last executing test programs: 20.619898967s ago: executing program 3 (id=76): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="86feae88000004001c00128009000100766c616e000000000c000281060001000100000008000500", @ANYRES32=r6, @ANYBLOB="0a000100aaaaaaaaaabb0000"], 0x50}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) 20.128350277s ago: executing program 2 (id=79): r0 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0x9, {0xae, 0x0, 0xfc8, 0x10010b}}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback, 0x4}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100), 0x13f, 0x9}}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x1c, 0x15, 0x1, 0x0, 0x25dfdbfb, {0xa}, [@generic="1119f0ce78"]}, 0x1c}}, 0x4008084) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 18.844628294s ago: executing program 2 (id=81): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000100)={0x7, 0xffffff55, 0x200, 0x0, 0x6, 0x3, 0x0, &(0x7f0000000000)=[{0x5, 0x101, 0x5}, {0x11, 0x0, 0x8}, {0x19, 0x1ff, 0xe5}]}) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0xffc, 0x7, 0xffffff8c}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x700, 0x7, 0x216, 0xc7, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x65, 0x0, 0xfb, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@noop]}}}}}) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x400000000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)="719089bbe10c5c9b9ca4d2b606003d6831896da05fa6b6c8448123714abb4f5fc4ed5e185551a678577a51ad1e43d315aef4a2ca5003ab862f744407693658fa6a23bf9f2973f646c6bd398a169521cc6ec59c4931617765f9674d0454e39b28aee5e71cf139fd152eac64ef74020b8bf100640a32eb739b93947b83", 0x7c) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r7, 0x10003) fcntl$addseals(r7, 0x409, 0x7) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0xfffffffc, 0x1000, 0x8000}) 14.980302266s ago: executing program 2 (id=84): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000ad00000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100200}, 0x94) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x2, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x3, 0xff) epoll_create(0x752) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 14.006176481s ago: executing program 2 (id=87): r0 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x22) 11.712608187s ago: executing program 2 (id=92): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000340)={0x0, 0x1, 0x564, 0x3e, 0x7, 0x1, 0xfffffffffffffff4, 0x4, 0x401, 0xffffffff, 0x9}) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r1], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c1) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x3}}, {@stats}, {@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x1}}, {@stats}, {@stats}]}) fcntl$setlease(r7, 0x400, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000600)={0x1, 0xffffffa3, 0x278, 0x8, 0x2, 0x4, 0x8, 0x2, 0x1, 0x9, 0x2a0, 0x2}) open_tree(r7, &(0x7f00000000c0)='./file0\x00', 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x84, 0x80000001, 0x85, 0x7, 0xe97, 0x5, 0x9, {0x0, @in6={{0xa, 0x4e23, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}}, 0x9da2, 0x8, 0x7, 0x7fffffff, 0x67f}}, &(0x7f0000000040)=0xb0) syz_usb_connect(0x4, 0x56a, &(0x7f0000000ac0)={{0x12, 0x1, 0x110, 0x40, 0x74, 0x56, 0x8, 0x1e0e, 0x9206, 0x22cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x558, 0x2, 0x6, 0xf9, 0x0, 0x71, "", [{{0x9, 0x4, 0x2f, 0x9, 0x5, 0xff, 0xc8, 0x26, 0x81, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "b0182c3620"}, {0x5, 0x24, 0x0, 0xe6}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x9, 0x81, 0x9b}, {0x6, 0x24, 0x1a, 0x2000, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x5, 0x1, 0xf8, 0x8, 0xf8}, @mdlm={0x15, 0x24, 0x12, 0x7}, @obex={0x5, 0x24, 0x15, 0xb}]}, @uac_control={{0xa, 0x24, 0x1, 0x9, 0x2f}, [@mixer_unit={0xb, 0x24, 0x4, 0x2, 0x2, "82bdab6d70d4"}, @mixer_unit={0x7, 0x24, 0x4, 0x4, 0x8, "38c2"}, @extension_unit={0xb, 0x24, 0x8, 0x1, 0x9d1, 0x4, "2ebbffc0"}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0x5, "8c0b6d"}]}], [{{0x9, 0x5, 0x7, 0x10, 0x10, 0x7, 0x9, 0x8}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x0, 0x9, 0x4, [@generic={0xc5, 0xf, "9225aa75aff3fcfac3fa94ee3770df91adbb03ff8012f24d941f62e2dd92978507abd5e73f0b4ba912df4fa2059f7032338d975b010380e292ef7d4f6b186f28e41cf72472c18bc1b57080c4edf595059072d1ecf4330f4b359125bb37d396f40268539859897738b7221808d708837faa9d83b57e63a9ce2061164d23686244228e0ff6456231a5eca1978737df827305f01b341c13ce105d344aa707d54760b5463c65e95f64822c7ea391802f634f34567875f083f405d3c9239f95816eda728b76"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xfc, 0x1}]}}, {{0x9, 0x5, 0x80, 0x8, 0x10, 0xda, 0x5, 0x1}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x9, 0xb2, 0x7, [@generic={0x6b, 0x2, "ad61cf4c300119de197b1521dcadfbc7675d23ed58d300889455f2d7b082dcfed2e89adab681d1e8261fde0b081efb0c1f47fdba4ece915cd3ac6166cc01773ceeafe587fa8630fcea0c0d816a268ffb04f67dcce5a952f258a9ced613eba6344e6b9dd95f7e054628"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x1, 0xa0, 0x93, [@generic={0x40, 0x23, "a968af7284e5b7033c9ed84e7045fcba8c3db2716d3152d2e1166ee4f492a5567d8578c3fd54f2c16a089b16b2914466c519844f11dc68f439ba58d9bbe3"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x401}]}}]}}, {{0x9, 0x4, 0x79, 0x80, 0x4, 0xff, 0x4, 0x4, 0x1, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x7, 0x4, 0x7}, {0x6, 0x24, 0x1a, 0x2, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x8, 0x8}, @mdlm_detail={0xf, 0x24, 0x13, 0x7, "c91d401df0f28abf8ea352"}, @mdlm_detail={0xef, 0x24, 0x13, 0x7, "b12f1e9dddc3dcf8d9ffa1635703f312f2c23f861141b16b39e973df1ce8bda0db7bb9c98569a6a1ed518b9c2fc786e48adeb17aabfa2bb180f77d7d280283a5b75b566ed3d90d23cd45fdcf2eda4a9b86d49a105da29195d7be6a499b873d4742fac24293d29b50b9b3e503aaa0efd6d293dab7c4de564303766994863a29da64961982774824b92754982413a21629cd4cbda4c18789c9f7bf70f0a964a0d4bb2e5ec9d717b8587946eafe0fc6db8a10460aef080d6ec76cd517676a2fe2d5f150be5b822a68b5eae0242f7064c375f3011c9eafc5c209e99f186676976a858c539d5d7b10cd24101e74"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x2e}, @country_functional={0x12, 0x24, 0x7, 0xc0, 0x8, [0x3, 0x8, 0x8, 0xd, 0x2, 0x2d58]}]}, @uac_control={{0xa, 0x24, 0x1, 0x9, 0x36}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x102, 0x5, 0x6, 0x3, 0x7f, 0x2}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x1, 0x3, [0x0, 0x2, 0x7], 0x10}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x5, 0x5, "8e9796"}, @mixer_unit={0x9, 0x24, 0x4, 0x6, 0xce, "cfda3341"}]}], [{{0x9, 0x5, 0xe, 0x4, 0x10, 0x9, 0x37, 0x3}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x2, 0x1, 0xa, [@generic={0xec, 0x22, "dd650f81f9c0bb03b0dae393ae728ef16c3791e6d9aaecec489a4b5d07941f6bb8fe90e398fa8de3186178d1f93ed90e6c19799482b237ee4e54c152555beda0018c3ea4cc549132a863c4003df253846eabe145c0cccb430bfcd262ae8d706e0b2b0775f0a1d9d704053fd40770989bdae334442268c7be2c0d2e574f91d229e0876e4ca8c3401868b89c634d8d6c5fa40d1901960fc5bbf1d1d2af9234e11c26311b15e8cd1c939c2c1e78cb963038ad52b3a5709cbb63cc22d533fd4e313e977ad210de542bab45e91876bb7f43538fc9cd84160c4479d4edf0756fa5ead50d3d167b2d43069d22e4"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0xd8, 0x7, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xfe, 0x1615}]}}, {{0x9, 0x5, 0x80, 0x5, 0x10, 0x8, 0x2, 0xd, [@generic={0x80, 0x21, "5944bc218e67bb37e9c0e179f49fe9bab49a78a1501d3d81c64809e14aab00232a5a297dc8cba2c0f418bb69f4394bd00df867d60310d18928ef329fdce910e36a50f86053b34387c30fdd9e40739ea617c5220d219e5c7e991463885041a49082c71dc4cc30b542dfe34f1a99dd93199de1cbb6ae6e601d72b640f4ce14"}]}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000001040)={0xa, 0x6, 0x200, 0x0, 0x3, 0x37, 0x40, 0xf6}, 0x103, &(0x7f0000001080)={0x5, 0xf, 0x103, 0x1, [@generic={0xfe, 0x10, 0x4, "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"}]}, 0xa, [{0x4, &(0x7f00000011c0)=@string={0x4, 0x3, "4bd1"}}, {0x2c, &(0x7f0000001200)=@string={0x2c, 0x3, "8c128603d484e15dea791b843ce4666f0765820e9478d9ac79e725b81292b530dce9c637b638476becee"}}, {0xe8, &(0x7f0000001240)=ANY=[@ANYBLOB="e803cdc997ab1fd3a80f118ad934f03210f06a9b146bf457622b16d0a8cd2ca10914720a40bd637f7c8631a4f793d1eb76a1a29584396f061f68bc4a8399b5fae3453afb0de9b99593a5e7c355260b74f0f471ed41768622407008d11bcbb693be2540ebc0972ae47b13a0bdc86518887cce0e287180d7d752c2ccae704cef5ac429a37d1439cc05724a48e8b76764e179cee37e3455b2be86cbd4f4625f87fc8ab945959271607c224dbbe08d766a56c0ab2fe7cee2639ec19f3b374ecb34f6db858388afd937ef8d494d8f5362326ccd12c4e42e216db8f12fac29f451b9"]}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x2809}}, {0xda, &(0x7f0000001380)=@string={0xda, 0x3, "af7cbb4b35c44448206c1c923139659515c2a69ba81fc496542e2e9131619f051b717b57aa83fdc7affbdc225aa987c6cd52353f176a887e2d222fd81cd0d4ff2710942b335c778ece1aa5e6b1ff6ea0f6457af97ebb327defef1fff2a5c7f7bacc41369b5c7fd2de42c68774ff260b355d314162da70c7ad8be55766c0d41b51b82e1d3593842747b801d1242a4d2610bbfbdf89c1c0c0afbefa9408308a69ef8b43ca39bc67b999a5bb91bf0e7c0100f23ca05f8e3e91d0cb49c00ff20cab2753cfc59a28537c2583e6c555f6485827b7c6462e8517cae"}}, {0xaf, &(0x7f00000006c0)=ANY=[@ANYBLOB="afdce4bbd597897f77dd25e65802038e1ed80b36e04596a4dc7a1ff47548ab6b2115aeaade5e8bf30b607693357f7db35944b366a0ac21757135a809678177510d51eb58b9cf406922690725317ae032cd841fbee97bd9d224b331c9ddcdddd61eac9161df1bf507060f000000fb36f73d13d953550ac3f9c772f749a66bbd833fdc64aa1f29a40c09f176f3d2b77966304b8abd7d3032c6271f6cd989dd933a41491358e3e711c49a5356841e05cf92f86b79b27912732e062c714372c145a2e9418d0fd98707191c9a87eb06cca7ac363f2dfd50daa67aec66dc"]}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x500a}}, {0x56, &(0x7f0000001580)=@string={0x56, 