last executing test programs: 12m50.308966708s ago: executing program 1 (id=123): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000", @ANYRES16=r1, @ANYBLOB="0103000000000000000008"], 0x14}}, 0x0) 12m50.299822466s ago: executing program 1 (id=124): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000", @ANYRES16=r1, @ANYBLOB="0103000000000000000008"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) 12m50.225364892s ago: executing program 1 (id=125): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001114d3fd"], 0x38}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x7615, 0x2, 0x2, 0x4010, 0x2}, 0x30, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='bbr', 0x3) write$binfmt_script(r2, &(0x7f0000000180), 0xfffffd9d) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12m47.042098856s ago: executing program 1 (id=140): mkdir(&(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./tracefs_dir\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x89901) move_mount(r0, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./tracefs_dir\x00', 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000080)={0x2, 0x102, 0x0, {0x200a, 0x80022bb, 0x4, 0x4000002}}) 12m46.967323939s ago: executing program 1 (id=141): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000380)={0x0, 0xf0ff, &(0x7f00000003c0)={&(0x7f0000000400)={0x20, 0x1418, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 12m46.788073766s ago: executing program 1 (id=142): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0103000000000000000008"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, r0) 12m46.591391527s ago: executing program 32 (id=142): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0103000000000000000008"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, r0) 11m46.74035307s ago: executing program 2 (id=439): write$tun(0xffffffffffffffff, &(0x7f0000000700)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x12d, 0xb29, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x2c, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x4e20, 0x4e24, 0x18, 0x0, @wg=@data={0x4, 0x202, 0x10001}}}}, 0x3a) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x40, &(0x7f0000000340)=ANY=[], 0x0) syz_usb_ep_write(r1, 0x81, 0x7, &(0x7f0000000180)="90010000000000") syz_open_dev$char_usb(0xc, 0xb4, 0x0) 11m44.250026586s ago: executing program 2 (id=447): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) (async) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) (async) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="390000001300034700bb5be1c3e4feff060000001e0000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000400)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) (async) listen(r1, 0x0) sendmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x2, 0x4000893) (async) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='27', 0x2) socket$unix(0x1, 0x2, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340), 0x418, 0x0) 11m44.156281975s ago: executing program 2 (id=449): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r2}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000200)=0x2) (fail_nth: 2) 11m44.000940437s ago: executing program 2 (id=450): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r2}) mkdir(&(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./tracefs_dir\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) move_mount(r4, &(0x7f00000003c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./tracefs_dir\x00', 0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000200)=0x2) 11m43.956631498s ago: executing program 2 (id=452): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x5, {0x4, 0x80000000, 0xa, 0xfffffffe}}) 11m43.556930908s ago: executing program 2 (id=454): socket$inet6(0xa, 0x3, 0x8000000003c) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000071009154090893b3520ba54a07"], 0xfe33) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 11m43.228806795s ago: executing program 33 (id=454): socket$inet6(0xa, 0x3, 0x8000000003c) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000071009154090893b3520ba54a07"], 0xfe33) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 2m4.352815974s ago: executing program 0 (id=4461): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="64000000100001060000000000000000000000003f0000000000000000000000100003007665746830000000000000001000120008000100766574681800", 0x3e}], 0x1}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000380)={0x4, 0x0, [{0xc0000001, 0x2, 0x1, 0x6, 0x7, 0x10001, 0x44}, {0xc0000000, 0xffff7fff, 0x2, 0x80000001, 0x1, 0x3ff, 0x2}, {0x80000008, 0x9, 0x0, 0x1000005, 0xfffffffc, 0x4, 0x80000001}, {0x80000008, 0xb, 0x2, 0x0, 0x8, 0x37b5c985, 0x9}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 3) 2m3.983659598s ago: executing program 0 (id=4463): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) 2m3.59247795s ago: executing program 0 (id=4464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$PTP_CLOCK_GETCAPS(r2, 0x80503d01, &(0x7f0000000240)) syz_usb_control_io(r1, &(0x7f0000000040)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="200182"], 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="20010d"], 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x80, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x15, 0x6, "a7f847399063205b96d313c8db02fda2bb"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x38, 0x6, "16ca4a1f1db4dec45ecacb4aeeffd06e8627993715f902eb4fbccac8cae5c6e662b75692d2fe8e7f01c7e0db7ebf4874719a2eb9"}]}, @NFT_MSG_NEWSETELEM={0x2078, 0xc, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x490, 0x3, 0x0, 0x1, [{0x3f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x8c, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x7c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x78, 0x3, "13c666bea15d3cb4c6bfb56613a84eaa2c8ef63c1eaaf2c515357b9208eff5c2b56eaa5561527b12b0a9e9183d412d22fbc9740f89aede95c1d99c0929295d78f363cf07809df98ace0caed3a8de534c647cefded6880580b9fbe1c2f376cbacdbd4dc443a911e69fddcb42f37cd71cce3f0710a"}]}}}, @NFTA_SET_ELEM_KEY={0x214, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf3, 0x1, "a60000c4b997aa540c048e8e36c24498b1814c10ab1c201d842da06920438eb3388deec61a0c9ff7798a2d1fd1b84dc6f915eeba4a8dcacff219cea1d98d07374fa77ebb604f2be8aad04b692b9043b9c987ba1b759358382c65948af23b7abf17795ecb7326bdc9b3a8bedb917cc70e379d2af6576d712f03788fd5b259f3585082438697992e80d0516a4766c55d467aeab76f6d18e63a98b52ffcc61390cb8fef6e2067d8f1bb1c43bf11013ec8360b99343e852639742ed7ca0cae428f730cde9d506eeea1889271c7afc81d4ee3f9782bca6e6eb89620bb614d3b90813e82c439010246f4061f9c46998970ee"}, @NFTA_DATA_VALUE={0xe1, 0x1, "0489e75feef5e84bbc9f51bc36d71f18e33e6d5fbf6fed841631ba2f5b0522891b0ea05c84fa9e26f944b924b26a4e07717e79c028dc501281d65dca6022177cc39457a4e82e93bda051029e7b902cab5be80021720d4038ad1fe1f63c39655841c20e989f5a051af8d8b9a24d77169b2c3b517f66f6f8ab4ed14ed3e05560c916e1e6e5036fb130d46d762c0977fdb53bcf6e46cdc2aff26737b8b61b4d8d7596699d06f7eba15d5fc7489536b57f3952decc9d4f0bc1cec4a210cc56cf4a9f2720652cb671780ca43eabdd1ea6a75d69e22047356763d5c734b1d25d"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0xf4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "cd65787900c2b0f8ffac5827bc7305624dea8b763498fa3a70cfc06c5f3bb39fa8fcee56b3a105f140807a9f4987dcb5a060a091c30ddc6884abf687244acbe53d36f09cc5e2f601f2fc0296ce13262e90c75f918a3bee5e2233bc4ac07f1fcf173b39010adcc2a66f6d680e5a71122340697e9a668b1ac3c28a800ac287146f9c3cfa9e865f34d7addda17f146d52601731a01991d050522b13928b0a3231dafdfc4984ba8a2b2243705cf0d40eea9202f5d3b276490815fd15cf99e599d70b19bcc91f853315e42f1ed94c19d0f384925d80225d9f590943806570c6232c302ac38832ae67e9c1d6"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x48, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}, {0x98, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x58, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xfff}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1bc8, 0x3, 0x0, 0x1, [{0x1674, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0x8a, 0x6, 0x1, 0x0, "89110669824912b12d7fa79a4b8cf08a84411feed5ea8c77d65c8dce68fe0d4f56fa9d9bd3ec7cdd844a05fde4439967fec45433335fb487bda867f784f3df90e7445cf27c619c689fcf47e3145292df9bb25a24c4da70cd881ee1cd686d7d19e7c4e336c716f8b65cafe00041b1b077160c26ff1071be87046cd0eec539d05c3f5a9dd24a46"}, @NFTA_SET_ELEM_KEY={0x1c4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x41, 0x1, "6a99aaa20e622a404065bf4dd8741a414ef95368acb4e8fbbd044171c9d6f94383904a44a7c4f322f8c3f81f7ae10b772e80fb469ce4a572d3c6820bb7"}, @NFTA_DATA_VALUE={0xda, 0x1, "216a643ff02cea497220232b277ba3bdeefa2ce9e225c619e32e185b1ed79ee0a04f1b201dcaea49c61f7fa2d5baa21a6b08a5dd100a33ddb02c07571793d7600e62f618ac0747d338ab4c2c5b3e037c27cce5b7ed1437ccdde2b7d4932d6ea65ecfc62b464805690176065129334008bb730f18a97f72d23d40e15cf8815529d27e40ec4b543a1ca9f83a84acb4cdd0ed8b0cf30bb01d5716583dc0ec2b8364ffd283c353f89d0672bf777412cc08dcc98c7b85b18426f343b342a6a35099a0d578c1d10337e32bf357d13ae7a2fd4be0acf7be9a23"}, @NFTA_DATA_VALUE={0x76, 0x1, "f46480fb131bef548edb9ebfc3ababf240b2a103cb70dc5948ca421fd4b43e7aa5a61d1faa5d50acfdeee4d1dcc796e16fd4d83aba2cdb8c6a7578b8e1caba02b713d5f400c4d2a984a5fc2963c2aed960e910841d7f0277a61b4bdeca9dbf00452e812a90be196272f2fd58a768c05c305b"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_DATA={0x11b4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x98, 0x1, "945c0f3d52c0f6923317479b9668f72bd3622941923f03063bd8a28e6e9c33051cc885667171d34c097f7b491d561ccdd034c59156e4fc50b1673ea0b4adce6789e66ef239bcf15cf034542ce27325706a136a58aba8372fc62ac7c774638c35397509104170a7dc1c314ba1f65c6752f0f568cd9063d80003792a22c70efe2f4e4c281eb48b0b68fd84d42745c7fe41430fb6be"}, @NFTA_DATA_VALUE={0x89, 0x1, "be368383109221e2bc6e429464c48a522d53f4d6a724b86992e34d1aede086ed30cee9032da8e880f5f794dfcbfa15d7e645a78cb534678d41f822177b894fcde2a1b0bca6c880a3a3343d0d28dde392064ea8d8bbcb67cfc2dba72ab4fd1fc5b68968457630e05e0a1f7a51d6ca35b30125c91cfee0329bcfcfb5c6d3c29b0fe1d3171b19"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x228, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4a, 0x1, "7e1bb28f83c08179c8ac41ae0f38e797b9153210b7a4b385b0420f820f1b8a1f33e3bc8ae623f0ce39fe871c3cd470088ec4622aaf8ce66c39a7dc339216158bab8388fae77d"}, @NFTA_DATA_VALUE={0xed, 0x1, "c0490f919c3b1040c3988fbcbf22d5beec74fd77abcc066de5a62eb844a3d0a405d591d15a5c578ce9ed6bbf21d9ce9f090a0840d70193d528f1bb4dd8363d7563416b601785293b31fd1ee0fca232b670a1d34949abd65fd4bc1afe448eff0397f6c640bf3a614c895ef933dfbed0bdf70a5987ccca7557c6fafc47eaf8ea5c4eb9bcb2b4a623754e94d5cab415dd4eacf36f3d5a396e5cb53a85d71e5bfeefdb9907f9c11e4a7cb2385570ac359c75cee792c62a982271234121301a5cfe765e734639d208d6582f37922a0b8b14835528f4ba4c2ba684a24d4a81964416848ba67e366f50164254"}, @NFTA_DATA_VALUE={0x86, 