1\x89~\x16}\xddI$\xb4\'~\xb4\\\x1cQ', 0x0) r4 = dup(r3) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) unshare(0x600) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000008) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 709.398177ms ago: executing program 7 (id=1557): setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r0 = msgget$private(0x0, 0x790) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000600)={{0x1, 0x0, 0x0, 0xee01, 0x0, 0x120, 0x1}, 0x0, 0x0, 0x8000, 0x800, 0x1, 0x4, 0x0, 0x7fff, 0x5}) syz_usb_connect$uac1(0x0, 0x81, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7fd, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x8d, 0xa0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x4, 0x4, 0x1}, @as_header={0x7, 0x24, 0x1, 0x4, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0xf1, 0x9, {0x7, 0x25, 0x1, 0x8, 0x70, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xe6, 0x1, 0x7, {0x7, 0x25, 0x1, 0x0, 0xf, 0x4}}}}}}}}]}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 578.465049ms ago: executing program 9 (id=1558): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0011802e"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) 82.100333ms ago: executing program 0 (id=1559): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000050000000200000004000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10) 0s ago: executing program 6 (id=1560): syz_emit_ethernet(0x7a, &(0x7f0000000640)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) kernel console output (not intermixed with test programs): e_0) entered disabled state [ 387.771536][ T6828] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 387.779002][ T5593] Bluetooth: hci0: urb ffff88801cb62c00 submission failed (2) [ 387.831694][ T5720] usb 1-1: USB disconnect, device number 35 [ 387.964075][ T6828] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 387.969231][ T6828] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 387.972232][ T6828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 387.972257][ T6828] usb 7-1: SerialNumber: syz [ 388.004930][ T9297] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 388.124948][ T9] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 388.276288][ T6828] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 388.276999][ T6828] usb-storage 7-1:1.0: USB Mass Storage device detected [ 388.303652][ T6828] usb-storage 7-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 388.307427][ T6828] scsi host1: usb-storage 7-1:1.0 [ 388.313505][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 388.314394][ T9] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 388.315778][ T9] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 388.317981][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.318005][ T9] usb 9-1: Product: syz [ 388.318020][ T9] usb 9-1: Manufacturer: syz [ 388.318042][ T9] usb 9-1: SerialNumber: syz [ 388.339467][ T9] usb 9-1: config 0 descriptor?? [ 388.395191][ T6828] usb 7-1: USB disconnect, device number 34 [ 389.642808][ T6828] usb 7-1: new low-speed USB device number 35 using dummy_hcd [ 389.792245][ T6828] usb 7-1: New USB device found, idVendor=0af0, idProduct=7071, bcdDevice=1e.59 [ 389.793708][ T6828] usb 7-1: config 248 has an invalid interface number: 22 but max is 0 [ 389.793733][ T6828] usb 7-1: config 248 has no interface number 0 [ 389.793762][ T6828] usb 7-1: config 248 interface 22 has no altsetting 0 [ 390.090218][ T9357] netlink: 176 bytes leftover after parsing attributes in process `syz.0.953'. [ 390.298483][ T37] audit: type=1326 audit(1790344271.899:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9358 comm="syz.7.955" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2261a8e159 code=0x0 [ 390.339110][ T4417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.432394][ T4417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.458483][ T4417] bond0 (unregistering): Released all slaves [ 390.536633][ T5246] 8021q: adding VLAN 0 to HW filter on device eth17 [ 390.581751][ T5720] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 390.739227][ T8927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.782768][ T5720] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 390.790507][ T5720] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 390.800443][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 390.800470][ T5720] usb 1-1: SerialNumber: syz [ 390.836765][ T9360] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 390.840709][ T8927] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.132567][ T7839] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.132678][ T7839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.133113][ T5720] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 391.133760][ T5720] usb-storage 1-1:1.0: USB Mass Storage device detected [ 391.141104][ T5713] usb 9-1: USB disconnect, device number 20 [ 391.224496][ T7839] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.224788][ T7839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.317409][ T5720] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 391.331686][ T5720] scsi host1: usb-storage 1-1:1.0 [ 391.405404][ T5720] usb 1-1: USB disconnect, device number 36 [ 392.464922][ T6828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.480794][ T6828] usb 7-1: can't set config #248, error -71 [ 392.510302][ T9388] syz.0.961 (9388) used greatest stack depth: 18464 bytes left [ 392.538989][ T6828] usb 7-1: USB disconnect, device number 35 [ 392.770457][ T9402] netlink: 176 bytes leftover after parsing attributes in process `syz.6.965'. [ 393.082221][ T6828] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 393.236178][ T6828] usb 8-1: Using ep0 maxpacket: 32 [ 393.237095][ T6828] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 393.253813][ T6828] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.253839][ T6828] usb 8-1: Product: syz [ 393.253853][ T6828] usb 8-1: Manufacturer: syz [ 393.253868][ T6828] usb 8-1: SerialNumber: syz [ 393.261498][ T5720] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 393.301189][ T6828] usb 8-1: config 0 descriptor?? [ 393.310513][ T5246] 8021q: adding VLAN 0 to HW filter on device eth18 [ 393.354105][ T5713] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 393.432451][ T5720] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 393.433956][ T5720] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 393.434004][ T5720] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 393.434028][ T5720] usb 7-1: config 2 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 393.434051][ T5720] usb 7-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 393.435308][ T5720] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 393.435372][ T5720] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 393.435396][ T5720] usb 7-1: config 2 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 393.435419][ T5720] usb 7-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 393.447196][ T5720] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.447222][ T5720] usb 7-1: Product: syz [ 393.447237][ T5720] usb 7-1: Manufacturer: syz [ 393.447251][ T5720] usb 7-1: SerialNumber: syz [ 393.562235][ T5713] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 393.570431][ T5713] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 393.583316][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 393.583343][ T5713] usb 1-1: SerialNumber: syz [ 393.607886][ T9414] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 393.610678][ T5720] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 393.611128][ T5720] ti_usb_3410_5052 7-1:2.0: missing endpoints [ 393.735370][ T6828] airspy 8-1:0.0: Board ID: 00 [ 393.735386][ T6828] airspy 8-1:0.0: Firmware version: [ 393.745809][ T9420] ipvlan0: entered promiscuous mode [ 393.826301][ T31] usb 7-1: USB disconnect, device number 36 [ 393.889309][ T5713] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 393.893644][ T5713] usb-storage 1-1:1.0: USB Mass Storage device detected [ 393.984770][ T5713] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 393.987351][ T5713] scsi host1: usb-storage 1-1:1.0 [ 394.065044][ T9428] FAULT_INJECTION: forcing a failure. [ 394.065044][ T9428] name failslab, interval 1, probability 0, space 0, times 0 [ 394.065083][ T9428] CPU: 1 UID: 0 PID: 9428 Comm: syz.8.973 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 394.065104][ T9428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 394.065118][ T9428] Call Trace: [ 394.065126][ T9428] [ 394.065135][ T9428] dump_stack_lvl+0xe8/0x150 [ 394.065169][ T9428] should_fail_ex+0x46b/0x600 [ 394.065203][ T9428] should_failslab+0xa8/0x100 [ 394.065236][ T9428] __kmalloc_cache_noprof+0xa1/0x680 [ 394.065264][ T9428] ? futex_lock_pi+0x99c/0xab0 [ 394.065283][ T9428] ? futex_lock_pi+0x99c/0xab0 [ 394.065310][ T9428] futex_lock_pi+0x99c/0xab0 [ 394.065331][ T9428] ? futex_unqueue+0x211/0x240 [ 394.065364][ T9428] ? __futex_wait+0x35a/0x410 [ 394.065392][ T9428] ? __pfx_futex_lock_pi+0x10/0x10 [ 394.065441][ T9428] ? __pfx_futex_wake_mark+0x10/0x10 [ 394.065483][ T9428] do_futex+0x330/0x4e0 [ 394.065508][ T9428] ? __pfx_do_futex+0x10/0x10 [ 394.065538][ T9428] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 394.065575][ T9428] __se_sys_futex+0x3a8/0x450 [ 394.065602][ T9428] ? __pfx___se_sys_futex+0x10/0x10 [ 394.065623][ T9428] ? rcu_is_watching+0x16/0xb0 [ 394.065659][ T9428] ? __x64_sys_futex+0x21/0xf0 [ 394.065680][ T9428] do_syscall_64+0x166/0x520 [ 394.065704][ T9428] ? trace_irq_disable+0x3b/0x140 [ 394.065731][ T9428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.065752][ T9428] ? clear_bhb_loop+0x70/0xc0 [ 394.065779][ T9428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.065804][ T9428] RIP: 0033:0x7fb1d760e159 [ 394.065823][ T9428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.065840][ T9428] RSP: 002b:00007fb1d5866028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 394.065863][ T9428] RAX: ffffffffffffffda RBX: 00007fb1d7895fa0 RCX: 00007fb1d760e159 [ 394.065879][ T9428] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000200000000000 [ 394.065894][ T9428] RBP: 00007fb1d76a506b R08: 0000000000000000 R09: 0000000000000003 [ 394.065908][ T9428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.065921][ T9428] R13: 00007fb1d7896038 R14: 00007fb1d7895fa0 R15: 00007fff58715d18 [ 394.065952][ T9428] [ 394.126470][ T5713] usb 1-1: USB disconnect, device number 37 [ 394.244343][ T6828] airspy 8-1:0.0: usb_control_msg() failed -71 request 0e [ 394.249298][ T6828] airspy 8-1:0.0: Registered as swradio24 [ 394.249318][ T6828] airspy 8-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 394.274380][ T6828] usb 8-1: USB disconnect, device number 25 [ 395.191551][ T5713] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 395.274546][ T8927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.342543][ T5713] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 395.346852][ T5713] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.346905][ T5713] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 395.346957][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.461281][ T5713] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 396.282849][ T4417] hsr_slave_0: left promiscuous mode [ 396.327841][ T4417] hsr_slave_1: left promiscuous mode [ 396.338809][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.338837][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.377633][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.377660][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.481499][ T10] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 396.524060][ T4417] veth1_macvtap: left promiscuous mode [ 396.524173][ T4417] veth0_macvtap: left promiscuous mode [ 396.524439][ T4417] veth1_vlan: left promiscuous mode [ 396.524640][ T4417] veth0_vlan: left promiscuous mode [ 396.621559][ T5713] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 396.632658][ T10] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 396.633995][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 396.635510][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 396.635534][ T10] usb 9-1: SerialNumber: syz [ 396.666369][ T9484] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 396.779655][ T5713] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 396.792487][ T5713] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.836921][ T5713] usb 8-1: config 0 descriptor?? [ 396.858500][ T5713] cp210x 8-1:0.0: cp210x converter detected [ 396.938462][ T10] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 396.947951][ T10] usb-storage 9-1:1.0: USB Mass Storage device detected [ 397.065384][ T5713] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 397.065415][ T5713] cp210x 8-1:0.0: querying part number failed [ 397.089575][ T10] usb-storage 9-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 397.101212][ T10] scsi host1: usb-storage 9-1:1.0 [ 397.180225][ T10] usb 9-1: USB disconnect, device number 21 [ 397.207727][ T5713] usb 8-1: cp210x converter now attached to ttyUSB0 [ 397.371479][ T6828] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 397.523317][ T6828] usb 7-1: Using ep0 maxpacket: 32 [ 397.524833][ T6828] usb 7-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 397.524889][ T6828] usb 7-1: too many configurations: 17, using maximum allowed: 8 [ 397.526417][ T6828] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 397.526440][ T6828] usb 7-1: config 0 has no interface number 0 [ 397.527737][ T6828] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 397.527761][ T6828] usb 7-1: config 0 has no interface number 0 [ 397.529006][ T6828] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 397.529029][ T6828] usb 7-1: config 0 has no interface number 0 [ 397.530317][ T6828] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 397.530341][ T6828] usb 7-1: config 0 has no interface number 0 [ 397.535789][ T6828] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 397.535814][ T6828] usb 7-1: config 0 has no interface number 0 [ 397.537029][ T6828] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 397.537052][ T6828] usb 7-1: config 0 has no interface number 0 [ 397.538277][ T6828] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 397.538298][ T6828] usb 7-1: config 0 has no interface number 0 [ 397.539500][ T6828] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 397.539522][ T6828] usb 7-1: config 0 has no interface number 0 [ 397.550878][ T6828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.550902][ T6828] usb 7-1: Product: syz [ 397.550917][ T6828] usb 7-1: Manufacturer: syz [ 397.550931][ T6828] usb 7-1: SerialNumber: syz [ 397.590875][ T6828] usb 7-1: config 0 descriptor?? [ 397.600435][ T6828] etas_es58x 7-1:0.2: Starting syz syz (Serial Number syz) [ 397.913761][ T10] usb 1-1: USB disconnect, device number 38 [ 398.056772][ T6828] etas_es58x 7-1:0.2: could not retrieve the product info string [ 398.090812][ T9501] netlink: 68 bytes leftover after parsing attributes in process `syz.8.989'. [ 398.115631][ T4417] team0 (unregistering): Port device team_slave_1 removed [ 398.213493][ T4417] team0 (unregistering): Port device team_slave_0 removed [ 398.578890][ T160] smc: removing ib device syz0 [ 398.757196][ T5246] 8021q: adding VLAN 0 to HW filter on device eth19 [ 398.759949][ T36] infiniband syz0: ib_query_port failed (-19) [ 399.197089][ T6828] usb 7-1: USB disconnect, device number 37 [ 399.236308][ T6828] etas_es58x 7-1:0.2: Disconnecting syz syz [ 399.515563][ T36] usb 8-1: USB disconnect, device number 26 [ 399.760376][ T36] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 399.761020][ T36] cp210x 8-1:0.0: