last executing test programs: 16m41.169408494s ago: executing program 3 (id=37): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40082) mq_timedsend(r4, 0x0, 0x0, 0x4, 0x0) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0) fsopen(&(0x7f0000000400)='pvfs2\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 16m25.438244057s ago: executing program 32 (id=37): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40082) mq_timedsend(r4, 0x0, 0x0, 0x4, 0x0) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0) fsopen(&(0x7f0000000400)='pvfs2\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 14m48.917115176s ago: executing program 4 (id=165): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x0, 0x7ffffffb}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="08000306"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) getsockname$netlink(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) inotify_init1(0x800) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000240)=r2) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x13}, @in6=@mcast2, 0xfffd, 0x1, 0x4e23, 0xe, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff9, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x6e6bc0, 0x0, 0x1}, {{@in6=@remote, 0x4d6, 0x32}, 0x2, @in=@multicast1, 0x0, 0x2, 0x3}}, 0xe8) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000480)="0c2308fe72183e14453d1abb1b6a45d9", 0x10) 14m41.624198753s ago: executing program 4 (id=173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000004000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x1a, 0x0, 0x6}, 0x28) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) shutdown(r5, 0x0) 14m39.908140028s ago: executing program 4 (id=174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000004000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x1a, 0x0, 0x6}, 0x28) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) shutdown(r5, 0x0) 14m32.991843739s ago: executing program 4 (id=180): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08"], 0xbc}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) 14m30.914378008s ago: executing program 4 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000004000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) shutdown(r5, 0x0) 14m29.218255724s ago: executing program 4 (id=183): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x0, 0x7ffffffb}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="08000306"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) getsockname$netlink(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) inotify_init1(0x800) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000240)=r2) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x13}, @in6=@mcast2, 0xfffd, 0x1, 0x4e23, 0xe, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff9, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x6e6bc0, 0x0, 0x1}, {{@in6=@remote, 0x4d6, 0x32}, 0x2, @in=@multicast1, 0x0, 0x2, 0x3}}, 0xe8) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000480)="0c2308fe72183e14453d1abb1b6a45d9", 0x10) 14m12.887507887s ago: executing program 33 (id=183): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x0, 0x7ffffffb}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="08000306"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) getsockname$netlink(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) inotify_init1(0x800) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000240)=r2) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x13}, @in6=@mcast2, 0xfffd, 0x1, 0x4e23, 0xe, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff9, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x6e6bc0, 0x0, 0x1}, {{@in6=@remote, 0x4d6, 0x32}, 0x2, @in=@multicast1, 0x0, 0x2, 0x3}}, 0xe8) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000480)="0c2308fe72183e14453d1abb1b6a45d9", 0x10) 10m26.564886512s ago: executing program 0 (id=435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) shutdown(r5, 0x0) 10m21.156846922s ago: executing program 0 (id=439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xf) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sched_setaffinity(r2, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) 10m18.002672104s ago: executing program 0 (id=440): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r0, 0x0, 0x0) ioctl$FE_GET_EVENT(0xffffffffffffffff, 0x80286f4e, 0x0) ioctl$FE_GET_INFO(0xffffffffffffffff, 0x80a86f3d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={0x0}) 10m13.387305779s ago: executing program 0 (id=448): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xf) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sched_setaffinity(r2, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) 10m12.206188972s ago: executing program 0 (id=449): r0 = fsopen(&(0x7f0000000400)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x5d5d, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffe, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x7fffffffffffffff, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000100)={0x2, 0x9c}, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x121484b, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}]}}) pipe2(&(0x7f0000001cc0), 0x800) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x5d5d, 0x4) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffe, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x7fffffffffffffff, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000100)={0x2, 0x9c}, 0x2) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x121484b, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}]}}) (async) 9m50.70012735s ago: executing program 34 (id=453): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x5d5d, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffe, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x7fffffffffffffff, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000100)={0x2, 0x9c}, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x121484b, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}]}}) pipe2(&(0x7f0000001cc0), 0x800) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x5d5d, 0x4) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffe, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x7fffffffffffffff, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000100)={0x2, 0x9c}, 0x2) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x121484b, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}]}}) (async) 7m2.479350514s ago: executing program 5 (id=906): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001680)={0x18, {"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", 0x1000}}, 0x1006) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x2, 0x9, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfffffff7}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x1, &(0x7f0000000000)=@raw=[@ldst={0x0, 0x2, 0x3, 0x2, 0x8, 0x0, 0x1}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x59, &(0x7f0000000080)=""/89, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x5, 0x4, 0x3, 0x1000}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000340)=[r1, r1, r0, r1], &(0x7f0000000240)=[{0x2, 0x2, 0xa, 0x4}], 0x10, 0x1}, 0x94) 7m2.229382974s ago: executing program 5 (id=908): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40082) mq_timedsend(r4, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0) fsopen(&(0x7f0000000400)='pvfs2\x00', 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 7m1.108688813s ago: executing program 5 (id=911): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4050) r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f00000025c0)='8', 0x1}, {&(0x7f0000000000)="8e", 0x1}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0xffffffff, 0xfffffff8}, 0xfffffffffffffc37) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) getpgid(0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0xff08, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeec, 0x4010, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000002c40)=[{{&(0x7f0000000240)=@isdn, 0x80, &(0x7f0000001900)=[{&(0x7f0000000480)=""/97, 0x61}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000000180)=""/37, 0x25}, {&(0x7f00000005c0)=""/48, 0x30}, {&(0x7f0000002cc0)=""/216, 0xd8}, {&(0x7f0000000700)=""/83, 0x53}, {&(0x7f0000000780)=""/4090, 0xffa}, {&(0x7f0000001780)=""/31, 0x1f}, {&(0x7f00000017c0)=""/148, 0x94}, {&(0x7f0000001880)=""/102, 0x66}], 0xa, &(0x7f00000019c0)=""/56, 0x38}, 0x1ff}, {{&(0x7f0000001a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000001a80)=""/100, 0x64}, {&(0x7f00000002c0)=""/45, 0x2d}, {&(0x7f0000001b40)=""/4096, 0x1000}], 0x3, &(0x7f0000002b80)=""/188, 0xbc}, 0x5}], 0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x44) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x59f, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x0, 0xdddd1000, 0x2000, &(0x7f00002aa000/0x2000)=nil}) chdir(&(0x7f0000000400)='./cgroup\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) 7m0.83250845s ago: executing program 5 (id=914): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000080)={0x40, 0x11, 0x10, "d1f40fd71d986a93e4996b08d5bc9ec5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x19, 0x2, "bb5e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r2, r2) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x5) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000400)=0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/conf/lo/disable_xfrm\x00', 0x1, 0x0) write(r5, &(0x7f0000000940)="30b8", 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close(r6) r7 = open$dir(&(0x7f0000000340)='./file0/file0\x00', 0x2, 0x4) move_mount(r7, &(0x7f0000000380)='./file0\x00', r6, &(0x7f00000003c0)='./file0\x00', 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffdf8, 0x0, &(0x7f0000000fc0)="dd5e48aa95ac0000"}, 0x50) 6m55.417876247s ago: executing program 5 (id=925): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 6m52.053533941s ago: executing program 5 (id=940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6002, 0x0, 0x1, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYBLOB="ed313299975187ee2861a9bc38c99e01aaa7d14b7ea038bc8fb5b937532561c165321ea937856005423c94ae027d0cfc175cc87d8676be17befd5bd4550ec70c6aed8f4698c13b7da53e89783fd05ea8c80daff42249abe67f496c57bc930abc298bc435fa4f26d1f9083c65c40193a8b12c3df762cd2bd491c36e261a866ad4fc23c04e1f5baa5ca275d342e1d65274ae", @ANYRESHEX=r0, @ANYRESDEC=r0], 0xac}, 0x1, 0x0, 0x0, 0x480d0}, 0x24080044) 6m51.436456594s ago: executing program 35 (id=940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6002, 0x0, 0x1, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYBLOB="ed313299975187ee2861a9bc38c99e01aaa7d14b7ea038bc8fb5b937532561c165321ea937856005423c94ae027d0cfc175cc87d8676be17befd5bd4550ec70c6aed8f4698c13b7da53e89783fd05ea8c80daff42249abe67f496c57bc930abc298bc435fa4f26d1f9083c65c40193a8b12c3df762cd2bd491c36e261a866ad4fc23c04e1f5baa5ca275d342e1d65274ae", @ANYRESHEX=r0, @ANYRESDEC=r0], 0xac}, 0x1, 0x0, 0x0, 0x480d0}, 0x24080044) 2m40.225741276s ago: executing program 7 (id=1620): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x20, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}}) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x30}}}) 2m40.042232743s ago: executing program 7 (id=1623): r0 = socket(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) r1 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsmount(r1, 0x0, 0xc) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0xffffffff}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x8003}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x43, 0x3}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) 2m38.440368475s ago: executing program 7 (id=1627): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x6, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0x4d}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x728d9debdaa4f37e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m38.201790528s ago: executing program 7 (id=1630): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d00, 0x0, 0xfff}]}) 2m38.094211878s ago: executing program 7 (id=1632): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x2, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x7, 0xcc, 0x20, 0x0, @in={0x2, 0x4e21, @broadcast}}]}, 0x28}}, 0x10000000) 2m38.065176583s ago: executing program 7 (id=1634): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f00001c7000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, 0x0, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) socket$inet(0x2, 0x2, 0x1) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xdabc3000) close_range(r1, 0xffffffffffffffff, 0x0) 2m22.494379591s ago: executing program 36 (id=1634): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f00001c7000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, 0x0, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) socket$inet(0x2, 0x2, 0x1) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xdabc3000) close_range(r1, 0xffffffffffffffff, 0x0) 2m12.858164088s ago: executing program 1 (id=1730): socket$inet6(0xa, 0x2, 0x0) mknod(0x0, 0x8001420, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000003c0)={0x0, 0x3, 0xffffffffffffffff, 0x10}) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file2\x00', &(0x7f00000001c0), 0x10, &(0x7f00000002c0)={[], [{@uid_gt}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@measure}]}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x9, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x9, 0x10007e, 0x20000006, 0x53, 0x6, 0x10001, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x100, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe65f, 0x4, 0x7, 0x206, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0x81, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x8, 0x1000004, 0xffff, 0x400, 0x7f, 0x10001, 0x5, 0x6, 0x1, 0x5, 0x9, 0x4], [0x10000007, 0x400009, 0x80000130, 0x8, 0x6, 0x994d, 0x2, 0xc8, 0xf6, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0xa, 0x0, 0x5, 0x42f, 0x0, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x3, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x25f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8024, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x8, 0x4000003, 0x3, 0x9, 0x400, 0x3, 0x3, 0xbc45, 0x48c93694, 0xa74, 0x9], [0x7, 0x8, 0x0, 0x5, 0xfbfffffc, 0xff, 0x9, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0x2e, 0x5, 0x2, 0x2, 0x3, 0x200000, 0x2, 0x6d03, 0x6, 0x81, 0x8000, 0x200, 0x400080, 0x3, 0x7, 0x2950bfaf, 0x2, 0x4, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x6d, 0xee, 0x80000, 0x2, 0x2, 0x120000, 0x6, 0x0, 0x80aaed, 0x4, 0x26], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x4, 0x93a, 0x1, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x80000000, 0x1000, 0x7f, 0x3, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x20007, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1001, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1001, 0x6c1a, 0x0, 0x4, 0x928, 0xb1e, 0x2140738a, 0x200, 0xffff2441, 0x8]}, 0x45c) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00'}, 0x48) getdents(0xffffffffffffffff, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@deltfilter={0x24, 0x2d, 0x3f, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) 2m9.900556963s ago: executing program 1 (id=1740): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0xb}, {}, {0xe, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40850) 2m9.69467574s ago: executing program 1 (id=1742): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a300000000064000000060a1104e2ff0000000000000500000008000b40000000000900010073797a30000000003c0004803800018008000100667764002c00028008000140"], 0xd8}}, 0x10) 2m9.39201537s ago: executing program 1 (id=1746): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 2m9.091224488s ago: executing program 1 (id=1748): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4004000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008090) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8040) setsockopt$sock_attach_bpf(r0, 0x110, 0x7, 0x0, 0x4) close(0x3) 2m6.856992652s ago: executing program 1 (id=1752): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=ANY=[], 0xdd12}], 0x1}, 0x20040051) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 2m6.472584769s ago: executing program 37 (id=1752): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=ANY=[], 0xdd12}], 0x1}, 0x20040051) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1m34.210546912s ago: executing program 9 (id=1849): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000340)={"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"}) 1m33.677850558s ago: executing program 9 (id=1852): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9b", 0x6, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/144}, {&(0x7f0000000700)=""/240}, {&(0x7f0000000300)=""/86, 0xfffffffffffffdb2}, {&(0x7f00000003c0)=""/253}, {&(0x7f00000004c0)=""/208}]}, 0x3422a61a}], 0x4000209, 0x10102, 0x0) 1m32.753350277s ago: executing program 9 (id=1854): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x280, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x5, '\x00', 0x0, r4, 0x2, 0x4, 0x2}, 0x50) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) write(0xffffffffffffffff, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0x2a, 0x29, 0x15, 0x13, 0x8, 0x5, 0x1, 0x130}) 1m31.68533887s ago: executing program 9 (id=1857): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a300000000064000000060a1104e2ff0000000000000500000008000b40000000000900010073797a30000000003c0004803800018008000100667764002c00028008000140"], 0xd8}}, 0x10) 1m31.41345812s ago: executing program 9 (id=1861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, 0xfffffffd}, 0x1c) bind$inet6(r1, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0xff7d}}, 0x1006) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e22, @local}, 0x10) socket$inet6(0xa, 0x1, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x9, 0x8000000000000000, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0xd}) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000000)=0xc) 1m29.190672471s ago: executing program 9 (id=1865): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003240)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) 1m13.911312163s ago: executing program 38 (id=1865): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003240)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) 9.45335613s ago: executing program 3 (id=1753): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "0000000300"}}}]}, 0x48}}, 0x0) 6.76080187s ago: executing program 6 (id=2065): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x100000, '\x00', 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) wait4(r1, 0x0, 0x80000000, 0x0) 6.713983163s ago: executing program 2 (id=2066): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 6.62619515s ago: executing program 3 (id=2068): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r4, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/214, 0xd6}], 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000a40)) 6.539759528s ago: executing program 2 (id=2069): r0 = syz_ublk_setup_io_uring(0x1b1d, 0x0, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r0, 0x8000000) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) getsockopt$nfc_llcp(r1, 0x118, 0x2, &(0x7f0000000480)=""/218, 0xda) 5.674702421s ago: executing program 3 (id=2070): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.518723886s ago: executing program 6 (id=2072): socket$inet6_sctp(0xa, 0x1, 0x84) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) 4.421471968s ago: executing program 2 (id=2074): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x20000000) io_submit(r1, 0x4d, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, &(0x7f0000000040)="9880378312a63e112602d9670ab688dbd0d40a0f4d8b9cb3af17658e2e4f8be7a2f40caf8cadd95b1c97eda546798277b267dc15abe1a12eaf2f0ce524588df014e8d7e56e49bf5e852f0b98aa", 0x3e8000072a, 0x7000000, 0x0, 0x10}]) 4.346415837s ago: executing program 6 (id=2076): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, 0x0) write$cgroup_int(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700000000000000, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x200080d4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x20040000) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x470bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xc0a742c700a80d57, 0x301}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x34}}, 0x0) 4.057735601s ago: executing program 2 (id=2077): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000380)={0x0, 0xe, 0x2, '#\t'}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.118579546s ago: executing program 3 (id=2078): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffeff}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xd}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x7, 0x3, 0x180, 0x2, 0xc, 0xf1, 0xfab3, 0x3, 0x5, 0x0, 0xd, 0x0, 0x6, 0x0, 0xbd9], 0x1000, 0x43102}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x7, 0x0, 0x2004cb, 0x0, 0xa7e, 0x800000068ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0x8003000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0xdddd0000, 0x10, 0x0, 0x42, 0x5, 0x3a, 0xb, 0x36, 0xfe, 0x2, 0x87}, {0x0, 0x10000, 0xe, 0x5, 0x3, 0x1, 0x0, 0x9, 0x1, 0x4, 0x5, 0x8}, {0x1, 0xeeee0000, 0x19, 0x6, 0x2, 0x42, 0x0, 0xff, 0x3, 0x7, 0x6}, {0xf000, 0xd000, 0xf, 0x3, 0x7, 0x7, 0xa9, 0x8, 0x9, 0x9, 0xfa, 0x97}, {0xeeefa000, 0x1, 0xd, 0xa0, 0x1, 0x8, 0x5, 0xa0, 0x82, 0x30, 0x1, 0x7}, {0x3000, 0xb000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0x7000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xb, 0x9, 0x2, 0x5, 0xb0, 0x81}, {0xeeef9000, 0x30}, {0x9000, 0x9}, 0x80000031, 0x0, 0xc000, 0x2024, 0x800000a, 0xc001, 0x100000, [0xe5b5, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.071074588s ago: executing program 6 (id=2079): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r4, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/214, 0xd6}], 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000a40)) 1.974057119s ago: executing program 6 (id=2081): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x100000, '\x00', 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) wait4(r1, 0x0, 0x80000000, 0x0) 1.941171645s ago: executing program 8 (id=2082): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe8800000000000000000000000000016401010000000000000000000000000000017fff4e230025000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ff01000000000000000000000000000101040000000000009201000000000000203ad4f58f818735ffff0000000000001c250800000000000200000000000000fbffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002800000000000000480003006465666c61746500"/203], 0x15c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@newsa={0x148, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4e20, 0x71c, 0x4e21, 0x5, 0x2, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfffffffffffffffa, 0xf, 0x6, 0x20000002, 0x8251c, 0xffffffffffff37a6, 0xfffffffffffffffc, 0x1}, {0x2, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x4003fe}, 0x70bd2c, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}, @XFRMA_SET_MARK_MASK={0x8}]}, 0x148}}, 0x844) 1.831311558s ago: executing program 8 (id=2083): r0 = syz_ublk_setup_io_uring(0x1b1d, 0x0, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r0, 0x8000000) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) getsockopt$nfc_llcp(r1, 0x118, 0x2, &(0x7f0000000480)=""/218, 0xda) 1.693955213s ago: executing program 8 (id=2084): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000340)=@newtfilter={0xd8, 0x2c, 0x20, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x10}, {0xb, 0x2}, {0x10, 0x4}}, [@f_rsvp6={{0xa}, {0xa8, 0x2, [@TCA_RSVP_ACT={0xa4, 0x6, [@m_skbedit={0xa0, 0x19, 0x0, 0x0, {{0xc}, {0x4}, {0x72, 0x6, "16cb1e3dc5e1541480789600447e51edd4882860d1b5fb31cc9de8e6890c3adc2bb556ab9ffe72934f31908a174089207a21c33c737c243a5be82836bccac1770e956b17c7e5565e9d8d61b5b8e4953cf8072d8413fdf07f045119045860a23b93d8dce1f102d9012efe1d0e4fd4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000001200010300000000000000000200"/56, @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffff000000001400010007"], 0x60}}, 0x0) 1.613428853s ago: executing program 8 (id=2085): shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) 1.502884593s ago: executing program 8 (id=2086): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000180)="b805000000090200e1660f3a1429af320f01d9660ff7e31bf7c4c1672aaf65cd000066b81d018ec805000000b90000c0fe0f41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x63}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.404424978s ago: executing program 2 (id=2087): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r2, 0x0, 0x9) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088d0}, 0x48000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.355929264s ago: executing program 3 (id=2088): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) syz_open_dev$vim2m(0x0, 0x8008, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040), 0x2) socket$inet6(0xa, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x60142, 0x10) write(r5, &(0x7f0000000500)='p:s/_ ./file0:0', 0xf) openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 193.469042ms ago: executing program 8 (id=2089): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x2b, 0x5, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000000c0)={0x400, 0x5}) 61.985233ms ago: executing program 6 (id=2090): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0xfffffffd, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x388, 0x800}) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/214, 0xd6}], 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000a40)) 0s ago: executing program 2 (id=2091): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x81, 0x0) pwritev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)='<', 0x1}, {&(0x7f0000000140)='>', 0x1}], 0x2, 0x43, 0x3) kernel console output (not intermixed with test programs): (1791031186.133:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11065 comm="syz.8.1130" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786f6ce159 code=0x7ffc0000 [ 795.631001][ T37] audit: type=1326 audit(1791031186.133:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11065 comm="syz.8.1130" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786f6ce159 code=0x7ffc0000 [ 795.688073][ T37] audit: type=1326 audit(1791031186.193:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11065 comm="syz.8.1130" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f786f6ce159 code=0x7ffc0000 [ 795.688121][ T37] audit: type=1326 audit(1791031186.193:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11065 comm="syz.8.1130" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786f6ce159 code=0x7ffc0000 [ 795.688161][ T37] audit: type=1326 audit(1791031186.193:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11065 comm="syz.8.1130" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786f6ce159 code=0x7ffc0000 [ 795.688901][ T37] audit: type=1326 audit(1791031186.193:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11065 comm="syz.8.1130" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f786f6ce159 code=0x7ffc0000 [ 795.688946][ T37] audit: type=1326 audit(1791031186.193:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11065 comm="syz.8.1130" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786f6ce159 code=0x7ffc0000 [ 795.688995][ T37] audit: type=1326 audit(1791031186.193:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11065 comm="syz.8.1130" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786f6ce159 code=0x7ffc0000 [ 795.767225][ T37] audit: type=1326 audit(1791031186.273:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11065 comm="syz.8.1130" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f786f6ce159 code=0x7ffc0000 [ 795.767274][ T37] audit: type=1326 audit(1791031186.273:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11065 comm="syz.8.1130" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786f6ce159 code=0x7ffc0000 [ 795.827622][T11067] FAULT_INJECTION: forcing a failure. [ 795.827622][T11067] name failslab, interval 1, probability 0, space 0, times 0 [ 795.827656][T11067] CPU: 1 UID: 0 PID: 11067 Comm: syz.8.1130 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 795.827680][T11067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 795.827692][T11067] Call Trace: [ 795.827699][T11067] [ 795.827707][T11067] dump_stack_lvl+0xe8/0x150 [ 795.827742][T11067] should_fail_ex+0x46b/0x600 [ 795.827776][T11067] should_failslab+0xa8/0x100 [ 795.827800][T11067] kmem_cache_alloc_node_noprof+0xac/0x660 [ 795.827836][T11067] ? __alloc_skb+0x1db/0x7a0 [ 795.827854][T11067] ? __alloc_skb+0x1db/0x7a0 [ 795.827880][T11067] __alloc_skb+0x1db/0x7a0 [ 795.827905][T11067] audit_log_start+0x1bb/0xa30 [ 795.827956][T11067] ? __pfx_audit_log_start+0x10/0x10 [ 795.827984][T11067] ? futex_private_hash_put+0x132/0x160 [ 795.828015][T11067] ? futex_wake+0x51e/0x600 [ 795.828043][T11067] audit_seccomp+0x63/0x190 [ 795.828061][T11067] ? __pfx_futex_wake+0x10/0x10 [ 795.828089][T11067] __seccomp_filter+0xd14/0x1de0 [ 795.828116][T11067] ? do_futex+0x458/0x4e0 [ 795.828135][T11067] ? __pfx___seccomp_filter+0x10/0x10 [ 795.828156][T11067] ? __pfx_do_futex+0x10/0x10 [ 795.828176][T11067] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 795.828211][T11067] ? __se_sys_futex+0x3a8/0x450 [ 795.828240][T11067] ? __pfx_ksys_write+0x10/0x10 [ 795.828268][T11067] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 795.828291][T11067] do_syscall_64+0x11f/0x520 [ 795.828312][T11067] ? trace_irq_disable+0x3b/0x140 [ 795.828337][T11067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.828357][T11067] ? clear_bhb_loop+0x70/0xc0 [ 795.828379][T11067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.828399][T11067] RIP: 0033:0x7f786f6ce159 [ 795.828418][T11067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.828435][T11067] RSP: 002b:00007f786d9260e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 795.828456][T11067] RAX: ffffffffffffffda RBX: 00007f786f955fa8 RCX: 00007f786f6ce159 [ 795.828471][T11067] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f786f955fa8 [ 795.828484][T11067] RBP: 00007f786f955fa0 R08: 0000000000000000 R09: 0000000000000000 [ 795.828496][T11067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.828507][T11067] R13: 00007f786f956038 R14: 00007ffc748014b0 R15: 00007ffc74801598 [ 795.828538][T11067] [ 796.252580][T11075] busy [ 798.661006][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1133'. [ 813.726852][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.726922][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 833.145203][T11136] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 833.859901][T11141] busy [ 835.208427][T11159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1148'. [ 836.753085][ T36] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 836.934774][ T36] usb 8-1: not running at top speed; connect to a high speed hub [ 836.934817][ T36] usb 8-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 836.936661][ T36] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 836.947279][ T36] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.947305][ T36] usb 8-1: Product: ⾳௦挷⽷抨쀯뿠ʽ☧䪊鿑뽦許鞆韣⣮훫悥孌裈驷驋圈瀽惒鰎ᆾ㮙₣◾⊩㓷뮭吊쟐귄嫐捂擺奀狈拠꓁쁡⤯쁊遊랽ᾢꂈᗘ﹬ↀ罰놆ႇ匫闟峍잆즆ယṠ홃眸篅댞䘻ཐ껴獦ᖝ﫹冓ᗉ⣿፫㳪䜄鐥⟂覭ꫢ唗蛊 [ 836.947333][ T36] usb 8-1: Manufacturer: ⪘᠝Ⰵ蓖䡏ｋ⇜▙㞏語륄茭朥䎖鍑ᰠ鱤螪彴Æ▧ઉ骈㹰鸤ꌙ䘝圗풉삝丛ﲃὴꣃ憪䃌ﻈļ䛶䝴⩪Ÿ髆Ⰲ㚜漨昼᝝뒌嫑풄 [ 836.947355][ T36] usb 8-1: SerialNumber: ဉ [ 837.358476][ T36] usb 8-1: USB disconnect, device number 11 [ 837.935721][T11186] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 840.036637][T11215] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 840.036668][T11215] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 840.675336][T11215] vhci_hcd vhci_hcd.0: Device attached [ 840.897745][T11217] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 840.897775][T11217] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 840.897871][T11217] vhci_hcd vhci_hcd.0: Device attached [ 841.103112][T11224] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9) [ 841.103142][T11224] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 841.103219][T11224] vhci_hcd vhci_hcd.0: Device attached [ 841.104432][T11228] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(12) [ 841.104458][T11228] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 841.104512][T11228] vhci_hcd vhci_hcd.0: Device attached [ 841.108999][T11231] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(5) [ 841.109025][T11231] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 841.109078][T11231] vhci_hcd vhci_hcd.0: Device attached [ 841.230669][T11217] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(19) [ 841.230699][T11217] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 841.230752][T11217] vhci_hcd vhci_hcd.0: Device attached [ 841.230954][T11215] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(16) [ 841.230975][T11215] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 841.231025][T11215] vhci_hcd vhci_hcd.0: Device attached [ 841.418539][T11239] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(11) [ 841.418570][T11239] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 841.418690][T11239] vhci_hcd vhci_hcd.0: Device attached [ 841.420690][T11234] vhci_hcd: connection closed [ 841.433036][T11235] vhci_hcd: connection closed [ 841.460354][T11233] vhci_hcd: connection closed [ 841.462021][T11225] vhci_hcd: connection closed [ 841.474340][T11216] vhci_hcd: connection closed [ 841.475825][T11220] vhci_hcd: connection closed [ 841.488826][T11229] vhci_hcd: connection closed [ 841.490856][ T36] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 841.550839][T11241] vhci_hcd: connection closed [ 841.579310][T10423] vhci_hcd vhci_hcd.1: stop threads [ 841.580350][T10423] vhci_hcd vhci_hcd.1: release socket [ 841.613735][T11221] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 841.653245][T10423] vhci_hcd vhci_hcd.1: disconnect device [ 841.671241][T10423] vhci_hcd vhci_hcd.1: stop threads [ 841.671320][T10423] vhci_hcd vhci_hcd.1: release socket [ 841.706061][T10423] vhci_hcd vhci_hcd.1: disconnect device [ 841.714259][T10423] vhci_hcd vhci_hcd.1: stop threads [ 841.714278][T10423] vhci_hcd vhci_hcd.1: release socket [ 841.714337][T10423] vhci_hcd vhci_hcd.1: disconnect device [ 841.746959][T10423] vhci_hcd vhci_hcd.1: stop threads [ 841.746994][T10423] vhci_hcd vhci_hcd.1: release socket [ 841.747053][T10423] vhci_hcd vhci_hcd.1: disconnect device [ 841.772028][T10423] vhci_hcd vhci_hcd.1: stop threads [ 841.772050][T10423] vhci_hcd vhci_hcd.1: release socket [ 841.772112][T10423] vhci_hcd vhci_hcd.1: disconnect device [ 841.793306][T10423] vhci_hcd vhci_hcd.1: stop threads [ 841.793327][T10423] vhci_hcd vhci_hcd.1: release socket [ 841.793398][T10423] vhci_hcd vhci_hcd.1: disconnect device [ 841.793834][T10423] vhci_hcd vhci_hcd.1: stop threads [ 841.793849][T10423] vhci_hcd vhci_hcd.1: release socket [ 841.793933][T10423] vhci_hcd vhci_hcd.1: disconnect device [ 841.798680][T10423] vhci_hcd vhci_hcd.1: stop threads [ 841.798696][T10423] vhci_hcd vhci_hcd.1: release socket [ 841.798870][T10423] vhci_hcd vhci_hcd.1: disconnect device [ 842.248639][T11252] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 843.065626][T11266] busy [ 846.339401][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1175'. [ 846.773181][ T5596] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 846.795903][ T36] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 846.923850][ T5596] usb 2-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 846.925105][ T5596] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 846.925127][ T5596] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 846.964123][ T5596] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 846.964146][ T5596] usb 2-1: Product: syz [ 846.964154][ T5596] usb 2-1: Manufacturer: syz [ 847.088522][ T5596] uvcvideo 2-1:1.0: Found multiple Units with ID 1 [ 847.330868][ T5596] uvcvideo 2-1:1.0: Found UVC 71.01 device syz (225a:e1d4) [ 847.330932][ T5596] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770. [ 848.291857][ T198] usb 2-1: USB disconnect, device number 11 [ 848.448953][T10884] usb usb36-port8: attempt power cycle [ 