0x1, "8f78d75560fc00d63f9e709957ce7b9102f4e64fba266ed280b128a51915bdac59d4ab05a614bd48b52b077114c3873f93bfb3e9b7e02f040effdb149f9b1f9fb8c8e34b3dad4aafd5d236bea4f93bd5f4c21f7788dd3c543b0bb1b16ef6be64efd79a448a408dfafc16d962012798d2adecdbb9250b6854ce2e01135a62a97f8077"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}, {0x364, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x29c, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x8000}, @NFTA_QUEUE_FLAGS={0x6}]}}}, {0x118, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x108, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xd, 0x3, "988e07e9391496f7db"}, @NFTA_MATCH_INFO={0xdd, 0x3, "fd554133a16ec6576bbc91bb43bebc47cdff5ade8d2157d2094faf4ad31d9a9cb9ea32efa94e9d233cdc8c39ecd90210755f61b8a3f74cd66e670bd8ab230b65363bb82d904a3c90a72439e72ce0c651cdbe94a6952224fc56be21e95264f212d639745cb957fd334d85550853ccddc34541869132e36c62a22af85f2f413102e7fb4d2efe1df117036a2dd20da3b29032bf599e749d37facce43af285812046f7955488ef9c30380b6db54cba6644a5f85774fc8c2c1391165f8344215498840251bc4f4279296a7f8ba83a1737e9d116499f69ab8f8166cf"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'udplite\x00'}]}}}, {0x48, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x3}]}}}, {0x44, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x41}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x39}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x44, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x5a}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8}]}}}, {0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8f}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}]}}}, {0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x84}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xee}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xc1, 0x6, 0x1, 0x0, "b3b3405f45283bcf4de152c5bed79979b4797850557b48118cedfad01c3b82038da9623df594f372b4c1f6203d49d885837a40c2305124a0fd6a22ef2eddc3988cc8caa312590aa3c0af8a8250bfe18693350f8b43f4aae963dec5b0fd19fa83d25e78cc7d2ea6934e672ca3021dfb340a9983b947d7190f6136863452de356e72da39e03f48103b3e75edb3305cf314f5e2028d4dd827c3c44ac7a51b86cf71235958ff8b7b9cb854f5381869e30921a85eaac5d10815f8b81c572fba"}]}, {0xc4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x6c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPR={0x48, 0x7, 0x0, 0x1, @synproxy={{0xd}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xe3}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x81}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}]}}}]}, {0x128, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x108, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x101, 0x1, "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"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0xf0, 0x18, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'netpci0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x20}}, 0x2210}, 0x1, 0x0, 0x0, 0xd0}, 0x200408c4) 2m1.101095206s ago: executing program 0 (id=4476): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) 2m1.003947062s ago: executing program 0 (id=4478): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) setrlimit(0x2, &(0x7f0000000040)={0x2, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) setfsgid(0xee01) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='numa_maps\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000fc0)=""/214, 0xd6}], 0x1, 0x10000, 0x7ffffffe) setfsgid(0xee01) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000004c0)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000780)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xffffffff, 0x0, 0x4}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) syz_clone3(&(0x7f0000000e80)={0x180801400, &(0x7f0000000f00)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r7, 0x0, 0x0, 0x15, 0x0) syz_kvm_add_vcpu$x86(r6, &(0x7f00000008c0)={0x0, 0x0}) syz_kvm_add_vcpu$x86(r6, &(0x7f0000000e40)={0x0, &(0x7f0000000900)=[@nested_amd_set_intercept={0x181, 0x30, {0x1, 0x0, 0x0, 0x1}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_clgi={0x17f, 0x10}, @out_dx={0x6a, 0x28, {0xe4d0, 0x4, 0x4}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_vmload={0x182, 0x18}, @uexit={0x0, 0x18, 0xf3d5}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control16=0x4, 0x101, 0x401, 0xd}}, @set_irq_handler={0xc8, 0x20, {0xd7, 0x1}}, @code={0xa, 0x56, {"0fc7b9000000003ef3440fc7b4f600000000660f3881059597a21e44a7f3410fc73366f3430f7e050000000066ba400066b80f0066ef64460f30c4e141d8f566b8b7008ed8"}}, @cpuid={0x64, 0x18, {0xa, 0x2}}, @code={0xa, 0x68, {"66b8c7008ed80f01c966baa000ed66baf80cb86c3bea81ef66bafc0cecb9800000c00f3235000100000f3065640f01cfb9dd0900000f322e400f234bb9800000c00f3235008000000f30440f20c0350e000000440f22c0"}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x21, 0x0, 0xffff}}, @out_dx={0x6a, 0x28, {0x7386, 0x3, 0x9}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x21, 0x0, 0x5, 0x3}}, @wrmsr={0x65, 0x20, {0xbb8, 0x8}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x54, 0x2, 0x5, 0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x6, 0x4}}, @cpuid={0x64, 0x18, {0x4, 0x5}}, @nested_load_code={0x12e, 0x5e, {0x1, "c46379171909b9800000c00f3235000800000f30660f388287730a00000f06b9130600000f3266b8c4000f00d80f20e035010000000f22e066b8fa008ee0470f06c481f1f4ff"}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_load_syzos={0x136, 0xe5, {0x1, 0xb, [@nested_amd_stgi={0x17e, 0x10}, @code={0xa, 0x45, {"c4817c51340166660f38819e00000000f20f2d6d8b660fc7368f69a0963cc00f01f845dde5400d00000100b9341001c00f32decf"}}, @out_dx={0x6a, 0x28, {0x240c, 0xa487335aeb7fb0ae, 0x7}}, @nested_amd_stgi={0x17e, 0x10}, @wr_crn={0x67, 0x20, {0x0, 0x9}}, @rdmsr={0x66, 0x18, {0x180}}]}}, @cpuid={0x64, 0x18, {0xd, 0x10}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x93, 0x7, 0x10000, 0x3}}], 0x501}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000007c0)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'wg0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000840)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000880)={0x11, 0x0, r8}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x4020, &(0x7f0000000f40)={0x0, 0xd40c, 0x1000, 0x40004, 0x1e5}, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) 2m0.734893763s ago: executing program 0 (id=4480): r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xec) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x80) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010600000000000000002a00000008000200", @ANYRES32=r6, @ANYBLOB="06000600ffff000006000400a1aa00000c0005000901aaaaaaaaaaaa08002f00000000000500360000000000050037"], 0x50}}, 0x0) r7 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x200) close(r7) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000300)) 1m45.03656953s ago: executing program 34 (id=4480): r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xec) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x80) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010600000000000000002a00000008000200", @ANYRES32=r6, @ANYBLOB="06000600ffff000006000400a1aa00000c0005000901aaaaaaaaaaaa08002f00000000000500360000000000050037"], 0x50}}, 0x0) r7 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x200) close(r7) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000300)) 9.303675669s ago: executing program 4 (id=5043): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002f010000100001800a000200766c616e30000000140002800800010000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x86}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x24, r6, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4c054) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000580)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000005c0)={0x1d, r9, 0x102030405060708, {0x0, 0x0, 0x4}, 0xff}, 0x18) connect$can_j1939(r8, &(0x7f0000000600)={0x1d, r9, 0x0, {0x0, 0xee}, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x0, 0x6, 0x4, @private2, @remote, 0x7, 0x80, 0x7, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0xf7, 0x3, 0x5e, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1, 0x40, 0x7, 0x9, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000d40)={'gretap0\x00', 0x0, 0x1, 0x8007, 0x400, 0x5, {{0x1a, 0x4, 0x2, 0x5, 0x68, 0x67, 0x0, 0x0, 0x2f, 0x0, @private=0xa010102, @loopback, {[@end, @timestamp_prespec={0x44, 0x3c, 0x21, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@empty}, {@multicast2, 0x10001}, {@broadcast, 0x6}, {@rand_addr=0x64010101, 0x9}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x80000000}]}, @generic={0x0, 0x6, "08c4b554"}, @ssrr={0x89, 0xf, 0xef, [@multicast2, @dev={0xac, 0x14, 0x14, 0x31}, @multicast1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f0000000940)={'gre0\x00', 0x0, 0x10, 0x40, 0x5, 0x7fb, {{0x40, 0x4, 0x2, 0x2b, 0x100, 0x1, 0x0, 0x84, 0x29, 0x0, @empty, @multicast2, {[@ssrr={0x89, 0x7, 0xc0, [@dev={0xac, 0x14, 0x14, 0x40}]}, @generic={0x89, 0x11, "3b21dfd4e26c9eb00a58c2b7393fd6"}, @timestamp_prespec={0x44, 0x54, 0xc, 0x3, 0x2, [{@rand_addr=0x64010100, 0x3}, {@local, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x7}, {@multicast2, 0xdfef}, {@multicast2, 0xfffeffff}, {@multicast2, 0x7f8}, {@multicast2, 0x9}, {@broadcast, 0x6}, {@multicast2, 0x3}, {@local, 0x609}]}, @timestamp={0x44, 0x28, 0xe4, 0x0, 0x2, [0x7ff, 0x4, 0x1, 0x10000, 0x401, 0x200, 0x9, 0x38, 0x10001]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0xa5, 0x1, 0x7, [{@loopback}, {@loopback, 0x8}, {@broadcast, 0xff}, {@multicast1, 0x401}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20e9}, {@private=0xa010102, 0x3}, {@empty, 0x8}]}, @generic={0x94, 0x4, "97e4"}, @rr={0x7, 0x13, 0x22, [@loopback, @rand_addr=0x6, @loopback, @private=0xa010100]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000d00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1cc, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0xe4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x82, 0x5, "c61b64badd9dcbe5eb3af8ac10850555afda81bc1f9b56fe25f7d106e98ed128d3feea177c4ade5a8f789ff643baf38bade5e1f25ebd61ac436b894845e546019db1a2eead18cb1244d512f2df5ee320d1c0fa96abcf13a38fda491b434ac14c9bd65ff5ea6d23c1e4c802b212c44bc4487b8f1c2abd9fcae11f12dd7584"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3e}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '6:^}+{.