0x3, "fe2fd54566f6bfb4d7290cd012df26b5e7a0a6c0f5d3ee7b7e1590578e48e28b5f1ba2a40f4bad8ddd28379631643b0dc9ffb4d49f72c240eae162dc5ab80ff9604d9cdbe0bb3a6388d6055a52ce262f97c1c89e"}}, {0x9d, &(0x7f0000001600)=@string={0x9d, 0x3, "a358a510a82a8e7e5343df016e432c2a9f77c86d31a93280566ae8f21eeec51246caa53088ee670203e8a0ffc913b07c3af3140ffa5637e9e10750d5079518a1d109bb6d8a1e72b458a83be1a314bc6b206c3ce4c41288c31acae741a2bbb32827e93dcda50f8eb63a43cf27a52076b69bef591ff554eee955295d928604f0defc460e3058264ff65c7b4e9a6bba3e32405dbb8fb08e6a0e8c8883"}}, {0x2d, &(0x7f00000016c0)=@string={0x2d, 0x3, "b1d41eddec4eaab67c7efcd653e43abe767410adc733c47c8cfdefea4da7bf237820524a0c5ee1e8648f96"}}]}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) 9.953694634s ago: executing program 3 (id=96): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 9.812391972s ago: executing program 3 (id=97): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000ad00000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100200}, 0x94) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x2, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x3, 0xff) epoll_create(0x752) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 8.612357545s ago: executing program 2 (id=99): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x48044) socket$inet6_sctp(0xa, 0x1, 0x84) openat$smackfs_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x73a8, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r1) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40810}, 0x2000800) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001800050000000000000000002d000000000000020000000005000100080000000c000500000000000a"], 0x1bb0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x1) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x40000, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r5, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 8.352043432s ago: executing program 3 (id=100): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000006700)=[{{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000004600)=[{&(0x7f00000025c0)="74af", 0x2}], 0x1}}], 0x2, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r1, 0x8ec6, 0x10}, 0xc) (fail_nth: 1) 8.19378089s ago: executing program 1 (id=102): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000ad00000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100200}, 0x94) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) socket$netlink(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x3, 0xff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 7.910018369s ago: executing program 3 (id=105): sched_setaffinity(0x0, 0x0, 0x0) capset(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$video4linux(&(0x7f00000001c0), 0xd, 0x123002) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1802) flistxattr(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x17e) sched_setscheduler(0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x6, 0xfffffffe, 0x0, 0x0, 0x1) socket(0x400000000010, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) read$char_usb(r1, &(0x7f0000000140)=""/160, 0xa0) syz_usb_disconnect(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000010900031373797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0a20c000140000010000000c6930c0002"], 0x92fc}}, 0x40) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x20, 0x0, 0x0) 6.587907431s ago: executing program 0 (id=106): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x10000, @loopback, 0xae3e}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)={0x87}, 0x8) sendmmsg$inet6(r0, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40880) 6.55802301s ago: executing program 1 (id=107): openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 6.54291773s ago: executing program 0 (id=108): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x10000, @loopback, 0xae3e}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)={0x87}, 0x8) sendmmsg$inet6(r0, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40880) (fail_nth: 1) 5.976838578s ago: executing program 1 (id=110): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000ad00000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100200}, 0x94) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x2, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x3, 0xff) epoll_create(0x752) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 5.853245916s ago: executing program 0 (id=111): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x6c, 0x30, 0x1, 0x70bd2c, 0x3, {0x0, 0x0, 0xffff}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xf8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x7, 0x6, 0x8b, 0x9c7}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008040}, 0x10) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b97", 0x9d}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca5", 0x6e}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='rxrpc\x00', &(0x7f0000000080)=@chain) 5.526296475s ago: executing program 1 (id=113): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) syz_open_procfs(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x26, &(0x7f00000000c0)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='8', 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f00000003c0)=ANY=[@ANYBLOB="67727071f56f74615f626c6f636b5f68617264e4696d69743d356b2c032b4d9fad107742c33b06f26ecd52ec00a1a3f46ad39f3830f058474c4f81dad54f20a26c7a0000ecffffff000000"]) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000202000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000002e", @ANYRES8], 0x0, 0x5e, 0x0, 0x1}, 0x28) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) 4.482473354s ago: executing program 4 (id=114): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x2000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) 4.130309572s ago: executing program 0 (id=115): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='task\x00') getdents(r0, &(0x7f0000002480)=""/66, 0x42) delete_module(&(0x7f00000001c0)='\xd2\x1a\x8f\xe4\xf2Z\x8a\x94\xa0y\x10\x17}\x87\x1a\xa3I\xc7\x92x\xb3\x1aov?0\xe9\xd3\x05\\\xcd}\xbfQ\x89\xa4fiH\xefl\xd2\x13\xa0\x94zi\x91P\x81Y\x84q\x06%\xe9\x1d\xcab\x96\xd8\xd1\x98\v{6\xb9\x86\x94\x12\xec\xaf\x06\xbe\xe5\x0f\xfd\xb8?o\xe3\x83`\xaf\xdd*%\xa3\x1c5\xd2\xb7\xbe,su=\x86\x90\x9d\xb8L\x80\x9d\xdc\xa3F\xd2}3k~\xe9?y\xd5\x829\x15\xab\fO\xc8\x98\xc4\xdd\xd0\xfa\xf7\x0f+U\xaf\xdfjnL\x8c*|\xe6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xf3\xdd\xf0_\x7ft\x00N_\xa7\x8f\xd4\x90J\x1c\xce\xcc<\xb9\xd4\xaa\xd0\x8cj\xc1P\x87\xc2\xddq_Me\x19\x9f\xc9\xa4\xcf-2\xbe-\x8a:\xd5\n\xaa\x10\xcbw.\xe4\xe1E\xd8\xf7s\x0fJ\xb7\xc0[\x06\x03\xa8\xc5\xd0\x92\xbdV\xc1\x95(tc\xa9b3\xdd\xaf\xd6\xdcZ%\x10\xd2n\xcb7\xd2\xcc\xc2\xb9\xcf\x1c\xb2\xb6Y\xca\x99\xdep\xfe\xcc\x15uE(\x83\xe0\x04\xdf\xfc_\x97\xbf\xcf)\x94\xfb\x17\xa4\xcc\xb7b\xbd\x81\xe4*\xfd\xa0B', 0x1200) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="340000001300050000000001feffffff07000000", @ANYRES32=r2, @ANYBLOB="402000000000000014001a80100004800c000980080001"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x5, 0x1839, 0x0, {r3, r4/1000+60000}, {}, {0x3, 0x1}, 0x1, @can={{0x2, 0x1, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "1f00000000001000"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 4.118809247s ago: executing program 4 (id=116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) r4 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) 2.840183708s ago: executing program 0 (id=117): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000ad00000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100200}, 0x94) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) socket$netlink(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x3, 0xff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 2.725451024s ago: executing program 4 (id=118): timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) mkdir(0x0, 0x1fc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x5}) userfaultfd(0x800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) 1.513604128s ago: executing program 4 (id=119): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000a5d300350000000000000000851000000600000018080000", @ANYRES32, @ANYBLOB="00000000000000006600fcff0000000018000000000000000000000000000000950000000000000018010000202073250000000000202020c31af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 1) 660.5205ms ago: executing program 1 (id=120): openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 438.459548ms ago: executing program 0 (id=121): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd0009058202"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="1b1b"]) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x50, 0x29, 0x100, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x2}, {0x1, 0xfff1}, {0xf, 0xa}}, [@tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x1, 0xe}}, @TCA_RATE={0x6}, @TCA_RATE={0x6, 0x5, {0x81, 0xb}}, @TCA_RATE={0x6, 0x5, {0x1, 0x10}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004044}, 0x40) fsopen(0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000440)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) read$FUSE(r2, &(0x7f0000000d80)={0x2020}, 0x2020) 141.430456ms ago: executing program 4 (id=122): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r2, 0x5}, 0x8) 56.38323ms ago: executing program 4 (id=123): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000ad00000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100200}, 0x94) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x2, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x3, 