device disconnected [ 399.768149][ T160] smbdirect: ib_dev[syz0] removed [ 399.935266][ T31] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 400.151480][ T5713] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 400.152554][ T31] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 400.190092][ T31] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 400.191237][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 400.191261][ T31] usb 9-1: SerialNumber: syz [ 400.198700][ T8927] veth0_vlan: entered promiscuous mode [ 400.316786][ T9526] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 400.382105][ T8927] veth1_vlan: entered promiscuous mode [ 400.384570][ T5713] usb 1-1: New USB device found, idVendor=0af0, idProduct=7071, bcdDevice=1e.59 [ 400.389917][ T5713] usb 1-1: config 248 has an invalid interface number: 22 but max is 0 [ 400.389933][ T5713] usb 1-1: config 248 has no interface number 0 [ 400.389953][ T5713] usb 1-1: config 248 interface 22 has no altsetting 0 [ 400.404547][ T5713] usb 1-1: string descriptor 0 read error: -22 [ 400.404688][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.556800][ T8927] veth0_macvtap: entered promiscuous mode [ 400.589127][ T8927] veth1_macvtap: entered promiscuous mode [ 400.616942][ T31] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 400.638976][ T31] usb-storage 9-1:1.0: USB Mass Storage device detected [ 400.682551][ T31] usb-storage 9-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 400.686049][ T31] scsi host1: usb-storage 9-1:1.0 [ 400.708148][ T8927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.836659][ T8927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.863642][ T1016] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.863705][ T1016] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.863741][ T1016] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.863775][ T1016] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.941498][ T6828] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 401.102751][ T6828] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 401.131193][ T6828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.131240][ T6828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.133534][ T10] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 401.326965][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 401.334681][ T10] usb 8-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 401.334739][ T10] usb 8-1: too many configurations: 17, using maximum allowed: 8 [ 401.336971][ T10] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 401.336995][ T10] usb 8-1: config 0 has no interface number 0 [ 401.342160][ T10] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 401.342184][ T10] usb 8-1: config 0 has no interface number 0 [ 401.348819][ T10] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 401.348843][ T10] usb 8-1: config 0 has no interface number 0 [ 401.350035][ T10] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 401.350058][ T10] usb 8-1: config 0 has no interface number 0 [ 401.351091][ T10] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 401.351113][ T10] usb 8-1: config 0 has no interface number 0 [ 401.359501][ T10] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 401.359526][ T10] usb 8-1: config 0 has no interface number 0 [ 401.377431][ T10] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 401.377457][ T10] usb 8-1: config 0 has no interface number 0 [ 401.379835][ T10] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 401.379858][ T10] usb 8-1: config 0 has no interface number 0 [ 401.387645][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.387668][ T10] usb 8-1: Product: syz [ 401.387683][ T10] usb 8-1: Manufacturer: syz [ 401.387709][ T10] usb 8-1: SerialNumber: syz [ 401.583838][ T5713] usb 1-1: USB disconnect, device number 39 [ 401.816907][ T6828] usb 7-1: config 0 descriptor?? [ 401.836512][ T31] usb 9-1: USB disconnect, device number 22 [ 401.915504][ T10] usb 8-1: config 0 descriptor?? [ 401.954653][ T10] etas_es58x 8-1:0.2: Starting syz syz (Serial Number syz) [ 402.027072][ T6828] usbhid 7-1:0.0: can't add hid device: -71 [ 402.027250][ T6828] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 402.379359][ T10] etas_es58x 8-1:0.2: could not retrieve the product info string [ 402.389075][ T6828] usb 7-1: USB disconnect, device number 38 [ 402.470467][ T5246] 8021q: adding VLAN 0 to HW filter on device eth20 [ 402.757602][ T9576] jffs2: notice: (9576) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 403.285328][ T1289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.285351][ T1289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.332902][ T10] usb 8-1: USB disconnect, device number 27 [ 403.923480][ T37] audit: type=1326 audit(1790344285.379:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9589 comm="syz.0.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4537fce159 code=0x7ffc0000 [ 404.040108][ T37] audit: type=1326 audit(1790344285.389:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9589 comm="syz.0.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4537fce159 code=0x7ffc0000 [ 404.040527][ T37] audit: type=1326 audit(1790344285.399:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9589 comm="syz.0.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4537fce159 code=0x7ffc0000 [ 404.040816][ T37] audit: type=1326 audit(1790344285.399:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9589 comm="syz.0.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4537fce159 code=0x7ffc0000 [ 404.041040][ T37] audit: type=1326 audit(1790344285.399:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9589 comm="syz.0.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4537fce159 code=0x7ffc0000 [ 404.041286][ T37] audit: type=1326 audit(1790344285.399:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9589 comm="syz.0.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4537fce159 code=0x7ffc0000 [ 404.041699][ T37] audit: type=1326 audit(1790344285.399:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9589 comm="syz.0.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4537fce159 code=0x7ffc0000 [ 404.041923][ T37] audit: type=1326 audit(1790344285.409:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9589 comm="syz.0.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4537fce159 code=0x7ffc0000 [ 404.042076][ T37] audit: type=1326 audit(1790344285.409:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9589 comm="syz.0.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4537fce159 code=0x7ffc0000 [ 404.042274][ T37] audit: type=1326 audit(1790344285.419:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9589 comm="syz.0.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4537fce159 code=0x7ffc0000 [ 404.771189][ T10] etas_es58x 8-1:0.2: Disconnecting syz syz [ 405.141548][ T5708] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 405.215981][ T9611] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1022'. [ 405.301881][ T5708] usb 1-1: Using ep0 maxpacket: 32 [ 405.303473][ T5708] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 405.303528][ T5708] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 405.304902][ T5708] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 405.304933][ T5708] usb 1-1: config 0 has no interface number 0 [ 405.311075][ T5708] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 405.311099][ T5708] usb 1-1: config 0 has no interface number 0 [ 405.316413][ T5708] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 405.316437][ T5708] usb 1-1: config 0 has no interface number 0 [ 405.319971][ T5708] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 405.319994][ T5708] usb 1-1: config 0 has no interface number 0 [ 405.322145][ T5708] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 405.322168][ T5708] usb 1-1: config 0 has no interface number 0 [ 405.327702][ T5708] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 405.327727][ T5708] usb 1-1: config 0 has no interface number 0 [ 405.331765][ T5708] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 405.331789][ T5708] usb 1-1: config 0 has no interface number 0 [ 405.334762][ T5708] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 405.334785][ T5708] usb 1-1: config 0 has no interface number 0 [ 405.346190][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.346215][ T5708] usb 1-1: Product: syz [ 405.346229][ T5708] usb 1-1: Manufacturer: syz [ 405.346244][ T5708] usb 1-1: SerialNumber: syz [ 405.519491][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.519513][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.522204][ T9610] bridge0: entered promiscuous mode [ 405.537826][ T9607] bridge0: left promiscuous mode [ 405.610544][ T5708] usb 1-1: config 0 descriptor?? [ 405.749066][ T5708] etas_es58x 1-1:0.2: Starting syz syz (Serial Number syz) [ 406.085468][ T5708] etas_es58x 1-1:0.2: could not retrieve the product info string [ 406.305554][ T5708] usb 1-1: USB disconnect, device number 40 [ 406.339271][ T9630] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1026'. [ 406.345849][ T9630] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1026'. [ 406.467278][ T5708] etas_es58x 1-1:0.2: Disconnecting syz syz [ 406.673216][ T9644] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1032'. [ 407.036556][ T9659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1037'. [ 407.773616][ T10] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 407.907115][ T9684] mmap: syz.8.1042 (9684) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 407.933012][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 407.933838][ T10] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 407.964702][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.964728][ T10] usb 8-1: Product: syz [ 407.964743][ T10] usb 8-1: Manufacturer: syz [ 407.964758][ T10] usb 8-1: SerialNumber: syz [ 408.146184][ T10] usb 8-1: config 0 descriptor?? [ 408.263462][ T9690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1044'. [ 408.576747][ T10] airspy 8-1:0.0: Board ID: 00 [ 408.576771][ T10] airspy 8-1:0.0: Firmware version: [ 408.932428][ T9708] kernel profiling enabled (shift: 23) [ 409.974764][ T10] airspy 8-1:0.0: usb_control_msg() failed -71 request 0e [ 409.996114][ T10] airspy 8-1:0.0: Registered as swradio24 [ 409.996137][ T10] airspy 8-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 410.075077][ T10] usb 8-1: USB disconnect, device number 28 [ 410.981497][ T1000] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 411.131469][ T1000] usb 9-1: Using ep0 maxpacket: 32 [ 411.198528][ T1000] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 411.213815][ T1000] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 411.213846][ T1000] usb 9-1: config 0 has no interface number 0 [ 411.236340][ T1000] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.236367][ T1000] usb 9-1: Product: syz [ 411.236382][ T1000] usb 9-1: Manufacturer: syz [ 411.236404][ T1000] usb 9-1: SerialNumber: syz [ 411.311588][ T9727] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1059'. [ 411.497561][ T1000] usb 9-1: config 0 descriptor?? [ 412.017220][ T1000] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 412.017254][ T1000] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 412.121545][ T31] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 412.293212][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 412.294827][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 412.316722][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.316749][ T31] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 412.316839][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.501650][ T31] usb 1-1: config 0 descriptor?? [ 412.633616][ T9756] netlink: 34 bytes leftover after parsing attributes in process `syz.7.1066'. [ 413.320807][ T1000] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 413.321130][ T1000] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -32 [ 413.439990][ T9772] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1070'. [ 413.878872][ T9782] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1072'. [ 413.971547][ T5713] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 414.117492][ T5713] usb 7-1: device descriptor read/64, error -71 [ 414.371487][ T5713] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 414.429027][ T1000] usb 9-1: USB disconnect, device number 23 [ 414.515830][ T5713] usb 7-1: device descriptor read/64, error -71 [ 414.521207][ T9806] netlink: 34 bytes leftover after parsing attributes in process `syz.9.1079'. [ 414.621892][ T5713] usb usb7-port1: attempt power cycle [ 414.735907][ T9814] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1082'. [ 414.766251][ T6828] usb 1-1: USB disconnect, device number 41 [ 415.005285][ T9822] jffs2: notice: (9822) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 415.024475][ T5713] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 415.043877][ T5713] usb 7-1: device descriptor read/8, error -71 [ 415.291553][ T5713] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 415.316562][ T5713] usb 7-1: device descriptor read/8, error -71 [ 416.157480][ T5713] usb usb7-port1: unable to enumerate USB device [ 416.541541][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 416.651500][ T31] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 416.691509][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 416.699097][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 416.705596][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 416.705624][ T10] usb 1-1: config 0 has no interface number 0 [ 416.746025][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.746055][ T10] usb 1-1: Product: syz [ 416.746069][ T10] usb 1-1: Manufacturer: syz [ 416.746084][ T10] usb 1-1: SerialNumber: syz [ 416.800479][ T10] usb 1-1: config 0 descriptor?? [ 416.811521][ T31] usb 8-1: Using ep0 maxpacket: 8 [ 416.814757][ T31] usb 8-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 416.816311][ T31] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 416.823183][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.823207][ T31] usb 8-1: Product: syz [ 416.823220][ T31] usb 8-1: Manufacturer: syz [ 416.823234][ T31] usb 8-1: SerialNumber: syz [ 416.900703][ T31] usb 8-1: config 0 descriptor?? [ 417.186048][ T9855] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1097'. [ 417.242211][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 417.242244][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 418.101479][ T5720] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 418.241513][ T31] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 418.253896][ T5720] usb 9-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 418.259094][ T5720] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7 [ 418.264044][ T5720] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.264069][ T5720] usb 9-1: Product: syz [ 418.264083][ T5720] usb 9-1: Manufacturer: syz [ 418.264097][ T5720] usb 9-1: SerialNumber: syz [ 418.388295][ T31] usb 7-1: device descriptor read/64, error -71 [ 418.467199][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 418.467496][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 418.655641][ T31] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 418.791605][ T31] usb 7-1: device descriptor read/64, error -71 [ 418.908332][ T31] usb usb7-port1: attempt power cycle [ 419.012988][ T5720] usb 9-1: 1:1 : format type 0 is detected, processed as PCM [ 419.013021][ T5720] usb 9-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 419.013668][ T5720] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 419.092652][ T5720] usb 