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4040}, 0x20000041) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f00000001c0)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{0xae4, 0x3}, {0x0}, &(0x7f0000000280)=[{0x0}], 0x1, 0x60, 0x4}}], 0x48, 0x48004}, 0x0) r15 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=0x0, @ANYRES8=r0, @ANYRESHEX=r1, @ANYRES16=r1, @ANYRESDEC=r1, @ANYRESHEX=r1, @ANYRESHEX=r0, @ANYRES32=r1], 0x0) syz_usb_control_io$hid(r15, 0x0, 0x0) syz_usb_control_io$hid(r15, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002218000000050c150825ff0904a10109"], 0x0}, 0x0) syz_open_dev$hiddev(0x0, 0xa, 0x62080) r16 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r16, 0xc0306201, &(0x7f0000000680)={0x4, 0x0, &(0x7f0000000140)=[@request_death={0x400c630e, 0x3}], 0xfffffffffffffe72, 0x1000000000000}) 8.713149559s ago: executing program 4 (id=5046): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x5, {0x4, 0x80000000, 0xa, 0xfffffffe}}) 8.658849436s ago: executing program 4 (id=5047): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r4, &(0x7f0000000040)=[{}, {0x1, 0x1}, {}], 0xdeadbeef, 0x8, 0x3}) 8.593624448s ago: executing program 4 (id=5048): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{0x0}], 0x1) 8.496019635s ago: executing program 4 (id=5049): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000740)={0x1, 0x0, [{0x40000106}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001840)=""/4085, 0xff5}], 0x1}, 0x8}], 0x1, 0x20, 0x0) r4 = syz_io_uring_complete(0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000680)=""/10) mkdirat(0xffffffffffffff9c, &(0x7f0000002840)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000002880)='./proc\x00', &(0x7f00000028c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000002900)='./proc/mtrr\x00', 0x2, 0x2) ioctl(r5, 0x400c4d00, &(0x7f0000002940)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000600)={0x1, 'lo\x00'}, 0x18) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x81, 0xfffffbff, 0x40006}) r7 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r7, 0x2284, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/rtc/rtc0/wakealarm\x00', 0x1, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r9, 0x29, 0x39, &(0x7f00000006c0)=ANY=[@ANYBLOB="1f500009"], 0x98) write(r8, &(0x7f0000000480)='+1', 0x2) write$cgroup_int(r8, &(0x7f00000004c0)=0x820400080004, 0x12) memfd_secret(0x0) syz_clone(0x100000000, &(0x7f0000000240)="edc06cea8618f76a9312d19140ef4726d3392a4d85019b98af2671789036993ba8a78435be8cab6b0067409b3ff846d742e0310e2ad401a4fff4b85135e42808df2715b559aaebdeb79435f0303cef935701bd811381ee16bc6d8d4d272fa6c16216fa6496809a355b10eb992b72820c0a8a2eedf9fa08fcccad7d01c9befcba0bcbd0426475269c5d4cdd7bbdb9cd9a4488", 0x92, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000840)="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") r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000140)) socket$nl_audit(0x10, 0x3, 0x9) 8.184597764s ago: executing program 4 (id=5051): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x109000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) syz_open_procfs(0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000040)=0x100) 6.202340323s ago: executing program 5 (id=5058): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000280)="680000001800050602000000000000000a400000fe040001000000001400010020010db800a000000000000000000001080006000001000008000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500090003000000", 0x68) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x9) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x4, 0xb1, 0xfd, 0x4, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x40, 0x20, 0x6, 0xfffffffd}}) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000300)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000340)="7a3fb22fc9d2482a58976dca9dbf19097ecda17721be8ae1d7d1b8f40076d033da6e320759c338063bb83cb2b63104892097b3910e8882e525abd01d632bb2104c0b306d19d88e3df3286425f2aa08fad4ef82529552fd85d8a14c4d42b1b4e1b5b1ff8ebbee797c121483dba9e0b2a951376b0ce5df80194686a6b9cbb0e0132459edc10de9413084c29161c59e40d480a2d8a47c27fee8d4039c20ca36c1fd8a2d6dc5fa5ba12e2989ac399b4a8cf114fa1ad9b2917bd948eae0fa474c", 0xbe}, {&(0x7f0000000400)="638b2ed1df652a3b08a0d6f3418433ca1661be347c3c3dfd81c864818fbf21dbf371f7a4a247a64158500e3861d5bc4f9acf4ef07ec991ae32c0e671bc1ef4331949647938b6440bcdddf2fd36b0d7f3053f16c2ed55c7406f5f6a9af4e1c3a719041d8542236eb280056a409759729187eb265a3fb60f3965b4ccbf0e2f0ce55eef04bc09843b20e6903ed16c8e8c8b0ab223356da0717ad0", 0x99}, {&(0x7f00000004c0)="d88abed75853e8aca749a4869773019036943fe515f3b148e1d78369e66a", 0x1e}], 0x3, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @multicast2}}}], 0x80}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04023c20"], 0x7) 5.514987502s ago: executing program 5 (id=5063): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000800)="01154e000100445588fb0000892f", 0x1a, 0x804, &(0x7f00000046c0)={0x11, 0xf8, r1, 0x0, 0x0, 0x0}, 0x14) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/kernel/mm/transparent_hugepage/enabled\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='never', 0x5) setns(r3, 0x20000) r4 = syz_usb_connect(0x3, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r5 = socket(0x8, 0x5, 0x5) syz_usb_control_io$lan78xx(r4, &(0x7f0000000840)={0x14, &(0x7f0000000640)={0x0, 0x7, 0xbb, {0xbb, 0x22, "a8e4c145f516690a701b7e79946c2f517fc929d30dc900a0314842c0cb0c95bb2c16cb30380e518cbf58bd72326f4e3f7065126df29b683951889cb056b15f3e576deef9eb10235b471338d59d5ed32d1d226af9f99b5f28019bb8df3c05c3886b7596c6979e0ee06cf64bceab97e877853b77806186442d07a5214a9ee07186aa8090778fd1e1e5a5bc19fdda3169f2f4fd7647940f6b7b0d87c4297d784207e22262addc1de1ae47f3382defe168810b569dcd0ad45e40e7"}}, &(0x7f0000003500)=ANY=[@ANYBLOB="0003e3000000e303fbf0a995ef6ac61d4a6bed5e0a563f5a9b86964b144affb0ce19e6ac0f8d2cfd5595d19446f0fd5be2729ced2a26737bb94665c0a3651849ee620bdf8f3cbc31dce74ac445701300e479b2bd75a3b98f001793f22c4819b7134cd2acb2cda71329b3b15281e88f212843783fcb6c14703d4c6c25c43b6cdc8a8be2550cdc53df2ad23feac583e19588cc86a78e89c3062418c4cf52c68d28424f153a7ee3eda40611c415cce44af7b832dc3c47efb81ef465750aa269d46916914afce4b59f9e164d139a1f393469b5ec120a5a31043e8cccc0fad7ff22607fe80499f58c6005b3c5eaf1039a82fc20c9"]}, &(0x7f0000000a00)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="0007340000005ae3172c77ae8c24cae5c42b6859d9070622cfc58729a8821a173ceb9849732fcd9897df65ced6a32f266fa88c2c3e14d59caec768286711208fcb77ce8f5bb5dce35a95a353a879df5ffd21c1bfb29102195d555a0ef5bca7d2d74842764fd9e1fe28b2f39c536d30822f2bb0b6418d14de75a4ae1c79c858ab5a3b11f2db6e1a746c1bdf062faf69df4f3f0563cf375ed5233b378f76163143abc2cdf935dcc0c6e34380627050456bad8e7a46bb7e820e105541e7a02ed4aa4e8d3949"], &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0xf1}, &(0x7f0000000940)={0xc0, 0xa1, 0x4, 0x8}, &(0x7f0000000980)={0x40, 0xa0, 0x4, 0x7}, &(0x7f00000009c0)={0xc0, 0xa2, 0x2f, "f3e1473987ede0759ca0234e894d11d09befabb8bc34632c65639b1d7d2a6c5ce1e2e0350605e980b244dfc6beef3c"}}) syz_usb_ep_read(r4, 0x1, 0x0, 0x0) capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000180)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x1c, r8, 0x5, 0x0, 0x0, {{0x8e}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000034c0)={&(0x7f0000000a40), 0xc, &(0x7f0000003480)={&(0x7f0000006f80)={0x2928, r6, 0x800, 0x70bd2d, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x51}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "c6cf1112b0434a0d28"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "03a18aa6e97a3a6c085e40895c19"}, @NL80211_ATTR_FILS_ERP_REALM={0x30, 0xfa, "d703bd49d02622b8a31272ae82205edb34921521e7f1f67b2c9d16a121ac9f923f60ecaa7ad94171323755c1"}, @NL80211_ATTR_FILS_ERP_REALM={0xe6, 0xfa, "29084847a1c17e3e17decb4392d0c0b2d8508d3a4e4db21c4e842c28768624bf3d761a5f1cef1207b3fedc91091a8c518d0049e10b03fb756e524ad42e438158be1da69b894bf0fd5a268fdd39db8c98c3c65253d4e339fe7252317bf964083645e8df92b27761054acb9670812a1af06bf0157f262f3fe29817cc103e1f894bfdb8428e9cfdc0d8b8ca591661cb566d4d8cd56a5e3cd9e055d1896d9889283c9e174b717c79c5e3f4e99d4e3c2e1d36d168c70be810f33de0c569ae1a80fbbd6e888106273d217d3fc5e0e1b5f2533017b56bc7d4bbf8a7e9b2c3a22598c77c0377"}, @NL80211_ATTR_FILS_ERP_REALM={0x5a, 0xfa, "4313b4afda36cdfc397e108b7ce15b7b89f6a17c1b6767276d2d12f092c4e9aa69608286a9628ed068a71c38046b7627bdc7f63994161a88cacb65ff038a3a219500422986cda4d92867d092727a1e9696c90921ef7a"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_REALM={0xc1, 0xfa, "ade461ab922cef482a3b6febc11c3396759c68cfb2f2e403253235a0d2aecb5417077976214071942f335cd7f2f66d7998f9e3c58df094aefff568ff121a3481d7c6e1f1adbed356ccb20c23164a2ee355dbd6e3876fb30857f4d191849e9098c10e0a8adf1aa1df680fdec86767b4c575a92a5c75cd3f89a7a26099cbe221eb61ba1042895059ba362b666d7db2a40aab75b2db272775e5f276830ef578c409aa0f748496f6190faad365079cc32488c572b7039aa5ced3486d8ce758"}, @NL80211_ATTR_FILS_ERP_REALM={0x97, 0xfa, "2a5de85c03e64acc14fdabebfe494757e798187837be0ee70a360fbe050eb5deaa7920fc97d7b704b859e40765180ad191c7c4b4249f02511f85ebf788e07d3835e253343bc5bf8d5370a2e5d23fbe3d40c08ca71e27f04ed0e017b913144ff54e39326360e8c241c97dfc927f987d3a7909d7c4584495c5723582b32e9ffff5cb8450c9221b30c9586ba50a514e024bde0a91"}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xfff, 0xfc, "6e9840778df7405a4d3adb90b9f33cc0b50655076f93c803fc10529440a2c9293214a2052d2cc49f6991b43cc4b130640319670df4acc8ebf5f07b1dee1c75b7c6294eb9712b6016baa1dcfbb251192f4cdc487742c3f1778aa6f6a8c197365e0ca6699e688dc50a8f8ac730a8b0d5147f4be3a3d8527381c3b242089ac168ff148e0244432bdec131c753676a0186fdf9c480273b6861b7ccc6de3b7ede19db3dbbf33d47a14761ba51ef120b1035a6e300d51f9d3d120429ed8edda86cae9d5b9797385fd8d5d83159a2c866393a83b24fb7b91979843e11fac3f70c98d03d4bf4422db696bf72a5b377537f8f2e2bd344f188390871bb11321d7887cc218d62b835b0aedd0bfad98ad08305df4c3d08e435a94740ea255d736c10318ba10714cc0ecf7d91d439982c44ae6c339836a3cb0e85cbba1d584d68871c3cd7cc64e5dae048fea26b9b42c1a287410466a49a1b05249cf99b131f1196ad8c37f0aac80eeb520222dd9256f3b5d57029feeb24824f94fbde5b0594372d27c97493f7ffe006f3e662a2cc3bfadda97617730c0abf03b5206b5254a7243ed776607a4b07a4d4f4acd25e7bc7779944431ba13e64032daa40e247153502be7cfa64b17437e171684afb266f0710385bf1a5179a9ca4dfef1ff7f04e0ff0688ad29d48f988c0059663929981d5e9b2c8af657cd8a363fe13be7d5a749745b5c872047a25b4b3c22abe1c5ca6f7d7f2aacbf76e075fa17672f06f69b219007a1f53e6f605501c332af780724d864635aed9af873487ad4a494886689891dcc10a20a2b64c6542ca03514f0ae67b69995075a77dd6b634dd2b260933cb2f56dcc0b74b77d43cdb93931cdd53e84dfaa24fa1c9f7a5b11e155be6ca26daa3a988f6773a533100c6877cc1bf7dc5974874f2d9fad8971166edfa9fae4d98bdb718cbc5ebcf3a36587975e080810df5841ff1289090c727501b16b79e4ae921be1f5bdc7a79aee4cea1963806edd7a0fd32672dd07831c01a844ababd7cea214a18d21d59a52c289ee9231afdb922156257d38b599b42be09e841fec54a6648b42431a6c941ba9396a046b505df14c58657c1d9a7aa5e2689d35f67d020859386b49a177995ca9ef7d9d64bc6479a0cbbc8e1588e6aa95408d54ca37bbf8448493d4146aaecd228c9da00df08f90e4c0930409a4ecd899057cb040bc20b1c1999e1201d9634df8eebe48c0831030c5500d9e2a0038880b87184dbd30603b15bba0bd4da43d00c72c0ed92ecba04be06e858f5291070f6fc0e4c5337df18cb2d1e65b0caa55ebd72f2afec9c0a49905a603e59cf2b906a563c7d166f7b93a11f8c32ab28183a58d513a21d399530a1dcd7939085db659e3034639d74930c810ecd24fbdbc1c77711c60e6bac5d8ab8e4fef38eea9066b0ec2c54098e6d5161465439ce3406a4a2e692fd95135d4011dde2f8684c4807a6bdc041e128fc1b1416830351258b1ce13f97f11d5a8d402895cbe1a63f2e13316e7ee6f8ce3c14578a75459b7fa187f3695a9e39df3cfd946dfa11eda6c382903627dc997e3a7c905302d2a2441574813c53818921676902f30b44ac188b9d9480055ed5fb72e41c0dd01f2dc99708d99dec9b7b5c46538af89068e483627757b9bc0936195453969bc7f27997df5dd538c7119da341c59335c66eda57477c14f24f1dd6f5d0d579e73621f5a54700cc45eacf99f4c264e19bc2dbd37420beeb76ea6e88e85f6fd44a65cd0bcad80c6564b8b1245cf259a3ca82bffef5b358d9deffc0ae19faf5486ffccab87ab9cb9d0865a13489107b47e56545625ec4cdccf202a9b5335d4661cffd3dd5e2c6f6ec745e5779e815d3bb1248eb30219ebcdcfcc4e2acdad7776172ae9efe00e55b3cd057a101f6885e2ab9e249d1f41ae346fc529b9cfe2aa24549922bb8b6e87d1527d66d929e5d4e4217abc3ab4aef739a0a10b2e85a42edfc88a8a65b26ad553c8c5adca99c430df1d7d6b277bb33405de273383ff71bca9cd435d2af8f7035a02194bde93e12629f9fcb088dc76568ed2c03cc1d60ae5ddf2c16e78c708c260b00d7db2607f9dc2b79c118c1f82ec7b93ecac5a3a0f874bf9ba696b617452c31ab647d5a43ec1d76bca25af71c3bce0973b10be80374be86c12f3389a45471cacb8eeb5db8638a4fa8ae569ae40a2422d9867c10b01db19ad417116d7b981da2df9520e24b64fe2339638ec3b047642720d7fbcb0df497e2883744c6f2e916cea20a2f8e09658f5c60653c888f679547682461306f48e9a57ef3b17dd798bdcad8fae8aefa3f3c802741fa7700bd8e3ad668b8958eba7265c61afce93666d1b232fc2d0d769a6a82c86a4ee68a3adec4ba7352aae5b09a98671c7131184327aab780ac187cf4b03796e522797311016bc7fe2d3b23bba3b6a2716e4ca23ce7a540ae8ded85c9b050eb71c3ff170e21a7105eadd799ec15eafb98eee158010764a5d94521e9f4826c50048b1a188f9de6eeb59a96af9682b93daf1bf1d7791107d1854eae29c908f34d30098ad02069641ae964e12d8edc7285c9a4fbe1e4d7690ca92070d314fe4d5dafeb868e3a84938d4e1e0841bb384989066f599bbdadc9dfd1fc58be6698616548353a7a4ac2f5cd63b84988ffadff592b1eb7425b049ead0958ea40eb90ce0bc3560f41a465b0cc81b01b0b41a00c7e6517dd3df7aa02992ee2a0ab627584adb14b1e87f242cd7714a808e4eefcdc3066694ecbe576ae1c5c74493244da547ab0ed664bfc8923fc521dab431e3af9c9c29ed961f02728423590cc9972fdba61651db83c15d6f2b6f397e73072c639f891cce9ad6d4aad01ec08491aa6deedc1ad10aa15995ee9d7de193d3db39056a222b41a8a4d30be7bac9ed9a912362184453ce35740673d0a9ea3af5c87a8350a34bc7a17f72b693bf50f6cda0aba56339e8b9d2aa99e1533d14cc06847d39af4f46502ccba6c2ff80aa861f45f31f5ebe3fe8c946ac6207aeabaffcc7ced599198d2d98eec148d83b9c171ac134e56aeb0c503c2667dde242a1a0908f28564e61d31d1a85e474545ed64fc7f0a65d96f0c28c725a21ecada95f9ef954245febbf1773e079dc0e5d8a6a3b26d744b5d426deff9b5612dded37d8de4911cea59482b2dc5ff09c7621ee40017ea7f9f613bc4399f97ef2bfe90faca1f860bd7c3d55e4e531e0dc809eee3000d819af58ea3477756248c3205205497eef9b53e450a32df28ed3c43156a84f69532edea263cc59b272c8bb9f7bda8e7c1944cc8d893f292de1f3ee6a8ec978c28790dd893a6cd34d488389e3cc8e8cda959f0f5b6ee217fe49e310d43ef79f335b4ebb4239e7f0e7e9269a15ae492a158f876186fa407d4d505a57198a6c899e4c9d56f3a8a9a23a3faf7502e76e79bef008985d41f53aca7e899d08988449aed1d0640e313d1a3bf0c2df2d49363f5a6b7b853eee0df66c384d26bfe9cd6edb8562da4aa46f12bf288c9928e4991f02cb11b74a48861243154baffdbe82b68cecf22ebf51c9e3b6f6964b994e4cf000c598b8b1ec652a1779741f2c42c739b7681fb908474217cd64661db3f1e97ece5fc7d7726f50d95433c9a3b4e62959eca33d409b8f5f8992b2577603f6888303ab46ce6b4e9da9efd1854b4fb2c4d75813492072a3eb0abcff4f6309c9b837fbc9b3f47d12572b7e242d3e6a029d131e84f37ddb664fecc957dfd1be52108b730e844415746539a99ccc2281c07836b4a6a2e989db5e1eb2b156de37c364978f66b710a796f47153a9a26618b24865375fabadfb873abf0d65086af035bd4050335f1a034d779d46f7a785ceadf3cc4e906e9ad3fd1de6bfa2d4bf3e5e856d6ba344387354219cbbade9d5716470b029d3f007122554e64e697d1992405033570c15586d1124e70e4cdb0a9fe8148cb8017be65fb2bee19c71ab50bcc59266230b8c6fa4c76ec5f84730747b4e6c2495a5a47dab993e4064ba469790ecbf07930e61d2d52e423bd9834ecd97e24699f1bb953ce2278237a35ec435345f6f76cfb8d0b56dd898c04caddbc001f7f9c91005691ceeb189cc9db6e74d906f4c1bf2a9d8d7ce7e94327b9d1c0128669189dea1ed36b7d1ce27bc72585bae5c5ef45009733072b9048bf0b6afb15cf14c372f1044305b147a41b9e7339632a74f22fac66ef71cedaf3908f085ec99e7d4e0ab9eeea153fb4e5f866d91cd3417d8094bc5f1e585247a6b471a09ee399ae823a9f8fa47d12d066bcc5b22fcccdfde2fa0326c4d5917501f54c80675a2169a0f1537701389aa3b60e7c11c0853c6176ef83386aac46db91b29e9985b3a8a347dfb95d5c71403da2dee84e06959145d6eefb75ceec631ab8155a06a345623a34be4952d1134af0209226fced81bd4e2576f8a6457194741a9b1176df087fb8916deef71d8fcbfe06624a2bb9fc1fb66b828d7ecdb7c3f8aedf0576aac23c9b928bf2ffa74672df826e4d3031007b0e9a52525705875458bbdf931cd981e6333a7079939f5d46dc3b17b4029a97b152937f0d314b142a24fe865e7259d98cfba5da7ee443a5d5cda6880d8c2343eba7357ff3fe30415c934f7fc4280139dac5e8cbfeebf8bc0d3333d2c9de841a1ae32678a5119a1eed59e5a057ec14baf1545158f5be067d483d66d746d22f6bb5f66ea3274517351014772589f46eaa6478265ff56ce6aa7d25468ce0e98d6b9cfe7a0113fce592b35a085dbd85a51ddd9c48732dfbe7f141b17e9ead2b9fc84a656fa47f9fd9a32698600460d7a6eb020619a58db60c409c838ee1b5c682ac62a61bc226b4f16906b75e8ad652736de2e100c6dcd559874ba8fefa836ff0b88e2c15c271102cf92b959c1aa23a0ab025e4aeb50ca525270077d2f1ccd76f1e77de9f36fd84e97ce6d2e005f57003b9174ee493d69fff372dc7eddaf5d24b60ce4ebad0780c602b8e18f56059ce9faaad03451f9ec769ae5e3e0e16a449e2e7ffca0ae96332f3234c55f23e3cc5f4532edd55187de9164b659175831490503e2fe383febee42fd5583bcdf5dfa49bcee904002892115a57e9f60cddfea5c8af28e50de3bf14c438f124d9b82c7ecd27191f391991b87af7621a16ce0fec51731bc0974b9af2d0786742a7cb1f1486c031ea57c21b80d87346dca6dc15205ce34d78f59ddef863521c2e362c7b3a7a2a4fa985d420832532a7a89646d8dde704b2b9cffb3babc2bca203be590027b452f3c2eb5f15432376ea4b28c3168fbbc7fe4a5aa75b5117ba9b1a12e368ace0efd7094c8d2e1b14b47bec352b31ae6c227083d17212a356c32fdba6f3509f9588fc61d9adcf2053d30a108642918bce1ab847569776a34ebe061a1ea2327ecbc91a3a3a837d03903900886da641d65ca6a6c25d6349c8fe406f6418d3f66e6adc39d4be02e2028a04a3ffc4da8203e786751e84f426c253b700dfa37511b10bcfb7d0d26b24f6a396b099e80a4098df2a2bd6685048bb6ebb23a742c76c188c09a17019b5ce1aed9d4f803cb69f8e7e0733b6e888bd0230d183cbc15c74d8ea09c5a2e17862ba161508a61729c9aa99d10515d98caf0554cb7efbc5a0fb2dfcf7229d046e20a26b859fefffb862676bfeeee6490e4a4f889bbd7bbdcd18f0e75d6892b43e29fbc8aaea584295f2cc724220851a6cd9770c7da41b4f037049ad486b2ba16c2ed52a63415824b511234bbefc1a7e69a72b287c9b3cf4ff67fc623d9cca4e36d90beb79a29c43a8b9703807667f770ce08e6217449074f4"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xc000}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_REALM={0x20, 0xfa, "98601da821ad948abb3e22bb9070b2f6f94f191ae9e7de6d7ffa153e"}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x135, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x859}, @NL80211_ATTR_FILS_ERP_RRK={0xc5, 0xfc, "baaee2745576032515a8eb1bc7ecf567522dc3022050ea65a8ce08d26b85590a27cda52a88d55217934be7a071388ee17204ca926b42b837633a3f590e58b45557666949bc73985a91744df4479f541c1bfb63420bbf10846600f7c6fd67d7590d2f06ae518fae3bcaca9904a2745762163829a3daf1a9773c66dce052b5c6094e77cc159b8297e6b20118a8037818cefcdca69505a409c531ab8a23c3a3dec781e79f1299c23d69e89babe44e4ddafa3d1ac8195d46fc7ac09387c5abeee3e31a"}, @NL80211_ATTR_FILS_ERP_REALM={0x5, 0xfa, "b4"}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xd3, 0xfc, "a06ab9fbf5b1972ecb3a00cf430d6827b34ec0ae123938e960b9829ec350695fe151d361038910ff4815c1788d2db7a2beeaea28e5f9e875b9fc3d0fadbf9582a233119d8a6b7fa93c3f7296b598f10b41dfdcc957eccee52a48c936cf62a8f70e95ee47950d7441174cae4e0c6f27752b814f1a1b06ff34f531532f406cc04709958f6411675ef09c276619678abfd93687d4db4f88642cd46a70417445d302fb7a5edcd9b4d0065f7fdcbd4f607071e080e054cc568de56b3bcdd8438f5190588450d801152434295abb89e00bde"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "a11390501b"}], @NL80211_ATTR_IE={0x109, 0x2a, [@measure_req={0x26, 0x99, {0x9, 0x7, 0x0, "106f286d808be993aa28ff6db3ea2cedc8c91d2d5d3c9cf7929b59e40c4edf63ad148b7e11449ac08605ed76338ae02837d4985a96c22e688acc89991e8f43429d7f8629bb931c69606594a8ac8d9317a7842c84204faf6973a255d306e3ef8335835bde9809c0fcb08010fdbe2b43fc56abda091519d463015bd3d2f84689a25137777fc4fea0fd2cf409ff202d7bf5ec0ae5db148c"}}, @channel_switch={0x25, 0x3, {0x1, 0xb6, 0xfe}}, @channel_switch={0x25, 0x3, {0x1, 0x44, 0x7f}}, @random_vendor={0xdd, 0x5e, "4c996fb5a8764f03283527fa92a94cc8f409a24f9931ec33482e1ffb0df938966dcf7bced63b1733c572bfa73f3dfd8c1ae07da510eb2ba17bae70cdca63250aaa05663deaac522b788581e708935ecec136236e4781b55efcc2d3d0c703"}]}, @fils_params, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x8}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "a9b91bf1e4272b70d1c56eb8dbbcf87c"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}, @NL80211_ATTR_FILS_ERP_RRK={0x67, 0xfc, "3b2e973d43e4959417826a7a7e4f4361661e0c95d0b7af641a1462e92479e9008a9b05738d791d70683ab79c3a3ba2c894a3cfae078a95515abdc9b30b1ff8c5f76833f1e3c3e1e1fa201855c4130c3f6ec55e90bfe83af3266de3b000962cbc1d546d"}, @NL80211_ATTR_FILS_ERP_REALM={0x9a, 0xfa, "b8842273dad547f03eee3e8626df74ab8a0cdd0f8fb68de80e5e8167849b50583676b90a7260781b310a756bd5114b3ed6db4eb2f8679335e4a0272092c9e3a8c6e8e0dec36e31cd3fc9521a3b2620cf3a9098a6353336561dc6f0c4c857ecaad05d957d620c25e9a0c55a0ce1e1ee52c71c40c6bc86b1cb574222ac1a883747021fcd10b738def6cf98ba28435e65b314047bed6e26"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfef}], @NL80211_ATTR_IE={0x9c, 0x2a, [@chsw_timing={0x68, 0x4, {0x4, 0x800}}, @challenge={0x10, 0x1, 0x1c}, @ssid={0x0, 0x10, @random="04bbf390803bc42d2d41232f4c0ad4ba"}, @random={0xbd, 0x73, "60f2fea9e6ec68753fa27aeabb1cc8d5d510cb6ab2c1b43c99f14f0dfad0e40cd4682503a6f7bf9b3c44f25036b5b0167ddaf6746b34db486c01f3001f23941f3d95137ffa15580c5cb0d53e643153f6e6392ec81601bb1a52873c17a228236fffee46d5185a4c3a6b294e7299e69375baf366"}, @mesh_id={0x72, 0x6}]}]}, 0x2928}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) syz_usb_ep_write(r4, 0x81, 0x40, &(0x7f0000000400)="900100"/64) ioctl$sock_SIOCOUTQNSD(r5, 0x4010618b, &(0x7f0000000440)) recvmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000003600)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004600), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r12, 0x4400ae8f, &(0x7f0000004640)=@arm64={0x1, 0x9, 0xf, '\x00', 0x100000000}) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000004680)={0x1, 0x0, [{0x40000070, 0x0, 0x80000006}]}) sendmsg$nl_generic(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x3f, 0x400, 0x70bd2c, 0x25dfdbfe, {0x1}, [@generic="4eb39ac6b1ff21ef5604c98793a31b3d3e38e8edf4ddc66a7efc92eb68b7b7e51847bd191bb7f678a0fc94fcabeee21fdd"]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0) 3.480440955s ago: executing program 6 (id=5072): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x4080851}, 0x24000840) (async) r1 = socket(0x25, 0xa, 0x1) (async) r2 = socket(0x15, 0x5, 0x0) (async) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4004000) (async, rerun: 32) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000380), 0x806000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) getsockopt(r2, 0x200000000114, 0x2710, &(0x7f0000000500)=""/1, &(0x7f0000000540)=0xf002) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x13, r2, 0x80000000) ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000001ec0)={'netdevsim0\x00', @ifru_names='bond_slave_1\x00'}) (async) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) rseq(0xfffffffffffffffc, 