0xff) epoll_create(0x752) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 43.647859ms ago: executing program 1 (id=124): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b70000000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002900)={0xffffffffffffffff, &(0x7f0000000200)="8c", 0x0}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x20000227, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x54) 0s ago: executing program 3 (id=125): timer_create(0x3, 0x0, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0xedf68e481b1401c7, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vcsa(0xffffffffffffff9c, 0x0, 0x18d01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff0000000705810240000007050202400043bce61a647c00f92c0b7fe0f5a0de932bbef3e8aa2437882338ebbd50d179db734b4de5f0d38a53d36d927bd7a8cd6cbbefe01e6f0a8f4e8d9c4e783df9e27b5e0616f6b09fe6c63021e8f35a0340e9bed59beb9b72055a123639ef977163401ae4e8aa47b81f09df76b1fb994fd1d5138e8aefc7d727f84252f9e8d3ef9f9a096090eec6ea2f3bf1b70d03ae6a76ea71bed31aecd530397deadec90c8d1f05f496c5276c12ac3260e342efcec42b69c051c2a2a062c1fbe1031806a1c096eee2076680"], 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000001680)={{0x108, 0x9, 0x8, 0x39a, 0x32f, 0x2, 0x2d6, 0x7fff}, "44ac0c40"}, 0x24) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000203050000cf0905dd4a0000000000000800014001"], 0x1c}}, 0x50) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) r5 = syz_clone(0x0, &(0x7f0000000440)="f359faa02d35a1533c1e27f4d74a015bd0954fea15373bb79adcd3a514b9ce58b1e1b1b687422f6eb5a81f144b5044f9a8282d1badc27291e3b8c7c8495507617e55a81354c1494ce77388d298ee2969495b37ba34521610a4f56e6f5b5b5e957002508f46fefb521483408cac4487337f496ffa65083b4000d4dc2bdbc95806a6fbee5726687f2638cae65cc7c951298d43df2d05367a0accfc4988a6c8bf0de36e721bbb1d97034c35f13c2f92c661122e9ecc532a9a4aae743f29cf6d", 0xbe, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000740)="f1a06506d2aa23ce7953270f13a225676738de19c9e39717ee558bb696201f727e4d01336a78521b3430a7d85ba7a315cdc54f31515976d73cc20021ea7807") timer_create(0x6, &(0x7f0000000780)={0x0, 0x1c, 0x2, @tid=r5}, &(0x7f00000007c0)) bind$can_raw(r4, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="20000000020301040000000000000000000000000900020000000010bc"], 0x20}, 0x1, 0x0, 0x0, 0x4000890}, 0x20000044) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000300)='v', 0x34022}], 0x1000000000000364) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.43' (ED25519) to the list of known hosts. [ 92.124225][ T2032] cfg80211: failed to load regulatory.db [ 93.275768][ T5567] cgroup: Unknown subsys name 'net' [ 93.507798][ T5567] cgroup: Unknown subsys name 'cpuset' [ 93.571160][ T5567] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.571318][ T5567] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.305008][ T5585] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.323766][ T5591] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.369505][ T5593] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.387231][ T5594] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.396428][ T5594] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.404976][ T5594] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.408974][ T5593] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.412022][ T5594] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.413770][ T5593] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.428475][ T5594] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.453526][ T5593] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.482439][ T4897] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.485343][ T4897] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.490802][ T4897] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.497866][ T4897] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.499160][ T4897] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.502714][ T5593] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.506076][ T5594] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.508722][ T5593] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.523508][ T5594] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.524036][ T5593] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.525411][ T5594] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.533884][ T5594] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.537203][ T5594] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.572987][ T5594] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.653409][ T5588] Bluetooth: hci1: command tx timeout [ 100.731233][ T5588] Bluetooth: hci0: command tx timeout [ 100.732929][ T5588] Bluetooth: hci3: command tx timeout [ 100.810812][ T5597] Bluetooth: hci4: command tx timeout [ 100.810932][ T5597] Bluetooth: hci2: command tx timeout [ 101.459108][ T5579] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.460298][ T5579] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.466496][ T5579] bridge_slave_0: entered allmulticast mode [ 101.477361][ T5579] bridge_slave_0: entered promiscuous mode [ 101.557426][ T5579] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.557533][ T5579] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.558051][ T5579] bridge_slave_1: entered allmulticast mode [ 101.560008][ T5579] bridge_slave_1: entered promiscuous mode [ 101.578542][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.579015][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.579446][ T5580] bridge_slave_0: entered allmulticast mode [ 101.588667][ T5580] bridge_slave_0: entered promiscuous mode [ 101.643392][ T5581] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.643519][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.644118][ T5581] bridge_slave_0: entered allmulticast mode [ 101.646159][ T5581] bridge_slave_0: entered promiscuous mode [ 101.686322][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.686447][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.686817][ T5580] bridge_slave_1: entered allmulticast mode [ 101.688754][ T5580] bridge_slave_1: entered promiscuous mode [ 101.726887][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.727013][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.727185][ T5578] bridge_slave_0: entered allmulticast mode [ 101.729358][ T5578] bridge_slave_0: entered promiscuous mode [ 101.740122][ T5581] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.740665][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.741299][ T5581] bridge_slave_1: entered allmulticast mode [ 101.767543][ T5581] bridge_slave_1: entered promiscuous mode [ 101.815518][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.815670][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.816046][ T5584] bridge_slave_0: entered allmulticast mode [ 101.817956][ T5584] bridge_slave_0: entered promiscuous mode [ 101.838533][ T5578] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.838944][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.839558][ T5578] bridge_slave_1: entered allmulticast mode [ 101.849099][ T5578] bridge_slave_1: entered promiscuous mode [ 101.889642][ T5579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.918134][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.918311][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.918485][ T5584] bridge_slave_1: entered allmulticast mode [ 101.935341][ T5584] bridge_slave_1: entered promiscuous mode [ 101.976916][ T5579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.980156][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.030115][ T5581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.058161][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.088553][ T5578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.102556][ T5581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.143331][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.146156][ T5578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.177859][ T5579] team0: Port device team_slave_0 added [ 102.203815][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.246388][ T5579] team0: Port device team_slave_1 added [ 102.248538][ T5580] team0: Port device team_slave_0 added [ 102.304229][ T5581] team0: Port device team_slave_0 added [ 102.325966][ T5580] team0: Port device team_slave_1 added [ 102.349137][ T5578] team0: Port device team_slave_0 added [ 102.357237][ T5581] team0: Port device team_slave_1 added [ 102.396091][ T5584] team0: Port device team_slave_0 added [ 102.398468][ T5578] team0: Port device team_slave_1 added [ 102.425542][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.425555][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.425574][ T5579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.479908][ T5584] team0: Port device team_slave_1 added [ 102.516089][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.516108][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.516138][ T5579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.518786][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.518798][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.518817][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.627034][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.627048][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.627067][ T5581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.675429][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.675447][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.675520][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.729333][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.729352][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.729379][ T5578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.731778][ T5588] Bluetooth: hci1: command tx timeout [ 102.749092][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.749143][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.749218][ T5581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.820526][ T5588] Bluetooth: hci3: command tx timeout [ 102.820558][ T5588] Bluetooth: hci0: command tx timeout [ 102.843918][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.843931][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.843950][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.845162][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.845177][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.845206][ T5578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.890640][ T5597] Bluetooth: hci2: command tx timeout [ 102.890674][ T5597] Bluetooth: hci4: command tx timeout [ 102.956969][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.956982][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.957001][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.474348][ T5579] hsr_slave_0: entered promiscuous mode [ 103.475598][ T5579] hsr_slave_1: entered promiscuous mode [ 103.542840][ T5580] hsr_slave_0: entered promiscuous mode [ 103.543860][ T5580] hsr_slave_1: entered promiscuous mode [ 103.544686][ T5580] debugfs: 'hsr0' already exists in 'hsr' [ 103.544783][ T5580] Cannot create hsr debugfs directory [ 103.601813][ T5581] hsr_slave_0: entered promiscuous mode [ 103.602915][ T5581] hsr_slave_1: entered promiscuous mode [ 103.603662][ T5581] debugfs: 'hsr0' already exists in 'hsr' [ 103.603680][ T5581] Cannot create hsr debugfs directory [ 103.645691][ T5578] hsr_slave_0: entered promiscuous mode [ 103.646659][ T5578] hsr_slave_1: entered promiscuous mode [ 103.647333][ T5578] debugfs: 'hsr0' already exists in 'hsr' [ 103.647350][ T5578] Cannot create hsr debugfs directory [ 103.691929][ T5584] hsr_slave_0: entered promiscuous mode [ 103.692935][ T5584] hsr_slave_1: entered promiscuous mode [ 103.693702][ T5584] debugfs: 'hsr0' already exists in 'hsr' [ 103.693719][ T5584] Cannot create hsr debugfs directory [ 104.737812][ T5579] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.805015][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.812939][ T5597] Bluetooth: hci1: command tx timeout [ 104.825037][ T5579] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.860640][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.879191][ T5579] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.890545][ T5597] Bluetooth: hci0: command tx timeout [ 104.890580][ T5597] Bluetooth: hci3: command tx timeout [ 104.916353][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.941602][ T5579] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.971306][ T5597] Bluetooth: hci2: command tx timeout [ 104.971400][ T5588] Bluetooth: hci4: command tx timeout [ 104.976609][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.118691][ T5580] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.147573][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.162732][ T5580] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.205443][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.226084][ T5580] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.266822][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.297346][ T5580] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.326548][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.441759][ T5581] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.484481][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.501514][ T5581] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.535697][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.557768][ T5581] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.584355][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.609348][ T5581] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.648519][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.831036][ T5578] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.865652][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.887498][ T5578] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.924537][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.942779][ T5578] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.974611][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.014288][ T5578] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.054509][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.072316][ T5579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.290043][ T5579] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.306930][ T5584] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.346185][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.362414][ T5584] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.404019][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.409676][ T5584] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.443808][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.466396][ T5584] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.513702][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.529934][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.534018][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.593845][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.595970][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.596084][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.733212][ T5580] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.786698][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.788263][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.828789][ T5581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.854610][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.854727][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.891733][ T5588] Bluetooth: hci1: command tx timeout [ 106.971517][ T5588] Bluetooth: hci3: command tx timeout [ 106.971545][ T5588] Bluetooth: hci0: command tx timeout [ 106.998178][ T5581] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.051219][ T5597] Bluetooth: hci4: command tx timeout [ 107.051253][ T5597] Bluetooth: hci2: command tx timeout [ 107.106899][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.107065][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.184821][ T5578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.232934][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.233047][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.395672][ T5578] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.506071][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.509242][ T3181] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.509412][ T3181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.593225][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.593364][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.746679][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.866273][ T1280] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.890617][ T1280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.974074][ T1378] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.974287][ T1378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.227434][ T5579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.760187][ T5579] veth0_vlan: entered promiscuous mode [ 108.832534][ T5579] veth1_vlan: entered promiscuous mode [ 109.000150][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.009595][ T5579] veth0_macvtap: entered promiscuous mode [ 109.037305][ T5579] veth1_macvtap: entered promiscuous mode [ 109.153883][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.237032][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.273875][ T5581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.714216][ T5578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.099304][ T5581] veth0_vlan: entered promiscuous mode [ 110.209997][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.218120][ T5581] veth1_vlan: entered promiscuous mode [ 110.284118][ T1280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.284146][ T1280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.342203][ T5578] veth0_vlan: entered promiscuous mode [ 110.366239][ T5580] veth0_vlan: entered promiscuous mode [ 110.418487][ T5578] veth1_vlan: entered promiscuous mode [ 110.430338][ T5580] veth1_vlan: entered promiscuous mode [ 110.478086][ T1280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.478108][ T1280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.551759][ T5581] veth0_macvtap: entered promiscuous mode [ 110.651751][ T5581] veth1_macvtap: entered promiscuous mode [ 110.704954][ T5584] veth0_vlan: entered promiscuous mode [ 110.755333][ T5578] veth0_macvtap: entered promiscuous mode [ 110.776687][ T5580] veth0_macvtap: entered promiscuous mode [ 110.828242][ T5584] veth1_vlan: entered promiscuous mode [ 110.856078][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.859050][ T5578] veth1_macvtap: entered promiscuous mode [ 110.903512][ T5580] veth1_macvtap: entered promiscuous mode [ 110.928412][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.082295][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.114374][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.187271][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.327479][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.373628][ T5584] veth0_macvtap: entered promiscuous mode [ 111.652573][ T1000] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 111.697663][ T5584] veth1_macvtap: entered promiscuous mode [ 111.915146][ T1000] usb 4-1: device