9-1: USB disconnect, device number 24 [ 419.187046][ T9895] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1110'. [ 419.239679][ T6417] udevd[6417]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 419.271530][ T31] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 419.306902][ T31] usb 7-1: device descriptor read/8, error -71 [ 419.497741][ T5720] usb 1-1: USB disconnect, device number 42 [ 419.551576][ T31] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 419.584592][ T31] usb 7-1: device descriptor read/8, error -71 [ 419.695223][ T31] usb usb7-port1: unable to enumerate USB device [ 419.855514][ T9912] jffs2: notice: (9912) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 420.086214][ T9919] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1121'. [ 420.221230][ T5720] usb 8-1: USB disconnect, device number 29 [ 420.461528][ T6828] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 420.611504][ T6828] usb 10-1: Using ep0 maxpacket: 32 [ 420.612412][ T6828] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 420.613903][ T6828] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 420.613928][ T6828] usb 10-1: config 0 has no interface number 0 [ 420.616270][ T6828] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.616295][ T6828] usb 10-1: Product: syz [ 420.616310][ T6828] usb 10-1: Manufacturer: syz [ 420.616324][ T6828] usb 10-1: SerialNumber: syz [ 420.672283][ T6828] usb 10-1: config 0 descriptor?? [ 421.086856][ T6828] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 421.086889][ T6828] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 421.797026][ T9948] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1132'. [ 422.011111][ T5597] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 422.094374][ T5597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 422.156801][ T5597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 422.158782][ T5597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 422.159894][ T5597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 422.327477][ T6828] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 422.327759][ T6828] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -32 [ 422.706145][ T5816] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.713744][ T5573] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 422.861510][ T5573] usb 1-1: Using ep0 maxpacket: 32 [ 422.863072][ T5573] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 422.863128][ T5573] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 422.864776][ T5573] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 422.864800][ T5573] usb 1-1: config 0 has no interface number 0 [ 422.870095][ T5573] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 422.870120][ T5573] usb 1-1: config 0 has no interface number 0 [ 422.877056][ T5573] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 422.877079][ T5573] usb 1-1: config 0 has no interface number 0 [ 422.881245][ T5573] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 422.881269][ T5573] usb 1-1: config 0 has no interface number 0 [ 422.887264][ T5573] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 422.887296][ T5573] usb 1-1: config 0 has no interface number 0 [ 422.891943][ T5573] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 422.891968][ T5573] usb 1-1: config 0 has no interface number 0 [ 422.893843][ T5573] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 422.893866][ T5573] usb 1-1: config 0 has no interface number 0 [ 422.903974][ T5573] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 422.904000][ T5573] usb 1-1: config 0 has no interface number 0 [ 422.909832][ T5573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.909857][ T5573] usb 1-1: Product: syz [ 422.909871][ T5573] usb 1-1: Manufacturer: syz [ 422.909885][ T5573] usb 1-1: SerialNumber: syz [ 422.945078][ T5573] usb 1-1: config 0 descriptor?? [ 422.980139][ T5573] etas_es58x 1-1:0.2: Starting syz syz (Serial Number syz) [ 423.210037][ T5573] etas_es58x 1-1:0.2: could not parse product info: '' [ 423.371536][ T31] usb 10-1: USB disconnect, device number 2 [ 423.686922][ T9987] syzkaller0: entered promiscuous mode [ 423.686951][ T9987] syzkaller0: entered allmulticast mode [ 423.749108][ T5573] usb 1-1: USB disconnect, device number 43 [ 423.774795][ T5573] etas_es58x 1-1:0.2: Disconnecting syz syz [ 423.888279][T10004] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1145'. [ 424.371733][ T37] kauditd_printk_skb: 68 callbacks suppressed [ 424.371752][ T37] audit: type=1326 audit(1790344305.969:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10015 comm="syz.9.1150" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8603be159 code=0x7ffc0000 [ 424.371792][ T37] audit: type=1326 audit(1790344305.969:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10015 comm="syz.9.1150" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8603be159 code=0x7ffc0000 [ 424.371830][ T37] audit: type=1326 audit(1790344305.969:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10015 comm="syz.9.1150" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8603be159 code=0x7ffc0000 [ 424.371878][ T37] audit: type=1326 audit(1790344305.969:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10015 comm="syz.9.1150" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8603be159 code=0x7ffc0000 [ 424.371913][ T37] audit: type=1326 audit(1790344305.969:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10015 comm="syz.9.1150" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8603be159 code=0x7ffc0000 [ 424.371952][ T37] audit: type=1326 audit(1790344305.969:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10015 comm="syz.9.1150" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8603be159 code=0x7ffc0000 [ 424.371987][ T37] audit: type=1326 audit(1790344305.969:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10015 comm="syz.9.1150" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8603be159 code=0x7ffc0000 [ 424.372022][ T37] audit: type=1326 audit(1790344305.969:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10015 comm="syz.9.1150" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8603be159 code=0x7ffc0000 [ 424.372057][ T37] audit: type=1326 audit(1790344305.969:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10015 comm="syz.9.1150" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8603be159 code=0x7ffc0000 [ 424.372093][ T37] audit: type=1326 audit(1790344305.969:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10015 comm="syz.9.1150" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8603be159 code=0x7ffc0000 [ 424.421673][ T5593] Bluetooth: hci0: command tx timeout [ 424.631530][ T6828] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 424.699406][ T5816] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.785209][ T6828] usb 7-1: Using ep0 maxpacket: 32 [ 424.785812][ T6828] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 424.786938][ T6828] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 424.786962][ T6828] usb 7-1: config 0 has no interface number 0 [ 424.790522][ T6828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.790546][ T6828] usb 7-1: Product: syz [ 424.790561][ T6828] usb 7-1: Manufacturer: syz [ 424.790574][ T6828] usb 7-1: SerialNumber: syz [ 424.810433][ T6828] usb 7-1: config 0 descriptor?? [ 425.256952][ T6828] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 425.256985][ T6828] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 425.760008][T10033] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1155'. [ 425.914572][ T5816] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.031487][ T1000] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 426.161523][ T1000] usb 1-1: device descriptor read/64, error -71 [ 426.231494][ T31] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 426.382642][ T31] usb 8-1: Using ep0 maxpacket: 32 [ 426.383450][ T31] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 426.386814][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.386837][ T31] usb 8-1: Product: syz [ 426.386852][ T31] usb 8-1: Manufacturer: syz [ 426.386867][ T31] usb 8-1: SerialNumber: syz [ 426.406238][ T1000] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 426.438002][ T31] usb 8-1: config 0 descriptor?? [ 426.501513][ T5593] Bluetooth: hci0: command tx timeout [ 426.511967][ T6828] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 426.512250][ T6828] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32 [ 426.545928][ T5816] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.561541][ T1000] usb 1-1: device descriptor read/64, error -71 [ 426.602549][ T7208] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 426.677077][ T1000] usb usb1-port1: attempt power cycle [ 426.792289][ T7208] usb 10-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 426.793676][ T7208] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7 [ 426.796495][ T7208] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.796519][ T7208] usb 10-1: Product: syz [ 426.796534][ T7208] usb 10-1: Manufacturer: syz [ 426.796549][ T7208] usb 10-1: SerialNumber: syz [ 426.859872][ T31] airspy 8-1:0.0: Board ID: 00 [ 426.859896][ T31] airspy 8-1:0.0: Firmware version: [ 427.040176][ T1000] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 427.062324][ T1000] usb 1-1: device descriptor read/8, error -71 [ 427.233368][ T7208] usb 10-1: 1:1 : format type 0 is detected, processed as PCM [ 427.233397][ T7208] usb 10-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 427.236272][ T7208] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 427.341525][ T1000] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 427.372294][ T1000] usb 1-1: device descriptor read/8, error -71 [ 427.439672][ T7208] usb 10-1: USB disconnect, device number 3 [ 427.479030][ T31] airspy 8-1:0.0: usb_control_msg() failed -71 request 12 [ 427.511960][ T1000] usb usb1-port1: unable to enumerate USB device [ 427.517968][ T31] airspy 8-1:0.0: Registered as swradio24 [ 427.517989][ T31] airspy 8-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 427.583828][ T31] usb 8-1: USB disconnect, device number 30 [ 427.634042][ T5573] usb 7-1: USB disconnect, device number 47 [ 428.135829][ T6417] udevd[6417]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 428.275788][T10064] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1165'. [ 428.581480][ T5593] Bluetooth: hci0: command tx timeout [ 429.187550][T10078] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 429.432929][ T5816] bridge_slave_1: left allmulticast mode [ 429.432965][ T5816] bridge_slave_1: left promiscuous mode [ 429.433217][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.627924][ T5816] bridge_slave_0: left allmulticast mode [ 429.627961][ T5816] bridge_slave_0: left promiscuous mode [ 429.628200][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.769612][T10104] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1177'. [ 430.551520][ T1000] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 430.679078][ T5593] Bluetooth: hci0: command tx timeout [ 430.711761][ T1000] usb 1-1: Using ep0 maxpacket: 32 [ 430.713438][ T1000] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 430.713495][ T1000] usb 1-1: no configurations [ 430.713509][ T1000] usb 1-1: can't read configurations, error -22 [ 430.850219][T10133] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1188'. [ 430.861456][ T1000] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 431.011442][ T1000] usb 1-1: Using ep0 maxpacket: 32 [ 431.012329][ T1000] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 431.012387][ T1000] usb 1-1: no configurations [ 431.012401][ T1000] usb 1-1: can't read configurations, error -22 [ 431.012973][ T1000] usb usb1-port1: attempt power cycle [ 431.159187][T10139] can: request_module (can-proto-0) failed. [ 431.174224][ T37] kauditd_printk_skb: 307 callbacks suppressed [ 431.174241][ T37] audit: type=1326 audit(1790344312.779:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10141 comm="syz.9.1191" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8603be159 code=0x7ffc0000 [ 431.174508][ T37] audit: type=1326 audit(1790344312.779:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10141 comm="syz.9.1191" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8603be159 code=0x7ffc0000 [ 431.179597][ T37] audit: type=1326 audit(1790344312.779:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10141 comm="syz.9.1191" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8603be159 code=0x7ffc0000 [ 431.179643][ T37] audit: type=1326 audit(1790344312.779:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10141 comm="syz.9.1191" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8603be159 code=0x7ffc0000 [ 431.190554][ T37] audit: type=1326 audit(1790344312.789:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10141 comm="syz.9.1191" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fd8603be159 code=0x7ffc0000 [ 431.190599][ T37] audit: type=1326 audit(1790344312.789:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10141 comm="syz.9.1191" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8603be159 code=0x7ffc0000 [ 431.190640][ T37] audit: type=1326 audit(1790344312.789:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10141 comm="syz.9.1191" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8603be159 code=0x7ffc0000 [ 431.199598][ T37] audit: type=1326 audit(1790344312.799:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10141 comm="syz.9.1191" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8603be159 code=0x7ffc0000 [ 431.199644][ T37] audit: type=1326 audit(1790344312.799:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10141 comm="syz.9.1191" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8603be159 code=0x7ffc0000 [ 431.209078][ T37] audit: type=1326 audit(1790344312.809:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10141 comm="syz.9.1191" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fd8603be159 code=0x7ffc0000 [ 431.381502][ T1000] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 431.403612][ T1000] usb 1-1: Using ep0 maxpacket: 32 [ 431.411533][ T1000] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 431.411593][ T1000] usb 1-1: no configurations [ 431.411606][ T1000] usb 1-1: can't read configurations, error -22 [ 431.528749][T10149] netlink: 'syz.9.1195': attribute type 7 has an invalid length. [ 431.528764][T10149] netlink: 'syz.9.1195': attribute type 8 has an invalid length. [ 431.601806][ T1000] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 431.622543][ T1000] usb 1-1: Using ep0 maxpacket: 32 [ 431.623448][ T1000] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 431.623505][ T1000] usb 1-1: no configurations [ 431.623520][ T1000] usb 1-1: can't read configurations, error -22 [ 431.624008][ T1000] usb usb1-port1: unable to enumerate USB device [ 431.754252][ T5816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.786819][T10155] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1198'. [ 431.865816][ T5816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.923424][ T5816] bond0 (unregistering): Released all slaves [ 432.582934][ T9954] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.584152][ T9954] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.584358][ T9954] bridge_slave_0: entered allmulticast mode [ 432.589245][ T9954] bridge_slave_0: entered promiscuous mode [ 432.743793][ T5593] Bluetooth: hci0: command tx timeout [ 433.176071][ T9954] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.176206][ T9954] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.176400][ T9954] bridge_slave_1: entered allmulticast mode [ 