0xffffff1d, 0x0, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) fcntl$addseals(r9, 0x409, 0x3) (async) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x1) (async) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x0, 0x0) ioctl$COMEDI_CANCEL(r10, 0x6407) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$HIDIOCGSTRING(r11, 0x81044804, &(0x7f00000000c0)={0x91, "3d7abb4cef9106daf1fb6a6b767ce10c4c6e99b2f7101b035a0e710d18ca9d9572731e65be111650ffbf583a7482442552cc9226c044e56c92c9cb32a6dd078e70580ba5bdd4caf058a0d9ed38e079bf16cbe77d874eb1777128450077be59911c15b02ceca2e57a4f3ba8f7cbca084d07f9b36d5ffaf9371d7559b09b71b15e16ff483a611c6f9c4f17d49b933da89e55"}) 3.332214525s ago: executing program 3 (id=5073): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000340)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000002680)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f00000026c0)='270', 0x3) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f00000000c0)=ANY=[@ANYBLOB="02"]) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40042, 0x1) mount(0x0, &(0x7f00000025c0)='./proc\x00', &(0x7f0000002600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002640)='./proc/net/afs/cells\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002800)='./dir0\x00', 0x1ff) mount(&(0x7f0000002840)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000002880)='./dir0\x00', &(0x7f00000028c0)='ceph\x00', 0x0, 0x0) 3.112448792s ago: executing program 6 (id=5074): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = syz_open_dev$I2C(&(0x7f0000000540), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000006c0), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000700)={0x0, 0x1, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca0330ace0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b38905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, 0x0) ioctl$I2C_FUNCS(r2, 0x705, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './sys/file0', [], 0xa, "d22067"}, 0x12) r5 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000380)={0x3, 0x7}, 0x4) bind$packet(r6, &(0x7f00000003c0)={0x11, 0x15, 0x0, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) read(r5, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f00000001c0)) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x47b, 0x2) getsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r4, 0x84, 0x7d, &(0x7f0000000840)={0x0, 0xa}, &(0x7f0000000880)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000008c0)={r8}, 0x8) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000180)={0xf0f000, 0x1}) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000580), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r9, 0x80e85411, &(0x7f00000005c0)) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x78, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x400}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7d}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_BUCKETSIZE={0x5}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 3.021912372s ago: executing program 6 (id=5075): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000600)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000640)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000680)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x10001, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f00000007c0), 0x800001d, 0x1c) (fail_nth: 3) 2.324353017s ago: executing program 6 (id=5076): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, 0x0) 2.237278239s ago: executing program 3 (id=5077): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)}], 0x1) 2.222700339s ago: executing program 5 (id=5078): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) r3 = socket(0x80000000000000a, 0x2, 0x0) syz_usb_connect(0x4, 0x130, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x7d, 0xb9, 0x4b, 0x8, 0x1b3d, 0x1f3, 0x1172, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11e, 0x1, 0x1, 0x6, 0xe0, 0xc, "", [{{0x9, 0x4, 0xb9, 0xfe, 0x2, 0xc4, 0x7f, 0x32, 0x3, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7a, 0x5, 0xf9, [@generic={0x84, 0x7, "21909ca4c02cdaa6547f682454dfd4f3fef0b4cdf846b894b84f1ef79ad70aa16bbae48dc750a93f9cde704ad297806cdf0e7060fec5560159ff49bb6facc226a9c1e44fc9b307dd2b7e029ec946e666b300202b6eb1ec5cb543f188086102e8d4a29db93a2759dac225cb1afe4d05e6e701d05385d7da5288bdf80ae7408583efd9"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0x1b, 0x40, 0x11, [@generic={0x76, 0x21, "18e788c0edde0159566b92da0caccb4fd42acd646bc9ee29c176242a127377cf0e94a084c18eae12b3d081bc47e5f953815078465b6e1db688b88a0b608a36a2f52930108bdd48271ce882fa8c8beb091e8c0ea7b8d10dac44cc3090e33c27a69dcf62aad0616288f9cf749bc1ccc11a6f87bb10"}]}}]}}]}}]}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="cc010000100001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000044030000000300030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff02000000000000000000000000000100000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000002040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000500000000000000000000000a000100000000000000000008002300f8ffffff4800010073686132353600"/248], 0x1cc}}, 0x0) fsetxattr(r3, &(0x7f0000000280)=@known='user.incfs.metadata\x00', 0x0, 0x0, 0x0) flistxattr(r3, &(0x7f00000002c0)=""/3, 0x3) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000240)={0xffffffffffffffff, 0x5, "32f2e8", 0x3}) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48001}, 0x4090) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000200)="560000002a00000000000000000101000100"/48, 0x30) 2.053510062s ago: executing program 6 (id=5079): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) fchdir(r1) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/pid\x00') mount(&(0x7f00000009c0), &(0x7f0000000a00)='./cgroup\x00', 0x0, 0x1001, 0x0) mount$bind(0x0, &(0x7f0000000a40)='./cgroup\x00', 0x0, 0x2108cff, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000a80)='.\x00', 0x8100, &(0x7f0000000ac0)={0x0, 0x84, 0x40000, {r2}}, 0x20) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac3(0x2, 0xe2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000008820582054000010203010902d000030104c00608fb91f90b0000010130020904000000010130000a24010b2c000600000007240c060255c9060020faac0b15240706040c0000000e000000010000001000000009040100000102300009040101010105000000240201ab020808fd75c5590905010900040803010a2525130700000908000904020100010230000904020101010230000a2402020700aa0b07010924020101d906b008092402014b040801420e240201d00301039f4d304b24510a240202e3ff09804a6c090582094000020ef30a252500000000"], &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x7, 0x38, 0x8, 0xff, 0xb1}, 0x5f, &(0x7f0000000200)={0x5, 0xf, 0x5f, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x7f, 0x200}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "971f031c38ed1c2b74157b15bcc8a226"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "deebc93fc6c61017a9ffb80788ca06a5"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x5, 0x0, 0x7ff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x35, 0xb, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "da94f8a797337b8d80ac9d007f1e43c4"}]}, 0x5, [{0xd, &(0x7f0000000280)=@string={0xd, 0x3, "480d3c217b38fddf3b49c2"}}, {0xbd, &(0x7f00000002c0)=@string={0xbd, 0x3, "87aa9fc314443d955433ffa4ad130139ce8467712caf9346bc840877e017428c0cdba02480f5630affd25a4ad7208ae66fd69e02b58f636cc311543781a69badcc7b568c53df98415eec32b6b5652a74c0ee832531b3af82b357ea44b754a1cda22fe3406aa18d80613792b6450e391cad5f6478d508b6582ca713d5b600c19fa74abf285b291e27b0bf62c398e5c737e81b0005af5316e63fd4c6a2558994ff8ed91ea0cde7ba0aa2a41b3ea84920ca0c06ea56fb16fae2d06e6c"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x43f}}, {0xde, &(0x7f0000000400)=@string={0xde, 0x3, "93216f8f7e3269fb4710c833b6da249981d2fb537adedce2e8b002f822b90490697e733835e2c90cca809b57540724e12ecca27dec5abee6f62b0bf7bb16f8bd89b6dbe813a1ba0ce1078d1feb1408260be3976dc55f85746ef7f315ce9760e943d8bde85991abcdc82fb3c9bf6a46a94d032994566baf38119cae0cf235f2369d9cba30f42335ebd686a9be81c90566626f57bea744bf781cde017c9cc290dacc57cb14917b2e8daff3bb49ff51f91c7a1e3f14d16c8c4932d32c6887b29055ccd2f0d9b2555f3c5552c178b394fd8f5dda81ee1d06e4cb24a91067"}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) socket$inet6(0xa, 0x6, 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x2, 0x0) write(r7, &(0x7f0000000900)="476d01a3", 0x4) syz_usb_connect$uac3(0x4, 0xd3, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1, 0x3, 0x1, 0x80, 0x50, 0xc, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xa, 0x15, 0x3}, [@multiply_unit={0xb, 0x24, 0xd, 0x6, 0x7f, 0x9, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x40, 0xf, 0x7, 0x0, 0x0, 0xf8, 0xa, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x1ff, 0x6, 0x8, 0xa, {0xa, 0x25, 0x25, 0x6, 0x19, 0x27}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x40, 0x4, 0xfa}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x40, 0x5, 0x40, 0xc2}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0xff}, @as_header={0x17, 0x24, 0x1, 0x7, 0x5, 0x1, 0x1001, 0xe, 0x0, 0xfffd, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x9, 0x9, 0x0, {0xa, 0x25, 0x25, 0x0, 0x9f, 0x3}}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x310, 0x2, 0x6, 0x9, 0x40, 0xc}, 0x13, &(0x7f00000006c0)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0xd, 0x80, 0x800, 0x3c}]}, 0x2, [{0xc3, &(0x7f0000000700)=@string={0xc3, 0x3, "30908e3981fa6721225046793f3dae9ee45b484e8bd8cc8ce718b98603053d291bfd74e2c94554813cd3a3d94870ccc2eda02c917402ea5039e09c331bf2b49ecfa15a4ccb4ef1ecff96417bf0be29133f653548baa94cf9613da0276a155b555919d2362ad80ae4b150c67786a78fa9d09773e77ca09621057a90530d02f042b708213876a42f8e9471d7f9c4a1c6486102a94cd88975d1f73782a641fa498f967dee27f9e4d151be8b80d28db70398179eb3f2ee59f93220744bd6e9fa0dbbd1"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0xd0b5}}]}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2c}, @void, @val={0xc, 0x99, {0x7f, 0x66}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.99627718s ago: executing program 3 (id=5080): r0 = socket$netlink(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x2) bind$netlink(r0, &(0x7f0000000600)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000640)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000680)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x401, 0xffefffffffffffbe}, {0x0, 0x2000000000000, 0x0, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@loopback, 0x0, 0x32}, 0xa, @in6=@mcast2, 0x10001, 0x3, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f00000007c0), 0x800001d, 0x1c) 1.857203045s ago: executing program 3 (id=5081): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000600)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000640)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000680)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x10001, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f00000007c0), 