848.718500][T11304] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1183'. [ 849.253062][T10884] usb usb36-port8: unable to enumerate USB device [ 849.788098][T11316] busy [ 853.568212][T11329] kAFS: bad VL server IP address [ 856.225010][ T9440] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 856.448933][T11336] team0: Port device bridge0 removed [ 856.719134][T11350] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1195'. [ 859.406306][T11370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 859.410816][T11370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 861.246126][T11386] vlan0: entered promiscuous mode [ 861.253678][ T48] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.264299][ T1417] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.273102][ T48] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.273214][ T48] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.536574][T11433] syz.1.1220 (11433) used greatest stack depth: 19104 bytes left [ 863.916732][T11441] netlink: 'syz.6.1222': attribute type 4 has an invalid length. [ 864.031517][T11447] netlink: 'syz.6.1222': attribute type 4 has an invalid length. [ 864.344091][ T198] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 864.508273][ T198] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 864.510032][ T198] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 864.510057][ T198] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 864.511645][ T198] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 864.511669][ T198] usb 9-1: SerialNumber: syz [ 864.567668][T11457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1228'. [ 864.842330][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1228'. [ 864.869544][ T198] usb 9-1: 0:2 : does not exist [ 865.482171][ T198] usb 9-1: USB disconnect, device number 3 [ 866.904012][T11450] udevd[11450]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 867.889965][T11515] : renamed from bond_slave_0 (while UP) [ 869.914970][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 870.357754][ T31] usb 2-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 870.361640][ T31] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 176, changing to 11 [ 870.361675][ T31] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 870.361703][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 870.361735][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.435627][ T31] usb 2-1: config 0 descriptor?? [ 870.485602][ T31] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count [ 870.485626][ T31] usbhid 2-1:0.0: can't add hid device: -22 [ 870.507483][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 871.803215][T11382] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 872.007275][T11382] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 872.011173][T11382] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.011199][T11382] usb 8-1: Product: syz [ 872.011213][T11382] usb 8-1: Manufacturer: syz [ 872.011226][T11382] usb 8-1: SerialNumber: syz [ 872.087567][T10884] usb 2-1: USB disconnect, device number 12 [ 872.137008][ T9440] Bluetooth: hci1: command 0x0406 tx timeout [ 872.293976][T11551] netlink: 'syz.7.1257': attribute type 5 has an invalid length. [ 872.293998][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1257'. [ 872.665090][T11382] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 872.673288][T11382] usb 8-1: USB disconnect, device number 12 [ 872.688123][T11382] usblp0: removed [ 873.508303][T11572] caif0: tun_chr_ioctl cmd 2148553947 [ 875.166511][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.166582][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.745450][T11614] syzkaller0: entered promiscuous mode [ 875.745477][T11614] syzkaller0: entered allmulticast mode [ 875.759307][T11614] tipc: Started in network mode [ 875.759335][T11614] tipc: Node identity a6f9869a350e, cluster identity 4711 [ 875.777822][T11614] tipc: Enabled bearer , priority 0 [ 876.093408][T11622] tipc: Resetting bearer [ 876.399632][T11613] tipc: Resetting bearer [ 876.630557][T11613] tipc: Disabling bearer [ 877.474036][T11644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 877.478115][T11644] 8021q: adding VLAN 0 to HW filter on device team0 [ 877.584785][T11644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.964762][T11644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 877.975419][T11644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 878.002560][T11644] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 878.002585][T11644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 878.116100][T11644] veth1_vlan: left promiscuous mode [ 878.147910][T11644] veth0_vlan: left promiscuous mode [ 878.192738][T11644] veth0_vlan: entered promiscuous mode [ 878.199569][T11644] veth1_vlan: entered promiscuous mode [ 878.345926][T11644] veth1_macvtap: left promiscuous mode [ 878.352106][T11644] veth0_macvtap: left promiscuous mode [ 878.358786][T11644] veth0_macvtap: entered promiscuous mode [ 878.368400][T11644] veth1_macvtap: entered promiscuous mode [ 878.477893][T11644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 878.488699][T11644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 878.505709][T11644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 878.517804][T11644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 878.815363][T11032] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.822227][T11032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 878.850581][T11032] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.850702][T11032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 879.430860][T11653] veth1_to_hsr: mtu less than device minimum [ 881.933173][T11677] capability: warning: `syz.1.1297' uses deprecated v2 capabilities in a way that may be insecure [ 882.665188][T11662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 882.673173][T11662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 883.113098][ T5596] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 883.264917][ T5596] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 883.266123][ T5596] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 883.266187][ T5596] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.266226][ T5596] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 883.268416][ T5596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.268440][ T5596] usb 2-1: Product: syz [ 883.268454][ T5596] usb 2-1: Manufacturer: syz [ 883.268468][ T5596] usb 2-1: SerialNumber: syz [ 883.322359][ T5596] cdc_mbim 2-1:1.0: skipping garbage [ 883.865594][T11687] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1302'. [ 883.869242][T11687] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1302'. [ 884.063314][ T1920] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.063348][ T1920] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.063444][ T1920] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.063470][ T1920] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.063504][ T1920] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.063527][ T1920] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.063616][ T1920] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.063651][ T1920] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.063692][ T1920] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.063782][ T1920] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.063816][ T1920] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.063840][ T1920] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.451269][ T5596] cdc_mbim 2-1:1.0: bind() failure [ 884.503403][ T5596] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 884.521800][ T5596] usb 2-1: USB disconnect, device number 13 [ 885.863063][T10884] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 886.154322][T10884] usb 2-1: unable to get BOS descriptor or descriptor too short [ 886.154360][T10884] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 886.156400][T10884] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 109, changing to 10 [ 886.159626][T10884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.159641][T10884] usb 2-1: Product: syz [ 886.159649][T10884] usb 2-1: Manufacturer: syz [ 886.159657][T10884] usb 2-1: SerialNumber: syz [ 887.308605][T10884] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 887.308641][T10884] usb 2-1: MIDIStreaming interface descriptor not found [ 887.667052][ T37] kauditd_printk_skb: 29 callbacks suppressed [ 887.667071][ T37] audit: type=1326 audit(1791031278.173:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11747 comm="syz.6.1326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feaa55a7ed7 code=0x7ffc0000 [ 887.667399][ T37] audit: type=1326 audit(1791031278.173:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11747 comm="syz.6.1326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feaa554f4d9 code=0x7ffc0000 [ 887.668245][ T37] audit: type=1326 audit(1791031278.173:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11747 comm="syz.6.1326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feaa55a7ed7 code=0x7ffc0000 [ 887.668368][ T37] audit: type=1326 audit(1791031278.173:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11747 comm="syz.6.1326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feaa554f4d9 code=0x7ffc0000 [ 887.672800][ T37] audit: type=1326 audit(1791031278.173:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11747 comm="syz.6.1326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feaa55a7ed7 code=0x7ffc0000 [ 887.672845][ T37] audit: type=1326 audit(1791031278.173:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11747 comm="syz.6.1326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feaa554f4d9 code=0x7ffc0000 [ 887.677187][ T37] audit: type=1326 audit(1791031278.173:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11747 comm="syz.6.1326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feaa55a7ed7 code=0x7ffc0000 [ 887.677287][ T37] audit: type=1326 audit(1791031278.183:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11747 comm="syz.6.1326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feaa554f4d9 code=0x7ffc0000 [ 887.677328][ T37] audit: type=1326 audit(1791031278.183:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11747 comm="syz.6.1326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feaa55a7ed7 code=0x7ffc0000 [ 887.677375][ T37] audit: type=1326 audit(1791031278.183:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11747 comm="syz.6.1326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feaa554f4d9 code=0x7ffc0000 [ 887.680756][T10884] usb 2-1: USB disconnect, device number 14 [ 888.543356][T11768] udevd[11768]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 889.808404][T11806] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1348'. [ 892.993179][T11388] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 893.153949][T11388] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 893.157885][T11388] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 893.162278][T11388] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 893.162305][T11388] usb 9-1: SerialNumber: syz [ 893.485725][T11388] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 893.541228][T11388] usb 9-1: USB disconnect, device number 4 [ 898.434512][ T5596] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 898.585413][ T5596] usb 7-1: Using ep0 maxpacket: 32 [ 898.596567][ T5596] usb 7-1: New USB device found, idVendor=1e2d, idProduct=0053, bcdDevice=b9.57 [ 898.612030][ T5596] usb 7-1: config 92 has an invalid interface number: 83 but max is 0 [ 898.612058][ T5596] usb 7-1: config 92 has no interface number 0 [ 898.612093][ T5596] usb 7-1: config 92 interface 83 has no altsetting 0 [ 898.630294][ T5596] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.630320][ T5596] usb 7-1: Product: syz [ 898.630334][ T5596] usb 7-1: Manufacturer: syz [ 898.630348][ T5596] usb 7-1: SerialNumber: syz [ 898.692657][T11897] netlink: 'syz.1.1377': attribute type 1 has an invalid length. [ 898.867663][T11880] netlink: 'syz.6.1372': attribute type 9 has an invalid length. [ 898.944279][ T5596] rndis_host 7-1:92.83: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 898.977932][ T5596] option 7-1:92.83: GSM modem (1-port) converter detected [ 899.002565][ T5596] usb 7-1: USB disconnect, device number 12 [ 899.013853][ T5596] option 7-1:92.83: device disconnected [ 899.216821][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 899.366762][ T9] usb 8-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 899.368058][ T9] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.368090][ T9] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 899.368116][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 899.368148][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.419940][ T9] usb 8-1: config 0 descriptor?? [ 899.497179][T11893] syz.1.1377 (11893) used greatest stack depth: 16832 bytes left [ 899.800714][T11917] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1384'. [ 899.800818][T11917] vlan1: entered allmulticast mode [ 899.800836][T11917] veth0_vlan: entered allmulticast mode [ 899.936658][ T9] input: HID 16c0:05e1 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:16C0:05E1.0003/input/input19 [ 902.003190][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1389'. [ 902.753138][T11382] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 903.037264][T11382] usb 3-1: device descriptor read/all, error -71 [ 903.559192][ T9] xinmo 0003:16C0:05E1.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 16c0:05e1] on usb-dummy_hcd.7-1/input0 [ 903.591158][ T9] usb 8-1: USB disconnect, device number 13 [ 903.746701][T11954] fido_id[11954]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 905.007169][T11982] tmpfs: Unsupported parameter 'huge' [ 906.098629][T12002] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1413'. [ 907.351846][T12016] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 907.483055][T12018] tipc: Started in network mode [ 907.483200][T12018] tipc: Node identity 4, cluster identity 4711 [ 907.483237][T12018] tipc: Node number set to 4 [ 908.444823][ T5596] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 908.594374][ T5596] usb 3-1: Using ep0 maxpacket: 16 [ 908.595179][ T5596] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 908.596666][ T5596] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 908.596692][ T5596] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.596711][ T5596] usb 3-1: config 0 has no interface number 0 [ 908.610408][ T5596] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.610434][ T5596] usb 3-1: Product: syz [ 908.610447][ T5596] usb 3-1: Manufacturer: syz [ 908.610461][ T5596] usb 3-1: SerialNumber: syz [ 909.584553][ T5596] usb 3-1: config 0 descriptor?? [ 909.697112][ T5596] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 909.697150][ T5596] uvcvideo 3-1:0.105: No valid video chain found. [ 909.791365][T12028] syzkaller0: entered promiscuous mode [ 909.791391][T12028] syzkaller0: entered allmulticast mode [ 909.868988][ T5596] usb 3-1: USB disconnect, device number 21 [ 911.083163][T11388] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 911.232987][T11388] usb 9-1: Using ep0 maxpacket: 32 [ 911.244818][T11388] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 911.246675][T11388] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 911.246700][T11388] usb 9-1: config 0 has no interface number 0 [ 911.252225][T11388] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.252249][T11388] usb 9-1: Product: syz [ 911.252263][T11388] usb 9-1: Manufacturer: syz [ 911.252277][T11388] usb 9-1: SerialNumber: syz [ 911.261592][T11388] usb 9-1: config 0 descriptor?? [ 912.278772][ T37] kauditd_printk_skb: 541 callbacks suppressed [ 912.278791][ T37] audit: type=1326 audit(1791031302.783:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12055 comm="syz.1.1433" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d703de159 code=0x7ffc0000 [ 912.303973][ T37] audit: type=1326 audit(1791031302.793:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12055 comm="syz.1.1433" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d703de159 code=0x7ffc0000 [ 912.304040][ T37] audit: type=1326 audit(1791031302.803:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12055 comm="syz.1.1433" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d703de159 code=0x7ffc0000 [ 912.304292][ T37] audit: type=1326 audit(1791031302.803:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12055 comm="syz.1.1433" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d703de159 code=0x7ffc0000 [ 912.304331][ T37] audit: type=1326 audit(1791031302.803:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12055 comm="syz.1.1433" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f4d703de159 code=0x7ffc0000 [ 912.304370][ T37] audit: type=1326 audit(1791031302.803:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12055 comm="syz.1.1433" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d703de159 code=0x7ffc0000 [ 912.304784][ T37] audit: type=1326 audit(1791031302.803:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12055 comm="syz.1.1433" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d703de159 code=0x7ffc0000 [ 912.304987][ T37] audit: type=1326 audit(1791031302.803:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12055 comm="syz.1.1433" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d703de159 code=0x7ffc0000 [ 912.305550][ T37] audit: type=1326 audit(1791031302.803:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12055 comm="syz.1.1433" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d703de159 code=0x7ffc0000 [ 912.305592][ T37] audit: type=1326 audit(1791031302.803:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12055 comm="syz.1.1433" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d703de159 code=0x7ffc0000 [ 912.423094][T10884] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 912.512590][T11388] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 912.512622][T11388] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 912.542015][T11388] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 