433.186909][ T9954] bridge_slave_1: entered promiscuous mode [ 433.556031][ T9954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.717720][T10179] syz.6.1208 (10179) used greatest stack depth: 17256 bytes left [ 433.965218][ T9954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.076393][T10191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1213'. [ 434.239492][ T9954] team0: Port device team_slave_0 added [ 434.266550][ T9954] team0: Port device team_slave_1 added [ 434.827494][ T5816] hsr_slave_0: left promiscuous mode [ 434.852889][ T7208] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 434.888262][ T5816] hsr_slave_1: left promiscuous mode [ 434.893019][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.893045][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.946415][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.946440][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.007245][ T7208] usb 1-1: Using ep0 maxpacket: 32 [ 435.009300][ T7208] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 435.009360][ T7208] usb 1-1: no configurations [ 435.009374][ T7208] usb 1-1: can't read configurations, error -22 [ 435.161493][ T7208] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 435.206621][ T5816] veth1_macvtap: left promiscuous mode [ 435.206729][ T5816] veth0_macvtap: left promiscuous mode [ 435.246853][ T5816] veth1_vlan: left promiscuous mode [ 435.246963][ T5816] veth0_vlan: left promiscuous mode [ 435.371525][ T7208] usb 1-1: Using ep0 maxpacket: 32 [ 435.374411][ T7208] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 435.374446][ T7208] usb 1-1: no configurations [ 435.374453][ T7208] usb 1-1: can't read configurations, error -22 [ 435.374774][ T7208] usb usb1-port1: attempt power cycle [ 435.717516][ T7208] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 435.747219][ T7208] usb 1-1: Using ep0 maxpacket: 32 [ 435.750407][ T7208] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 435.750468][ T7208] usb 1-1: no configurations [ 435.750482][ T7208] usb 1-1: can't read configurations, error -22 [ 435.883987][ T7208] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 435.918746][ T7208] usb 1-1: Using ep0 maxpacket: 32 [ 435.921294][ T7208] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 435.921893][ T7208] usb 1-1: no configurations [ 435.921909][ T7208] usb 1-1: can't read configurations, error -22 [ 435.930542][ T7208] usb usb1-port1: unable to enumerate USB device [ 437.632212][ T5816] team0 (unregistering): Port device team_slave_1 removed [ 437.712178][ T5816] team0 (unregistering): Port device team_slave_0 removed [ 438.150710][ T9954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.150723][ T9954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.150737][ T9954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.207999][ T9954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.208017][ T9954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.208044][ T9954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.273390][T10253] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 438.497180][ T9954] hsr_slave_0: entered promiscuous mode [ 438.498656][ T9954] hsr_slave_1: entered promiscuous mode [ 438.662965][ T1000] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 438.835449][ T1000] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 438.852240][ T1000] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.852267][ T1000] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 438.852312][ T1000] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.897730][ T1000] usb 7-1: config 0 descriptor?? [ 438.971509][ T5720] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 439.112349][ T1000] usb 7-1: USB disconnect, device number 48 [ 439.136774][ T5720] usb 10-1: Using ep0 maxpacket: 32 [ 439.147058][ T5720] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 439.147116][ T5720] usb 10-1: no configurations [ 439.147130][ T5720] usb 10-1: can't read configurations, error -22 [ 439.271481][ T5720] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 439.441698][ T5720] usb 10-1: Using ep0 maxpacket: 32 [ 439.442559][ T5720] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 439.442608][ T5720] usb 10-1: no configurations [ 439.442621][ T5720] usb 10-1: can't read configurations, error -22 [ 439.443023][ T5720] usb usb10-port1: attempt power cycle [ 439.651902][ T1000] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 439.808546][ T5246] 8021q: adding VLAN 0 to HW filter on device eth21 [ 439.811698][ T5720] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 439.843108][ T5720] usb 10-1: Using ep0 maxpacket: 32 [ 439.844097][ T5720] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 439.844214][ T5720] usb 10-1: no configurations [ 439.844228][ T5720] usb 10-1: can't read configurations, error -22 [ 439.845709][ T1000] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 439.847348][ T1000] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.847372][ T1000] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 439.847408][ T1000] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.916544][ T1000] usb 7-1: config 0 descriptor?? [ 439.991481][ T5720] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 440.012305][ T5720] usb 10-1: Using ep0 maxpacket: 32 [ 440.013063][ T5720] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 440.013118][ T5720] usb 10-1: no configurations [ 440.013131][ T5720] usb 10-1: can't read configurations, error -22 [ 440.013459][ T5720] usb usb10-port1: unable to enumerate USB device [ 440.131914][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.131986][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.150996][ T5573] usb 7-1: USB disconnect, device number 49 [ 441.519918][T10330] sctp: [Deprecated]: syz.0.1255 (pid 10330) Use of int in maxseg socket option. [ 441.519918][T10330] Use struct sctp_assoc_value instead [ 443.191502][ T5720] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 443.217234][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1269'. [ 443.240646][T10385] netlink: 'syz.0.1270': attribute type 39 has an invalid length. [ 443.362512][ T5720] usb 8-1: Using ep0 maxpacket: 32 [ 443.365272][ T5720] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 443.369006][ T5720] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.369031][ T5720] usb 8-1: config 0 has no interfaces? [ 443.378028][ T5720] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.378053][ T5720] usb 8-1: Product: syz [ 443.378067][ T5720] usb 8-1: Manufacturer: syz [ 443.378081][ T5720] usb 8-1: SerialNumber: syz [ 443.517635][ T5720] usb 8-1: config 0 descriptor?? [ 443.850512][ T5246] 8021q: adding VLAN 0 to HW filter on device eth22 [ 444.317051][ T9954] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 444.366439][ T9954] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 444.493281][ T9954] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 444.539425][ T9954] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 444.548953][ T9954] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 444.586656][ T9954] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 444.618599][ T9954] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 444.665360][ T9954] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 444.941849][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1281'. [ 445.113319][ T9954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.139460][ T9954] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.147965][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.148161][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.170605][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.170802][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.816322][T10453] netlink: 'syz.6.1286': attribute type 10 has an invalid length. [ 445.840030][T10453] team0: Device vxcan0 is of different type [ 446.099231][ T6828] usb 8-1: USB disconnect, device number 31 [ 447.188035][ T9954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.570508][ T5246] 8021q: adding VLAN 0 to HW filter on device eth23 [ 447.583264][ T9954] veth0_vlan: entered promiscuous mode [ 447.675184][ T9954] veth1_vlan: entered promiscuous mode [ 447.761476][ T5592] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 447.902900][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1301'. [ 447.904456][ T9954] veth0_macvtap: entered promiscuous mode [ 447.912052][ T5592] usb 8-1: Using ep0 maxpacket: 32 [ 447.913038][ T5592] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 447.926087][ T5592] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.926111][ T5592] usb 8-1: config 0 has no interfaces? [ 447.931613][ T5592] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.931637][ T5592] usb 8-1: Product: syz [ 447.931651][ T5592] usb 8-1: Manufacturer: syz [ 447.931664][ T5592] usb 8-1: SerialNumber: syz [ 447.957633][ T9954] veth1_macvtap: entered promiscuous mode [ 447.970186][ T5592] usb 8-1: config 0 descriptor?? [ 448.138003][ T9954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.190403][ T9954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.216220][ T5816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.216240][ T5816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.241954][ T5816] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.255168][ T4507] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.255302][ T4507] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.260047][ T4507] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.395154][ T5246] 8021q: adding VLAN 0 to HW filter on device eth24 [ 450.025499][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.025523][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.622517][ T5720] usb 8-1: USB disconnect, device number 32 [ 450.651894][T10565] jffs2: notice: (10565) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 451.001553][ T5720] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 451.151479][ T6127] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 451.153338][ T5720] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 451.157226][ T5720] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.157277][ T5720] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 451.157320][ T5720] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.235582][ T5720] usb 8-1: config 0 descriptor?? [ 451.253034][ T5720] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 451.305088][ T6127] usb 4-1: Using ep0 maxpacket: 8 [ 451.317525][ T6127] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 451.332212][ T6127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.332240][ T6127] usb 4-1: Product: syz [ 451.332255][ T6127] usb 4-1: Manufacturer: syz [ 451.332270][ T6127] usb 4-1: SerialNumber: syz [ 451.374918][ T6127] usb 4-1: config 0 descriptor?? [ 451.494049][ T5720] usb 8-1: USB disconnect, device number 33 [ 451.584643][ T6127] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 452.192179][ T5720] usb 8-1: new full-speed USB device number 34 using dummy_hcd [ 452.358965][ T5720] usb 8-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 452.383185][ T5720] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.383239][ T5720] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 452.383334][ T5720] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.482007][ T5720] usb 8-1: config 0 descriptor?? [ 452.565668][ T5720] pegasus_notetaker 8-1:0.0: Invalid number of endpoints [ 452.565994][ T5720] pegasus_notetaker 8-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 452.568712][ T5720] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 452.672619][ T5726] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 452.711388][ T5720] usb 8-1: USB disconnect, device number 34 [ 452.932782][ T5726] usb 10-1: Using ep0 maxpacket: 32 [ 452.938864][ T5726] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 452.963916][ T5726] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.963942][ T5726] usb 10-1: config 0 has no interfaces? [ 452.990625][ T5726] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.990655][ T5726] usb 10-1: Product: syz [ 452.990670][ T5726] usb 10-1: Manufacturer: syz [ 452.990687][ T5726] usb 10-1: SerialNumber: syz [ 453.040633][ T5726] usb 10-1: config 0 descriptor?? [ 453.101886][ T6127] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 453.118148][ T6127] usb 4-1: USB disconnect, device number 2 [ 454.971488][ T6127] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 455.134322][ T6127] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 455.190699][ T6127] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7 [ 455.209510][ T6127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.209538][ T6127] usb 4-1: Product: syz [ 455.209552][ T6127] usb 4-1: Manufacturer: syz [ 455.209567][ T6127] usb 4-1: SerialNumber: syz [ 455.617193][ T6828] usb 10-1: USB disconnect, device number 8 [ 455.884032][ T6127] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 455.884061][ T6127] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 455.889278][ T6127] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 455.889314][T10696] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1339'. [ 456.084292][ T6127] usb 4-1: USB disconnect, device number 3 [ 456.275246][ T6417] udevd[6417]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.764179][ T7839] IPVS: starting estimator thread 0... [ 456.959578][T10728] IPVS: using max 11 ests per chain, 26400 per kthread [ 457.171487][ T6828] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 457.361749][ T6828] usb 4-1: Using ep0 maxpacket: 32 [ 457.362653][ T6828] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 457.370139][ T6828] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.370165][ T6828] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 457.376374][ T6828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.376399][ T6828] usb 4-1: Product: syz [ 457.376413][ T6828] usb 4-1: Manufacturer: syz [ 457.376427][ T6828] usb 4-1: SerialNumber: syz [ 457.557424][ T6828] usb 4-1: config 0 descriptor?? [ 458.101689][ T31] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 458.293799][ T31] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 458.298499][ T31] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7 [ 458.303074][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.303099][ T31] usb 7-1: Product: syz [ 458.303114][ T31] usb 7-1: Manufacturer: syz [ 458.303130][ T31] usb 7-1: SerialNumber: syz [ 458.685165][ T31] usb 7-1: 1:1 : format type 0 is detected, processed as PCM [ 458.685194][ T31] usb 7-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 458.685652][ T31] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 458.840327][ T31] usb 7-1: USB disconnect, device number 50 [ 459.055722][ T6417] udevd[6417]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 459.845695][ T6127] usb 4-1: USB disconnect, device number 4 [ 460.001445][ T5573] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 460.142330][T10799] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1366'. [ 460.167460][ T5573] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 460.172385][ T5573] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.172450][ T5573] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 460.172490][ T5573] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.207592][ T5573] usb 1-1: config 0 descriptor?? [ 460.242791][ T5573] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 460.440856][ T6127] usb 1-1: USB disconnect, device number 56 [ 460.971437][ T6127] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 461.132413][ T6127] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice= 0.40 [ 461.136192][ T6127] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.136258][ T6127] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 461.136298][ T6127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.204652][ T6127] usb 1-1: config 0 descriptor?? [ 461.354526][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1372'. [ 462.219347][T10828] Trying to write to read-only block-device nullb0 [ 462.934630][T10823] team0: No ports can be present during mode change [ 464.205309][T10805] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 464.205356][T10805] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 465.295344][T10805] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 465.295379][T10805] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 465.391985][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 465.488711][T10805] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 465.488734][T10805] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 465.521560][ T9] usb 4-1: device descriptor read/64, error -71 [ 465.771513][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 465.901504][ T9] usb 4-1: device descriptor read/64, error -71 [ 466.013313][ T9] usb usb4-port1: attempt power cycle [ 466.361504][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 466.387507][ T9] usb 4-1: device descriptor read/8, error -71 [ 466.621523][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 466.643600][ T9] usb 4-1: device descriptor read/8, error -71 [ 466.753704][ T9] usb usb4-port1: unable to enumerate USB device [ 467.565459][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'. [ 467.684920][T10921] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 467.927117][T10805] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 467.927143][T10805] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 468.354158][ T5592] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 468.378407][T10943] netlink: 'syz.0.1398': attribute type 2 has an invalid length. [ 468.406390][T10943] netlink: 'syz.0.1398': attribute type 2 has an invalid length. [ 468.502996][ T5592] usb 10-1: Using ep0 maxpacket: 32 [ 468.503764][ T5592] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 468.504820][ T5592] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.504841][ T5592] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 468.553601][ T5592] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.553629][ T5592] usb 10-1: Product: syz [ 468.553644][ T5592] usb 10-1: Manufacturer: syz [ 468.553658][ T5592] usb 10-1: SerialNumber: syz [ 468.598205][ T5592] usb 10-1: config 0 descriptor?? [ 468.952995][T10950] FAULT_INJECTION: forcing a failure. [ 468.952995][T10950] name failslab, interval 1, probability 0, space 0, times 0 [ 468.953034][T10950] CPU: 1 UID: 0 PID: 10950 Comm: syz.3.1400 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 468.953059][T10950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 468.953072][T10950] Call Trace: [ 468.953081][T10950] [ 468.953090][T10950] dump_stack_lvl+0xe8/0x150 [ 468.953127][T10950] should_fail_ex+0x46b/0x600 [ 468.953161][T10950] should_failslab+0xa8/0x100 [ 468.953195][T10950] __kmalloc_noprof+0xfb/0x790 [ 468.953223][T10950] ? security_sb_alloc+0x48/0x310 [ 468.953252][T10950] ? security_sb_alloc+0x48/0x310 [ 468.953287][T10950] security_sb_alloc+0x48/0x310 [ 468.953328][T10950] sget_fc+0x984/0x1a60 [ 468.953360][T10950] ? __pfx_set_anon_super_fc+0x10/0x10 [ 468.953387][T10950] ? __pfx_sget_fc+0x10/0x10 [ 468.953409][T10950] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 468.953438][T10950] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 468.953475][T10950] ? __pfx_mqueue_fill_super+0x10/0x10 [ 468.953504][T10950] get_tree_nodev+0x2a/0x150 [ 468.953528][T10950] vfs_get_tree+0x92/0x2a0 [ 468.953556][T10950] fc_mount_longterm+0x1c/0x100 [ 468.953589][T10950] mq_init_ns+0x508/0x770 [ 468.953620][T10950] copy_ipcs+0x45c/0x6c0 [ 468.953651][T10950] create_new_namespaces+0x210/0x6b0 [ 468.953682][T10950] ? security_capable+0x7e/0x2c0 [ 468.953718][T10950] unshare_nsproxy_namespaces+0x149/0x190 [ 468.953750][T10950] ksys_unshare+0x5a7/0x950 [ 468.953785][T10950] ? __pfx_ksys_unshare+0x10/0x10 [ 468.953815][T10950] ? rcu_is_watching+0x16/0xb0 [ 468.953856][T10950] __x64_sys_unshare+0x38/0x50 [ 468.953885][T10950] do_syscall_64+0x166/0x520 [ 468.953906][T10950] ? trace_irq_disable+0x3b/0x140 [ 468.953930][T10950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.953951][T10950] ? clear_bhb_loop+0x70/0xc0 [ 468.953986][T10950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.954007][T10950] RIP: 0033:0x7f9995b1e159 [ 468.954026][T10950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.954046][T10950] RSP: 002b:00007f9993d76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 468.954070][T10950] RAX: ffffffffffffffda RBX: 00007f9995da5fa0 RCX: 00007f9995b1e159 [ 468.954086][T10950] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 468.954100][T10950] RBP: 00007f9995bb506b R08: 0000000000000000 R09: 0000000000000000 [ 468.954114][T10950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.954127][T10950] R13: 00007f9995da6038 R14: 00007f9995da5fa0 R15: 00007ffc4ad8d3a8 [ 468.954161][T10950] [ 469.017775][T10950] FAULT_INJECTION: forcing a failure. [ 469.017775][T10950] name failslab, interval 1, probability 0, space 0, times 0 [ 469.017809][T10950] CPU: 0 UID: 0 PID: 10950 Comm: syz.3.1400 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 469.017833][T10950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 469.017846][T10950] Call Trace: [ 469.017854][T10950] [ 469.017862][T10950] dump_stack_lvl+0xe8/0x150 [ 469.017897][T10950] should_fail_ex+0x46b/0x600 [ 469.017928][T10950] should_failslab+0xa8/0x100 [ 469.017961][T10950] __kmalloc_cache_noprof+0xa1/0x680 [ 469.017992][T10950] ? mqueue_init_fs_context+0x55/0x580 [ 469.018017][T10950] ? mqueue_init_fs_context+0x55/0x580 [ 469.018048][T10950] mqueue_init_fs_context+0x55/0x580 [ 469.018077][T10950] alloc_fs_context+0x9a3/0xd00 [ 469.018112][T10950] mq_init_ns+0x10d/0x770 [ 469.018138][T10950] copy_ipcs+0x45c/0x6c0 [ 469.018169][T10950] create_new_namespaces+0x210/0x6b0 [ 469.018199][T10950] ? security_capable+0x7e/0x2c0 [ 469.018233][T10950] unshare_nsproxy_namespaces+0x149/0x190 [ 469.018262][T10950] ksys_unshare+0x5a7/0x950 [ 469.018297][T10950] ? __pfx_ksys_unshare+0x10/0x10 [ 469.018335][T10950] ? rcu_is_watching+0x16/0xb0 [ 469.018375][T10950] __x64_sys_unshare+0x38/0x50 [ 469.018403][T10950] do_syscall_64+0x166/0x520 [ 469.018423][T10950] ? trace_irq_disable+0x3b/0x140 [ 469.018447][T10950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.018474][T10950] ? clear_bhb_loop+0x70/0xc0 [ 469.018499][T10950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.018519][T10950] RIP: 0033:0x7f9995b1e159 [ 469.018540][T10950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.018557][T10950] RSP: 002b:00007f9993d76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 469.018578][T10950] RAX: ffffffffffffffda RBX: 00007f9995da5fa0 RCX: 00007f9995b1e159 [ 469.018593][T10950] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 469.018606][T10950] RBP: 00007f9995bb506b R08: 0000000000000000 R09: 0000000000000000 [ 469.018620][T10950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.018630][T10950] R13: 00007f9995da6038 R14: 00007f9995da5fa0 R15: 00007ffc4ad8d3a8 [ 469.018661][T10950] [ 469.064299][T10950] FAULT_INJECTION: forcing a failure. [ 469.064299][T10950] name failslab, interval 1, probability 0, space 0, times 0 [ 469.064333][T10950] CPU: 0 UID: 0 PID: 10950 Comm: syz.3.1400 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 469.064357][T10950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 469.064370][T10950] Call Trace: [ 469.064378][T10950] [ 469.064387][T10950] dump_stack_lvl+0xe8/0x150 [ 469.064420][T10950] should_fail_ex+0x46b/0x600 [ 469.064459][T10950] should_failslab+0xa8/0x100 [ 469.064492][T10950] __kmalloc_cache_noprof+0xa1/0x680 [ 469.064521][T10950] ? sget_fc+0x74a/0x1a60 [ 469.064539][T10950] ? sget_fc+0x74a/0x1a60 [ 469.064565][T10950] sget_fc+0x74a/0x1a60 [ 469.064594][T10950] ? __pfx_set_anon_super_fc+0x10/0x10 [ 469.064621][T10950] ? __pfx_sget_fc+0x10/0x10 [ 469.064640][T10950] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 469.064667][T10950] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 469.064702][T10950] ? __pfx_mqueue_fill_super+0x10/0x10 [ 469.064730][T10950] get_tree_nodev+0x2a/0x150 [ 469.064755][T10950] vfs_get_tree+0x92/0x2a0 [ 469.064782][T10950] fc_mount_longterm+0x1c/0x100 [ 469.064812][T10950] mq_init_ns+0x508/0x770 [ 469.064838][T10950] copy_ipcs+0x45c/0x6c0 [ 469.064869][T10950] create_new_namespaces+0x210/0x6b0 [ 469.064898][T10950] ? security_capable+0x7e/0x2c0 [ 469.064933][T10950] unshare_nsproxy_namespaces+0x149/0x190 [ 469.064962][T10950] ksys_unshare+0x5a7/0x950 [ 469.064996][T10950] ? __pfx_ksys_unshare+0x10/0x10 [ 469.065025][T10950] ? rcu_is_watching+0x16/0xb0 [ 469.065063][T10950] __x64_sys_unshare+0x38/0x50 [ 469.065091][T10950] do_syscall_64+0x166/0x520 [ 469.065111][T10950] ? trace_irq_disable+0x3b/0x140 [ 469.065136][T10950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.065156][T10950] ? clear_bhb_loop+0x70/0xc0 [ 469.065180][T10950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.065200][T10950] RIP: 0033:0x7f9995b1e159 [ 469.065219][T10950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.065237][T10950] RSP: 002b:00007f9993d76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 469.065262][T10950] RAX: ffffffffffffffda RBX: 00007f9995da5fa0 RCX: 00007f9995b1e159 [ 469.065277][T10950] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 469.065291][T10950] RBP: 00007f9995bb506b R08: 0000000000000000 R09: 0000000000000000 [ 469.065304][T10950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.065317][T10950] R13: 00007f9995da6038 R14: 00007f9995da5fa0 R15: 00007ffc4ad8d3a8 [ 469.065349][T10950] [ 471.219188][ T6828] usb 10-1: USB disconnect, device number 9 [ 472.708500][T10973] svc: failed to register lockdv1 RPC service (errno 111). [ 472.777594][T10973] lockd_up: makesock failed, error=-111 [ 473.031559][T10994] tipc: Started in network mode [ 473.031597][T10994] tipc: Node identity ac14140f, cluster identity 4711 [ 473.341867][T10994] tipc: New replicast peer: 255.255.255.255 [ 473.412719][T10994] tipc: Enabled bearer , priority 10 [ 473.542202][T10978] syz.7.1403 (10978): drop_caches: 2 [ 473.638314][ T5593] Bluetooth: hci1: urb ffff888025c8a200 submission failed (2) [ 473.665138][ T6127] usb 1-1: USB disconnect, device number 57 [ 473.677642][ T6828] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 473.822008][ T6828] usb 4-1: Using ep0 maxpacket: 8 [ 473.823362][ T6828] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 473.826046][ T6828] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.826101][ T6828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.877382][ T6828] usb 4-1: config 0 descriptor?? [ 473.916939][ T6828] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 474.045960][ T9] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 474.221850][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 474.223047][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 474.228611][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.228628][ T9] usb 7-1: Product: syz [ 474.228642][ T9] usb 7-1: Manufacturer: syz [ 474.228656][ T9] usb 7-1: SerialNumber: syz [ 474.303967][ T9] usb 7-1: config 0 descriptor?? [ 474.490138][ T5573] tipc: Node number set to 2886997007 [ 474.533435][ T9] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 475.170014][ T9] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 475.208214][T10973] svc: failed to register nfsdv3 RPC service (errno 512). [ 475.210655][T10973] svc: failed to register nfsaclv3 RPC service (errno 512). [ 475.210669][T10973] failed to unregister tcp with rpcbind [ 475.298200][T10973] svc: failed to register nfsdv3 RPC service (errno 97). [ 475.298228][T10973] svc: failed to register nfsaclv3 RPC service (errno 97). [ 475.298242][T10973] failed to unregister tcp with rpcbind [ 475.355989][T11041] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 475.391947][ T6828] usb 4-1: USB disconnect, device number 9 [ 475.538494][T11041] CacheFiles: Failed to register: -95 [ 475.903089][T11056] batman_adv: batadv0: Adding interface: syzkaller0 [ 475.903110][T11056] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.903161][T11056] batman_adv: batadv0: Interface activated: syzkaller0 [ 475.967833][T11051] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 476.268834][T11067] FAULT_INJECTION: forcing a failure. [ 476.268834][T11067] name failslab, interval 1, probability 0, space 0, times 0 [ 476.268867][T11067] CPU: 0 UID: 0 PID: 11067 Comm: syz.3.1423 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 476.268886][T11067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 476.268897][T11067] Call Trace: [ 476.268904][T11067] [ 476.268912][T11067] dump_stack_lvl+0xe8/0x150 [ 476.268944][T11067] should_fail_ex+0x46b/0x600 [ 476.268976][T11067] should_failslab+0xa8/0x100 [ 476.269011][T11067] __kmalloc_cache_noprof+0xa1/0x680 [ 476.269045][T11067] ? alloc_fs_context+0x66/0xd00 [ 476.269071][T11067] ? alloc_fs_context+0x66/0xd00 [ 476.269105][T11067] alloc_fs_context+0x66/0xd00 [ 476.269130][T11067] ? __kasan_kmalloc+0x93/0xb0 [ 476.269163][T11067] mq_init_ns+0x10d/0x770 [ 476.269189][T11067] copy_ipcs+0x45c/0x6c0 [ 476.269221][T11067] create_new_namespaces+0x210/0x6b0 [ 476.269252][T11067] ? security_capable+0x7e/0x2c0 [ 476.269298][T11067] unshare_nsproxy_namespaces+0x149/0x190 [ 476.269328][T11067] ksys_unshare+0x5a7/0x950 [ 476.269362][T11067] ? __pfx_ksys_unshare+0x10/0x10 [ 476.269391][T11067] ? rcu_is_watching+0x16/0xb0 [ 476.269430][T11067] __x64_sys_unshare+0x38/0x50 [ 476.269460][T11067] do_syscall_64+0x166/0x520 [ 476.269481][T11067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.269503][T11067] ? clear_bhb_loop+0x70/0xc0 [ 476.269526][T11067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.269546][T11067] RIP: 0033:0x7f9995b1e159 [ 476.269564][T11067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.269582][T11067] RSP: 002b:00007f9993d76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 476.269603][T11067] RAX: ffffffffffffffda RBX: 00007f9995da5fa0 RCX: 00007f9995b1e159 [ 476.269619][T11067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 476.269633][T11067] RBP: 00007f9995bb506b R08: 0000000000000000 R09: 0000000000000000 [ 476.269647][T11067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.269660][T11067] R13: 00007f9995da6038 R14: 00007f9995da5fa0 R15: 00007ffc4ad8d3a8 [ 476.269690][T11067] [ 476.348535][T11067] FAULT_INJECTION: forcing a failure. [ 476.348535][T11067] name failslab, interval 1, probability 0, space 0, times 0 [ 476.348686][T11067] CPU: 1 UID: 0 PID: 11067 Comm: syz.3.1423 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 476.348711][T11067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 476.348724][T11067] Call Trace: [ 476.348733][T11067] [ 476.348741][T11067] dump_stack_lvl+0xe8/0x150 [ 476.348776][T11067] should_fail_ex+0x46b/0x600 [ 476.348814][T11067] should_failslab+0xa8/0x100 [ 476.348848][T11067] __kmalloc_cache_noprof+0xa1/0x680 [ 476.348876][T11067] ? mqueue_init_fs_context+0x55/0x580 [ 476.348901][T11067] ? mqueue_init_fs_context+0x55/0x580 [ 476.348934][T11067] mqueue_init_fs_context+0x55/0x580 [ 476.348963][T11067] alloc_fs_context+0x9a3/0xd00 [ 476.348996][T11067] mq_init_ns+0x10d/0x770 [ 476.349023][T11067] copy_ipcs+0x45c/0x6c0 [ 476.349054][T11067] create_new_namespaces+0x210/0x6b0 [ 