0x800001d, 0x1c) 1.475907771s ago: executing program 5 (id=5082): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000080)={0x18, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000602, r5, &(0x7f0000000240)={0x6, 0xfffffffffffffeff, 0x0, 0x6}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000002c0)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000300)="060000000300010000", 0x9) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x2) mmap$snddsp_control(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x0, 0x810, r4, 0x83000000) write(r0, &(0x7f0000000180)="5d0000000600aabbccddeec0", 0x7) 1.324172356s ago: executing program 5 (id=5083): socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (fail_nth: 3) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) 949.072955ms ago: executing program 3 (id=5084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000009500000500000a70000000060a010400000000000000000a00000144000480400001800b0001007461726765740000300002800800024000000002140003007339f2179455afb9fdd672ba010000000d000100434f4e4e4d41524b000000000900020073797a32000000000900010073797a31"], 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 748.314233ms ago: executing program 3 (id=5085): r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000002780)=ANY=[@ANYBLOB="1201000200000040109720770000000000010902350001010080320904000005ffffff000705810340000107058202400000070503024000000705840240000007050502"], 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000040)='./my_configfs\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000040)='./my_configfs\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) rmdir(&(0x7f0000000100)='./my_configfs/target/core/rd_mcp_0\x00') (async) rmdir(&(0x7f0000000100)='./my_configfs/target/core/rd_mcp_0\x00') syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000002800)=ANY=[]) 436.285339ms ago: executing program 5 (id=5086): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000340)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000002680)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f00000026c0)='270', 0x3) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f00000000c0)=ANY=[@ANYBLOB="02"]) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40042, 0x1) mount(0x0, &(0x7f00000025c0)='./proc\x00', &(0x7f0000002600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002640)='./proc/net/afs/cells\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002800)='./dir0\x00', 0x1ff) mount(&(0x7f0000002840)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000002880)='./dir0\x00', &(0x7f00000028c0)='ceph\x00', 0x0, 0x0) 0s ago: executing program 6 (id=5087): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, 0x0) kernel console output (not intermixed with test programs): ve_flags+0x33/0x7f0 [ 829.666974][T21626] ? __lock_acquire+0x747/0x2de0 [ 829.666995][T21626] ? kfree+0x1c5/0x650 [ 829.667016][T21626] ? __se_sys_ioctl+0x47/0x170 [ 829.667034][T21626] ? do_syscall_64+0x166/0x520 [ 829.667058][T21626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.667105][T21626] ? __mutex_trylock_common+0x15f/0x270 [ 829.667132][T21626] ? __pfx___mutex_trylock_common+0x10/0x10 [ 829.667158][T21626] ? rcu_is_watching+0x16/0xb0 [ 829.667182][T21626] ? trace_contention_end+0x3d/0x140 [ 829.667206][T21626] ? __mutex_lock+0x305/0x15a0 [ 829.667236][T21626] ? kasan_quarantine_put+0xbb/0x1f0 [ 829.667273][T21626] ? kvm_vcpu_ioctl+0x27f/0xfd0 [ 829.667303][T21626] ? __pfx___mutex_lock+0x10/0x10 [ 829.667330][T21626] ? tomoyo_path_number_perm+0x219/0x5f0 [ 829.667358][T21626] ? do_vfs_ioctl+0x116f/0x1530 [ 829.667381][T21626] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 829.667406][T21626] kvm_vcpu_ioctl+0x7e3/0xfd0 [ 829.667441][T21626] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 829.667489][T21626] ? __fget_files+0x2a/0x420 [ 829.667519][T21626] ? __fget_files+0x2a/0x420 [ 829.667545][T21626] ? __fget_files+0x2a/0x420 [ 829.667575][T21626] ? bpf_lsm_file_ioctl+0x9/0x20 [ 829.667592][T21626] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 829.667613][T21626] __se_sys_ioctl+0xfc/0x170 [ 829.667636][T21626] do_syscall_64+0x166/0x520 [ 829.667660][T21626] ? trace_irq_disable+0x3b/0x140 [ 829.667680][T21626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.667699][T21626] ? clear_bhb_loop+0x70/0xc0 [ 829.667723][T21626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.667742][T21626] RIP: 0033:0x7f02eb59e559 [ 829.667762][T21626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.667778][T21626] RSP: 002b:00007f02ec4d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 829.667799][T21626] RAX: ffffffffffffffda RBX: 00007f02eb825fa0 RCX: 00007f02eb59e559 [ 829.667813][T21626] RDX: 0000200000000180 RSI: 000000004008ae89 RDI: 0000000000000006 [ 829.667826][T21626] RBP: 00007f02ec4d2090 R08: 0000000000000000 R09: 0000000000000000 [ 829.667839][T21626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.667849][T21626] R13: 00007f02eb826038 R14: 00007f02eb825fa0 R15: 00007ffe299dff58 [ 829.667880][T21626] [ 830.034839][T21628] FAULT_INJECTION: forcing a failure. [ 830.034839][T21628] name failslab, interval 1, probability 0, space 0, times 0 [ 830.034872][T21628] CPU: 1 UID: 0 PID: 21628 Comm: syz.6.4886 Tainted: G L syzkaller #0 PREEMPT(full) [ 830.034899][T21628] Tainted: [L]=SOFTLOCKUP [ 830.034907][T21628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 830.034918][T21628] Call Trace: [ 830.034927][T21628] [ 830.034935][T21628] dump_stack_lvl+0xe8/0x150 [ 830.034969][T21628] should_fail_ex+0x3eb/0x540 [ 830.035000][T21628] should_failslab+0xa8/0x100 [ 830.035022][T21628] __kmalloc_cache_noprof+0x9e/0x600 [ 830.035050][T21628] ? __kmalloc_noprof+0x1a6/0x710 [ 830.035074][T21628] ? __alloc_workqueue+0x15a/0x21d0 [ 830.035101][T21628] ? __alloc_workqueue+0x15a/0x21d0 [ 830.035136][T21628] __alloc_workqueue+0x15a/0x21d0 [ 830.035171][T21628] ? ceph_monc_want_map+0x42/0x60 [ 830.035201][T21628] alloc_workqueue_noprof+0xe3/0x210 [ 830.035228][T21628] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 830.035256][T21628] ? ceph_get_tree+0x438/0x1a40 [ 830.035279][T21628] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 830.035308][T21628] ? __ceph_monc_want_map+0x105/0x4a0 [ 830.035336][T21628] ceph_get_tree+0x489/0x1a40 [ 830.035359][T21628] ? apparmor_capable+0x126/0x170 [ 830.035386][T21628] vfs_get_tree+0x92/0x2a0 [ 830.035407][T21628] do_new_mount+0x325/0xb00 [ 830.035437][T21628] ? __pfx_do_new_mount+0x10/0x10 [ 830.035465][T21628] ? ns_capable+0x84/0xe0 [ 830.035488][T21628] ? path_mount+0x647/0x1050 [ 830.035516][T21628] ? user_path_at+0xd4/0x160 [ 830.035545][T21628] __se_sys_mount+0x31d/0x420 [ 830.035577][T21628] ? __pfx___se_sys_mount+0x10/0x10 [ 830.035615][T21628] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 830.035639][T21628] ? __x64_sys_mount+0x20/0xc0 [ 830.035668][T21628] do_syscall_64+0x166/0x520 [ 830.035693][T21628] ? trace_irq_disable+0x3b/0x140 [ 830.035714][T21628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.035733][T21628] ? clear_bhb_loop+0x70/0xc0 [ 830.035756][T21628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.035776][T21628] RIP: 0033:0x7f375519e559 [ 830.035794][T21628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.035811][T21628] RSP: 002b:00007f375611c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 830.035831][T21628] RAX: ffffffffffffffda RBX: 00007f3755425fa0 RCX: 00007f375519e559 [ 830.035846][T21628] RDX: 00002000000028c0 RSI: 0000200000002880 RDI: 0000200000002840 [ 830.035860][T21628] RBP: 00007f37552358b0 R08: 0000000000000000 R09: 0000000000000000 [ 830.035872][T21628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 830.035885][T21628] R13: 00007f3755426038 R14: 00007f3755425fa0 R15: 00007ffd2645bc88 [ 830.035916][T21628] [ 830.185245][T21630] FAULT_INJECTION: forcing a failure. [ 830.185245][T21630] name failslab, interval 1, probability 0, space 0, times 0 [ 830.185276][T21630] CPU: 1 UID: 0 PID: 21630 Comm: syz.4.4887 Tainted: G L syzkaller #0 PREEMPT(full) [ 830.185302][T21630] Tainted: [L]=SOFTLOCKUP [ 830.185310][T21630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 830.185322][T21630] Call Trace: [ 830.185330][T21630] [ 830.185339][T21630] dump_stack_lvl+0xe8/0x150 [ 830.185370][T21630] should_fail_ex+0x3eb/0x540 [ 830.185401][T21630] ? alloc_pwq+0xb7b/0x12f0 [ 830.185423][T21630] should_failslab+0xa8/0x100 [ 830.185445][T21630] ? alloc_pwq+0xb7b/0x12f0 [ 830.185465][T21630] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 830.185495][T21630] ? alloc_pwq+0xb7b/0x12f0 [ 830.185522][T21630] alloc_pwq+0xb7b/0x12f0 [ 830.185556][T21630] apply_wqattrs_prepare+0x3ff/0xe70 [ 830.185617][T21630] __alloc_workqueue+0x11b8/0x21d0 [ 830.185667][T21630] alloc_workqueue_noprof+0xe3/0x210 [ 830.185697][T21630] ? is_dynamic_key+0xd4/0x1c0 [ 830.185727][T21630] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 830.185762][T21630] ? ceph_msgpool_init+0xdd/0x1c0 [ 830.185795][T21630] ceph_osdc_init+0x62d/0x900 [ 830.185830][T21630] ceph_create_client+0x246/0x310 [ 830.185857][T21630] ceph_get_tree+0x1ca/0x1a40 [ 830.185880][T21630] ? apparmor_capable+0x126/0x170 [ 830.185907][T21630] vfs_get_tree+0x92/0x2a0 [ 830.185929][T21630] do_new_mount+0x325/0xb00 [ 830.185961][T21630] ? __pfx_do_new_mount+0x10/0x10 [ 830.185990][T21630] ? ns_capable+0x84/0xe0 [ 830.186012][T21630] ? path_mount+0x647/0x1050 [ 830.186040][T21630] ? user_path_at+0xd4/0x160 [ 830.186070][T21630] __se_sys_mount+0x31d/0x420 [ 830.186106][T21630] ? __pfx___se_sys_mount+0x10/0x10 [ 830.186136][T21630] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 830.186161][T21630] ? __x64_sys_mount+0x20/0xc0 [ 830.186190][T21630] do_syscall_64+0x166/0x520 [ 830.186214][T21630] ? trace_irq_disable+0x3b/0x140 [ 830.186233][T21630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.186253][T21630] ? clear_bhb_loop+0x70/0xc0 [ 830.186277][T21630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.186296][T21630] RIP: 0033:0x7f02eb59e559 [ 830.186318][T21630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.186334][T21630] RSP: 002b:00007f02ec4d2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 830.186357][T21630] RAX: ffffffffffffffda RBX: 00007f02eb825fa0 RCX: 00007f02eb59e559 [ 830.186372][T21630] RDX: 00002000000028c0 RSI: 0000200000002880 RDI: 0000200000002840 [ 830.186386][T21630] RBP: 00007f02eb6358b0 R08: 0000000000000000 R09: 0000000000000000 [ 830.186399][T21630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 830.186411][T21630] R13: 00007f02eb826038 R14: 00007f02eb825fa0 R15: 00007ffe299dff58 [ 830.186443][T21630] [ 830.556807][T21641] CIFS: Attempting to mount //127.0.0.1/share [ 830.715763][T21645] FAULT_INJECTION: forcing a failure. [ 830.715763][T21645] name