descriptor read/64, error -71 [ 112.004864][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.004887][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.224186][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.230690][ T1000] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.421720][ T1000] usb 4-1: device descriptor read/64, error -71 [ 112.531901][ T1000] usb usb4-port1: attempt power cycle [ 112.615591][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.757572][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.757595][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.866441][ T1387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.866462][ T1387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.031694][ T1000] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.063686][ T1000] usb 4-1: device descriptor read/8, error -71 [ 113.118196][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.118219][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.354535][ T1000] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 113.422543][ T1000] usb 4-1: device descriptor read/8, error -71 [ 113.529207][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.529228][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.533724][ T1000] usb usb4-port1: unable to enumerate USB device [ 113.571566][ T159] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.714294][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.714312][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.749431][ T159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.069478][ T5776] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.265853][ T159] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.270793][ T66] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.271543][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.271960][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.272150][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.272694][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.450686][ T5776] tmpfs: Unknown parameter 'grpqõota_block_hardäimit' [ 114.562778][ T1387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.562798][ T1387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.771081][ T1387] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.938109][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.938128][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.812702][ T5787] syz.3.7 (5787) used greatest stack depth: 17888 bytes left [ 115.835195][ T5790] tmpfs: Unknown parameter 'grpqõota_block_hardäimit' [ 115.929231][ T5794] FAULT_INJECTION: forcing a failure. [ 115.929231][ T5794] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 115.929283][ T5794] CPU: 1 UID: 0 PID: 5794 Comm: syz.0.8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 115.929305][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.929321][ T5794] Call Trace: [ 115.929327][ T5794] [ 115.929333][ T5794] dump_stack_lvl+0xe8/0x150 [ 115.929369][ T5794] should_fail_ex+0x467/0x600 [ 115.929396][ T5794] _copy_from_user+0x2d/0xb0 [ 115.929414][ T5794] __sys_connect+0x155/0x470 [ 115.929432][ T5794] ? __pfx___sys_connect+0x10/0x10 [ 115.929456][ T5794] ? __pfx_ksys_write+0x10/0x10 [ 115.929479][ T5794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.929496][ T5794] __x64_sys_connect+0x7a/0x90 [ 115.929513][ T5794] do_syscall_64+0x174/0x580 [ 115.929536][ T5794] ? trace_irq_disable+0x3b/0x140 [ 115.929561][ T5794] ? clear_bhb_loop+0x70/0xc0 [ 115.929580][ T5794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.929595][ T5794] RIP: 0033:0x7f69cd69e0d9 [ 115.929615][ T5794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.929628][ T5794] RSP: 002b:00007f69cb8f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 115.929651][ T5794] RAX: ffffffffffffffda RBX: 00007f69cd925fa0 RCX: 00007f69cd69e0d9 [ 115.929663][ T5794] RDX: 000000000000006e RSI: 0000200000000640 RDI: 0000000000000003 [ 115.929672][ T5794] RBP: 00007f69cb8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 115.929682][ T5794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.929691][ T5794] R13: 00007f69cd926038 R14: 00007f69cd925fa0 R15: 00007ffe13597e18 [ 115.929714][ T5794] [ 116.199707][ T1387] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.226199][ T41] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.227616][ T159] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.228096][ T159] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.228489][ T159] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.266492][ T159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.266726][ T159] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.266928][ T159] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.267116][ T159] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.267894][ T159] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.330904][ T66] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.804652][ T5802] Invalid ELF header type: 3 != 1 [ 116.816821][ T5802] ======================================================= [ 116.816821][ T5802] WARNING: The mand mount option has been deprecated and [ 116.816821][ T5802] and is ignored by this kernel. Remove the mand [ 116.816821][ T5802] option from the mount to silence this warning. [ 116.816821][ T5802] ======================================================= [ 117.640683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 117.907162][ T5809] FAULT_INJECTION: forcing a failure. [ 117.907162][ T5809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.907199][ T5809] CPU: 0 UID: 0 PID: 5809 Comm: syz.0.11 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 117.907221][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.907234][ T5809] Call Trace: [ 117.907242][ T5809] [ 117.907251][ T5809] dump_stack_lvl+0xe8/0x150 [ 117.907286][ T5809] should_fail_ex+0x467/0x600 [ 117.907318][ T5809] _copy_from_user+0x2d/0xb0 [ 117.907337][ T5809] __sys_bpf+0x2e7/0xd90 [ 117.907359][ T5809] ? __pfx___sys_bpf+0x10/0x10 [ 117.907378][ T5809] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 117.907408][ T5809] ? rt_mutex_slowunlock+0x219/0x460 [ 117.907444][ T5809] ? ksys_write+0x248/0x270 [ 117.907468][ T5809] ? __pfx_ksys_write+0x10/0x10 [ 117.907492][ T5809] __x64_sys_bpf+0xba/0xd0 [ 117.907532][ T5809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.907552][ T5809] do_syscall_64+0x174/0x580 [ 117.907578][ T5809] ? trace_irq_disable+0x3b/0x140 [ 117.907606][ T5809] ? clear_bhb_loop+0x70/0xc0 [ 117.907629][ T5809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.907646][ T5809] RIP: 0033:0x7f69cd69e0d9 [ 117.907662][ T5809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.907676][ T5809] RSP: 002b:00007f69cb8f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 117.907695][ T5809] RAX: ffffffffffffffda RBX: 00007f69cd925fa0 RCX: 00007f69cd69e0d9 [ 117.907708][ T5809] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 117.907719][ T5809] RBP: 00007f69cb8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 117.907730][ T5809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.907740][ T5809] R13: 00007f69cd926038 R14: 00007f69cd925fa0 R15: 00007ffe13597e18 [ 117.907768][ T5809] [ 118.344584][ T5808] netlink: 72 bytes leftover after parsing attributes in process `syz.4.12'. [ 119.130090][ T5829] FAULT_INJECTION: forcing a failure. [ 119.130090][ T5829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.130121][ T5829] CPU: 0 UID: 0 PID: 5829 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 119.130141][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.130152][ T5829] Call Trace: [ 119.130158][ T5829] [ 119.130165][ T5829] dump_stack_lvl+0xe8/0x150 [ 119.130197][ T5829] should_fail_ex+0x467/0x600 [ 119.130230][ T5829] _copy_from_user+0x2d/0xb0 [ 119.130251][ T5829] do_tcp_setsockopt+0x504/0x1f80 [ 119.130277][ T5829] ? lockdep_hardirqs_on+0x7a/0x110 [ 119.130318][ T5829] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 119.130354][ T5829] ? __fget_files+0x2a/0x420 [ 119.130374][ T5829] ? sock_common_setsockopt+0x36/0xc0 [ 119.130401][ T5829] ? tcp_setsockopt+0x3d/0xe0 [ 119.130425][ T5829] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 119.130454][ T5829] do_sock_setsockopt+0x17c/0x1b0 [ 119.130479][ T5829] __x64_sys_setsockopt+0x143/0x1b0 [ 119.130502][ T5829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.130522][ T5829] do_syscall_64+0x174/0x580 [ 119.130549][ T5829] ? trace_irq_disable+0x3b/0x140 [ 119.130577][ T5829] ? clear_bhb_loop+0x70/0xc0 [ 119.130600][ T5829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.130622][ T5829] RIP: 0033:0x7f69cd69e0d9 [ 119.130641][ T5829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.130659][ T5829] RSP: 002b:00007f69cb8f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 119.130682][ T5829] RAX: ffffffffffffffda RBX: 00007f69cd925fa0 RCX: 00007f69cd69e0d9 [ 119.130698][ T5829] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000003 [ 119.130710][ T5829] RBP: 00007f69cb8f6090 R08: 0000000000000004 R09: 0000000000000000 [ 119.130722][ T5829] R10: 0000200000001840 R11: 0000000000000246 R12: 0000000000000001 [ 119.130735][ T5829] R13: 00007f69cd926038 R14: 00007f69cd925fa0 R15: 00007ffe13597e18 [ 119.130768][ T5829] [ 119.527996][ T5823] tmpfs: Unknown parameter 'grpqõota_block_hardäimit' [ 120.851360][ T5834] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5584] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5834] [ 121.449767][ T5838] netlink: 92 bytes leftover after parsing attributes in process `syz.3.22'. [ 123.573711][ T1000] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.800524][ T1000] usb 2-1: Using ep0 maxpacket: 8 [ 123.824154][ T1000] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 123.945506][ T1000] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 123.945537][ T1000] usb 2-1: config 0 has no interface number 0 [ 123.945587][ T1000] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 123.945611][ T1000] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 123.945638][ T1000] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 123.945665][ T1000] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 123.945710][ T1000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.253115][ T5879] capability: warning: `syz.2.33' uses 32-bit capabilities (legacy support in use) [ 126.469790][ T1000] usb 2-1: config 0 descriptor?? [ 126.681171][ T1000] usb 2-1: can't set config #0, error -71 [ 126.862779][ T1000] usb 2-1: USB disconnect, device number 2 [ 127.319727][ T5893] capability: warning: `syz.0.37' uses deprecated v2 capabilities in a way that may be insecure [ 127.740272][ T5899] FAULT_INJECTION: forcing a failure. [ 127.740272][ T5899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.740311][ T5899] CPU: 0 UID: 0 PID: 5899 Comm: syz.3.39 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 127.740341][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.740353][ T5899] Call Trace: [ 127.740361][ T5899] [ 127.740369][ T5899] dump_stack_lvl+0xe8/0x150 [ 127.740407][ T5899] should_fail_ex+0x467/0x600 [ 127.740444][ T5899] _copy_from_user+0x2d/0xb0 [ 127.740476][ T5899] get_timespec64+0x96/0x1b0 [ 127.740500][ T5899] ? __pfx_get_timespec64+0x10/0x10 [ 127.740523][ T5899] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 127.740555][ T5899] __se_sys_ppoll+0xe3/0x2b0 [ 127.740588][ T5899] ? fput+0xa0/0xd0 [ 127.740623][ T5899] ? __pfx___se_sys_ppoll+0x10/0x10 [ 127.740654][ T5899] ? __pfx_ksys_write+0x10/0x10 [ 127.740685][ T5899] ? __x64_sys_ppoll+0x20/0xc0 [ 127.740715][ T5899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.740740][ T5899] do_syscall_64+0x174/0x580 [ 127.740770][ T5899] ? trace_irq_disable+0x3b/0x140 [ 127.740801][ T5899] ? clear_bhb_loop+0x70/0xc0 [ 127.740824][ T5899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.740844][ T5899] RIP: 0033:0x7f55ac03e0d9 [ 127.740864][ T5899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.740882][ T5899] RSP: 002b:00007f55aa275028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 127.740904][ T5899] RAX: ffffffffffffffda RBX: 00007f55ac2c6090 RCX: 00007f55ac03e0d9 [ 127.740917][ T5899] RDX: 0000200000000400 RSI: 0000000000000001 RDI: 0000200000000200 [ 127.740931][ T5899] RBP: 00007f55aa275090 R08: 0000000000000000 R09: 0000000000000000 [ 127.740941][ T5899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.740950][ T5899] R13: 00007f55ac2c6128 R14: 00007f55ac2c6090 R15: 00007ffd5f4246d8 [ 127.740978][ T5899] [ 128.904471][ T5909] openvswitch: netlink: IPv4 tun info is not correct [ 129.270441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.290431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.300426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.310409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.320405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.330411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.340408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.350399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.360406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 132.158859][ T5914] FAULT_INJECTION: forcing a failure. [ 132.158859][ T5914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.158897][ T5914] CPU: 1 UID: 0 PID: 5914 Comm: syz.0.46 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 132.158922][ T5914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.158942][ T5914] Call Trace: [ 132.158951][ T5914] [ 132.158960][ T5914] dump_stack_lvl+0xe8/0x150 [ 132.158997][ T5914] should_fail_ex+0x467/0x600 [ 132.159035][ T5914] _copy_from_user+0x2d/0xb0 [ 132.159061][ T5914] __se_sys_epoll_ctl+0xbd/0x230 [ 132.159092][ T5914] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 132.159128][ T5914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.159152][ T5914] do_syscall_64+0x174/0x580 [ 132.159183][ T5914] ? trace_irq_disable+0x3b/0x140 [ 132.159217][ T5914] ? clear_bhb_loop+0x70/0xc0 [ 132.159244][ T5914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.159266][ T5914] RIP: 0033:0x7f69cd69e0d9 [ 132.159286][ T5914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.159304][ T5914] RSP: 002b:00007f69cb8f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 132.159327][ T5914] RAX: ffffffffffffffda RBX: 00007f69cd925fa0 RCX: 00007f69cd69e0d9 [ 132.159343][ T5914] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 132.159356][ T5914] RBP: 00007f69cb8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 132.159370][ T5914] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 132.159384][ T5914] R13: 00007f69cd926038 R14: 00007f69cd925fa0 R15: 00007ffe13597e18 [ 132.159418][ T5914] [ 132.835605][ T5930] FAULT_INJECTION: forcing a failure. [ 132.835605][ T5930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.835641][ T5930] CPU: 0 UID: 0 PID: 5930 Comm: syz.1.49 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 132.835666][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.835679][ T5930] Call Trace: [ 132.835687][ T5930] [ 132.835697][ T5930] dump_stack_lvl+0xe8/0x150 [ 132.835735][ T5930] should_fail_ex+0x467/0x600 [ 132.835774][ T5930] _copy_to_user+0x31/0xb0 [ 132.835801][ T5930] simple_read_from_buffer+0xe1/0x170 [ 132.835830][ T5930] proc_fail_nth_read+0x1be/0x230 [ 132.835861][ T5930] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.835889][ T5930] ? rw_verify_area+0x250/0x4d0 [ 132.835916][ T5930] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.835939][ T5930] vfs_read+0x219/0xa90 [ 132.835974][ T5930] ? __pfx_vfs_read+0x10/0x10 [ 132.836001][ T5930] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 132.836033][ T5930] ? lockdep_hardirqs_on+0x7a/0x110 [ 132.836064][ T5930] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 132.836095][ T5930] ? mutex_lock_nested+0x152/0x1d0 [ 132.836118][ T5930] ? fdget_pos+0x252/0x320 [ 132.836149][ T5930] ksys_read+0x156/0x270 [ 132.836177][ T5930] ? __pfx_ksys_read+0x10/0x10 [ 132.836211][ T5930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.836236][ T5930] do_syscall_64+0x174/0x580 [ 132.836265][ T5930] ? trace_irq_disable+0x3b/0x140 [ 132.836300][ T5930] ? clear_bhb_loop+0x70/0xc0 [ 132.836328][ T5930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.836351][ T5930] RIP: 0033:0x7f0e7e83e90e [ 132.836378][ T5930] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 132.836396][ T5930] RSP: 002b:00007f0e7cab4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 132.836436][ T5930] RAX: ffffffffffffffda RBX: 00007f0e7cab56c0 RCX: 00007f0e7e83e90e [ 132.836451][ T5930] RDX: 000000000000000f RSI: 00007f0e7cab50a0 RDI: 0000000000000004 [ 132.836464][ T5930] RBP: 00007f0e7cab5090 R08: 0000000000000000 R09: 0000000000000000 [ 132.836477][ T5930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.836489][ T5930] R13: 00007f0e7eb06128 R14: 00007f0e7eb06090 R15: 00007fffa27601e8 [ 132.836523][ T5930] [ 133.107109][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.107380][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.902574][ T5943] tmpfs: Unknown parameter 'grpqõota_block_hardäimit' [ 134.044189][ T5941] warning: `syz.1.51' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 134.514312][ T5952] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.686251][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.55'. [ 137.184965][ T5978] FAULT_INJECTION: forcing a failure. [ 137.184965][ T5978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.185004][ T5978] CPU: 1 UID: 0 PID: 5978 Comm: syz.3.65 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 137.185028][ T5978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.185042][ T5978] Call Trace: [ 137.185050][ T5978] [ 137.185059][ T5978] dump_stack_lvl+0xe8/0x150 [ 137.185098][ T5978] should_fail_ex+0x467/0x600 [ 137.185135][ T5978] _copy_from_user+0x2d/0xb0 [ 137.185162][ T5978] __sys_bpf+0x2e7/0xd90 [ 137.185192][ T5978] ? __pfx___sys_bpf+0x10/0x10 [ 137.185217][ T5978] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 137.185255][ T5978] ? rt_mutex_slowunlock+0x219/0x460 [ 137.185300][ T5978] ? ksys_write+0x248/0x270 [ 137.185330][ T5978] ? __pfx_ksys_write+0x10/0x10 [ 137.185363][ T5978] __x64_sys_bpf+0xba/0xd0 [ 137.185396][ T5978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.185421][ T5978] do_syscall_64+0x174/0x580 [ 137.185451][ T5978] ? trace_irq_disable+0x3b/0x140 [ 137.185484][ T5978] ? clear_bhb_loop+0x70/0xc0 [ 137.185512][ T5978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.185534][ T5978] RIP: 0033:0x7f55ac03e0d9 [ 137.185555][ T5978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.185573][ T5978] RSP: 002b:00007f55aa296028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 137.185605][ T5978] RAX: ffffffffffffffda RBX: 00007f55ac2c5fa0 RCX: 00007f55ac03e0d9 [ 137.185621][ T5978] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 137.185635][ T5978] RBP: 00007f55aa296090 R08: 0000000000000000 R09: 0000000000000000 [ 137.185648][ T5978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.185660][ T5978] R13: 00007f55ac2c6038 R14: 00007f55ac2c5fa0 R15: 00007ffd5f4246d8 [ 137.185695][ T5978] [ 137.580241][ T5981] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5578] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5981] [ 138.413307][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'. [ 