476.349084][T11067] ? security_capable+0x7e/0x2c0 [ 476.349118][T11067] unshare_nsproxy_namespaces+0x149/0x190 [ 476.349147][T11067] ksys_unshare+0x5a7/0x950 [ 476.349183][T11067] ? __pfx_ksys_unshare+0x10/0x10 [ 476.349210][T11067] ? rcu_is_watching+0x16/0xb0 [ 476.349249][T11067] __x64_sys_unshare+0x38/0x50 [ 476.349278][T11067] do_syscall_64+0x166/0x520 [ 476.349298][T11067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.349317][T11067] ? clear_bhb_loop+0x70/0xc0 [ 476.349341][T11067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.349361][T11067] RIP: 0033:0x7f9995b1e159 [ 476.349381][T11067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.349399][T11067] RSP: 002b:00007f9993d76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 476.349421][T11067] RAX: ffffffffffffffda RBX: 00007f9995da5fa0 RCX: 00007f9995b1e159 [ 476.349436][T11067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 476.349449][T11067] RBP: 00007f9995bb506b R08: 0000000000000000 R09: 0000000000000000 [ 476.349463][T11067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.349475][T11067] R13: 00007f9995da6038 R14: 00007f9995da5fa0 R15: 00007ffc4ad8d3a8 [ 476.349508][T11067] [ 476.360392][T11067] FAULT_INJECTION: forcing a failure. [ 476.360392][T11067] name failslab, interval 1, probability 0, space 0, times 0 [ 476.360425][T11067] CPU: 1 UID: 0 PID: 11067 Comm: syz.3.1423 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 476.360449][T11067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 476.360462][T11067] Call Trace: [ 476.360470][T11067] [ 476.360478][T11067] dump_stack_lvl+0xe8/0x150 [ 476.360511][T11067] should_fail_ex+0x46b/0x600 [ 476.360543][T11067] should_failslab+0xa8/0x100 [ 476.360575][T11067] __kmalloc_cache_noprof+0xa1/0x680 [ 476.360603][T11067] ? sget_fc+0x74a/0x1a60 [ 476.360621][T11067] ? sget_fc+0x74a/0x1a60 [ 476.360647][T11067] sget_fc+0x74a/0x1a60 [ 476.360676][T11067] ? __pfx_set_anon_super_fc+0x10/0x10 [ 476.360701][T11067] ? __pfx_sget_fc+0x10/0x10 [ 476.360721][T11067] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 476.360747][T11067] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 476.360791][T11067] ? __pfx_mqueue_fill_super+0x10/0x10 [ 476.360820][T11067] get_tree_nodev+0x2a/0x150 [ 476.360844][T11067] vfs_get_tree+0x92/0x2a0 [ 476.360870][T11067] fc_mount_longterm+0x1c/0x100 [ 476.360899][T11067] mq_init_ns+0x508/0x770 [ 476.360926][T11067] copy_ipcs+0x45c/0x6c0 [ 476.360956][T11067] create_new_namespaces+0x210/0x6b0 [ 476.360985][T11067] ? security_capable+0x7e/0x2c0 [ 476.361020][T11067] unshare_nsproxy_namespaces+0x149/0x190 [ 476.361050][T11067] ksys_unshare+0x5a7/0x950 [ 476.361086][T11067] ? __pfx_ksys_unshare+0x10/0x10 [ 476.361114][T11067] ? rcu_is_watching+0x16/0xb0 [ 476.361153][T11067] __x64_sys_unshare+0x38/0x50 [ 476.361180][T11067] do_syscall_64+0x166/0x520 [ 476.361200][T11067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.361221][T11067] ? clear_bhb_loop+0x70/0xc0 [ 476.361245][T11067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.361265][T11067] RIP: 0033:0x7f9995b1e159 [ 476.361282][T11067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.361301][T11067] RSP: 002b:00007f9993d76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 476.361324][T11067] RAX: ffffffffffffffda RBX: 00007f9995da5fa0 RCX: 00007f9995b1e159 [ 476.361338][T11067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 476.361350][T11067] RBP: 00007f9995bb506b R08: 0000000000000000 R09: 0000000000000000 [ 476.361362][T11067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.361374][T11067] R13: 00007f9995da6038 R14: 00007f9995da5fa0 R15: 00007ffc4ad8d3a8 [ 476.361403][T11067] [ 476.554946][T11067] FAULT_INJECTION: forcing a failure. [ 476.554946][T11067] name failslab, interval 1, probability 0, space 0, times 0 [ 476.554981][T11067] CPU: 1 UID: 0 PID: 11067 Comm: syz.3.1423 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 476.555005][T11067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 476.555018][T11067] Call Trace: [ 476.555027][T11067] [ 476.555034][T11067] dump_stack_lvl+0xe8/0x150 [ 476.555070][T11067] should_fail_ex+0x46b/0x600 [ 476.555103][T11067] should_failslab+0xa8/0x100 [ 476.555135][T11067] __kmalloc_noprof+0xfb/0x790 [ 476.555161][T11067] ? __register_sysctl_table+0xc02/0x1370 [ 476.555187][T11067] ? __register_sysctl_table+0xc02/0x1370 [ 476.555219][T11067] __register_sysctl_table+0xc02/0x1370 [ 476.555263][T11067] setup_ipc_sysctls+0x247/0x2e0 [ 476.555289][T11067] copy_ipcs+0x48b/0x6c0 [ 476.555321][T11067] create_new_namespaces+0x210/0x6b0 [ 476.555350][T11067] ? security_capable+0x7e/0x2c0 [ 476.555386][T11067] unshare_nsproxy_namespaces+0x149/0x190 [ 476.555416][T11067] ksys_unshare+0x5a7/0x950 [ 476.555450][T11067] ? __pfx_ksys_unshare+0x10/0x10 [ 476.555478][T11067] ? rcu_is_watching+0x16/0xb0 [ 476.555518][T11067] __x64_sys_unshare+0x38/0x50 [ 476.555549][T11067] do_syscall_64+0x166/0x520 [ 476.555569][T11067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.555589][T11067] ? clear_bhb_loop+0x70/0xc0 [ 476.555614][T11067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.555634][T11067] RIP: 0033:0x7f9995b1e159 [ 476.555652][T11067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.555670][T11067] RSP: 002b:00007f9993d76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 476.555693][T11067] RAX: ffffffffffffffda RBX: 00007f9995da5fa0 RCX: 00007f9995b1e159 [ 476.555708][T11067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 476.555722][T11067] RBP: 00007f9995bb506b R08: 0000000000000000 R09: 0000000000000000 [ 476.555736][T11067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.555748][T11067] R13: 00007f9995da6038 R14: 00007f9995da5fa0 R15: 00007ffc4ad8d3a8 [ 476.555779][T11067] [ 476.555799][T11067] sysctl could not get directory: /kernel -12 [ 476.611207][T11067] FAULT_INJECTION: forcing a failure. [ 476.611207][T11067] name failslab, interval 1, probability 0, space 0, times 0 [ 476.611251][T11067] CPU: 1 UID: 0 PID: 11067 Comm: syz.3.1423 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 476.611276][T11067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 476.611288][T11067] Call Trace: [ 476.611298][T11067] [ 476.611306][T11067] dump_stack_lvl+0xe8/0x150 [ 476.611343][T11067] should_fail_ex+0x46b/0x600 [ 476.611374][T11067] should_failslab+0xa8/0x100 [ 476.611406][T11067] __kmalloc_noprof+0xfb/0x790 [ 476.611431][T11067] ? __memcg_list_lru_alloc+0x211/0x830 [ 476.611450][T11067] ? __memcg_list_lru_alloc+0x211/0x830 [ 476.611477][T11067] __memcg_list_lru_alloc+0x211/0x830 [ 476.611495][T11067] ? xa_load+0x60/0x210 [ 476.611524][T11067] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 476.611543][T11067] ? xa_load+0x60/0x210 [ 476.611581][T11067] __memcg_slab_post_alloc_hook+0x407/0xde0 [ 476.611613][T11067] ? __memcg_slab_post_alloc_hook+0x24b/0xde0 [ 476.611651][T11067] ? mqueue_alloc_inode+0x28/0x40 [ 476.611678][T11067] kmem_cache_alloc_lru_noprof+0x41c/0x680 [ 476.611705][T11067] ? mqueue_alloc_inode+0x28/0x40 [ 476.611730][T11067] ? mqueue_alloc_inode+0x28/0x40 [ 476.611759][T11067] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 476.611785][T11067] mqueue_alloc_inode+0x28/0x40 [ 476.611810][T11067] alloc_inode+0x6a/0x1b0 [ 476.611828][T11067] ? __pfx_mqueue_fill_super+0x10/0x10 [ 476.611854][T11067] new_inode+0x1f/0x170 [ 476.611874][T11067] ? __pfx_mqueue_fill_super+0x10/0x10 [ 476.611901][T11067] mqueue_fill_super+0xdb/0x380 [ 476.611926][T11067] ? __pfx_mqueue_fill_super+0x10/0x10 [ 476.611953][T11067] get_tree_nodev+0xbb/0x150 [ 476.611995][T11067] vfs_get_tree+0x92/0x2a0 [ 476.612021][T11067] fc_mount_longterm+0x1c/0x100 [ 476.612051][T11067] mq_init_ns+0x508/0x770 [ 476.612078][T11067] copy_ipcs+0x45c/0x6c0 [ 476.612108][T11067] create_new_namespaces+0x210/0x6b0 [ 476.612139][T11067] ? security_capable+0x7e/0x2c0 [ 476.612173][T11067] unshare_nsproxy_namespaces+0x149/0x190 [ 476.612203][T11067] ksys_unshare+0x5a7/0x950 [ 476.612244][T11067] ? __pfx_ksys_unshare+0x10/0x10 [ 476.612273][T11067] ? rcu_is_watching+0x16/0xb0 [ 476.612313][T11067] __x64_sys_unshare+0x38/0x50 [ 476.612342][T11067] do_syscall_64+0x166/0x520 [ 476.612362][T11067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.612383][T11067] ? clear_bhb_loop+0x70/0xc0 [ 476.612407][T11067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.612426][T11067] RIP: 0033:0x7f9995b1e159 [ 476.612446][T11067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.612464][T11067] RSP: 002b:00007f9993d76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 476.612486][T11067] RAX: ffffffffffffffda RBX: 00007f9995da5fa0 RCX: 00007f9995b1e159 [ 476.612502][T11067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 476.612516][T11067] RBP: 00007f9995bb506b R08: 0000000000000000 R09: 0000000000000000 [ 476.612529][T11067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.612542][T11067] R13: 00007f9995da6038 R14: 00007f9995da5fa0 R15: 00007ffc4ad8d3a8 [ 476.612577][T11067] [ 476.645247][T11067] FAULT_INJECTION: forcing a failure. [ 476.645247][T11067] name fail_futex, interval 1, probability 0, space 0, times 0 [ 476.645282][T11067] CPU: 1 UID: 0 PID: 11067 Comm: syz.3.1423 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 476.645305][T11067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 476.645318][T11067] Call Trace: [ 476.645326][T11067] [ 476.645336][T11067] dump_stack_lvl+0xe8/0x150 [ 476.645369][T11067] should_fail_ex+0x46b/0x600 [ 476.645402][T11067] get_futex_key+0x1b4/0x1580 [ 476.645442][T11067] ? __pfx_get_futex_key+0x10/0x10 [ 476.645467][T11067] ? __lock_acquire+0x747/0x2de0 [ 476.645505][T11067] futex_wake+0x119/0x600 [ 476.645534][T11067] ? __pfx_futex_wake+0x10/0x10 [ 476.645556][T11067] ? do_raw_spin_lock+0x12b/0x2f0 [ 476.645590][T11067] do_futex+0x458/0x4e0 [ 476.645614][T11067] ? __pfx_do_futex+0x10/0x10 [ 476.645633][T11067] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 476.645668][T11067] __se_sys_futex+0x3a8/0x450 [ 476.645691][T11067] ? ksys_write+0x248/0x270 [ 476.645714][T11067] ? __pfx___se_sys_futex+0x10/0x10 [ 476.645733][T11067] ? __pfx_ksys_write+0x10/0x10 [ 476.645760][T11067] ? __x64_sys_futex+0x21/0xf0 [ 476.645783][T11067] do_syscall_64+0x166/0x520 [ 476.645802][T11067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.645822][T11067] ? clear_bhb_loop+0x70/0xc0 [ 476.645846][T11067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.645865][T11067] RIP: 0033:0x7f9995b1e159 [ 476.645884][T11067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.645902][T11067] RSP: 002b:00007f9993d760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 476.645923][T11067] RAX: ffffffffffffffda RBX: 00007f9995da5fa8 RCX: 00007f9995b1e159 [ 476.645938][T11067] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9995da5fac [ 476.645952][T11067] RBP: 00007f9995da5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 476.645966][T11067] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 476.645979][T11067] R13: 00007f9995da6038 R14: 00007ffc4ad8d2c0 R15: 00007ffc4ad8d3a8 [ 476.646010][T11067] [ 476.997227][ T6127] usb 7-1: USB disconnect, device number 51 [ 477.013546][T11051] batman_adv: batadv0: Removing interface: syzkaller0 [ 478.336099][T11076] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.379625][T11076] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.398277][T11076] bond0: left promiscuous mode [ 478.398301][T11076] bond_slave_0: left promiscuous mode [ 478.398441][T11076] bond_slave_1: left promiscuous mode [ 478.869265][T11076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.882425][T11076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.911481][ T6828] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 479.061551][ T6828] usb 7-1: Using ep0 maxpacket: 8 [ 479.062480][ T6828] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 479.097408][ T6828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.097436][ T6828] usb 7-1: Product: syz [ 479.097450][ T6828] usb 7-1: Manufacturer: syz [ 479.097465][ T6828] usb 7-1: SerialNumber: syz [ 479.125886][ T6828] usb 7-1: config 0 descriptor?? [ 479.330666][ T6828] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 479.891576][ T4507] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.901960][ T4507] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.950926][ T6828] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 480.031596][ T4507] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.031628][ T4507] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.033964][ T4638] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.033993][ T4638] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.034029][ T4638] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.034053][ T4638] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.681676][T11150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1440'. [ 481.322382][T11150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1440'. [ 481.870921][ T5573] usb 7-1: USB disconnect, device number 52 [ 482.181754][T11193] FAULT_INJECTION: forcing a failure. [ 482.181754][T11193] name failslab, interval 1, probability 0, space 0, times 0 [ 482.181781][T11193] CPU: 1 UID: 0 PID: 11193 Comm: syz.6.1453 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 482.181801][T11193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 482.181812][T11193] Call Trace: [ 482.181819][T11193] [ 482.181827][T11193] dump_stack_lvl+0xe8/0x150 [ 482.181858][T11193] should_fail_ex+0x46b/0x600 [ 482.181888][T11193] should_failslab+0xa8/0x100 [ 482.181917][T11193] __kmalloc_cache_noprof+0xa1/0x680 [ 482.181941][T11193] ? tcp_md5_do_add+0x13c/0x390 [ 482.181965][T11193] ? tcp_md5_do_add+0x13c/0x390 [ 482.181995][T11193] tcp_md5_do_add+0x13c/0x390 [ 482.182021][T11193] tcp_v6_parse_md5_keys+0x550/0x670 [ 482.182054][T11193] ? __pfx_tcp_v6_parse_md5_keys+0x10/0x10 [ 482.182079][T11193] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 482.182124][T11193] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 482.182148][T11193] ? lockdep_hardirqs_on+0x7b/0x110 [ 482.182171][T11193] do_tcp_setsockopt+0x1250/0x1f80 [ 482.182203][T11193] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 482.182237][T11193] ? __fget_files+0x2a/0x420 [ 482.182259][T11193] ? sock_common_setsockopt+0x36/0xc0 [ 482.182284][T11193] ? tcp_setsockopt+0x3d/0xe0 [ 482.182308][T11193] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 482.182333][T11193] do_sock_setsockopt+0x17c/0x1b0 [ 482.182353][T11193] __x64_sys_setsockopt+0x143/0x1b0 [ 482.182376][T11193] do_syscall_64+0x166/0x520 [ 482.182392][T11193] ? trace_irq_disable+0x3b/0x140 [ 482.182413][T11193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.182432][T11193] ? clear_bhb_loop+0x70/0xc0 [ 482.182452][T11193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.182470][T11193] RIP: 0033:0x7f2209dce159 [ 482.182487][T11193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.182503][T11193] RSP: 002b:00007f2208026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 482.182522][T11193] RAX: ffffffffffffffda RBX: 00007f220a055fa0 RCX: 00007f2209dce159 [ 482.182536][T11193] RDX: 000000000000000e RSI: 0000000000000006 RDI: 0000000000000003 [ 482.182548][T11193] RBP: 00007f2209e6506b R08: 00000000000000d8 R09: 0000000000000000 [ 482.182560][T11193] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 482.182571][T11193] R13: 00007f220a056038 R14: 00007f220a055fa0 R15: 00007ffc89471368 [ 482.182599][T11193] [ 482.769879][T11208] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1456'. [ 482.769903][T11208] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1456'. [ 484.603164][ T5708] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 484.722153][T11251] syzkaller0: entered