failslab, interval 1, probability 0, space 0, times 0 [ 830.715794][T21645] CPU: 0 UID: 0 PID: 21645 Comm: syz.5.4890 Tainted: G L syzkaller #0 PREEMPT(full) [ 830.715820][T21645] Tainted: [L]=SOFTLOCKUP [ 830.715827][T21645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 830.715838][T21645] Call Trace: [ 830.715846][T21645] [ 830.715855][T21645] dump_stack_lvl+0xe8/0x150 [ 830.715885][T21645] should_fail_ex+0x3eb/0x540 [ 830.715920][T21645] should_failslab+0xa8/0x100 [ 830.715942][T21645] __kmalloc_cache_noprof+0x9e/0x600 [ 830.715970][T21645] ? kvm_arch_vcpu_ioctl+0x338/0x23a0 [ 830.715991][T21645] ? kvm_arch_vcpu_ioctl+0x338/0x23a0 [ 830.716027][T21645] kvm_arch_vcpu_ioctl+0x338/0x23a0 [ 830.716052][T21645] ? lock_acquire+0x115/0x350 [ 830.716070][T21645] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 830.716095][T21645] ? lock_acquire+0x115/0x350 [ 830.716122][T21645] ? is_bpf_text_address+0x26/0x2b0 [ 830.716150][T21645] ? is_bpf_text_address+0x292/0x2b0 [ 830.716191][T21645] ? is_bpf_text_address+0x26/0x2b0 [ 830.716217][T21645] ? kernel_text_address+0xa5/0xe0 [ 830.716239][T21645] ? __kernel_text_address+0xd/0x30 [ 830.716256][T21645] ? unwind_get_return_address+0x4d/0x90 [ 830.716278][T21645] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 830.716297][T21645] ? arch_stack_walk+0xfb/0x150 [ 830.716329][T21645] ? stack_trace_save+0xa9/0x100 [ 830.716347][T21645] ? __pfx_stack_trace_save+0x10/0x10 [ 830.716364][T21645] ? kasan_save_track+0x4f/0x80 [ 830.716396][T21645] ? stack_depot_save_flags+0x33/0x7f0 [ 830.716426][T21645] ? __lock_acquire+0x747/0x2de0 [ 830.716447][T21645] ? kfree+0x1c5/0x650 [ 830.716469][T21645] ? __se_sys_ioctl+0x47/0x170 [ 830.716488][T21645] ? do_syscall_64+0x166/0x520 [ 830.716511][T21645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.716547][T21645] ? __mutex_trylock_common+0x15f/0x270 [ 830.716574][T21645] ? __pfx___mutex_trylock_common+0x10/0x10 [ 830.716600][T21645] ? rcu_is_watching+0x16/0xb0 [ 830.716623][T21645] ? trace_contention_end+0x3d/0x140 [ 830.716648][T21645] ? __mutex_lock+0x305/0x15a0 [ 830.716677][T21645] ? kasan_quarantine_put+0xbb/0x1f0 [ 830.716708][T21645] ? kvm_vcpu_ioctl+0x27f/0xfd0 [ 830.716739][T21645] ? __pfx___mutex_lock+0x10/0x10 [ 830.716766][T21645] ? tomoyo_path_number_perm+0x219/0x5f0 [ 830.716794][T21645] ? do_vfs_ioctl+0x116f/0x1530 [ 830.716819][T21645] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 830.716843][T21645] kvm_vcpu_ioctl+0x7e3/0xfd0 [ 830.716877][T21645] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 830.716923][T21645] ? __fget_files+0x2a/0x420 [ 830.716952][T21645] ? __fget_files+0x2a/0x420 [ 830.716978][T21645] ? __fget_files+0x2a/0x420 [ 830.717008][T21645] ? bpf_lsm_file_ioctl+0x9/0x20 [ 830.717035][T21645] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 830.717064][T21645] __se_sys_ioctl+0xfc/0x170 [ 830.717087][T21645] do_syscall_64+0x166/0x520 [ 830.717110][T21645] ? trace_irq_disable+0x3b/0x140 [ 830.717130][T21645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.717149][T21645] ? clear_bhb_loop+0x70/0xc0 [ 830.717173][T21645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.717192][T21645] RIP: 0033:0x7f853319e559 [ 830.717209][T21645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.717224][T21645] RSP: 002b:00007f8534048028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 830.717245][T21645] RAX: ffffffffffffffda RBX: 00007f8533425fa0 RCX: 00007f853319e559 [ 830.717260][T21645] RDX: 0000200000000940 RSI: 000000008400ae8e RDI: 0000000000000005 [ 830.717273][T21645] RBP: 00007f8534048090 R08: 0000000000000000 R09: 0000000000000000 [ 830.717285][T21645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.717297][T21645] R13: 00007f8533426038 R14: 00007f8533425fa0 R15: 00007ffe8d3d9be8 [ 830.717330][T21645] [ 831.204034][T18908] usb 4-1: USB disconnect, device number 45 [ 831.228420][T21641] CIFS: VFS: cifs_mount failed w/return code = -112 [ 831.323587][T21658] FAULT_INJECTION: forcing a failure. [ 831.323587][T21658] name failslab, interval 1, probability 0, space 0, times 0 [ 831.323621][T21658] CPU: 0 UID: 0 PID: 21658 Comm: syz.3.4896 Tainted: G L syzkaller #0 PREEMPT(full) [ 831.323648][T21658] Tainted: [L]=SOFTLOCKUP [ 831.323656][T21658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 831.323668][T21658] Call Trace: [ 831.323676][T21658] [ 831.323685][T21658] dump_stack_lvl+0xe8/0x150 [ 831.323716][T21658] should_fail_ex+0x3eb/0x540 [ 831.323748][T21658] should_failslab+0xa8/0x100 [ 831.323771][T21658] __kmalloc_noprof+0xf9/0x710 [ 831.323797][T21658] ? __pfx___mutex_trylock_common+0x10/0x10 [ 831.323822][T21658] ? __alloc_workqueue+0x10d/0x21d0 [ 831.323849][T21658] ? __alloc_workqueue+0x10d/0x21d0 [ 831.323877][T21658] ? rcu_is_watching+0x16/0xb0 [ 831.323904][T21658] __alloc_workqueue+0x10d/0x21d0 [ 831.323938][T21658] ? ceph_monc_want_map+0x42/0x60 [ 831.323967][T21658] alloc_workqueue_noprof+0xe3/0x210 [ 831.323995][T21658] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 831.324023][T21658] ? ceph_get_tree+0x438/0x1a40 [ 831.324053][T21658] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 831.324083][T21658] ? __ceph_monc_want_map+0x105/0x4a0 [ 831.324113][T21658] ceph_get_tree+0x489/0x1a40 [ 831.324136][T21658] ? apparmor_capable+0x126/0x170 [ 831.324163][T21658] vfs_get_tree+0x92/0x2a0 [ 831.324185][T21658] do_new_mount+0x325/0xb00 [ 831.324217][T21658] ? __pfx_do_new_mount+0x10/0x10 [ 831.324248][T21658] ? ns_capable+0x84/0xe0 [ 831.324271][T21658] ? path_mount+0x647/0x1050 [ 831.324299][T21658] ? user_path_at+0xd4/0x160 [ 831.324329][T21658] __se_sys_mount+0x31d/0x420 [ 831.324360][T21658] ? __pfx___se_sys_mount+0x10/0x10 [ 831.324391][T21658] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 831.324416][T21658] ? __x64_sys_mount+0x20/0xc0 [ 831.324445][T21658] do_syscall_64+0x166/0x520 [ 831.324469][T21658] ? trace_irq_disable+0x3b/0x140 [ 831.324489][T21658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.324510][T21658] ? clear_bhb_loop+0x70/0xc0 [ 831.324533][T21658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.324552][T21658] RIP: 0033:0x7f2889f9e559 [ 831.324572][T21658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.324589][T21658] RSP: 002b:00007f288add5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 831.324610][T21658] RAX: ffffffffffffffda RBX: 00007f288a225fa0 RCX: 00007f2889f9e559 [ 831.324625][T21658] RDX: 00002000000028c0 RSI: 0000200000002880 RDI: 0000200000002840 [ 831.324640][T21658] RBP: 00007f288a0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 831.324653][T21658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 831.324665][T21658] R13: 00007f288a226038 R14: 00007f288a225fa0 R15: 00007fffe48b4828 [ 831.324695][T21658] [ 831.434085][ T1223] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 831.561972][T21663] FAULT_INJECTION: forcing a failure. [ 831.561972][T21663] name failslab, interval 1, probability 0, space 0, times 0 [ 831.562005][T21663] CPU: 1 UID: 0 PID: 21663 Comm: syz.5.4898 Tainted: G L syzkaller #0 PREEMPT(full) [ 831.562031][T21663] Tainted: [L]=SOFTLOCKUP [ 831.562039][T21663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 831.562051][T21663] Call Trace: [ 831.562059][T21663] [ 831.562068][T21663] dump_stack_lvl+0xe8/0x150 [ 831.562099][T21663] should_fail_ex+0x3eb/0x540 [ 831.562128][T21663] ? alloc_pwq+0xb7b/0x12f0 [ 831.562151][T21663] should_failslab+0xa8/0x100 [ 831.562173][T21663] ? alloc_pwq+0xb7b/0x12f0 [ 831.562193][T21663] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 831.562223][T21663] ? alloc_pwq+0xb7b/0x12f0 [ 831.562251][T21663] alloc_pwq+0xb7b/0x12f0 [ 831.562284][T21663] apply_wqattrs_prepare+0x3ff/0xe70 [ 831.562332][T21663] __alloc_workqueue+0x11b8/0x21d0 [ 831.562380][T21663] alloc_workqueue_noprof+0xe3/0x210 [ 831.562411][T21663] ? is_dynamic_key+0xd4/0x1c0 [ 831.562447][T21663] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 831.562481][T21663] ? ceph_msgpool_init+0xdd/0x1c0 [ 831.562515][T21663] ceph_osdc_init+0x62d/0x900 [ 831.562551][T21663] ceph_create_client+0x246/0x310 [ 831.562577][T21663] ceph_get_tree+0x1ca/0x1a40 [ 831.562601][T21663] ? apparmor_capable+0x126/0x170 [ 831.562628][T21663] vfs_get_tree+0x92/0x2a0 [ 831.562650][T21663] do_new_mount+0x325/0xb00 [ 831.562682][T21663] ? __pfx_do_new_mount+0x10/0x10 [ 831.562710][T21663] ? ns_capable+0x84/0xe0 [ 831.562733][T21663] ? path_mount+0x647/0x1050 [ 831.562760][T21663] ? user_path_at+0xd4/0x160 [ 831.562790][T21663] __se_sys_mount+0x31d/0x420 [ 831.562823][T21663] ? __pfx___se_sys_mount+0x10/0x10 [ 831.562853][T21663] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 831.562877][T21663] ? __x64_sys_mount+0x20/0xc0 [ 831.562905][T21663] do_syscall_64+0x166/0x520 [ 831.562930][T21663] ? trace_irq_disable+0x3b/0x140 [ 831.562949][T21663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.562969][T21663] ? clear_bhb_loop+0x70/0xc0 [ 831.562993][T21663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.563012][T21663] RIP: 0033:0x7f853319e559 [ 831.563030][T21663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.563046][T21663] RSP: 002b:00007f8534048028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 831.563067][T21663] RAX: ffffffffffffffda RBX: 00007f8533425fa0 RCX: 00007f853319e559 [ 831.563081][T21663] RDX: 00002000000028c0 RSI: 0000200000002880 RDI: 0000200000002840 [ 831.563095][T21663] RBP: 00007f85332358b0 R08: 0000000000000000 R09: 0000000000000000 [ 831.563107][T21663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 831.563119][T21663] R13: 00007f8533426038 R14: 00007f8533425fa0 R15: 00007ffe8d3d9be8 [ 831.563151][T21663] [ 831.634957][ T1223] usb 5-1: Using ep0 maxpacket: 8 [ 831.661204][ T1223] usb 5-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 831.691761][ T1223] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 831.691787][ T1223] usb 5-1: config 2 has no interface number 0 [ 831.691829][ T1223] usb 5-1: config 2 interface 31 has no altsetting 0 [ 831.750983][ T1223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.751010][ T1223] usb 5-1: Product: syz [ 831.751024][ T1223] usb 5-1: Manufacturer: syz [ 831.751037][ T1223] usb 5-1: SerialNumber: syz [ 831.777065][ T4926] Bluetooth: hci2: link tx timeout [ 831.777083][ T4926] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 831.906978][T21666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4899'. [ 831.907013][T21666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 832.025551][ T4926] Bluetooth: hci0: unexpected event for opcode 0x0c0d [ 832.402589][T21668] FAULT_INJECTION: forcing a failure. [ 832.402589][T21668] name failslab, interval 1, probability 0, space 0, times 0 [ 832.402622][T21668] CPU: 1 UID: 0 PID: 21668 Comm: syz.6.4900 Tainted: G L syzkaller #0 PREEMPT(full) [ 832.402650][T21668] Tainted: [L]=SOFTLOCKUP [ 832.402658][T21668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 