138.607592][ T5984] Invalid ELF header type: 3 != 1 [ 138.965003][ T5991] tmpfs: Unknown parameter 'grpqõota_block_hardäimit' [ 141.605744][ T2032] kernel read not supported for file /36/gid_map (pid: 2032 comm: kworker/0:2) [ 141.994004][ T6010] FAULT_INJECTION: forcing a failure. [ 141.994004][ T6010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.994045][ T6010] CPU: 1 UID: 0 PID: 6010 Comm: syz.1.75 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 141.994075][ T6010] Tainted: [L]=SOFTLOCKUP [ 141.994083][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.994096][ T6010] Call Trace: [ 141.994104][ T6010] [ 141.994113][ T6010] dump_stack_lvl+0xe8/0x150 [ 141.994151][ T6010] should_fail_ex+0x467/0x600 [ 141.994190][ T6010] _copy_from_user+0x2d/0xb0 [ 141.994219][ T6010] ___sys_sendmsg+0x1c6/0x360 [ 141.994246][ T6010] ? __lock_acquire+0x683/0x2ce0 [ 141.994273][ T6010] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.994336][ T6010] ? __fget_files+0x2a/0x420 [ 141.994357][ T6010] ? __fget_files+0x3a8/0x420 [ 141.994390][ T6010] __x64_sys_sendmsg+0x1b7/0x290 [ 141.994420][ T6010] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 141.994468][ T6010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.994492][ T6010] do_syscall_64+0x174/0x580 [ 141.994522][ T6010] ? trace_irq_disable+0x3b/0x140 [ 141.994556][ T6010] ? clear_bhb_loop+0x70/0xc0 [ 141.994584][ T6010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.994605][ T6010] RIP: 0033:0x7f0e7e87e0d9 [ 141.994626][ T6010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.994643][ T6010] RSP: 002b:00007f0e7cad6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.994666][ T6010] RAX: ffffffffffffffda RBX: 00007f0e7eb05fa0 RCX: 00007f0e7e87e0d9 [ 141.994682][ T6010] RDX: 0000000000008840 RSI: 0000200000000740 RDI: 0000000000000003 [ 141.994695][ T6010] RBP: 00007f0e7cad6090 R08: 0000000000000000 R09: 0000000000000000 [ 141.994708][ T6010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.994720][ T6010] R13: 00007f0e7eb06038 R14: 00007f0e7eb05fa0 R15: 00007fffa27601e8 [ 141.994754][ T6010] [ 142.382778][ T6016] netlink: 'syz.3.76': attribute type 1 has an invalid length. [ 142.702316][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'. [ 142.805075][ T5570] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 142.921185][ T6023] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5581] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[6023] [ 143.761802][ T6027] 9p: Bad value for 'rfdno' [ 143.880252][ T5570] usb 2-1: Using ep0 maxpacket: 32 [ 145.155564][ T6025] syz.4.60 (6025): drop_caches: 2 [ 145.191695][ T5570] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 145.224895][ T5570] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 145.224931][ T5570] usb 2-1: config 0 has no interface number 0 [ 145.224985][ T5570] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.266196][ T5570] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.266228][ T5570] usb 2-1: Product: syz [ 145.266245][ T5570] usb 2-1: Manufacturer: syz [ 145.266262][ T5570] usb 2-1: SerialNumber: syz [ 145.381393][ T5570] usb 2-1: config 0 descriptor?? [ 145.382071][ T5570] usb 2-1: can't set config #0, error -71 [ 145.417709][ T5570] usb 2-1: USB disconnect, device number 3 [ 147.548799][ T6033] FAULT_INJECTION: forcing a failure. [ 147.548799][ T6033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.548839][ T6033] CPU: 0 UID: 0 PID: 6033 Comm: syz.0.80 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 147.548870][ T6033] Tainted: [L]=SOFTLOCKUP [ 147.548878][ T6033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.548891][ T6033] Call Trace: [ 147.548900][ T6033] [ 147.548909][ T6033] dump_stack_lvl+0xe8/0x150 [ 147.548951][ T6033] should_fail_ex+0x467/0x600 [ 147.548988][ T6033] _copy_from_user+0x2d/0xb0 [ 147.549014][ T6033] __sys_bpf+0x2e7/0xd90 [ 147.549046][ T6033] ? __pfx___sys_bpf+0x10/0x10 [ 147.549071][ T6033] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 147.549109][ T6033] ? rt_mutex_slowunlock+0x219/0x460 [ 147.549155][ T6033] ? ksys_write+0x248/0x270 [ 147.549190][ T6033] ? __pfx_ksys_write+0x10/0x10 [ 147.549223][ T6033] __x64_sys_bpf+0xba/0xd0 [ 147.549257][ T6033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.549282][ T6033] do_syscall_64+0x174/0x580 [ 147.549312][ T6033] ? trace_irq_disable+0x3b/0x140 [ 147.549346][ T6033] ? clear_bhb_loop+0x70/0xc0 [ 147.549382][ T6033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.549404][ T6033] RIP: 0033:0x7f69cd69e0d9 [ 147.549425][ T6033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.549443][ T6033] RSP: 002b:00007f69cb8f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 147.549465][ T6033] RAX: ffffffffffffffda RBX: 00007f69cd925fa0 RCX: 00007f69cd69e0d9 [ 147.549481][ T6033] RDX: 0000000000000040 RSI: 00002000000012c0 RDI: 000000000000001c [ 147.549495][ T6033] RBP: 00007f69cb8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 147.549508][ T6033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.549521][ T6033] R13: 00007f69cd926038 R14: 00007f69cd925fa0 R15: 00007ffe13597e18 [ 147.549554][ T6033] [ 147.875948][ T5700] kernel read not supported for file /58/gid_map (pid: 5700 comm: kworker/1:5) [ 150.731710][ T6047] tmpfs: Unknown parameter 'grpqõota_block_hardäimit' [ 151.119690][ T6066] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5580] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[6066] [ 152.072515][ T6073] netlink: 132 bytes leftover after parsing attributes in process `syz.2.92'. [ 152.199910][ T6070] FAULT_INJECTION: forcing a failure. [ 152.199910][ T6070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.199950][ T6070] CPU: 0 UID: 0 PID: 6070 Comm: syz.4.93 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 152.199979][ T6070] Tainted: [L]=SOFTLOCKUP [ 152.199987][ T6070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.199999][ T6070] Call Trace: [ 152.200007][ T6070] [ 152.200017][ T6070] dump_stack_lvl+0xe8/0x150 [ 152.200054][ T6070] should_fail_ex+0x467/0x600 [ 152.200091][ T6070] strncpy_from_user+0x36/0x2c0 [ 152.200126][ T6070] path_removexattrat+0x130/0x760 [ 152.200160][ T6070] ? __pfx_path_removexattrat+0x10/0x10 [ 152.200188][ T6070] ? lockdep_hardirqs_on+0x7a/0x110 [ 152.200246][ T6070] ? __pfx_ksys_write+0x10/0x10 [ 152.200277][ T6070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.200300][ T6070] __x64_sys_removexattr+0x62/0x70 [ 152.200332][ T6070] do_syscall_64+0x174/0x580 [ 152.200361][ T6070] ? trace_irq_disable+0x3b/0x140 [ 152.200395][ T6070] ? clear_bhb_loop+0x70/0xc0 [ 152.200423][ T6070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.200445][ T6070] RIP: 0033:0x7f305d98e0d9 [ 152.200466][ T6070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.200484][ T6070] RSP: 002b:00007f305bbe6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 152.200507][ T6070] RAX: ffffffffffffffda RBX: 00007f305dc15fa0 RCX: 00007f305d98e0d9 [ 152.200522][ T6070] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000240 [ 152.200535][ T6070] RBP: 00007f305bbe6090 R08: 0000000000000000 R09: 0000000000000000 [ 152.200548][ T6070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.200560][ T6070] R13: 00007f305dc16038 R14: 00007f305dc15fa0 R15: 00007fffe33e2b48 [ 152.200594][ T6070] [ 152.259112][ T6072] bond0: entered promiscuous mode [ 152.259171][ T6072] bond_slave_0: entered promiscuous mode [ 152.261061][ T6072] bond_slave_1: entered promiscuous mode [ 152.473423][ T6072] batadv0: entered promiscuous mode [ 152.527392][ T6072] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 152.664181][ T9] kernel read not supported for file /50/gid_map (pid: 9 comm: kworker/0:0) [ 152.780721][ T6081] mmap: syz.4.95 (6081) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 152.945141][ T6082] process 'syz.4.95' launched './file0' with NULL argv: empty string added [ 153.901769][ T5843] IPVS: starting estimator thread 0... [ 154.130641][ T6085] IPVS: using max 10 ests per chain, 24000 per kthread [ 155.132130][ T6107] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5581] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[6107] [ 155.690603][ T5684] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 155.987411][ T5684] usb 4-1: Using ep0 maxpacket: 8 [ 155.988384][ T5684] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 155.990227][ T5684] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 155.990254][ T5684] usb 4-1: config 0 has no interface number 0 [ 155.990299][ T5684] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 155.990620][ T5684] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 155.990647][ T5684] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 155.990675][ T5684] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 155.990720][ T5684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.212414][ T5700] kernel read not supported for file /79/gid_map (pid: 5700 comm: kworker/1:5) [ 156.261247][ T6115] FAULT_INJECTION: forcing a failure. [ 156.261247][ T6115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.261288][ T6115] CPU: 1 UID: 0 PID: 6115 Comm: syz.0.108 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 156.261325][ T6115] Tainted: [L]=SOFTLOCKUP [ 156.261333][ T6115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.261348][ T6115] Call Trace: [ 156.261356][ T6115] [ 156.261366][ T6115] dump_stack_lvl+0xe8/0x150 [ 156.261403][ T6115] should_fail_ex+0x467/0x600 [ 156.261442][ T6115] _copy_from_user+0x2d/0xb0 [ 156.261469][ T6115] ___sys_sendmsg+0x1c6/0x360 [ 156.261497][ T6115] ? __lock_acquire+0x683/0x2ce0 [ 156.261536][ T6115] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.261570][ T6115] ? kstrtouint+0x6e/0xe0 [ 156.261629][ T6115] ? __fget_files+0x2a/0x420 [ 156.261651][ T6115] ? __fget_files+0x3a8/0x420 [ 156.261684][ T6115] __sys_sendmmsg+0x279/0x4d0 [ 156.261718][ T6115] ? __pfx___sys_sendmmsg+0x10/0x10 [ 156.261755][ T6115] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 156.261797][ T6115] ? ksys_write+0x248/0x270 [ 156.261827][ T6115] ? __pfx_ksys_write+0x10/0x10 [ 156.261861][ T6115] __x64_sys_sendmmsg+0xa0/0xc0 [ 156.261889][ T6115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.261913][ T6115] do_syscall_64+0x174/0x580 [ 156.261945][ T6115] ? trace_irq_disable+0x3b/0x140 [ 156.261979][ T6115] ? clear_bhb_loop+0x70/0xc0 [ 156.262007][ T6115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.262030][ T6115] RIP: 0033:0x7f69cd69e0d9 [ 156.262051][ T6115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.262069][ T6115] RSP: 002b:00007f69cb8f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 156.262093][ T6115] RAX: ffffffffffffffda RBX: 00007f69cd925fa0 RCX: 00007f69cd69e0d9 [ 156.262109][ T6115] RDX: 0000000000000001 RSI: 0000200000001fc0 RDI: 0000000000000003 [ 156.262123][ T6115] RBP: 00007f69cb8f6090 R08: 0000000000000000 R09: 0000000000000000 [ 156.262136][ T6115] R10: 0000000000040880 R11: 0000000000000246 R12: 0000000000000001 [ 156.262149][ T6115] R13: 00007f69cd926038 R14: 00007f69cd925fa0 R15: 00007ffe13597e18 [ 156.262183][ T6115] [ 156.692437][ T5684] usb 4-1: config 0 descriptor?? [ 157.022476][ T5684] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 157.366661][ T5684] usb 4-1: USB disconnect, device number 6 [ 158.016174][ T5684] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 158.183299][ T6131] tmpfs: Unknown parameter 'grpqõota_block_hardäimit' [ 158.864842][ T6142] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5580] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[6142] [ 161.996119][ T6152] FAULT_INJECTION: forcing a failure. [ 161.996119][ T6152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.996154][ T6152] CPU: 0 UID: 0 PID: 6152 Comm: syz.4.119 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 161.996179][ T6152] Tainted: [L]=SOFTLOCKUP [ 161.996185][ T6152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.996195][ T6152] Call Trace: [ 161.996202][ T6152] [ 161.996209][ T6152] dump_stack_lvl+0xe8/0x150 [ 161.996241][ T6152] should_fail_ex+0x467/0x600 [ 161.996273][ T6152] _copy_from_user+0x2d/0xb0 [ 161.996293][ T6152] __sys_bpf+0x2e7/0xd90 [ 161.996316][ T6152] ? __pfx___sys_bpf+0x10/0x10 [ 161.996334][ T6152] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 161.996377][ T6152] ? rt_mutex_slowunlock+0x219/0x460 [ 161.996414][ T6152] ? ksys_write+0x248/0x270 [ 161.996438][ T6152] ? __pfx_ksys_write+0x10/0x10 [ 161.996469][ T6152] __x64_sys_bpf+0xba/0xd0 [ 161.996502][ T6152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.996525][ T6152] do_syscall_64+0x174/0x580 [ 161.996556][ T6152] ? trace_irq_disable+0x3b/0x140 [ 161.996590][ T6152] ? clear_bhb_loop+0x70/0xc0 [ 161.996615][ T6152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.996633][ T6152] RIP: 0033:0x7f305d98e0d9 [ 161.996650][ T6152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.996665][ T6152] RSP: 002b:00007f305bbe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 161.996683][ T6152] RAX: ffffffffffffffda RBX: 00007f305dc15fa0 RCX: 00007f305d98e0d9 [ 161.996696][ T6152] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 161.996708][ T6152] RBP: 00007f305bbe6090 R08: 0000000000000000 R09: 0000000000000000 [ 161.996718][ T6152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.996728][ T6152] R13: 00007f305dc16038 R14: 00007f305dc15fa0 R15: 00007fffe33e2b48 [ 161.996755][ T6152] [ 162.392126][ T5699] kernel read not supported for file /88/gid_map (pid: 5699 comm: kworker/1:4) [ 162.511904][ T5773] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 162.660509][ T5773] usb 1-1: Using ep0 maxpacket: 32 [ 162.661478][ T5773] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 162.662990][ T5773] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 162.663015][ T5773] usb 1-1: config 0 has no interface number 0 [ 162.663062][ T5773] usb 1-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 162.663086][ T5773] usb 1-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 162.672982][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.673010][ T5773] usb 1-1: Product: syz [ 162.673027][ T5773] usb 1-1: Manufacturer: syz [ 162.673042][ T5773] usb 1-1: SerialNumber: syz [ 162.766340][ T5773] usb 1-1: config 0 descriptor?? [ 162.810877][ T5773] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 163.004202][ T5773] usb 1-1: qt2_setup_urbs - submit read urb failed -90 [ 163.004460][ T5773] quatech2 1-1:0.51: probe with driver quatech2 failed with error -90 [ 163.041372][ T5773] ================================================================== [ 163.041387][ T5773] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 163.041425][ T5773] Read of size 8 at addr ffffc900069d9008 by task kworker/1:7/5773 [ 163.041440][ T5773] [ 163.041456][ T5773] CPU: 1 UID: 0 PID: 5773 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 163.041485][ T5773] Tainted: [L]=SOFTLOCKUP [ 163.041492][ T5773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.041506][ T5773] Workqueue: usb_hub_wq hub_event [ 163.041529][ T5773] Call Trace: [ 163.041538][ T5773] [ 163.041547][ T5773] dump_stack_lvl+0xe8/0x150 [ 163.041578][ T5773] print_address_description+0x55/0x1e0 [ 163.041608][ T5773] ? __list_add_valid_or_report+0x4e/0x130 [ 163.041639][ T5773] print_report+0x58/0x70 [ 163.041665][ T5773] kasan_report+0x117/0x150 [ 163.041687][ T5773] ? __list_add_valid_or_report+0x4e/0x130 [ 163.041723][ T5773] __list_add_valid_or_report+0x4e/0x130 [ 163.041756][ T5773] kcov_remote_stop+0x457/0x680 [ 163.041791][ T5773] hub_event+0x4789/0x4cf0 [ 163.041836][ T5773] ? __pfx_hub_event+0x10/0x10 [ 163.041856][ T5773] ? process_scheduled_works+0xa20/0x14e0 [ 163.041884][ T5773] ? rcu_is_watching+0x15/0xb0 [ 163.041911][ T5773] ? process_scheduled_works+0xa20/0x14e0 [ 163.041934][ T5773] process_scheduled_works+0xa8e/0x14e0 [ 163.041979][ T5773] ? __pfx_process_scheduled_works+0x10/0x10 [ 163.042007][ T5773] ? assign_work+0x3cf/0x5d0 [ 163.042033][ T5773] worker_thread+0xa47/0xfb0 [ 163.042072][ T5773] ? __kthread_parkme+0x71/0x1f0 [ 163.042104][ T5773] kthread+0x388/0x470 [ 163.042134][ T5773] ? __pfx_worker_thread+0x10/0x10 [ 163.042158][ T5773] ? __pfx_kthread+0x10/0x10 [ 163.042190][ T5773] ret_from_fork+0x514/0xb70 [ 163.042221][ T5773] ? __pfx_ret_from_fork+0x10/0x10 [ 163.042252][ T5773] ? __switch_to+0xc89/0x1420 [ 163.042287][ T5773] ? __pfx_kthread+0x10/0x10 [ 163.042317][ T5773] ret_from_fork_asm+0x1a/0x30 [ 163.042358][ T5773] [ 163.042367][ T5773] [ 163.042372][ T5773] The buggy address belongs to a vmalloc virtual mapping [ 163.042391][ T5773] Memory state around the buggy address: [ 163.042403][ T5773] ffffc900069d8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 163.042417][ T5773] ffffc900069d8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 163.042431][ T5773] >ffffc900069d9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 163.042441][ T5773] ^ [ 163.042452][ T5773] ffffc900069d9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 163.042466][ T5773] ffffc900069d9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 163.042476][ T5773] ================================================================== [ 163.043328][ T5773] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 163.043351][ T5773] CPU: 1 UID: 0 PID: 5773 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 163.043381][ T5773] Tainted: [L]=SOFTLOCKUP [ 163.043389][ T5773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.043403][ T5773] Workqueue: usb_hub_wq hub_event [ 163.043427][ T5773] Call Trace: [ 163.043435][ T5773] [ 163.043444][ T5773] vpanic+0x56c/0xa60 [ 163.043479][ T5773] ? __pfx_vpanic+0x10/0x10 [ 163.043512][ T5773] ? __pfx___schedule+0x10/0x10 [ 163.043544][ T5773] panic+0xc5/0xd0 [ 163.043574][ T5773] ? __pfx_panic+0x10/0x10 [ 163.043607][ T5773] ? preempt_schedule_thunk+0x16/0x40 [ 163.043637][ T5773] ? __list_add_valid_or_report+0x4e/0x130 [ 163.043670][ T5773] check_panic_on_warn+0x89/0xb0 [ 163.043701][ T5773] ? __list_add_valid_or_report+0x4e/0x130 [ 163.043733][ T5773] end_report+0x73/0x170 [ 163.043755][ T5773] ? __list_add_valid_or_report+0x4e/0x130 [ 163.043788][ T5773] kasan_report+0x128/0x150 [ 163.043812][ T5773] ? __list_add_valid_or_report+0x4e/0x130 [ 163.043850][ T5773] __list_add_valid_or_report+0x4e/0x130 [ 163.043883][ T5773] kcov_remote_stop+0x457/0x680 [ 163.043917][ T5773] hub_event+0x4789/0x4cf0 [ 163.043965][ T5773] ? __pfx_hub_event+0x10/0x10 [ 163.043984][ T5773] ? process_scheduled_works+0xa20/0x14e0 [ 163.044011][ T5773] ? rcu_is_watching+0x15/0xb0 [ 163.044036][ T5773] ? process_scheduled_works+0xa20/0x14e0 [ 163.044060][ T5773] process_scheduled_works+0xa8e/0x14e0 [ 163.044099][ T5773] ? __pfx_process_scheduled_works+0x10/0x10 [ 163.044126][ T5773] ? assign_work+0x3cf/0x5d0 [ 163.044150][ T5773] worker_thread+0xa47/0xfb0 [ 163.044182][ T5773] ? __kthread_parkme+0x71/0x1f0 [ 163.044212][ T5773] kthread+0x388/0x470 [ 163.044240][ T5773] ? __pfx_worker_thread+0x10/0x10 [ 163.044271][ T5773] ? __pfx_kthread+0x10/0x10 [ 163.044303][ T5773] ret_from_fork+0x514/0xb70 [ 163.044335][ T5773] ? __pfx_ret_from_fork+0x10/0x10 [ 163.044367][ T5773] ? __switch_to+0xc89/0x1420 [ 163.044394][ T5773] ? __pfx_kthread+0x10/0x10 [ 163.044423][ T5773] ret_from_fork_asm+0x1a/0x30 [ 163.044464][ T5773] [ 163.045066][ T5773] Kernel Offset: disabled