912.546599][T11388] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 912.577515][T11388] usb 9-1: USB disconnect, device number 5 [ 912.643037][T10884] usb 7-1: Using ep0 maxpacket: 16 [ 912.651847][T10884] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 912.667876][T10884] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 912.667903][T10884] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 912.667922][T10884] usb 7-1: config 0 has no interface number 0 [ 912.699685][T10884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.699712][T10884] usb 7-1: Product: syz [ 912.699726][T10884] usb 7-1: Manufacturer: syz [ 912.699742][T10884] usb 7-1: SerialNumber: syz [ 912.731559][T10884] usb 7-1: config 0 descriptor?? [ 912.829063][T10884] uvcvideo 7-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 912.829099][T10884] uvcvideo 7-1:0.105: No valid video chain found. [ 914.204075][T10884] usb 7-1: USB disconnect, device number 13 [ 915.687600][T12079] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1438'. [ 916.035485][T12084] syz.6.1442 (12084): attempted to duplicate a private mapping with mremap. This is not supported. [ 916.213068][T10884] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 916.379107][T10884] usb 3-1: unable to get BOS descriptor or descriptor too short [ 916.379165][T10884] usb 3-1: New USB device found, idVendor=0a46, idProduct=6688, bcdDevice=4f.e5 [ 916.380765][T10884] usb 3-1: config 5 has an invalid interface number: 165 but max is 0 [ 916.380790][T10884] usb 3-1: config 5 has no interface number 0 [ 916.380820][T10884] usb 3-1: config 5 interface 165 has no altsetting 0 [ 916.414605][T10884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.414620][T10884] usb 3-1: Product: syz [ 916.414628][T10884] usb 3-1: Manufacturer: syz [ 916.414636][T10884] usb 3-1: SerialNumber: syz [ 916.573112][ T5596] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 916.700828][T10884] dm9601 3-1:5.165: probe with driver dm9601 failed with error -22 [ 916.733128][ T5596] usb 8-1: Using ep0 maxpacket: 32 [ 916.733542][T10884] usb 3-1: USB disconnect, device number 22 [ 916.737270][ T5596] usb 8-1: New USB device found, idVendor=1e2d, idProduct=0053, bcdDevice=b9.57 [ 916.739400][ T5596] usb 8-1: config 92 has an invalid interface number: 83 but max is 0 [ 916.739423][ T5596] usb 8-1: config 92 has no interface number 0 [ 916.739468][ T5596] usb 8-1: config 92 interface 83 has no altsetting 0 [ 916.791748][ T5596] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.791774][ T5596] usb 8-1: Product: syz [ 916.791787][ T5596] usb 8-1: Manufacturer: syz [ 916.791800][ T5596] usb 8-1: SerialNumber: syz [ 917.015720][T12094] netlink: 'syz.7.1446': attribute type 9 has an invalid length. [ 917.049387][ T5596] rndis_host 8-1:92.83: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 917.051535][ T5596] option 8-1:92.83: GSM modem (1-port) converter detected [ 917.076265][ T5596] usb 8-1: USB disconnect, device number 14 [ 917.080671][ T5596] option 8-1:92.83: device disconnected [ 917.775346][T11382] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 917.931817][T11382] usb 7-1: unable to get BOS descriptor or descriptor too short [ 917.946717][T11382] usb 7-1: not running at top speed; connect to a high speed hub [ 917.946757][T11382] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 917.949372][T11382] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 917.949418][T11382] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 917.961976][T11382] usb 7-1: string descriptor 0 read error: -22 [ 917.962128][T11382] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.999355][T12119] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 918.756801][T11388] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 919.466030][T11382] cdc_ncm 7-1:1.0: bind() failure [ 920.044846][T11388] usb 8-1: New USB device found, idVendor=04b3, idProduct=3105, bcdDevice= 0.00 [ 920.047642][T11388] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 920.047676][T11388] usb 8-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 920.047703][T11388] usb 8-1: config 0 interface 0 has no altsetting 0 [ 920.047735][T11388] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.118875][T11388] usb 8-1: config 0 descriptor?? [ 920.165046][T11382] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 920.165093][T11382] cdc_ncm 7-1:1.1: bind() failure [ 920.500326][T11382] usb 7-1: USB disconnect, device number 14 [ 920.686356][T11388] usbhid 8-1:0.0: can't add hid device: -71 [ 920.686499][T11388] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 920.715789][T11388] usb 8-1: USB disconnect, device number 15 [ 922.433107][T11388] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 922.584589][T11388] usb 8-1: Using ep0 maxpacket: 32 [ 922.585403][T11388] usb 8-1: New USB device found, idVendor=1e2d, idProduct=0053, bcdDevice=b9.57 [ 922.587391][T11388] usb 8-1: config 92 has an invalid interface number: 83 but max is 0 [ 922.587418][T11388] usb 8-1: config 92 has no interface number 0 [ 922.587451][T11388] usb 8-1: config 92 interface 83 has no altsetting 0 [ 922.627308][T11388] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.627324][T11388] usb 8-1: Product: syz [ 922.627333][T11388] usb 8-1: Manufacturer: syz [ 922.627340][T11388] usb 8-1: SerialNumber: syz [ 922.870942][T12153] netlink: 'syz.7.1470': attribute type 9 has an invalid length. [ 922.934018][T11388] rndis_host 8-1:92.83: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 922.936167][T11388] option 8-1:92.83: GSM modem (1-port) converter detected [ 922.964722][T11388] usb 8-1: USB disconnect, device number 16 [ 922.969181][T11388] option 8-1:92.83: device disconnected [ 925.773120][ T5722] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 926.065260][ T5722] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 926.070719][ T5722] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 926.070752][ T5722] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 926.070777][ T5722] usb 8-1: config 1 interface 0 has no altsetting 0 [ 926.111173][ T5722] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.111200][ T5722] usb 8-1: Product: syz [ 926.111215][ T5722] usb 8-1: Manufacturer: syz [ 926.111290][ T5722] usb 8-1: SerialNumber: syz [ 926.157259][T12203] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 926.157448][T12203] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 926.633059][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 928.573250][ T5722] rtl8150 8-1:1.0: couldn't reset the device [ 928.573636][ T5722] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 928.700452][ T5722] usb 8-1: USB disconnect, device number 17 [ 929.293941][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 929.295554][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.295573][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 929.295585][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 929.295607][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.315422][ T9] usb 3-1: config 0 descriptor?? [ 929.424331][T12245] tipc: Cannot configure node identity twice [ 930.366305][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 930.366427][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 930.375751][ T9] usb 3-1: USB disconnect, device number 23 [ 932.374149][ T5722] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 932.823133][ T5722] usb 9-1: Using ep0 maxpacket: 32 [ 932.824071][ T5722] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 932.825539][ T5722] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 932.825564][ T5722] usb 9-1: config 0 has no interface number 0 [ 932.825610][ T5722] usb 9-1: config 0 interface 184 has no altsetting 0 [ 932.829646][ T5722] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.829672][ T5722] usb 9-1: Product: syz [ 932.829687][ T5722] usb 9-1: Manufacturer: syz [ 932.829701][ T5722] usb 9-1: SerialNumber: syz [ 932.905660][ T5722] usb 9-1: config 0 descriptor?? [ 934.316059][ T5722] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 934.316266][ T5722] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 934.319152][ T5722] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 934.319178][ T5722] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 934.319196][ T5722] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 934.319213][ T5722] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 934.319505][ T5722] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 934.410004][ T5722] usb 9-1: USB disconnect, device number 6 [ 934.797147][T12291] tipc: Cannot configure node identity twice [ 937.287442][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.287600][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.308812][T12331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1521'. [ 948.481025][ T5596] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 948.592599][T12343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 948.600460][T12343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 948.633793][ T5596] usb 7-1: Using ep0 maxpacket: 16 [ 948.638868][ T5596] usb 7-1: unable to get BOS descriptor or descriptor too short [ 948.638921][ T5596] usb 7-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40 [ 948.641463][ T5596] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8 [ 948.645348][ T5596] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.645372][ T5596] usb 7-1: Product: syz [ 948.645386][ T5596] usb 7-1: Manufacturer: syz [ 948.645399][ T5596] usb 7-1: SerialNumber: syz [ 948.660194][T12361] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 948.915804][ T5596] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 948.915861][ T5596] usb 7-1: MIDIStreaming interface descriptor not found [ 949.259341][ T5596] usb 7-1: USB disconnect, device number 15 [ 949.500769][T12382] udevd[12382]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 949.827657][T12391] netlink: 'syz.2.1548': attribute type 7 has an invalid length. [ 949.833379][ T6322] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.833425][ T6322] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.833458][ T6322] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.833491][ T6322] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.744566][ T5722] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 952.246295][ T5722] usb 3-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.00 [ 952.249398][ T5722] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 115, changing to 10 [ 952.249430][ T5722] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 25445, setting to 1024 [ 952.249458][ T5722] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 952.249504][ T5722] usb 3-1: config 0 interface 0 has no altsetting 0 [ 952.249537][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.340776][ T5722] usb 3-1: config 0 descriptor?? [ 952.459667][T12433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1562'. [ 952.675034][T12433] bond0: (slave bond_slave_0): Releasing backup interface [ 952.829684][ T5722] ntrig 0003:1B96:0011.0004: unknown main item tag 0x7 [ 952.829727][ T5722] ntrig 0003:1B96:0011.0004: unknown main item tag 0x6 [ 952.829756][ T5722] ntrig 0003:1B96:0011.0004: unknown main item tag 0x7 [ 952.972551][ T5722] ntrig 0003:1B96:0011.0004: hidraw0: USB HID v0.04 Device [HID 1b96:0011] on usb-dummy_hcd.2-1/input0 [ 953.001089][ T5722] usb 3-1: USB disconnect, device number 24 [ 953.661772][T12440] fido_id[12440]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 954.646126][ T5722] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 954.826118][ T5722] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 954.827694][ T5722] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 954.827726][ T5722] usb 7-1: config 1 interface 0 has no altsetting 0 [ 954.870681][ T5722] usb 7-1: string descriptor 0 read error: -22 [ 954.870837][ T5722] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.267924][T12461] tipc: Started in network mode [ 956.268066][T12461] tipc: Node identity 4, cluster identity 4711 [ 956.268104][T12461] tipc: Node number set to 4 [ 957.644042][ T5722] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 958.022455][ T5722] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/0003:0926:3333.0005/input/input20 [ 958.263255][T10884] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 958.422247][T10884] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 958.432545][T10884] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.432569][T10884] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.432590][T10884] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.451273][T10884] usb 8-1: config 0 descriptor?? [ 958.600741][ T5722] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 958.670002][ T5722] usb 7-1: USB disconnect, device number 16 [ 958.910585][T12493] fido_id[12493]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 960.390915][T10884] usbhid 8-1:0.0: can't add hid device: -71 [ 960.391030][T10884] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 960.451847][T10884] usb 8-1: USB disconnect, device number 18 [ 965.779883][T12540] tipc: Started in network mode [ 965.779908][T12540] tipc: Node identity 4, cluster identity 4711 [ 965.779920][T12540] tipc: Node number set to 4 [ 966.353396][ T5722] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 967.196977][ T5722] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 967.200510][ T5722] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.200558][ T5722] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 967.363084][ T5722] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.363112][ T5722] usb 8-1: Product: syz [ 967.363126][ T5722] usb 8-1: Manufacturer: syz [ 967.363139][ T5722] usb 8-1: SerialNumber: syz [ 967.422231][ T5722] cdc_mbim 8-1:1.0: skipping garbage [ 968.527425][T12549] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 969.976054][T12549] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 969.976683][ T5722] cdc_mbim 8-1:1.0: setting tx_max = 16384 [ 970.083004][T11382] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 970.111207][ T5722] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device [ 970.247695][T11382] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 970.251506][T11382] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 970.251565][T11382] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 970.251578][T11382] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 970.251601][T11382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.343059][T11382] pl2303 3-1:1.0: required endpoints missing [ 970.418095][T11382] pl2303 3-1:1.1: required endpoints missing [ 970.454959][ T5722] wwan wwan0: port wwan0mbim0 attached [ 970.577886][ T5722] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.7-1, CDC MBIM, 26:0f:f7:9c:66:b6 [ 970.601475][ T5722] usb 8-1: USB disconnect, device number 19 [ 970.613591][ T5722] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.7-1, CDC MBIM [ 971.019264][ T5722] wwan wwan0: port wwan0mbim0 disconnected [ 971.122755][ T198] usb 3-1: USB disconnect, device number 25 [ 971.152986][ T5596] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 971.303215][ T5596] usb 2-1: Using ep0 maxpacket: 16 [ 971.305508][ T5596] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 971.307195][ T5596] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.307226][ T5596] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.307249][ T5596] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 971.307360][ T5596] usb 2-1: config 0 interface 0 has no altsetting 0 [ 971.307392][ T5596] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.321544][ T5596] usb 2-1: config 0 descriptor?? [ 972.711314][ T5596] usb 2-1: USB disconnect, device number 15 [ 974.588358][T12667] FAULT_INJECTION: forcing a failure. [ 974.588358][T12667] name failslab, interval 1, probability 0, space 0, times 0 [ 974.588394][T12667] CPU: 1 UID: 0 PID: 12667 Comm: syz.8.1641 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 974.588418][T12667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 974.588430][T12667] Call Trace: [ 974.588440][T12667] [ 974.588448][T12667] dump_stack_lvl+0xe8/0x150 [ 974.588487][T12667] should_fail_ex+0x46b/0x600 [ 974.588529][T12667] ? alloc_inode+0x6a/0x1b0 [ 974.588555][T12667] should_failslab+0xa8/0x100 [ 974.588578][T12667] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 974.588608][T12667] ? start_dirop+0x7b/0x90 [ 974.588632][T12667] ? alloc_inode+0x6a/0x1b0 [ 974.588653][T12667] ? __pfx_simple_start_creating+0x10/0x10 [ 974.588682][T12667] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 974.588739][T12667] alloc_inode+0x6a/0x1b0 [ 974.588762][T12667] new_inode+0x1f/0x170 [ 974.588786][T12667] debugfs_create_symlink+0x9d/0x1c0 [ 974.588817][T12667] ref_tracker_dir_symlink+0x25f/0x440 [ 974.588852][T12667] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 974.588910][T12667] ? rcu_is_watching+0x16/0xb0 [ 974.588943][T12667] ? kfree+0x4d/0x6d0 [ 974.588979][T12667] net_ns_net_init+0x77/0x110 [ 974.589007][T12667] ops_init+0x35d/0x5d0 [ 974.589036][T12667] setup_net+0x118/0x350 [ 974.589069][T12667] ? __pfx_setup_net+0x10/0x10 [ 974.589102][T12667] ? __ns_common_init+0x2fc/0x4a0 [ 974.589134][T12667] copy_net_ns+0x53b/0x780 [ 974.589168][T12667] create_new_namespaces+0x3f0/0x6b0 [ 974.589199][T12667] ? security_capable+0x7e/0x2c0 [ 974.589233][T12667] unshare_nsproxy_namespaces+0x149/0x190 [ 974.589266][T12667] ksys_unshare+0x5a7/0x950 [ 974.589303][T12667] ? __pfx_ksys_unshare+0x10/0x10 [ 974.589333][T12667] ? __pfx_ksys_write+0x10/0x10 [ 974.589369][T12667] __x64_sys_unshare+0x38/0x50 [ 974.589399][T12667] do_syscall_64+0x166/0x520 [ 974.589423][T12667] ? trace_irq_disable+0x3b/0x140 [ 974.589451][T12667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.589472][T12667] ? clear_bhb_loop+0x70/0xc0 [ 974.589497][T12667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.589526][T12667] RIP: 0033:0x7f786f6ce159 [ 974.589547][T12667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.589566][T12667] RSP: 002b:00007f786d926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 974.589590][T12667] RAX: ffffffffffffffda RBX: 00007f786f955fa0 RCX: 00007f786f6ce159 [ 974.589605][T12667] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 974.589622][T12667] RBP: 00007f786f76506b R08: 0000000000000000 R09: 0000000000000000 [ 974.589635][T12667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 974.589648][T12667] R13: 00007f786f956038 R14: 00007f786f955fa0 R15: 00007ffc74801598 [ 974.589680][T12667] [ 974.589995][T12667] debugfs: out of free dentries, can not create symlink 'netns-104-4026533230-refcnt' [ 975.476227][T12686] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1648'. [ 975.479716][T12687] tun0: tun_chr_ioctl cmd 1074025681 [ 976.743113][T12695] tipc: Cannot configure node identity twice [ 980.776530][T12737] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1663'. [ 983.596165][ T5596] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 983.842848][ T5596] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 983.843912][ T5596] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 983.843943][ T5596] usb 7-1: can't read configurations, error -71 [ 988.989351][ T9440] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 989.027030][ T9440] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 989.040464][ T5722] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 990.070372][ T9440] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 990.502160][ T5722] usb 9-1: Using ep0 maxpacket: 16 [ 990.623322][ T5722] usb 9-1: device descriptor read/all, error -71 [ 990.855744][ T9440] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 990.856480][ T9440] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 993.866094][ T8305] Bluetooth: hci6: command tx timeout [ 994.163035][ T5722] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 994.552961][ T5722] usb 2-1: Using ep0 maxpacket: 32 [ 994.553872][ T5722] usb 2-1: New USB device found, idVendor=1e2d, idProduct=0053, bcdDevice=b9.57 [ 994.555521][ T5722] usb 2-1: config 92 has an invalid interface number: 83 but max is 0 [ 994.555547][ T5722] usb 2-1: config 92 has no interface number 0 [ 994.555579][ T5722] usb 2-1: config 92 interface 83 has no altsetting 0 [ 994.561368][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.561394][ T5722] usb 2-1: Product: syz [ 994.561409][ T5722] usb 2-1: Manufacturer: syz [ 994.561423][ T5722] usb 2-1: SerialNumber: syz [ 994.974853][T12877] netlink: 'syz.1.1713': attribute type 9 has an invalid length. [ 994.986142][ T5722] rndis_host 2-1:92.83: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 995.010280][ T5722] option 2-1:92.83: GSM modem (1-port) converter detected [ 995.030017][ T5722] usb 2-1: USB disconnect, device number 16 [ 995.040856][ T5722] option 2-1:92.83: device disconnected [ 995.598127][T12908] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1724'. [ 995.655910][T12911] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1724'. [ 995.657378][T12908] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1724'. [ 996.563047][ T5722] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 996.723650][ T5722] usb 7-1: Using ep0 maxpacket: 32 [ 996.726125][ T5722] usb 7-1: unable to get BOS descriptor or descriptor too short [ 996.726180][ T5722] usb 7-1: New USB device found, idVendor=1608, idProduct=021b, bcdDevice=97.b3 [ 996.727912][ T5722] usb 7-1: config 151 has an invalid interface number: 33 but max is 0 [ 996.727937][ T5722] usb 7-1: config 151 has no interface number 0 [ 996.727968][ T5722] usb 7-1: config 151 interface 33 has no altsetting 0 [ 996.759155][ T5722] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.759181][ T5722] usb 7-1: Product: syz [ 996.759195][ T5722] usb 7-1: Manufacturer: syz [ 996.759210][ T5722] usb 7-1: SerialNumber: syz [ 997.266946][ T8305] Bluetooth: hci6: command tx timeout [ 997.805878][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 998.026411][T12833] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.026617][T12833] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.026885][T12833] bridge_slave_0: entered allmulticast mode [ 998.029498][T12833] bridge_slave_0: entered promiscuous mode [ 998.032606][T12833] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.032804][T12833] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.034490][T12833] bridge_slave_1: entered allmulticast mode [ 998.037063][T12833] bridge_slave_1: entered promiscuous mode [ 998.046608][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.046670][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.110323][T12833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.122960][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 998.126784][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 998.128458][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.128488][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 998.128529][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.137620][T12833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.156901][ T9] usb 3-1: config 0 descriptor?? [ 998.503687][T12833] team0: Port device team_slave_0 added [ 998.628423][T12833] team0: Port device team_slave_1 added [ 998.652237][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 998.711926][ T5722] io_ti 7-1:151.33: required endpoints missing [ 998.739572][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0007/input/input21 [ 998.744540][ T5722] uvcvideo 7-1:151.33: Found multiple Units with ID 3 [ 998.745455][ T5722] uvcvideo 7-1:151.33: Found UVC 0.0a device syz (1608:021b) [ 998.745589][ T5722] uvcvideo 7-1:151.33: No valid video chain found. [ 998.750144][ T5722] usb 7-1: USB disconnect, device number 19 [ 998.809843][ T9] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 999.348080][ T8305] Bluetooth: hci6: command tx timeout [ 1000.626609][ T9] usb 3-1: USB disconnect, device number 26 [ 1000.719050][T12954] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1735'. [ 1000.839168][T12833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.839186][T12833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.839210][T12833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.896600][T12833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.896616][T12833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.896642][T12833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.235694][T12833] hsr_slave_0: entered promiscuous mode [ 1001.238763][T12833] hsr_slave_1: entered promiscuous mode [ 1001.241644][T12833] debugfs: 'hsr0' already exists in 'hsr' [ 1001.241669][T12833] Cannot create hsr debugfs directory [ 1001.405323][ T8305] Bluetooth: hci6: command tx timeout [ 1001.510458][T12969] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1742'. [ 1001.983590][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1002.145896][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1002.147990][ T9] usb 7-1: New USB device found, idVendor=1e2d, idProduct=0053, bcdDevice=b9.57 [ 1002.169391][ T9] usb 7-1: config 92 has an invalid interface number: 83 but max is 0 [ 1002.169416][ T9] usb 7-1: config 92 has no interface number 0 [ 1002.170087][ T9] usb 7-1: config 92 interface 83 has no altsetting 0 [ 1002.945445][T12833] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1003.036323][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.036350][ T9] usb 7-1: Product: syz [ 1003.036364][ T9] usb 7-1: Manufacturer: syz [ 1003.036378][ T9] usb 7-1: SerialNumber: syz [ 1003.184173][T12833] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1003.239061][T12833] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1003.330970][T12833] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1003.337724][T12833] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1003.372217][ T9] rndis_host 7-1:92.83: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1003.390080][ T9] option 7-1:92.83: GSM modem (1-port) converter detected [ 1003.413166][ T9] usb 7-1: USB disconnect, device number 20 [ 1003.418906][ T9] option 7-1:92.83: device disconnected [ 1003.472827][T12833] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1003.478569][T12833] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1003.540347][T12833] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1004.957504][ T9440] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1005.047989][ T9440] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1005.049961][ T9440] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1005.061166][ T9440] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1005.061853][ T9440] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1006.459648][ T3690] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.029491][ T8305] Bluetooth: hci3: command tx timeout [ 1008.076890][T13039] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1766'. [ 1008.463980][ T3690] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.003668][T12833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1012.353598][ T8305] Bluetooth: hci3: command tx timeout [ 1013.300803][ T3690] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.455465][T12833] 8021q: adding VLAN 0 to HW filter on device team0 [ 1013.493980][T11032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.498544][T11032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1013.678208][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.678386][ T6322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1013.949650][ T3690] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.302969][ T9440] Bluetooth: hci3: command tx timeout [ 1017.410041][T13137] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1799'. [ 1017.427124][ T9440] Bluetooth: hci3: command tx timeout [ 1018.004582][T12833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1018.545625][T12833] veth0_vlan: entered promiscuous mode [ 1018.573405][T12833] veth1_vlan: entered promiscuous mode [ 1018.668627][T12833] veth0_macvtap: entered promiscuous mode [ 1018.688920][T12833] veth1_macvtap: entered promiscuous mode [ 1018.788057][T12833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1018.807409][T12833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1019.251268][T13165] fuse: root generation should be zero [ 1022.112953][T12999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.113137][T12999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.113312][T12999] bridge_slave_0: entered allmulticast mode [ 1022.117663][T12999] bridge_slave_0: entered promiscuous mode [ 1022.177245][T12999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.177369][T12999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.177552][T12999] bridge_slave_1: entered allmulticast mode [ 1022.180250][T12999] bridge_slave_1: entered promiscuous mode [ 1023.176621][ T6321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.176644][ T6321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.312335][T12999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.411269][T12999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.660128][T12999] team0: Port device team_slave_0 added [ 1024.756993][T11382] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1024.781848][T12999] team0: Port device team_slave_1 added [ 1024.790601][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.790620][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.937569][T11382] usb 7-1: Using ep0 maxpacket: 8 [ 1024.938296][T11382] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1024.955243][T11382] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.955294][T11382] usb 7-1: Product: syz [ 1024.955309][T11382] usb 7-1: Manufacturer: syz [ 1024.955322][T11382] usb 7-1: SerialNumber: syz [ 1024.960353][T11382] usb 7-1: config 0 descriptor?? [ 1025.195412][T11382] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1025.218022][ T3690] bridge_slave_1: left allmulticast mode [ 1025.218054][ T3690] bridge_slave_1: left promiscuous mode [ 1025.218518][ T3690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.386879][ T3690] bridge_slave_0: left allmulticast mode [ 1025.386908][ T3690] bridge_slave_0: left promiscuous mode [ 1025.387168][ T3690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.543007][ T5877] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1025.695578][ T5877] usb 3-1: Using ep0 maxpacket: 16 [ 1025.696393][ T5877] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1025.698667][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.698697][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1025.698738][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.765451][ T5877] usb 3-1: config 0 descriptor?? [ 1026.187490][ T5877] HID 045e:07da: Invalid code 65791 type 1 [ 1026.211462][ T5877] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0008/input/input22 [ 1026.225521][T11382] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1026.384026][T11382] usb 7-1: USB disconnect, device number 21 [ 1026.402840][ T3690] team0: Port device bridge0 removed [ 1026.800130][ T5877] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1030.607961][ T9] usb 3-1: USB disconnect, device number 27 [ 1030.704441][ T3690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1030.765344][ T3690] bond0 (unregistering): Released all slaves [ 1030.878274][T12999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.878291][T12999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.878313][T12999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.954225][T12999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.954240][T12999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.954259][T12999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.014955][ T5596] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1031.173161][ T5596] usb 7-1: Using ep0 maxpacket: 16 [ 1031.177531][ T5596] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1031.177582][ T5596] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1031.178855][ T5596] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1031.182598][ T5596] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.182623][ T5596] usb 7-1: Product: syz [ 1031.182638][ T5596] usb 7-1: Manufacturer: syz [ 1031.182652][ T5596] usb 7-1: SerialNumber: syz [ 1031.594873][ T3690] tipc: Left network mode [ 1031.639512][ T5596] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 1031.640327][ T5596] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1031.685780][T12999] hsr_slave_0: entered promiscuous mode [ 1031.699038][T12999] hsr_slave_1: entered promiscuous mode [ 1031.699947][T12999] debugfs: 'hsr0' already exists in 'hsr' [ 1031.699969][T12999] Cannot create hsr debugfs directory [ 1031.852062][T13245] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1031.992779][ T5596] usb 7-1: 2:1 : can't get Cluster Descriptor [ 1032.039479][ T3690] IPVS: stopping master sync thread 11252 ... [ 1032.204205][T11388] usb 7-1: USB disconnect, device number 22 [ 1033.186813][T13217] udevd[13217]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1034.660296][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1034.660324][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1034.660343][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xa4c6 instead [ 1034.660362][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x8e3b instead [ 1034.660380][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1034.660396][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1034.660410][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1034.660428][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1034.660456][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1034.660484][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1034.660500][T13288] jffs2: Further such events for this erase block will not be printed [ 1034.660790][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1034.660810][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1034.660827][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xa4c6 instead [ 1034.660846][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x8e3b instead [ 1034.660863][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1034.660879][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1034.660897][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1034.660918][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1034.660950][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1034.660981][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1034.660999][T13288] jffs2: Further such events for this erase block will not be printed [ 1034.661348][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 1034.661368][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 1034.661385][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xa4c6 instead [ 1034.661401][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x4504 instead [ 1034.661444][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 1034.661461][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 1034.661479][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xa4c6 instead [ 1034.971109][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x4504 instead [ 1034.971169][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 1034.971180][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 1034.971189][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xa4c6 instead [ 1034.971199][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x4504 instead [ 1034.971223][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 1034.971232][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 1034.971241][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xa4c6 instead [ 1034.971284][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x4504 instead [ 1034.971330][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 1034.971346][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 1034.971364][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xa4c6 instead [ 1034.971383][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x4504 instead [ 1034.971424][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 1034.971433][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 1034.971443][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xa4c6 instead [ 1034.971452][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x4504 instead [ 