promiscuous mode [ 484.722174][T11251] syzkaller0: entered allmulticast mode [ 484.755435][ T5708] usb 10-1: device descriptor read/64, error -71 [ 485.012249][ T5708] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 485.163218][ T5708] usb 10-1: device descriptor read/64, error -71 [ 485.272134][ T5708] usb usb10-port1: attempt power cycle [ 485.460507][T11276] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1477'. [ 485.641532][ T5708] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 485.662392][ T5708] usb 10-1: device descriptor read/8, error -71 [ 485.901626][ T5708] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 485.925226][ T5708] usb 10-1: device descriptor read/8, error -71 [ 486.032135][ T5708] usb usb10-port1: unable to enumerate USB device [ 486.251455][ T5592] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 486.380242][T11304] syzkaller0: entered promiscuous mode [ 486.380261][T11304] syzkaller0: entered allmulticast mode [ 486.423451][ T5592] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 486.425245][ T5592] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 486.425299][ T5592] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.472051][ T5592] usb 7-1: config 0 descriptor?? [ 486.495083][ T5592] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 486.581473][ C0] net_ratelimit: 71 callbacks suppressed [ 486.800387][ T5713] usb 7-1: USB disconnect, device number 53 [ 487.281509][ T5713] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 487.432494][ T5713] usb 7-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice= 0.40 [ 487.434428][ T5713] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 487.434481][ T5713] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.527466][ T5713] usb 7-1: config 0 descriptor?? [ 487.999908][ T5593] Bluetooth: hci1: urb ffff88803d222100 submission failed (2) [ 488.203334][ T5713] usb 7-1: USB disconnect, device number 54 [ 488.514298][T11346] FAULT_INJECTION: forcing a failure. [ 488.514298][T11346] name failslab, interval 1, probability 0, space 0, times 0 [ 488.514332][T11346] CPU: 0 UID: 0 PID: 11346 Comm: syz.0.1495 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 488.514356][T11346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 488.514368][T11346] Call Trace: [ 488.514377][T11346] [ 488.514386][T11346] dump_stack_lvl+0xe8/0x150 [ 488.514422][T11346] should_fail_ex+0x46b/0x600 [ 488.514455][T11346] should_failslab+0xa8/0x100 [ 488.514488][T11346] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 488.514519][T11346] ? __kthread_create_on_node+0x1b3/0x3d0 [ 488.514549][T11346] ? __kthread_create_on_node+0x1b3/0x3d0 [ 488.514586][T11346] kvasprintf+0xeb/0x1a0 [ 488.514619][T11346] ? __pfx_kvasprintf+0x10/0x10 [ 488.514658][T11346] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 488.514686][T11346] ? __kthread_create_on_node+0x115/0x3d0 [ 488.514716][T11346] ? __kthread_create_on_node+0x115/0x3d0 [ 488.514754][T11346] __kthread_create_on_node+0x1b3/0x3d0 [ 488.514789][T11346] ? __pfx___kthread_create_on_node+0x10/0x10 [ 488.514833][T11346] ? __pfx_cryptomgr_probe+0x10/0x10 [ 488.514856][T11346] ? __pfx_cryptomgr_probe+0x10/0x10 [ 488.514877][T11346] kthread_create_on_node+0xeb/0x140 [ 488.514908][T11346] ? rcu_is_watching+0x16/0xb0 [ 488.514938][T11346] ? __pfx_kthread_create_on_node+0x10/0x10 [ 488.514966][T11346] ? __kasan_kmalloc+0x93/0xb0 [ 488.514997][T11346] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 488.515025][T11346] ? cryptomgr_notify+0x85/0x920 [ 488.515046][T11346] ? cryptomgr_notify+0x3fb/0x920 [ 488.515074][T11346] cryptomgr_notify+0x75e/0x920 [ 488.515103][T11346] notifier_call_chain+0x1a5/0x3d0 [ 488.515132][T11346] blocking_notifier_call_chain+0x6a/0x90 [ 488.515157][T11346] crypto_alg_mod_lookup+0x390/0x5d0 [ 488.515191][T11346] crypto_alloc_tfm_node+0x135/0x3e0 [ 488.515233][T11346] esp_init_state+0x615/0x1220 [ 488.515252][T11346] ? pfkey_sendmsg+0xceb/0x11d0 [ 488.515275][T11346] ? sock_sendmsg_nosec+0x13a/0x180 [ 488.515301][T11346] ? ____sys_sendmsg+0x565/0x870 [ 488.515333][T11346] ? __pfx_esp_init_state+0x10/0x10 [ 488.515373][T11346] ? lock_acquire+0x115/0x350 [ 488.515411][T11346] ? __xfrm_init_state+0x745/0x1320 [ 488.515442][T11346] __xfrm_init_state+0x9dd/0x1320 [ 488.515464][T11346] ? __xfrm_init_state+0x745/0x1320 [ 488.515488][T11346] xfrm_init_state+0x1e/0xa0 [ 488.515520][T11346] pfkey_add+0x1d71/0x2e50 [ 488.515564][T11346] ? __pfx_pfkey_add+0x10/0x10 [ 488.515603][T11346] pfkey_sendmsg+0xceb/0x11d0 [ 488.515647][T11346] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 488.515669][T11346] ? smack_socket_sendmsg+0x1a9/0x5a0 [ 488.515724][T11346] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 488.515765][T11346] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 488.515788][T11346] sock_sendmsg_nosec+0x13a/0x180 [ 488.515818][T11346] ____sys_sendmsg+0x565/0x870 [ 488.515850][T11346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.515882][T11346] ? import_iovec+0x73/0xa0 [ 488.515915][T11346] ___sys_sendmsg+0x2a5/0x360 [ 488.515937][T11346] ? __lock_acquire+0x747/0x2de0 [ 488.515968][T11346] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.515993][T11346] ? futex_wait+0x2a2/0x390 [ 488.516045][T11346] ? __fget_files+0x2a/0x420 [ 488.516067][T11346] ? __fget_files+0x3a8/0x420 [ 488.516100][T11346] __x64_sys_sendmsg+0x1b7/0x290 [ 488.516126][T11346] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 488.516172][T11346] do_syscall_64+0x166/0x520 [ 488.516191][T11346] ? trace_irq_disable+0x3b/0x140 [ 488.516217][T11346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.516239][T11346] ? clear_bhb_loop+0x70/0xc0 [ 488.516264][T11346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.516284][T11346] RIP: 0033:0x7f4537fce159 [ 488.516304][T11346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.516323][T11346] RSP: 002b:00007f4536226028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.516344][T11346] RAX: ffffffffffffffda RBX: 00007f4538255fa0 RCX: 00007f4537fce159 [ 488.516360][T11346] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 488.516374][T11346] RBP: 00007f453806506b R08: 0000000000000000 R09: 0000000000000000 [ 488.516388][T11346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.516401][T11346] R13: 00007f4538256038 R14: 00007f4538255fa0 R15: 00007ffccb35ef18 [ 488.516435][T11346] [ 489.992930][T11374] syzkaller0: entered promiscuous mode [ 489.992951][T11374] syzkaller0: entered allmulticast mode [ 491.949182][T11468] syzkaller0: entered promiscuous mode [ 491.949203][T11468] syzkaller0: entered allmulticast mode [ 492.117593][T11476] FAULT_INJECTION: forcing a failure. [ 492.117593][T11476] name failslab, interval 1, probability 0, space 0, times 0 [ 492.117624][T11476] CPU: 1 UID: 0 PID: 11476 Comm: syz.3.1528 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 492.117644][T11476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 492.117655][T11476] Call Trace: [ 492.117662][T11476] [ 492.117669][T11476] dump_stack_lvl+0xe8/0x150 [ 492.117707][T11476] should_fail_ex+0x46b/0x600 [ 492.117739][T11476] should_failslab+0xa8/0x100 [ 492.117783][T11476] __kmalloc_cache_noprof+0xa1/0x680 [ 492.117812][T11476] ? sget_fc+0x74a/0x1a60 [ 492.117831][T11476] ? sget_fc+0x74a/0x1a60 [ 492.117854][T11476] sget_fc+0x74a/0x1a60 [ 492.117881][T11476] ? __pfx_set_anon_super_fc+0x10/0x10 [ 492.117907][T11476] ? __pfx_sget_fc+0x10/0x10 [ 492.117927][T11476] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 492.117956][T11476] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 492.117992][T11476] ? __pfx_mqueue_fill_super+0x10/0x10 [ 492.118020][T11476] get_tree_nodev+0x2a/0x150 [ 492.118046][T11476] vfs_get_tree+0x92/0x2a0 [ 492.118073][T11476] fc_mount_longterm+0x1c/0x100 [ 492.118104][T11476] mq_init_ns+0x508/0x770 [ 492.118130][T11476] copy_ipcs+0x45c/0x6c0 [ 492.118161][T11476] create_new_namespaces+0x210/0x6b0 [ 492.118194][T11476] ? security_capable+0x7e/0x2c0 [ 492.118231][T11476] unshare_nsproxy_namespaces+0x149/0x190 [ 492.118260][T11476] ksys_unshare+0x5a7/0x950 [ 492.118295][T11476] ? __pfx_ksys_unshare+0x10/0x10 [ 492.118323][T11476] ? rcu_is_watching+0x16/0xb0 [ 492.118362][T11476] __x64_sys_unshare+0x38/0x50 [ 492.118393][T11476] do_syscall_64+0x166/0x520 [ 492.118414][T11476] ? trace_irq_disable+0x3b/0x140 [ 492.118436][T11476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.118454][T11476] ? clear_bhb_loop+0x70/0xc0 [ 492.118476][T11476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.118494][T11476] RIP: 0033:0x7f9995b1e159 [ 492.118512][T11476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.118530][T11476] RSP: 002b:00007f9993d76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 492.118552][T11476] RAX: ffffffffffffffda RBX: 00007f9995da5fa0 RCX: 00007f9995b1e159 [ 492.118568][T11476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 492.118582][T11476] RBP: 00007f9995bb506b R08: 0000000000000000 R09: 0000000000000000 [ 492.118596][T11476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.118608][T11476] R13: 00007f9995da6038 R14: 00007f9995da5fa0 R15: 00007ffc4ad8d3a8 [ 492.118640][T11476] [ 492.181437][ C1] net_ratelimit: 131 callbacks suppressed [ 492.275594][T11476] FAULT_INJECTION: forcing a failure. [ 492.275594][T11476] name failslab, interval 1, probability 0, space 0, times 0 [ 492.275626][T11476] CPU: 0 UID: 0 PID: 11476 Comm: syz.3.1528 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 492.275650][T11476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 492.275662][T11476] Call Trace: [ 492.275670][T11476] [ 492.275678][T11476] dump_stack_lvl+0xe8/0x150 [ 492.275714][T11476] should_fail_ex+0x46b/0x600 [ 492.275746][T11476] should_failslab+0xa8/0x100 [ 492.275778][T11476] __kmalloc_cache_noprof+0xa1/0x680 [ 492.275807][T11476] ? mqueue_init_fs_context+0x55/0x580 [ 492.275833][T11476] ? mqueue_init_fs_context+0x55/0x580 [ 492.275866][T11476] mqueue_init_fs_context+0x55/0x580 [ 492.275895][T11476] alloc_fs_context+0x9a3/0xd00 [ 492.275930][T11476] mq_init_ns+0x10d/0x770 [ 492.275957][T11476] copy_ipcs+0x45c/0x6c0 [ 492.275987][T11476] create_new_namespaces+0x210/0x6b0 [ 492.276017][T11476] ? security_capable+0x7e/0x2c0 [ 492.276052][T11476] unshare_nsproxy_namespaces+0x149/0x190 [ 492.276081][T11476] ksys_unshare+0x5a7/0x950 [ 492.276116][T11476] ? __pfx_ksys_unshare+0x10/0x10 [ 492.276144][T11476] ? rcu_is_watching+0x16/0xb0 [ 492.276182][T11476] __x64_sys_unshare+0x38/0x50 [ 492.276210][T11476] do_syscall_64+0x166/0x520 [ 492.276229][T11476] ? trace_irq_disable+0x3b/0x140 [ 492.276254][T11476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.276282][T11476] ? clear_bhb_loop+0x70/0xc0 [ 492.276306][T11476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.276328][T11476] RIP: 0033:0x7f9995b1e159 [ 492.276347][T11476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.276365][T11476] RSP: 002b:00007f9993d76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 492.276386][T11476] RAX: ffffffffffffffda RBX: 00007f9995da5fa0 RCX: 00007f9995b1e159 [ 492.276401][T11476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 492.276415][T11476] RBP: 00007f9995bb506b R08: 0000000000000000 R09: 0000000000000000 [ 492.276428][T11476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.276441][T11476] R13: 00007f9995da6038 R14: 00007f9995da5fa0 R15: 00007ffc4ad8d3a8 [ 492.276475][T11476] [ 492.622377][T11476] FAULT_INJECTION: forcing a failure. [ 492.622377][T11476] name failslab, interval 1, probability 0, space 0, times 0 [ 492.622398][T11476] CPU: 0 UID: 0 PID: 11476 Comm: syz.3.1528 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 492.622411][T11476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 492.622419][T11476] Call Trace: [ 492.622423][T11476] [ 492.622429][T11476] dump_stack_lvl+0xe8/0x150 [ 492.622450][T11476] should_fail_ex+0x46b/0x600 [ 492.622468][T11476] should_failslab+0xa8/0x100 [ 492.622488][T11476] __kmalloc_noprof+0xfb/0x790 [ 492.622503][T11476] ? __list_lru_init+0xbe/0x600 [ 492.622514][T11476] ? __list_lru_init+0xbe/0x600 [ 492.622528][T11476] __list_lru_init+0xbe/0x600 [ 492.622543][T11476] sget_fc+0xf21/0x1a60 [ 492.622559][T11476] ? __pfx_set_anon_super_fc+0x10/0x10 [ 492.622581][T11476] ? __pfx_sget_fc+0x10/0x10 [ 492.622601][T11476] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 492.622622][T11476] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 492.622641][T11476] ? __pfx_mqueue_fill_super+0x10/0x10 [ 492.622656][T11476] get_tree_nodev+0x2a/0x150 [ 492.622671][T11476] vfs_get_tree+0x92/0x2a0 [ 492.622686][T11476] fc_mount_longterm+0x1c/0x100 [ 492.622702][T11476] mq_init_ns+0x508/0x770 [ 492.622717][T11476] copy_ipcs+0x45c/0x6c0 [ 492.622733][T11476] create_new_namespaces+0x210/0x6b0 [ 492.622749][T11476] ? security_capable+0x7e/0x2c0 [ 492.622768][T11476] unshare_nsproxy_namespaces+0x149/0x190 [ 492.622784][T11476] ksys_unshare+0x5a7/0x950 [ 492.622802][T11476] ? __pfx_ksys_unshare+0x10/0x10 [ 492.622817][T11476] ? rcu_is_watching+0x16/0xb0 [ 492.622838][T11476] __x64_sys_unshare+0x38/0x50 [ 492.622853][T11476] do_syscall_64+0x166/0x520 [ 492.622864][T11476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.622875][T11476] ? clear_bhb_loop+0x70/0xc0 [ 492.622888][T11476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.622898][T11476] RIP: 0033:0x7f9995b1e159 [ 492.622909][T11476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.622919][T11476] RSP: 002b:00007f9993d76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 492.622931][T11476] RAX: ffffffffffffffda RBX: 00007f9995da5fa0 RCX: 00007f9995b1e159 [ 492.622939][T11476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 492.622946][T11476] RBP: 00007f9995bb506b R08: 0000000000000000 R09: 0000000000000000 [ 492.622953][T11476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.622959][T11476] R13: 00007f9995da6038 R14: 00007f9995da5fa0 R15: 00007ffc4ad8d3a8 [ 492.622976][T11476] [ 493.292153][T11469] syz.6.1525 (11469) used greatest stack depth: 16456 bytes left [ 493.563644][T11476] FAULT_INJECTION: forcing a failure. [ 493.563644][T11476] name failslab, interval 1, probability 0, space 0, times 0 [ 493.563681][T11476] CPU: 0 UID: 0 PID: 11476 Comm: syz.3.1528 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 493.563706][T11476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 493.563719][T11476] Call Trace: [ 493.563728][T11476] [ 493.563737][T11476] dump_stack_lvl+0xe8/0x150 [ 493.563773][T11476] should_fail_ex+0x46b/0x600 [ 493.563814][T11476] should_failslab+0xa8/0x100 [ 493.563846][T11476] ? __proc_create+0x560/0xae0 [ 493.563874][T11476] kmem_cache_alloc_noprof+0x9e/0x690 [ 493.563900][T11476] ? __proc_create+0x560/0xae0 [ 493.563934][T11476] __proc_create+0x560/0xae0 [ 493.563961][T11476] ? __pfx_call_netdevice_register_net_notifiers+0x10/0x10 [ 493.563995][T11476] ? __pfx___proc_create+0x10/0x10 [ 493.564027][T11476] ? rcu_is_watching+0x16/0xb0 [ 493.564057][T11476] ? __pfx_psched_show+0x10/0x10 [ 493.564087][T11476] proc_create_single_data+0xa5/0x1c0 [ 493.564118][T11476] psched_net_init+0x50/0x70 [ 493.564145][T11476] ops_init+0x35d/0x5d0 [ 493.564183][T11476] setup_net+0x118/0x350 [ 493.564210][T11476] ? __pfx_setup_net+0x10/0x10 [ 493.564242][T11476] ? __ns_common_init+0x2fc/0x4a0 [ 493.564272][T11476] copy_net_ns+0x53b/0x780 [ 493.564301][T11476] create_new_namespaces+0x3f0/0x6b0 [ 493.564330][T11476] ? security_capable+0x7e/0x2c0 [ 493.564367][T11476] unshare_nsproxy_namespaces+0x149/0x190 [ 493.564397][T11476] ksys_unshare+0x5a7/0x950 [ 493.564433][T11476] ? __pfx_ksys_unshare+0x10/0x10 [ 493.564460][T11476] ? rcu_is_watching+0x16/0xb0 [ 493.564497][T11476] __x64_sys_unshare+0x38/0x50 [ 493.564523][T11476] do_syscall_64+0x166/0x520 [ 493.564544][T11476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.564565][T11476] ? clear_bhb_loop+0x70/0xc0 [ 493.564590][T11476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.564610][T11476] RIP: 0033:0x7f9995b1e159 [ 493.564630][T11476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.564648][T11476] RSP: 002b:00007f9993d76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 493.564671][T11476] RAX: ffffffffffffffda RBX: 00007f9995da5fa0 RCX: 00007f9995b1e159 [ 493.564686][T11476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 493.564700][T11476] RBP: 00007f9995bb506b R08: 0000000000000000 R09: 0000000000000000 [ 493.564714][T11476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.564726][T11476] R13: 00007f9995da6038 R14: 00007f9995da5fa0 R15: 00007ffc4ad8d3a8 [ 493.564759][T11476] [ 494.551587][ T5592] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 494.722470][ T5592] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 494.723683][ T5592] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.723697][ T5592] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.723727][ T5592] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.750651][ T5592] usb 7-1: config 0 descriptor?? [ 495.027146][ T5592] usbhid 7-1:0.0: can't add hid device: -71 [ 495.027294][ T5592] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 495.048061][ T5592] usb 7-1: USB disconnect, device number 55 [ 495.394184][T11542] syzkaller0: entered promiscuous mode [ 495.394204][T11542] syzkaller0: entered allmulticast mode [ 495.541719][ T5592] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 495.725296][ T5592] usb 7-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice= 0.40 [ 495.728527][ T5592] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.728541][ T5592] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.728572][ T5592] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.736966][ T5592] usb 7-1: config 0 descriptor?? [ 495.888947][ T5593] Bluetooth: hci1: urb ffff888041202400 submission failed (90) [ 496.035806][ T5592] usb 7-1: USB disconnect, device number 56 [ 496.184739][T11557] debugfs: out of free dentries, can not create file 'flags' [ 496.361538][ T9] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 496.408537][T11557] debugfs: out of free dentries, can not create file 'rc_rateidx_mcs_mask_5ghz' [ 496.444998][T11557] debugfs: out of free dentries, can not create file 'hw_queues' [ 496.512676][ T9] usb 8-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 496.514259][ T9] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 230, changing to 7 [ 496.519140][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.519161][ T9] usb 8-1: Product: syz [ 496.519176][ T9] usb 8-1: Manufacturer: syz [ 496.519190][ T9] usb 8-1: SerialNumber: syz [ 496.525675][T11558] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 496.525701][T11558] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 496.768143][T11558] udc dummy_udc.1: failed to start USB Gadget filesystem: -12 [ 496.768171][T11558] gadgetfs gadget.1: probe with driver gadgetfs failed with error -12 [ 496.795890][T11558] ================================================================== [ 496.795902][T ** replaying previous printk message ** [ 496.795902][T11558] BUG: KASAN: slab-use-after-free in gadgetfs_bind+0xd8/0xae0 [ 496.795938][T11558] Write of size 8 at addr ffff888033219100 by task syz.3.1555/11558 [ 496.795956][T11558] [ 496.795968][T11558] CPU: 1 UID: 0 PID: 11558 Comm: syz.3.1555 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 496.795989][T11558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 496.795996][T11558] Call Trace: [ 496.796001][T11558] [ 496.796006][T11558] dump_stack_lvl+0xe8/0x150 [ 496.796023][T11558] print_address_description+0x55/0x1e0 [ 496.796043][T11558] ? gadgetfs_bind+0xd8/0xae0 [ 496.796070][T11558] print_report+0x58/0x70 [ 496.796095][T11558] kasan_report+0x117/0x150 [ 496.796126][T11558] ? gadgetfs_bind+0xd8/0xae0 [ 496.796156][T11558] gadgetfs_bind+0xd8/0xae0 [ 496.796173][T11558] ? __pfx_gadgetfs_bind+0x10/0x10 [ 496.796188][T11558] gadget_bind_driver+0x2ca/0x9e0 [ 496.796206][T11558] ? __pfx_gadget_bind_driver+0x10/0x10 [ 496.796230][T11558] really_probe+0x254/0xae0 [ 496.796252][T11558] __driver_probe_device+0x1e8/0x360 [ 496.796273][T11558] driver_probe_device+0x4f/0x240 [ 496.796294][T11558] __driver_attach+0x339/0x600 [ 496.796313][T11558] bus_for_each_dev+0x23e/0x2c0 [ 496.796329][T11558] ? __pfx___driver_attach+0x10/0x10 [ 496.796339][T11558] ? __pfx_bus_for_each_dev+0x10/0x10 [ 496.796350][T11558] ? rt_spin_unlock+0x159/0x200 [ 496.796373][T11558] ? rt_spin_unlock+0x165/0x200 [ 496.796400][T11558] bus_add_driver+0x348/0x670 [ 496.796429][T11558] driver_register+0x23a/0x320 [ 496.796452][T11558] usb_gadget_register_driver_owner+0xf9/0x270 [ 496.796480][T11558] dev_config+0xe4e/0x12c0 [ 496.796499][T11558] ? __pfx_dev_config+0x10/0x10 [ 496.796514][T11558] ? __pfx_dev_config+0x10/0x10 [ 496.796527][T11558] vfs_write+0x29f/0xbb0 [ 496.796547][T11558] ? __pfx_vfs_write+0x10/0x10 [ 496.796571][T11558] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 496.796591][T11558] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 496.796609][T11558] ? mutex_lock_nested+0x152/0x1d0 [ 496.796632][T11558] ? fdget_pos+0x252/0x320 [ 496.796657][T11558] ksys_write+0x156/0x270 [ 496.796681][T11558] ? __pfx_ksys_write+0x10/0x10 [ 496.796699][T11558] do_syscall_64+0x166/0x520 [ 496.796716][T11558] ? trace_irq_disable+0x3b/0x140 [ 496.796740][T11558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.796761][T11558] ? clear_bhb_loop+0x70/0xc0 [ 496.796783][T11558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.796803][T11558] RIP: 0033:0x7f9995b1e159 [ 496.796820][T11558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.796830][T11558] RSP: 002b:00007f9993d55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 496.796843][T11558] RAX: ffffffffffffffda RBX: 00007f9995da6090 RCX: 00007f9995b1e159 [ 496.796851][T11558] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000008 [ 496.796859][T11558] RBP: 00007f9995bb506b R08: 0000000000000000 R09: 0000000000000000 [ 496.796869][T11558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.796881][T11558] R13: 00007f9995da6128 R14: 00007f9995da6090 R15: 00007ffc4ad8d3a8 [ 496.796906][T11558] [ 496.796918][T11558] [ 496.796931][T11558] Allocated by task 5588: [ 496.796942][T11558] kasan_save_track+0x3e/0x80 [ 496.796968][T11558] __kasan_kmalloc+0x93/0xb0 [ 496.796990][T11558] __kmalloc_cache_noprof+0x3d5/0x680 [ 496.797004][T11558] gadgetfs_fill_super+0x27b/0x7a0 [ 496.797017][T11558] get_tree_single+0xc0/0x150 [ 496.797028][T11558] vfs_get_tree+0x92/0x2a0 [ 496.797042][T11558] do_new_mount+0x319/0xdc0 [ 496.797059][T11558] __se_sys_mount+0x31d/0x420 [ 496.797076][T11558] do_syscall_64+0x166/0x520 [ 496.797093][T11558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.797111][T11558] [ 496.797116][T11558] Freed by task 11558: [ 496.797125][T11558] kasan_save_track+0x3e/0x80 [ 496.797148][T11558] kasan_save_free_info+0x40/0x50 [ 496.797160][T11558] __kasan_slab_free+0x5c/0x80 [ 496.797172][T11558] kfree+0x1c5/0x6d0 [ 496.797183][T11558] gadgetfs_bind+0x942/0xae0 [ 496.797195][T11558] gadget_bind_driver+0x2ca/0x9e0 [ 496.797213][T11558] really_probe+0x254/0xae0 [ 496.797230][T11558] __driver_probe_device+0x1e8/0x360 [ 496.797246][T11558] driver_probe_device+0x4f/0x240 [ 496.797262][T11558] __driver_attach+0x339/0x600 [ 496.797277][T11558] bus_for_each_dev+0x23e/0x2c0 [ 496.797295][T11558] bus_add_driver+0x348/0x670 [ 496.797316][T11558] driver_register+0x23a/0x320 [ 496.797334][T11558] usb_gadget_register_driver_owner+0xf9/0x270 [ 496.797357][T11558] dev_config+0xe4e/0x12c0 [ 496.797389][T11558] vfs_write+0x29f/0xbb0 [ 496.797408][T11558] ksys_write+0x156/0x270 [ 496.797427][T11558] do_syscall_64+0x166/0x520 [ 496.797442][T11558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.797458][T11558] [ 496.797464][T11558] The buggy address belongs to the object at ffff888033219000 [ 496.797464][T11558] which belongs to the cache kmalloc-1k of size 1024 [ 496.797480][T11558] The buggy address is located 256 bytes inside of [ 496.797480][T11558] freed 1024-byte region [ffff888033219000, ffff888033219400) [ 496.797502][T11558] [ 496.797508][T11558] The buggy address belongs to the physical page: [ 496.797526][T11558] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803321d000 pfn:0x33218 [ 496.797546][T11558] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 496.797563][T11558] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 496.797581][T11558] page_type: f5(slab) [ 496.797599][T11558] raw: 0080000000000240 ffff88813ffbddc0 ffffea0000f29010 ffffea0000f77810 [ 496.797617][T11558] raw: ffff88803321d000 0000000000100005 00000000f5000000 0000000000000000 [ 496.797635][T11558] head: 0080000000000240 ffff88813ffbddc0 ffffea0000f29010 ffffea0000f77810 [ 496.797648][T11558] head: ffff88803321d000 0000000000100005 00000000f5000000 0000000000000000 [ 496.797658][T11558] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 496.797667][T11558] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 496.797676][T11558] page dumped because: kasan: bad access detected [ 496.797686][T11558] page_owner tracks the page as allocated [ 496.797694][T11558] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5588, tgid 5588 (syz-executor), ts 99286239155 [ 496.797726][T11558] post_alloc_hook+0x1f9/0x250 [ 496.797748][T11558] get_page_from_freelist+0x2591/0x2600 [ 496.797775][T11558] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 496.797802][T11558] allocate_slab+0x7d/0x620 [ 496.797821][T11558] refill_objects+0x2d8/0x350 [ 496.797831][T11558] __pcs_replace_empty_main+0x339/0x690 [ 496.797840][T11558] __kmalloc_noprof+0x54b/0x790 [ 496.797857][T11558] tomoyo_init_log+0x1aaf/0x1fa0 [ 496.797883][T11558] tomoyo_supervisor+0x35f/0x1560 [ 496.797910][T11558] tomoyo_mount_permission+0x670/0x9e0 [ 496.797935][T11558] security_sb_mount+0xe4/0x320 [ 496.797949][T11558] path_mount+0xbc/0x1050 [ 496.797964][T11558] __se_sys_mount+0x31d/0x420 [ 496.797976][T11558] do_syscall_64+0x166/0x520 [ 496.797985][T11558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.797995][T11558] page last free pid 5588 tgid 5588 ts 99285474856 stack trace: [ 496.798003][T11558] __free_frozen_pages+0xf8e/0x1070 [ 496.798014][T11558] __slab_free+0x250/0x2a0 [ 496.798033][T11558] qlist_free_all+0x99/0x100 [ 496.798056][T11558] kasan_quarantine_reduce+0x148/0x160 [ 496.798082][T11558] __kasan_slab_alloc+0x22/0x80 [ 496.798109][T11558] __kmalloc_noprof+0x3b9/0x790 [ 496.798133][T11558] tomoyo_supervisor+0xc53/0x1560 [ 496.798149][T11558] tomoyo_mount_permission+0x670/0x9e0 [ 496.798161][T11558] security_sb_mount+0xe4/0x320 [ 496.798169][T11558] path_mount+0xbc/0x1050 [ 496.798178][T11558] __se_sys_mount+0x31d/0x420 [ 496.798188][T11558] do_syscall_64+0x166/0x520 [ 496.798205][T11558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.798224][T11558] [ 496.798230][T11558] Memory state around the buggy address: [ 496.798241][T11558] ffff888033219000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 496.798256][T11558] ffff888033219080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 496.798270][T11558] >ffff888033219100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 496.798280][T11558] ^ [ 496.798291][T11558] ffff888033219180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 496.798304][T11558] ffff888033219200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 496.798309][T11558] ================================================================== [ 496.798765][T11565] device: 'rfkill62': device_add [ 496.798795][T11565] kobject: 'rfkill62' (ffff88806197e190): kobject_add_internal: parent: 'phy42', set: 'devices' [ 496.798914][T11565] rfkill rfkill62: No ACPI support [ 496.799836][T11565] PM: Adding info for No Bus:rfkill62 [ 496.799853][T11565] kobject: 'rfkill62' (ffff88806197e190): kobject_uevent_env [ 496.799920][T11565] kobject: 'rfkill62' (ffff88806197e190): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim41/ieee80211/phy42/rfkill62' [ 496.808415][T11569] kcov: kcov_task_exit: t = ffff888020b53e80, kcov->t = ffff888020b53e80 [ 496.810929][T11558] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 497.692923][T11558] CPU: 1 UID: 0 PID: 11558 Comm: syz.3.1555 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 497.702801][T11558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 497.712841][T11558] Call Trace: [ 497.716109][T11558] [ 497.719028][T11558] vpanic+0x56d/0xa60 [ 497.723000][T11558] ? rcu_is_watching+0x16/0xb0 [ 497.727760][T11558] ? __pfx_vpanic+0x10/0x10 [ 497.732339][T11558] panic+0xc5/0xd0 [ 497.736053][T11558] ? __pfx_panic+0x10/0x10 [ 497.740462][T11558] ? preempt_schedule_thunk+0x16/0x40 [ 497.745827][T11558] ? gadgetfs_bind+0xd8/0xae0 [ 497.750503][T11558] ? preempt_schedule_thunk+0x16/0x40 [ 497.755864][T11558] ? gadgetfs_bind+0xd8/0xae0 [ 497.760535][T11558] check_panic_on_warn+0x89/0xb0 [ 497.765462][T11558] ? gadgetfs_bind+0xd8/0xae0 [ 497.770134][T11558] end_report+0x73/0x170 [ 497.774371][T11558] ? gadgetfs_bind+0xd8/0xae0 [ 497.779039][T11558] kasan_report+0x128/0x150 [ 497.783544][T11558] ? gadgetfs_bind+0xd8/0xae0 [ 497.788219][T11558] gadgetfs_bind+0xd8/0xae0 [ 497.792724][T11558] ? __pfx_gadgetfs_bind+0x10/0x10 [ 497.797831][T11558] gadget_bind_driver+0x2ca/0x9e0 [ 497.802850][T11558] ? __pfx_gadget_bind_driver+0x10/0x10 [ 497.808385][T11558] really_probe+0x254/0xae0 [ 497.812874][T11558] __driver_probe_device+0x1e8/0x360 [ 497.818146][T11558] driver_probe_device+0x4f/0x240 [ 497.823164][T11558] __driver_attach+0x339/0x600 [ 497.827915][T11558] bus_for_each_dev+0x23e/0x2c0 [ 497.832758][T11558] ? __pfx___driver_attach+0x10/0x10 [ 497.838029][T11558] ? __pfx_bus_for_each_dev+0x10/0x10 [ 497.843388][T11558] ? rt_spin_unlock+0x159/0x200 [ 497.848231][T11558] ? rt_spin_unlock+0x165/0x200 [ 497.853075][T11558] bus_add_driver+0x348/0x670 [ 497.857745][T11558] driver_register+0x23a/0x320 [ 497.862502][T11558] usb_gadget_register_driver_owner+0xf9/0x270 [ 497.868652][T11558] dev_config+0xe4e/0x12c0 [ 497.873067][T11558] ? __pfx_dev_config+0x10/0x10 [ 497.877913][T11558] ? __pfx_dev_config+0x10/0x10 [ 497.882758][T11558] vfs_write+0x29f/0xbb0 [ 497.886994][T11558] ? __pfx_vfs_write+0x10/0x10 [ 497.891745][T11558] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 497.897540][T11558] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 497.903336][T11558] ? mutex_lock_nested+0x152/0x1d0 [ 497.908436][T11558] ? fdget_pos+0x252/0x320 [ 497.912842][T11558] ksys_write+0x156/0x270 [ 497.917163][T11558] ? __pfx_ksys_write+0x10/0x10 [ 497.922005][T11558] do_syscall_64+0x166/0x520 [ 497.926581][T11558] ? trace_irq_disable+0x3b/0x140 [ 497.931593][T11558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.937646][T11558] ? clear_bhb_loop+0x70/0xc0 [ 497.942312][T11558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.948191][T11558] RIP: 0033:0x7f9995b1e159 [ 497.952598][T11558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.972188][T11558] RSP: 002b:00007f9993d55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 497.980589][T11558] RAX: ffffffffffffffda RBX: 00007f9995da6090 RCX: 00007f9995b1e159 [ 497.988546][T11558] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000008 [ 497.996506][T11558] RBP: 00007f9995bb506b R08: 0000000000000000 R09: 0000000000000000 [ 498.004462][T11558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.012423][T11558] R13: 00007f9995da6128 R14: 00007f9995da6090 R15: 00007ffc4ad8d3a8 [ 498.020392][T11558] [ 498.023662][T11558] Kernel Offset: disabled [ 498.027980][T11558] Rebooting in 86400 seconds..