1034.971475][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 1034.971483][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 1034.971492][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xa4c6 instead [ 1034.971501][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x4504 instead [ 1034.971524][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 1034.971532][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 1034.971541][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xa4c6 instead [ 1034.971550][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x4504 instead [ 1034.971572][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 1034.971581][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 1034.971590][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xa4c6 instead [ 1034.971599][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x4504 instead [ 1034.971621][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 1034.971630][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 1034.971639][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xa4c6 instead [ 1034.971648][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x4504 instead [ 1034.971670][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 1034.971679][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 1034.971688][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xa4c6 instead [ 1034.971697][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x4504 instead [ 1034.971719][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 1034.971728][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1034.971736][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xa4c6 instead [ 1034.971746][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x4504 instead [ 1034.971778][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1034.971787][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1034.971796][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xa4c6 instead [ 1034.971806][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x4504 instead [ 1034.971829][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1034.971838][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1034.971847][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xa4c6 instead [ 1034.971857][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x4504 instead [ 1034.971880][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1034.971889][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1034.971899][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xa4c6 instead [ 1034.971908][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x4504 instead [ 1034.971932][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1034.971940][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1034.971949][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xa4c6 instead [ 1034.971958][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x4504 instead [ 1034.971981][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1034.971989][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1034.971997][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xa4c6 instead [ 1034.972007][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x4504 instead [ 1034.972029][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1034.972037][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1034.972046][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xa4c6 instead [ 1034.972055][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x4504 instead [ 1034.972077][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1034.972086][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1034.972094][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xa4c6 instead [ 1034.972103][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x4504 instead [ 1034.972125][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1034.972134][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1034.972142][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xa4c6 instead [ 1034.972152][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x4504 instead [ 1034.972174][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1034.972182][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1034.972191][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xa4c6 instead [ 1034.972200][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x4504 instead [ 1034.972222][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1034.972231][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1034.972239][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xa4c6 instead [ 1034.972248][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x4504 instead [ 1034.972281][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1034.972289][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1034.972298][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xa4c6 instead [ 1034.972307][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x4504 instead [ 1034.972329][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1034.972338][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1034.972351][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xa4c6 instead [ 1034.972361][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x4504 instead [ 1034.972385][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1034.972394][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1034.972406][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xa4c6 instead [ 1034.972423][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x4504 instead [ 1034.972464][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1034.972480][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1034.972495][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xa4c6 instead [ 1034.972515][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x4504 instead [ 1034.972556][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1034.972566][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1034.972574][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xa4c6 instead [ 1034.972584][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x4504 instead [ 1034.972607][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1034.972615][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1034.972624][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xa4c6 instead [ 1034.972634][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x4504 instead [ 1034.972657][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1034.972665][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1034.972674][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xa4c6 instead [ 1034.972684][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x4504 instead [ 1034.972707][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1034.972715][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1034.972724][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xa4c6 instead [ 1034.972733][T13288] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x4504 instead [ 1034.972748][T13288] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1034.972759][T13288] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1035.277655][ T5245] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1035.456321][T13298] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1840'. [ 1036.615046][T13303] ima: policy update failed [ 1036.616028][ T37] kauditd_printk_skb: 96 callbacks suppressed [ 1036.616042][ T37] audit: type=1802 audit(1791031427.123:859): pid=13303 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.8.1844" res=0 errno=0 [ 1039.491944][T13340] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1857'. [ 1039.676093][ T3690] hsr_slave_0: left promiscuous mode [ 1039.716785][ T3690] hsr_slave_1: left promiscuous mode [ 1039.717515][ T3690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1039.717532][ T3690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1039.900239][ T3690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1039.900266][ T3690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1042.502449][ T3690] veth1_macvtap: left promiscuous mode [ 1042.643064][T13364] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1865'. [ 1042.753544][ T3690] veth0_macvtap: left promiscuous mode [ 1042.868170][ T3690] veth1_vlan: left promiscuous mode [ 1044.092285][T13378] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1870'. [ 1051.898360][T13415] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1881'. [ 1052.429298][T10884] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 1052.791459][ T3690] team0 (unregistering): Port device team_slave_1 removed [ 1052.845949][ T3690] team0 (unregistering): Port device team_slave_0 removed [ 1052.868300][T10884] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1052.885090][T10884] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.885117][T10884] usb 9-1: Product: syz [ 1052.885131][T10884] usb 9-1: Manufacturer: syz [ 1052.885144][T10884] usb 9-1: SerialNumber: syz [ 1052.968610][T10884] usb 9-1: config 0 descriptor?? [ 1052.985884][T10884] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1054.416151][T10884] gspca_stk1135: reg_w 0x0 err -110 [ 1054.417321][T10884] gspca_stk1135: serial bus timeout: status=0x00 [ 1054.417339][T10884] gspca_stk1135: Sensor write failed [ 1054.417362][T10884] gspca_stk1135: serial bus timeout: status=0x00 [ 1054.417371][T10884] gspca_stk1135: Sensor write failed [ 1054.417418][T10884] gspca_stk1135: serial bus timeout: status=0x00 [ 1054.417429][T10884] gspca_stk1135: Sensor read failed [ 1054.417449][T10884] gspca_stk1135: serial bus timeout: status=0x00 [ 1054.417457][T10884] gspca_stk1135: Sensor read failed [ 1054.417464][T10884] gspca_stk1135: Detected sensor type unknown (0x0) [ 1054.427790][T10884] gspca_stk1135: serial bus timeout: status=0x00 [ 1054.427804][T10884] gspca_stk1135: Sensor read failed [ 1054.427828][T10884] gspca_stk1135: serial bus timeout: status=0x00 [ 1054.427838][T10884] gspca_stk1135: Sensor read failed [ 1054.427861][T10884] gspca_stk1135: serial bus timeout: status=0x00 [ 1054.427871][T10884] gspca_stk1135: Sensor write failed [ 1054.427894][T10884] gspca_stk1135: serial bus timeout: status=0x00 [ 1054.427904][T10884] gspca_stk1135: Sensor write failed [ 1054.427989][T10884] stk1135 9-1:0.0: probe with driver stk1135 failed with error -110 [ 1054.677167][T13364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.677198][T13364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.734520][T13364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1054.734548][T13364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1055.630814][T11382] usb 9-1: USB disconnect, device number 9 [ 1056.093166][ T5877] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1057.871155][ T8305] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1057.926431][ T8305] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1057.930131][ T8305] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1057.945329][ T8305] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1057.964125][ T8305] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1058.464454][ T5877] usb 7-1: New USB device found, idVendor=046d, idProduct=c30a, bcdDevice= 0.00 [ 1058.467185][ T5877] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.467219][ T5877] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1058.467245][ T5877] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1058.467280][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.478715][ T5877] usb 7-1: config 0 descriptor?? [ 1058.887969][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 1058.894966][ T5877] usbhid 7-1:0.0: can't add hid device: -71 [ 1058.895087][ T5877] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1059.053387][ T5877] usb 7-1: USB disconnect, device number 23 [ 1059.493701][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.493772][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.651249][ T5245] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1059.663133][ T1920] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.664736][ T6321] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.664852][ T6321] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.664887][ T6321] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.042993][T11382] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1060.047263][ T9440] Bluetooth: hci4: command tx timeout [ 1060.209731][T11382] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1060.211893][T11382] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.211946][T11382] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1060.211968][T11382] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1060.211991][T11382] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1060.212029][T11382] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.672196][T11382] gud 7-1:1.0: probe with driver gud failed with error -71 [ 1060.793691][T11382] usb 7-1: USB disconnect, device number 24 [ 1062.123031][ T9440] Bluetooth: hci4: command tx timeout [ 1062.350043][T11382] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1062.523219][T11382] usb 9-1: Using ep0 maxpacket: 32 [ 1062.525796][T11382] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1062.525853][T11382] usb 9-1: New USB device found, idVendor=1608, idProduct=021b, bcdDevice=97.b3 [ 1062.527376][T11382] usb 9-1: config 151 has an invalid interface number: 33 but max is 0 [ 1062.527402][T11382] usb 9-1: config 151 has no interface number 0 [ 1062.527434][T11382] usb 9-1: config 151 interface 33 has no altsetting 0 [ 1062.530293][T11382] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.530317][T11382] usb 9-1: Product: syz [ 1062.530332][T11382] usb 9-1: Manufacturer: syz [ 1062.530346][T11382] usb 9-1: SerialNumber: syz [ 1064.456116][ T9440] Bluetooth: hci4: command tx timeout [ 1066.525556][ T9440] Bluetooth: hci4: command tx timeout [ 1066.799428][ T5245] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1067.276866][ T8305] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1067.365761][ T8305] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1067.370283][ T8305] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1067.414970][ T8305] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1067.438188][ T8305] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1067.457038][T11382] io_ti 9-1:151.33: required endpoints missing [ 1067.488598][T11382] uvcvideo 9-1:151.33: Found multiple Units with ID 3 [ 1067.490745][T11382] uvcvideo 9-1:151.33: Found UVC 0.0a device syz (1608:021b) [ 1067.490858][T11382] uvcvideo 9-1:151.33: No valid video chain found. [ 1067.537560][T11382] usb 9-1: USB disconnect, device number 10 [ 1069.792160][ T9440] Bluetooth: hci6: command tx timeout [ 1071.803655][ T9440] Bluetooth: hci6: command tx timeout [ 1071.931890][T11382] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1072.101680][T11382] usb 3-1: Using ep0 maxpacket: 32 [ 1072.109358][T11382] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1072.109416][T11382] usb 3-1: New USB device found, idVendor=1608, idProduct=021b, bcdDevice=97.b3 [ 1072.110534][T11382] usb 3-1: config 151 has an invalid interface number: 33 but max is 0 [ 1072.110558][T11382] usb 3-1: config 151 has no interface number 0 [ 1072.110589][T11382] usb 3-1: config 151 interface 33 has no altsetting 0 [ 1072.131695][T11382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.131721][T11382] usb 3-1: Product: syz [ 1072.131735][T11382] usb 3-1: Manufacturer: syz [ 1072.131749][T11382] usb 3-1: SerialNumber: syz [ 1072.804393][T11382] io_ti 3-1:151.33: required endpoints missing [ 1072.833012][T11382] uvcvideo 3-1:151.33: Found multiple Units with ID 3 [ 1072.833869][T11382] uvcvideo 3-1:151.33: Found UVC 0.0a device syz (1608:021b) [ 1072.834014][T11382] uvcvideo 3-1:151.33: No valid video chain found. [ 1072.874618][T11382] usb 3-1: USB disconnect, device number 28 [ 1073.220416][ T3690] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.888451][ T9440] Bluetooth: hci6: command tx timeout [ 1074.262179][ T3690] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.597250][ T3690] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.965870][ T9440] Bluetooth: hci6: command tx timeout [ 1076.327875][ T3690] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.148576][T13459] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.149018][T13459] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.149659][T13459] bridge_slave_0: entered allmulticast mode [ 1079.205539][T13459] bridge_slave_0: entered promiscuous mode [ 1079.322138][T13459] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.322347][T13459] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.322526][T13459] bridge_slave_1: entered allmulticast mode [ 1079.375675][T13459] bridge_slave_1: entered promiscuous mode [ 1079.514854][T13459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1079.563151][T13459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1079.691950][T13459] team0: Port device team_slave_0 added [ 1079.716799][T13459] team0: Port device team_slave_1 added [ 1080.889700][T13459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1080.889718][T13459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1080.889743][T13459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1080.947829][T13459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1080.947845][T13459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1080.947870][T13459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1081.232946][T11382] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1081.403229][T11382] usb 9-1: Using ep0 maxpacket: 8 [ 1081.403994][T11382] usb 9-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 1081.405244][T11382] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 1081.405267][T11382] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.405286][T11382] usb 9-1: config 0 has no interface number 0 [ 1081.405322][T11382] usb 9-1: config 0 interface 52 has no altsetting 0 [ 1081.405351][T11382] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.473065][T13523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.473186][T13523] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.473396][T13523] bridge_slave_0: entered allmulticast mode [ 1081.475413][T11382] usb 9-1: config 0 descriptor?? [ 1081.531155][T13523] bridge_slave_0: entered promiscuous mode [ 1081.609732][T13459] hsr_slave_0: entered promiscuous mode [ 1081.612190][T13459] hsr_slave_1: entered promiscuous mode [ 1081.617679][T13459] debugfs: 'hsr0' already exists in 'hsr' [ 1081.617704][T13459] Cannot create hsr debugfs directory [ 1081.726480][T11382] usb 9-1: Can not set alternate setting to 1, error: -71 [ 1081.726591][T11382] synaptics_usb 9-1:0.52: probe with driver synaptics_usb failed with error -71 [ 1081.846113][T11382] usb 9-1: USB disconnect, device number 11 [ 1081.966361][T13523] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.966567][T13523] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.966739][T13523] bridge_slave_1: entered allmulticast mode [ 1081.995649][T13523] bridge_slave_1: entered promiscuous mode [ 1082.168858][T11381] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1082.211382][T11381] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1082.321142][ T3690] bridge_slave_1: left allmulticast mode [ 1082.321177][ T3690] bridge_slave_1: left promiscuous mode [ 1082.321419][ T3690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.422741][T13682] FAULT_INJECTION: forcing a failure. [ 1082.422741][T13682] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.422782][T13682] CPU: 0 UID: 0 PID: 13682 Comm: syz.2.1949 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1082.422806][T13682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1082.422822][T13682] Call Trace: [ 1082.422831][T13682] [ 1082.422840][T13682] dump_stack_lvl+0xe8/0x150 [ 1082.422879][T13682] should_fail_ex+0x46b/0x600 [ 1082.422915][T13682] should_failslab+0xa8/0x100 [ 1082.422940][T13682] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1082.422969][T13682] ? __alloc_skb+0x1db/0x7a0 [ 1082.422992][T13682] ? __alloc_skb+0x1db/0x7a0 [ 1082.423019][T13682] __alloc_skb+0x1db/0x7a0 [ 1082.423043][T13682] alloc_uevent_skb+0x7d/0x230 [ 1082.423150][T13682] kobject_uevent_net_broadcast+0x2fd/0x560 [ 1082.423185][T13682] kobject_uevent_env+0x569/0x9e0 [ 1082.423221][T13682] device_del+0x751/0x8f0 [ 1082.423313][T13682] ? __pfx_device_del+0x10/0x10 [ 1082.423334][T13682] ? kobject_put+0x50f/0x550 [ 1082.423363][T13682] device_destroy+0xb2/0x1a0 [ 1082.423375][T13682] ? __pfx_device_destroy+0x10/0x10 [ 1082.423393][T13682] drop_ref+0x106/0x360 [ 1082.423443][T13682] hidraw_disconnect+0x4f/0x60 [ 1082.423455][T13682] hid_hw_stop+0x14e/0x270 [ 1082.423490][T13682] hid_device_remove+0xe3/0x1d0 [ 1082.423504][T13682] ? __pfx_hid_device_remove+0x10/0x10 [ 1082.423517][T13682] device_release_driver_internal+0x48b/0x880 [ 1082.423553][T13682] bus_remove_device+0x449/0x560 [ 1082.423571][T13682] ? __pfx_bus_remove_device+0x10/0x10 [ 1082.423586][T13682] ? up_read+0x34/0x180 [ 1082.423600][T13682] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1082.423619][T13682] device_del+0x528/0x8f0 [ 1082.423628][T13682] ? rcu_is_watching+0x16/0xb0 [ 1082.423649][T13682] ? __pfx_device_del+0x10/0x10 [ 1082.423662][T13682] ? lockdep_hardirqs_on+0x7b/0x110 [ 1082.423674][T13682] ? enable_work+0x1fd/0x230 [ 1082.423693][T13682] hid_destroy_device+0x6b/0x1b0 [ 1082.423708][T13682] uhid_char_release+0xc6/0x600 [ 1082.423720][T13682] ? __pfx_uhid_char_release+0x10/0x10 [ 1082.423733][T13682] __fput+0x42a/0xa80 [ 1082.423750][T13682] task_work_run+0x1d9/0x270 [ 1082.423764][T13682] ? __pfx_task_work_run+0x10/0x10 [ 1082.423775][T13682] ? __x64_sys_poll+0x220/0x360 [ 1082.423791][T13682] exit_to_user_mode_loop+0x204/0x770 [ 1082.423806][T13682] ? rcu_is_watching+0x16/0xb0 [ 1082.423823][T13682] do_syscall_64+0x328/0x520 [ 1082.423834][T13682] ? trace_irq_disable+0x3b/0x140 [ 1082.423849][T13682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.423861][T13682] ? clear_bhb_loop+0x70/0xc0 [ 1082.423874][T13682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.423885][T13682] RIP: 0033:0x7fe57f53e159 [ 1082.423897][T13682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.423906][T13682] RSP: 002b:00007fe57d796028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 1082.423919][T13682] RAX: 0000000000000001 RBX: 00007fe57f7c5fa0 RCX: 00007fe57f53e159 [ 1082.423926][T13682] RDX: 00000000000000fd RSI: 0000000000000001 RDI: 0000200000000180 [ 1082.423934][T13682] RBP: 00007fe57f5d506b R08: 0000000000000000 R09: 0000000000000000 [ 1082.423941][T13682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1082.423948][T13682] R13: 00007fe57f7c6038 R14: 00007fe57f7c5fa0 R15: 00007ffc3c136598 [ 1082.423965][T13682] [ 1083.002029][ T3690] bridge_slave_0: left allmulticast mode [ 1083.002053][ T3690] bridge_slave_0: left promiscuous mode [ 1083.002259][ T3690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.523664][T11382] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1083.633444][T11381] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1083.829019][T11382] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1083.844101][T11381] usb 3-1: Using ep0 maxpacket: 8 [ 1083.844985][T11381] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 1083.848717][T11382] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1083.848743][T11382] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1083.848762][T11382] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1083.848871][T11382] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1083.848897][T11382] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1083.852032][T11382] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1083.852056][T11382] usb 7-1: Product: syz [ 1083.852070][T11382] usb 7-1: Manufacturer: syz [ 1084.015091][T11381] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 1084.015118][T11381] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.015138][T11381] usb 3-1: config 0 has no interface number 0 [ 1084.015168][T11381] usb 3-1: config 0 interface 52 has no altsetting 0 [ 1084.015201][T11381] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.125376][T11382] cdc_wdm 7-1:1.0: skipping garbage [ 1084.125397][T11382] cdc_wdm 7-1:1.0: skipping garbage [ 1084.144557][T11381] usb 3-1: config 0 descriptor?? [ 1084.317152][T11382] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1084.317175][T11382] cdc_wdm 7-1:1.0: Unknown control protocol [ 1084.455049][T11381] usb 3-1: Can not set alternate setting to 1, error: -71 [ 1084.455099][T11381] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -71 [ 1084.491871][T11381] usb 3-1: USB disconnect, device number 29 [ 1084.733675][ T3690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1084.825069][ T3690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1084.849722][ T3690] bond0 (unregistering): Released all slaves [ 1084.936555][T13523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.150226][T13523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.672297][T13523] team0: Port device team_slave_0 added [ 1085.694915][T13523] team0: Port device team_slave_1 added [ 1086.146749][T13523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.146766][T13523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.146790][T13523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.192198][ T5596] usb 7-1: USB disconnect, device number 25 [ 1087.350521][T13523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1087.350540][T13523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1087.350567][T13523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1087.903046][ T3690] hsr_slave_0: left promiscuous mode [ 1087.943688][ T3690] hsr_slave_1: left promiscuous mode [ 1088.053672][ T3690] veth1_macvtap: left promiscuous mode [ 1088.053792][ T3690] veth0_macvtap: left promiscuous mode [ 1088.054622][ T3690] veth1_vlan: left promiscuous mode [ 1088.054793][ T3690] veth0_vlan: left promiscuous mode [ 1089.623463][ T3690] team0 (unregistering): Port device team_slave_1 removed [ 1089.685996][ T3690] team0 (unregistering): Port device team_slave_0 removed [ 1090.239306][T13523] hsr_slave_0: entered promiscuous mode [ 1090.247697][T13523] hsr_slave_1: entered promiscuous mode [ 1090.248565][T13523] debugfs: 'hsr0' already exists in 'hsr' [ 1090.248587][T13523] Cannot create hsr debugfs directory [ 1091.103003][T11381] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1091.273823][T11381] usb 7-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 1091.275291][T11381] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.275354][T11381] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1091.275397][T11381] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.252483][T13819] FAULT_INJECTION: forcing a failure. [ 1093.252483][T13819] name failslab, interval 1, probability 0, space 0, times 0 [ 1093.252520][T13819] CPU: 1 UID: 0 PID: 13819 Comm: syz.6.1984 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1093.252545][T13819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1093.252556][T13819] Call Trace: [ 1093.252564][T13819] [ 1093.252573][T13819] dump_stack_lvl+0xe8/0x150 [ 1093.252606][T13819] should_fail_ex+0x46b/0x600 [ 1093.252637][T13819] should_failslab+0xa8/0x100 [ 1093.252655][T13819] ? do_getname+0x2e/0x250 [ 1093.252675][T13819] kmem_cache_alloc_noprof+0x9e/0x690 [ 1093.252702][T13819] ? do_getname+0x2e/0x250 [ 1093.252726][T13819] do_getname+0x2e/0x250 [ 1093.252744][T13819] ? getname_flags+0x11/0x20 [ 1093.252764][T13819] do_sys_openat2+0xcc/0x200 [ 1093.252785][T13819] ? __se_sys_futex+0x3a8/0x450 [ 1093.252811][T13819] ? __pfx_do_sys_openat2+0x10/0x10 [ 1093.252836][T13819] ? rcu_is_watching+0x16/0xb0 [ 1093.252873][T13819] __x64_sys_openat+0x138/0x170 [ 1093.252900][T13819] do_syscall_64+0x166/0x520 [ 1093.252924][T13819] ? trace_irq_disable+0x3b/0x140 [ 1093.252952][T13819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.252974][T13819] ? clear_bhb_loop+0x70/0xc0 [ 1093.252995][T13819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.253013][T13819] RIP: 0033:0x7feaa556e98e [ 1093.253031][T13819] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1093.253050][T13819] RSP: 002b:00007feaa3805ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1093.253073][T13819] RAX: ffffffffffffffda RBX: 00007feaa38066c0 RCX: 00007feaa556e98e [ 1093.253087][T13819] RDX: 0000000000000002 RSI: 00007feaa3805f90 RDI: ffffffffffffff9c [ 1093.253102][T13819] RBP: 00007feaa564506b R08: 0000000000000000 R09: 0000000000000000 [ 1093.253116][T13819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1093.253129][T13819] R13: 00007feaa5836038 R14: 00007feaa5835fa0 R15: 00007ffe29b5acd8 [ 1093.253158][T13819] [ 1093.510317][T11381] usb 7-1: USB disconnect, device number 26 [ 1093.796355][ T1920] rtsx_usb_ms rtsx_usb_ms.2.auto: Runtime PM usage count underflow! [ 1094.199500][T13831] ima: rule for LSM 'u' is undefined [ 1094.254402][ T37] audit: type=1807 audit(1791031484.703:860): action=measure func=FILE_CHECK obj_type=u res=0 [ 1094.286215][ T37] audit: type=1802 audit(1791031484.793:861): pid=13831 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.8.1986" res=0 errno=0 [ 1094.291817][T13830] ima: policy update failed [ 1094.291958][ T37] audit: type=1802 audit(1791031484.793:862): pid=13830 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.8.1986" res=0 errno=0 [ 1097.061047][ T3690] bridge_slave_1: left allmulticast mode [ 1097.061084][ T3690] bridge_slave_1: left promiscuous mode [ 1097.061341][ T3690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.268050][ T3690] bridge_slave_0: left allmulticast mode [ 1097.268077][ T3690] bridge_slave_0: left promiscuous mode [ 1097.268239][ T3690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.338576][ T37] audit: type=1804 audit(1791031487.843:863): pid=13881 uid=0 auid=4294967295 ses=4294967295 subj=_ op=measuring_policy cause=store_entry comm="syz.2.1995" name="ima_policy_written" res=0 errno=-17 [ 1097.340636][T13881] ima: rule for LSM 'u' is undefined [ 1097.340715][ T37] audit: type=1807 audit(1791031487.843:864): action=measure func=FILE_CHECK obj_type=u res=0 [ 1097.340839][ T37] audit: type=1802 audit(1791031487.843:865): pid=13881 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.2.1995" res=0 errno=0 [ 1097.341052][T13880] ima: policy update failed [ 1097.341184][ T37] audit: type=1802 audit(1791031487.843:866): pid=13880 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.2.1995" res=0 errno=0 [ 1099.013718][ T3690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1099.073376][ T3690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1099.114297][ T3690] bond0 (unregistering): Released all slaves [ 1100.267227][ T3690] hsr_slave_0: left promiscuous mode [ 1100.304466][ T3690] hsr_slave_1: left promiscuous mode [ 1100.305613][ T3690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1100.309391][T13927] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 1100.363903][ T3690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1100.453010][T11381] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1100.604014][T11381] usb 3-1: New USB device found, idVendor=046d, idProduct=c30a, bcdDevice= 0.00 [ 1100.605436][T11381] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.605468][T11381] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1100.605493][T11381] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1100.605525][T11381] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.663256][T11381] usb 3-1: config 0 descriptor?? [ 1101.922394][T11381] logitech 0003:046D:C30A.000A: unknown main item tag 0x0 [ 1101.922445][T11381] logitech 0003:046D:C30A.000A: unknown main item tag 0x0 [ 1101.922471][T11381] logitech 0003:046D:C30A.000A: unbalanced collection at end of report description [ 1101.953319][T11381] logitech 0003:046D:C30A.000A: parse failed [ 1101.953428][T11381] logitech 0003:046D:C30A.000A: probe with driver logitech failed with error -22 [ 1102.231415][ T5877] usb 3-1: USB disconnect, device number 30 [ 1102.263847][ T3690] team0 (unregistering): Port device team_slave_1 removed [ 1103.016575][ T3690] team0 (unregistering): Port device team_slave_0 removed [ 1103.710559][T13523] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1104.726657][T13523] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1104.743847][T13523] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1104.830447][T13523] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1104.835423][T13523] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1104.939761][T13523] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1104.954128][T13523] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1105.508445][T13523] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1106.663838][T13459] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1106.711722][T13459] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1106.730786][T13459] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1107.017033][T13459] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1107.085402][T13459] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1107.150440][T13459] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1107.165454][T13459] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1107.254408][T13459] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1108.060537][T13523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1109.348872][T13523] 8021q: adding VLAN 0 to HW filter on device team0 [ 1109.430789][ T1401] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.430923][ T1401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1109.497235][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.497513][ T6001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.786581][T13459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1109.942335][T13459] 8021q: adding VLAN 0 to HW filter on device team0 [ 1110.014962][ T9459] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.015363][ T9459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1110.081292][ T9918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.081457][ T9918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1111.956863][ T5245] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1115.153142][T11381] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1115.434101][T13459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1115.713715][T11381] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1115.715186][T11381] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.715239][T11381] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1115.715262][T11381] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1115.715286][T11381] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1115.715328][T11381] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.076803][T13523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1117.253466][T13459] veth0_vlan: entered promiscuous mode [ 1117.305777][T13459] veth1_vlan: entered promiscuous mode [ 1117.390874][T11381] [drm] Initialized gud 1.0.0 for 3-1:1.0 on minor 1 [ 1117.548550][T13523] veth0_vlan: entered promiscuous mode [ 1117.681586][T13523] veth1_vlan: entered promiscuous mode [ 1117.927329][T13523] veth0_macvtap: entered promiscuous mode [ 1117.951045][T13523] veth1_macvtap: entered promiscuous mode [ 1118.034014][T11381] gud 3-1:1.0: USB-1: Invalid display mode array size (ret=79) [ 1118.076961][T13523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1118.079206][T11381] gud 3-1:1.0: [drm] Cannot find any crtc or sizes [ 1118.176079][ T8305] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1118.215718][ T8305] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1118.217224][ T8305] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1118.218779][T13523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1118.220713][ T8305] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1118.228748][ T8305] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1118.435037][T11382] usb 3-1: USB disconnect, device number 31 [ 1118.503068][ T1269] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.578107][ T1920] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.084659][ T5877] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1119.106849][T10760] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.108149][T10760] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.293498][ T5877] usb 9-1: device descriptor read/64, error -71 [ 1119.625063][ T5877] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1119.753338][ T5877] usb 9-1: device descriptor read/64, error -71 [ 1119.871725][ T5877] usb usb9-port1: attempt power cycle [ 1120.178858][ T1269] IPVS: starting estimator thread 0... [ 1120.410380][T14209] IPVS: using max 9 ests per chain, 21600 per kthread [ 1120.446142][ T9440] Bluetooth: hci3: command tx timeout [ 1120.507920][ T5877] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1120.525085][ T5877] usb 9-1: device descriptor read/8, error -71 [ 1120.652988][ T5722] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1120.793122][ T5877] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1120.813046][ T5722] usb 3-1: Using ep0 maxpacket: 32 [ 1120.813812][ T5722] usb 3-1: New USB device found, idVendor=1e2d, idProduct=0053, bcdDevice=b9.57 [ 1120.815331][ T5722] usb 3-1: config 92 has an invalid interface number: 83 but max is 0 [ 1120.815354][ T5722] usb 3-1: config 92 has no interface number 0 [ 1120.815385][ T5722] usb 3-1: config 92 interface 83 has no altsetting 0 [ 1120.815550][ T5877] usb 9-1: device descriptor read/8, error -71 [ 1120.817603][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.817625][ T5722] usb 3-1: Product: syz [ 1120.817632][ T5722] usb 3-1: Manufacturer: syz [ 1120.817640][ T5722] usb 3-1: SerialNumber: syz [ 1120.950626][ T5877] usb usb9-port1: unable to enumerate USB device [ 1120.967830][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.969171][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.025924][ T1269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.025938][ T1269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.134286][ T5722] rndis_host 3-1:92.83: Descriptor too short [ 1121.138084][ T5722] option 3-1:92.83: GSM modem (1-port) converter detected [ 1121.191222][ T5722] usb 3-1: USB disconnect, device number 32 [ 1121.205812][ T5722] option 3-1:92.83: device disconnected [ 1121.427802][T11032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.427824][T11032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1122.524561][ T9440] Bluetooth: hci3: command tx timeout [ 1124.119282][T14267] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2061'. [ 1124.607787][ T9440] Bluetooth: hci3: command tx timeout [ 1126.549054][T11382] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1126.690395][ T9440] Bluetooth: hci3: command tx timeout [ 1126.715815][T11382] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1126.717280][T11382] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1126.717306][T11382] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1126.717324][T11382] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1126.717388][T11382] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1126.717413][T11382] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1126.786087][T11382] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1126.786114][T11382] usb 4-1: Product: syz [ 1126.786127][T11382] usb 4-1: Manufacturer: syz [ 1126.829354][T11382] cdc_wdm 4-1:1.0: skipping garbage [ 1126.829373][T11382] cdc_wdm 4-1:1.0: skipping garbage [ 1126.903285][T11382] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1126.903308][T11382] cdc_wdm 4-1:1.0: Unknown control protocol [ 1127.070122][ T5245] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1127.243077][ T31] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1127.374851][T14316] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 1127.397859][ T5699] usb 4-1: USB disconnect, device number 3 [ 1127.433517][ T31] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1127.436258][ T31] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1127.436272][ T31] usb 3-1: Product: syz [ 1127.436280][ T31] usb 3-1: Manufacturer: syz [ 1127.436287][ T31] usb 3-1: SerialNumber: syz [ 1127.441531][ T31] usb 3-1: config 0 descriptor?? [ 1127.482543][ T31] ch341 3-1:0.0: ch341-uart converter detected [ 1127.483820][T14320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1127.545169][T14320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1127.603883][T14320] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 1127.670365][T14320] bond0 (unregistering): Released all slaves [ 1128.963314][ T31] ch341-uart ttyUSB0: break control not supported, using simulated break [ 1128.968649][ T31] usb 3-1: ch341-uart converter now attached to ttyUSB0 [ 1129.032033][ T31] usb 3-1: USB disconnect, device number 33 [ 1129.064677][ T31] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 1129.067149][ T31] ch341 3-1:0.0: device disconnected [ 1129.216627][T14343] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2082'. [ 1129.828407][T14365] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2088'. [ 1131.189402][ T38] INFO: task syz.7.1634:12644 blocked for more than 143 seconds. [ 1131.189670][ T38] Not tainted syzkaller #0 [ 1131.190094][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1131.190334][ T38] task:syz.7.1634 state:D stack:24552 pid:12644 tgid:12643 ppid:8556 task_flags:0x400140 flags:0x00080002 [ 1131.232002][ T38] Call Trace: [ 1131.232403][ T38] [ 1131.274146][ T5699] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 1131.451582][ T38] __schedule+0x16d9/0x5700 [ 1131.452115][ T38] ? __lock_acquire+0x747/0x2de0 [ 1131.453449][ T38] ? __pfx___schedule+0x10/0x10 [ 1131.453635][ T38] ? lock_acquire+0x115/0x350 [ 1131.453818][ T38] ? schedule+0x90/0x2b0 [ 1131.454284][ T38] schedule+0x164/0x2b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1131.454602][ T38] cgroup_lock_and_drain_offline+0x51a/0x650 [ 1131.455021][ T38] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 1131.456105][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1131.456868][ T38] cgroup_kn_lock_live+0x120/0x230 [ 1131.456934][ T38] cgroup_subtree_control_write+0x4b5/0x1080 [ 1131.457576][ T38] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 1131.458254][ T38] ? kernfs_root+0x1c/0x230 [ 1131.458831][ T38] ? kernfs_root+0x1c/0x230 [ 1131.459426][ T38] ? kernfs_root+0x1ea/0x230 [ 1131.459826][ T38] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 1131.460198][ T38] cgroup_file_write+0x331/0x8f0 [ 1131.460923][ T38] ? __pfx_cgroup_file_writ ** replaying previous printk message ** [ 1131.460923][ T38] ? __pfx_cgroup_file_write+0x10/0x10 [ 1131.461515][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1131.465399][ T38] ? __pfx_cgroup_file_write+0x10/0x10 [ 1131.506316][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 1131.506351][ T38] vfs_write+0x61e/0xbb0 [ 1131.506382][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1131.506408][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1131.506434][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 1131.506458][ T38] ? fdget_pos+0x252/0x320 [ 1131.506487][ T38] ksys_write+0x156/0x270 [ 1131.506511][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1131.506545][ T38] do_syscall_64+0x166/0x520 [ 1131.506564][ T38] ? trace_irq_disable+0x3b/0x140 [ 1131.506587][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.506605][ T38] ? clear_bhb_loop+0x70/0xc0 [ 1131.506628][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.506646][ T38] RIP: 0033:0x7ff04737e159 [ 1131.506664][ T38] RSP: 002b:00007ff0455d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1131.506685][ T38] RAX: ffffffffffffffda RBX: 00007ff047605fa0 RCX: 00007ff04737e159 [ 1131.506699][ T38] RDX: 0000000000000005 RSI: 0000200000000300 RDI: 0000000000000008 [ 1131.506710][ T38] RBP: 00007ff04741506b R08: 0000000000000000 R09: 0000000000000000 [ 1131.506722][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1131.506733][ T38] R13: 00007ff047606038 R14: 00007ff047605fa0 R15: 00007ffd4b7db1a8 [ 1131.506764][ T38] [ 1131.506819][ T38] [ 1131.506819][ T38] Showing all locks held in the system: [ 1131.506833][ T38] locks held by pr/ttyS0/17: 3, last CPU#1: [ 1131.506931][ T38] #0: ffffffff8e09d7d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1131.507054][ T38] #1: ffffffff99eaa3f8 (&port_lock_key){+.+.}-{3:3}, at: nbcon_kthread_func+0x64c/0x880 [ 1131.507103][ T38] #2: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1131.507153][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 1131.507166][ T38] #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1131.507219][ T38] locks held by kworker/0:2/198: 4, last CPU#0: [ 1131.507232][ T38] #0: ffff88813ff26538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1131.507281][ T38] #1: ffffc9000153fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1131.507330][ T38] #2: ffffffff8ed10238 ("ratelimiter_table_lock"){+.+.}-{3:3}, at: wg_ratelimiter_gc_entries+0x5d/0x470 [ 1131.507438][ T38] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1131.507495][ T38] locks held by kworker/u8:9/1401: 6, last CPU#0: [ 1131.507509][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1131.507558][ T38] #1: ffffc900070b7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1131.507608][ T38] #2: ffff88803bd16310 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1131.507731][ T38] #3: ffff888032a37120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1131.507781][ T38] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1131.507828][ T38] #5: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1131.507892][ T38] locks held by getty/5341: 2, on CPU#0: [ 1131.507905][ T38] #0: ffff888035dc90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1131.508022][ T38] #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1131.508080][ T38] locks held by syz-executor/5571: 1, last CPU#0: [ 1131.508093][ T38] #0: ffff888035569db8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1131.508143][ T38] locks held by syz-executor/5585: 3, last CPU#1: [ 1131.508156][ T38] #0: ffffffff8e29f550 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 1131.526300][ T38] #1: ffff88803d2610b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x18e/0x1d80 [ 1131.526354][ T38] #2: ffff88803ecadeb8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x27d/0x1d80 [ 1131.526412][ T38] locks held by kworker/0:5/5699: 6, on CPU#0: [ 1131.526426][ T38] #0: ffff888021eb1d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1131.526476][ T38] #1: ffffc900060cfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1131.526525][ T38] #2: ffff88802aa10210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 1131.526625][ T38] #3: ffff88802aa43658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20ad/0x4cf0 [ 1131.526669][ T38] #4: ffff88802a96d458 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20e1/0x4cf0 [ 1131.526711][ T38] #5: ffffffff8ee77d40 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14d/0x1800 [ 1131.526764][ T38] locks held by kworker/u8:15/10760: 5, last CPU#0: [ 1131.526777][ T38] #0: ffff88801aeb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1131.526824][ T38] #1: ffffc9000ac1fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1131.526872][ T38] #2: ffffffff8f5c7060 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1131.526916][ T38] #3: ffff888038813160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 1131.527006][ T38] #4: ffff88807e36a310 (&devlink->lock_key#12){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 1131.527064][ T38] locks held by kworker/u8:21/11032: 6, last CPU#0: [ 1131.527077][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1131.527125][ T38] #1: ffffc90007147c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1131.527174][ T38] #2: ffff88801b3a4310 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1131.527223][ T38] #3: ffff88805dab7d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1131.527270][ T38] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1131.527319][ T38] #5: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1131.527367][ T38] locks held by syz.7.1634/12644: 3, on CPU#1: [ 1131.527380][ T38] #0: ffff88805da42b28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1131.527426][ T38] #1: ffff888037b1e510 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1131.527475][ T38] #2: ffff888059f99878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1131.527522][ T38] locks held by syz-executor/14184: 2, last CPU#0: [ 1131.527535][ T38] #0: ffffffff8ed35128 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1131.527616][ T38] #1: ffffffff8f5d58b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1131.527661][ T38] locks held by syz.3.2088/14365: 3, last CPU#0: [ 1131.527675][ T38] #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: folio_lruvec_lock_irqsave+0x24/0x540 [ 1131.527725][ T38] #1: ffff88801aee1970 (&lruvec->lru_lock){+.+.}-{3:3}, at: folio_lruvec_lock_irqsave+0x293/0x540 [ 1131.527773][ T38] #2: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1131.527820][ T38] locks held by syz.6.2090/14381: 2, last CPU#0: [ 1131.527834][ T38] #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1131.527882][ T38] #1: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: posix_timer_delete+0x242/0x490 [ 1131.527935][ T38] locks held by rm/14380: 2, last CPU#0: [ 1131.527948][ T38] #0: ffff88803ecab7b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 1131.547961][ T38] #1: ffff8880b863c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 1131.548040][ T38] [ 1131.548045][ T38] ============================================= [ 1131.548045][ T38] [ 1131.548055][ T38] NMI backtrace for cpu 0 [ 1131.548069][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1131.548088][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1131.548099][ T38] Call Trace: [ 1131.548106][ T38] [ 1131.548113][ T38] dump_stack_lvl+0xe8/0x150 [ 1131.548141][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1131.548221][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1131.548243][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1131.548270][ T38] sys_info+0x135/0x170 [ 1131.548293][ T38] watchdog+0xfd7/0x1030 [ 1131.548322][ T38] ? watchdog+0x1c7/0x1030 [ 1131.548351][ T38] kthread+0x38b/0x470 [ 1131.548370][ T38] ? __pfx_watchdog+0x10/0x10 [ 1131.548391][ T38] ? __pfx_kthread+0x10/0x10 [ 1131.548410][ T38] ret_from_fork+0x514/0xb70 [ 1131.548429][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1131.548447][ T38] ? __switch_to+0xc89/0x1420 [ 1131.548492][ T38] ? __pfx_kthread+0x10/0x10 [ 1131.548511][ T38] ret_from_fork_asm+0x1a/0x30 [ 1131.548542][ T38] [ 1131.548549][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1131.548577][ C1] NMI backtrace for cpu 1 [ 1131.548590][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1131.548609][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1131.548619][ C1] RIP: 0010:delay_tsc+0x73/0xd0 [ 1131.548644][ C1] Code: e8 52 3a 3d f6 65 48 8b 05 6a 37 4e 07 48 85 c0 74 1c f3 90 bf 01 00 00 00 e8 e9 38 3d f6 e8 44 7a 01 00 39 c5 75 0e 0f 01 f9 <66> 90 eb bb e8 94 6c db f5 eb dd 4c 29 fb e8 2a 7a 01 00 89 c5 0f [ 1131.548659][ C1] RSP: 0018:ffffc900001678b8 EFLAGS: 00000246 [ 1131.548674][ C1] RAX: 00000000f3d04602 RBX: 0000000000000899 RCX: 0000000000000001 [ 1131.548686][ C1] RDX: 0000000000000247 RSI: ffffffff8bcc4c60 RDI: ffffffff8bcc4c20 [ 1131.548699][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1131.548710][ C1] R10: dffffc0000000000 R11: ffffffff8b579850 R12: 1ffffffff33d54d9 [ 1131.548723][ C1] R13: 00000000ffffffff R14: 00000247f3d03d46 R15: 0000000000000836 [ 1131.548736][ C1] FS: 0000000000000000(0000) GS:ffff888125cc3000(0000) knlGS:0000000000000000 [ 1131.548751][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1131.548763][ C1] CR2: 00007feaa55fb840 CR3: 0000000026796000 CR4: 00000000003526f0 [ 1131.548778][ C1] Call Trace: [ 1131.548785][ C1] [ 1131.548793][ C1] wait_for_lsr+0x14d/0x300 [ 1131.548877][ C1] __serial8250_console_fifo_write+0xd0/0x3f0 [ 1131.548909][ C1] serial8250_console_write+0xac5/0x1230 [ 1131.548936][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1131.548967][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 1131.548999][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1131.549025][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1131.549058][ C1] nbcon_kthread_func+0x679/0x880 [ 1131.549084][ C1] ? nbcon_kthread_func+0x163/0x880 [ 1131.549105][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1131.549132][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1131.549157][ C1] ? __kthread_parkme+0x199/0x1f0 [ 1131.549182][ C1] kthread+0x38b/0x470 [ 1131.549198][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1131.549220][ C1] ? __pfx_kthread+0x10/0x10 [ 1131.549237][ C1] ret_from_fork+0x514/0xb70 [ 1131.549254][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1131.549270][ C1] ? __switch_to+0xc89/0x1420 [ 1131.549293][ C1] ? __pfx_kthread+0x10/0x10 [ 1131.549311][ C1] ret_from_fork_asm+0x1a/0x30 [ 1131.549333][ C1] [ 1131.565500][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1132.660566][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1132.670171][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1132.680208][ T38] Call Trace: [ 1132.683480][ T38] [ 1132.686398][ T38] vpanic+0x56d/0xa60 [ 1132.690361][ T38] ? __pfx___schedule+0x10/0x10 [ 1132.695206][ T38] ? __pfx_vpanic+0x10/0x10 [ 1132.699690][ T38] panic+0xc5/0xd0 [ 1132.703386][ T38] ? __pfx_panic+0x10/0x10 [ 1132.707781][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 1132.713221][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 1132.718583][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1132.724725][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1132.730866][ T38] watchdog+0x1030/0x1030 [ 1132.735186][ T38] ? watchdog+0x1c7/0x1030 [ 1132.739583][ T38] kthread+0x38b/0x470 [ 1132.743634][ T38] ? __pfx_watchdog+0x10/0x10 [ 1132.748290][ T38] ? __pfx_kthread+0x10/0x10 [ 1132.752858][ T38] ret_from_fork+0x514/0xb70 [ 1132.757429][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1132.762513][ T38] ? __switch_to+0xc89/0x1420 [ 1132.767173][ T38] ? __pfx_kthread+0x10/0x10 [ 1132.771762][ T38] ret_from_fork_asm+0x1a/0x30 [ 1132.776516][ T38] [ 1132.779805][ T38] Kernel Offset: disabled [ 1132.784126][ T38] Rebooting in 86400 seconds..