832.402669][T21668] Call Trace: [ 832.402677][T21668] [ 832.402686][T21668] dump_stack_lvl+0xe8/0x150 [ 832.402719][T21668] should_fail_ex+0x3eb/0x540 [ 832.402756][T21668] should_failslab+0xa8/0x100 [ 832.402788][T21668] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 832.402817][T21668] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 832.402842][T21668] ? xas_split_alloc+0x19c/0x4c0 [ 832.402868][T21668] ? xas_split_alloc+0x19c/0x4c0 [ 832.402903][T21668] xas_split_alloc+0x19c/0x4c0 [ 832.402943][T21668] __folio_split+0xc2e/0x2250 [ 832.402986][T21668] ? __pfx___folio_split+0x10/0x10 [ 832.403014][T21668] ? __up_read+0x29c/0x930 [ 832.403043][T21668] ? folio_alloc_swap+0x2cc/0x12e0 [ 832.403073][T21668] shmem_writeout+0x571/0x17a0 [ 832.403107][T21668] ? lock_acquire+0x115/0x350 [ 832.403128][T21668] ? __pfx_shmem_writeout+0x10/0x10 [ 832.403155][T21668] ? folio_mapping+0x16f/0x1f0 [ 832.403185][T21668] ? folio_clear_dirty_for_io+0x162/0x820 [ 832.403211][T21668] ? try_to_unmap_flush_dirty+0x96/0x100 [ 832.403240][T21668] shrink_folio_list+0x2f65/0x4d90 [ 832.403295][T21668] ? __pfx_shrink_folio_list+0x10/0x10 [ 832.403319][T21668] ? rcu_is_watching+0x16/0xb0 [ 832.403343][T21668] ? lock_release+0x4b/0x3c0 [ 832.403362][T21668] ? lock_release+0x4b/0x3c0 [ 832.403385][T21668] ? is_bpf_text_address+0x292/0x2b0 [ 832.403410][T21668] ? is_bpf_text_address+0x26/0x2b0 [ 832.403461][T21668] ? stack_trace_save+0xa9/0x100 [ 832.403482][T21668] ? __pfx_stack_trace_save+0x10/0x10 [ 832.403508][T21668] ? check_noncircular+0xdb/0x150 [ 832.403534][T21668] ? __pfx___css_rstat_updated+0x10/0x10 [ 832.403565][T21668] reclaim_folio_list+0x100/0x430 [ 832.403605][T21668] ? __pfx_reclaim_folio_list+0x10/0x10 [ 832.403647][T21668] reclaim_pages+0x452/0x530 [ 832.403681][T21668] ? __pfx_reclaim_pages+0x10/0x10 [ 832.403709][T21668] ? do_raw_spin_unlock+0xf5/0x200 [ 832.403741][T21668] madvise_cold_or_pageout_pte_range+0x18e5/0x2390 [ 832.403793][T21668] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 832.403834][T21668] walk_pgd_range+0x102d/0x1dc0 [ 832.403893][T21668] ? __pfx_walk_pgd_range+0x10/0x10 [ 832.403914][T21668] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 832.403943][T21668] __walk_page_range+0x16d/0x720 [ 832.403984][T21668] walk_page_range_vma_unsafe+0x309/0x410 [ 832.404013][T21668] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 832.404038][T21668] ? mlock_drain_local+0x79/0x490 [ 832.404069][T21668] ? walk_page_range_vma+0x6b/0x90 [ 832.404093][T21668] madvise_vma_behavior+0x2ba2/0x4a00 [ 832.404123][T21668] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 832.404154][T21668] ? do_raw_spin_lock+0x12b/0x2f0 [ 832.404188][T21668] ? rcu_is_watching+0x16/0xb0 [ 832.404212][T21668] ? trace_hrtimer_start+0x82/0x200 [ 832.404245][T21668] ? hrtimer_start_range_ns_common+0x7cd/0xb60 [ 832.404284][T21668] ? finish_task_switch+0x40e/0xc60 [ 832.404307][T21668] ? lockdep_hardirqs_on+0x7b/0x110 [ 832.404336][T21668] ? rcu_is_watching+0x16/0xb0 [ 832.404359][T21668] ? trace_sched_exit_tp+0x3a/0x130 [ 832.404387][T21668] ? __lock_acquire+0x747/0x2de0 [ 832.404422][T21668] ? mas_prev_slot+0xb76/0xbf0 [ 832.404467][T21668] ? find_vma_prev+0x123/0x1b0 [ 832.404492][T21668] ? __pfx_find_vma_prev+0x10/0x10 [ 832.404513][T21668] ? futex_unqueue+0x22/0x240 [ 832.404543][T21668] ? __futex_wait+0x3c7/0x470 [ 832.404572][T21668] ? update_protect_slice+0x45/0x320 [ 832.404608][T21668] madvise_walk_vmas+0x57d/0xb70 [ 832.404640][T21668] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 832.404666][T21668] ? blk_start_plug+0x6e/0x1b0 [ 832.404696][T21668] madvise_do_behavior+0x385/0x540 [ 832.404733][T21668] ? __pfx_madvise_do_behavior+0x10/0x10 [ 832.404779][T21668] ? down_read+0x2b9/0x320 [ 832.404817][T21668] do_madvise+0x327/0x3a0 [ 832.404850][T21668] ? __pfx_do_madvise+0x10/0x10 [ 832.404892][T21668] ? __se_sys_futex+0x3a8/0x450 [ 832.404928][T21668] ? rcu_is_watching+0x16/0xb0 [ 832.404960][T21668] __x64_sys_madvise+0xa6/0xc0 [ 832.404993][T21668] do_syscall_64+0x166/0x520 [ 832.405018][T21668] ? trace_irq_disable+0x3b/0x140 [ 832.405039][T21668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.405059][T21668] ? clear_bhb_loop+0x70/0xc0 [ 832.405083][T21668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.405103][T21668] RIP: 0033:0x7f375519e559 [ 832.405123][T21668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.405139][T21668] RSP: 002b:00007f375611c028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 832.405162][T21668] RAX: ffffffffffffffda RBX: 00007f3755425fa0 RCX: 00007f375519e559 [ 832.405178][T21668] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000200000000000 [ 832.405192][T21668] RBP: 00007f37552358b0 R08: 0000000000000000 R09: 0000000000000000 [ 832.405205][T21668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.405218][T21668] R13: 00007f3755426038 R14: 00007f3755425fa0 R15: 00007ffd2645bc88 [ 832.405252][T21668] [ 832.709856][ T5046] usb 6-1: USB disconnect, device number 5 [ 833.123843][T21692] FAULT_INJECTION: forcing a failure. [ 833.123843][T21692] name failslab, interval 1, probability 0, space 0, times 0 [ 833.123875][T21692] CPU: 1 UID: 0 PID: 21692 Comm: syz.3.4906 Tainted: G L syzkaller #0 PREEMPT(full) [ 833.123901][T21692] Tainted: [L]=SOFTLOCKUP [ 833.123908][T21692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 833.123920][T21692] Call Trace: [ 833.123928][T21692] [ 833.123937][T21692] dump_stack_lvl+0xe8/0x150 [ 833.123967][T21692] should_fail_ex+0x3eb/0x540 [ 833.123997][T21692] should_failslab+0xa8/0x100 [ 833.124020][T21692] __kmalloc_noprof+0xf9/0x710 [ 833.124047][T21692] ? tomoyo_encode+0x2ad/0x570 [ 833.124074][T21692] ? tomoyo_encode+0x2ad/0x570 [ 833.124107][T21692] tomoyo_encode+0x2ad/0x570 [ 833.124140][T21692] tomoyo_realpath_from_path+0x5fa/0x640 [ 833.124178][T21692] ? tomoyo_path_number_perm+0x219/0x5f0 [ 833.124202][T21692] tomoyo_path_number_perm+0x246/0x5f0 [ 833.124237][T21692] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 833.124258][T21692] ? __lock_acquire+0x747/0x2de0 [ 833.124314][T21692] ? __fget_files+0x2a/0x420 [ 833.124344][T21692] ? __fget_files+0x2a/0x420 [ 833.124370][T21692] ? __fget_files+0x2a/0x420 [ 833.124400][T21692] security_file_ioctl+0xc3/0x2a0 [ 833.124426][T21692] __se_sys_ioctl+0x47/0x170 [ 833.124449][T21692] do_syscall_64+0x166/0x520 [ 833.124473][T21692] ? trace_irq_disable+0x3b/0x140 [ 833.124494][T21692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.124514][T21692] ? clear_bhb_loop+0x70/0xc0 [ 833.124537][T21692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.124556][T21692] RIP: 0033:0x7f2889f9e559 [ 833.124574][T21692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.124590][T21692] RSP: 002b:00007f288add5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 833.124611][T21692] RAX: ffffffffffffffda RBX: 00007f288a225fa0 RCX: 00007f2889f9e559 [ 833.124626][T21692] RDX: 0000200000006a80 RSI: 00000000c0205649 RDI: 0000000000000003 [ 833.124639][T21692] RBP: 00007f288add5090 R08: 0000000000000000 R09: 0000000000000000 [ 833.124651][T21692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.124662][T21692] R13: 00007f288a226038 R14: 00007f288a225fa0 R15: 00007fffe48b4828 [ 833.124694][T21692] [ 833.124714][T21692] ERROR: Out of memory at tomoyo_realpath_from_path. [ 833.232954][T21689] tmpfs: Bad value for 'mpol' [ 833.415489][T21702] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4908'. [ 833.432329][T21702] omfs: Invalid superblock (0) [ 833.447365][T21700] FAULT_INJECTION: forcing a failure. [ 833.447365][T21700] name failslab, interval 1, probability 0, space 0, times 0 [ 833.447397][T21700] CPU: 1 UID: 0 PID: 21700 Comm: syz.3.4907 Tainted: G L syzkaller #0 PREEMPT(full) [ 833.447425][T21700] Tainted: [L]=SOFTLOCKUP [ 833.447432][T21700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 833.447446][T21700] Call Trace: [ 833.447454][T21700] [ 833.447462][T21700] dump_stack_lvl+0xe8/0x150 [ 833.447495][T21700] should_fail_ex+0x3eb/0x540 [ 833.447526][T21700] should_failslab+0xa8/0x100 [ 833.447550][T21700] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 833.447580][T21700] ? kasprintf+0xe2/0x140 [ 833.447608][T21700] ? kasprintf+0xe2/0x140 [ 833.447642][T21700] kvasprintf+0xeb/0x1a0 [ 833.447669][T21700] ? __pfx_init_rescuer+0x10/0x10 [ 833.447690][T21700] ? __pfx_kvasprintf+0x10/0x10 [ 833.447729][T21700] kasprintf+0xe2/0x140 [ 833.447758][T21700] ? __is_module_percpu_address+0x28/0x3f0 [ 833.447791][T21700] ? __pfx_kasprintf+0x10/0x10 [ 833.447819][T21700] ? __is_module_percpu_address+0x39b/0x3f0 [ 833.447848][T21700] ? is_module_address+0x17/0xf0 [ 833.447866][T21700] ? is_module_address+0x17/0xf0 [ 833.447891][T21700] alloc_workqueue_noprof+0x12e/0x210 [ 833.447921][T21700] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 833.447949][T21700] ? ceph_get_tree+0x438/0x1a40 [ 833.447973][T21700] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 833.448009][T21700] ? __ceph_monc_want_map+0x105/0x4a0 [ 833.448038][T21700] ceph_get_tree+0x489/0x1a40 [ 833.448062][T21700] ? apparmor_capable+0x126/0x170 [ 833.448089][T21700] vfs_get_tree+0x92/0x2a0 [ 833.448112][T21700] do_new_mount+0x325/0xb00 [ 833.448146][T21700] ? __pfx_do_new_mount+0x10/0x10 [ 833.448175][T21700] ? ns_capable+0x84/0xe0 [ 833.448207][T21700] ? path_mount+0x647/0x1050 [ 833.448236][T21700] ? user_path_at+0xd4/0x160 [ 833.448268][T21700] __se_sys_mount+0x31d/0x420 [ 833.448302][T21700] ? __pfx___se_sys_mount+0x10/0x10 [ 833.448336][T21700] ? __x64_sys_mount+0x20/0xc0 [ 833.448366][T21700] do_syscall_64+0x166/0x520 [ 833.448391][T21700] ? trace_irq_disable+0x3b/0x140 [ 833.448413][T21700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.448434][T21700] ? clear_bhb_loop+0x70/0xc0 [ 833.448458][T21700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.448478][T21700] RIP: 0033:0x7f2889f9e559 [ 833.448496][T21700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.448512][T21700] RSP: 002b:00007f288add5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 833.448534][T21700] RAX: ffffffffffffffda RBX: 00007f288a225fa0 RCX: 00007f2889f9e559 [ 833.448550][T21700] RDX: 00002000000028c0 RSI: 0000200000002880 RDI: 0000200000002840 [ 833.448564][T21700] RBP: 00007f288a0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 833.448578][T21700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 833.448590][T21700] R13: 00007f288a226038 R14: 00007f288a225fa0 R15: 00007fffe48b4828 [ 833.448623][T21700] [ 833.464631][T18908] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 833.740229][ T5046] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 833.783063][T21706] netlink: 'syz.6.4909': attribute type 5 has an invalid length. [ 833.783106][T21706] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4909'. [ 833.813949][ T4926] Bluetooth: hci2: command 0x0406 tx timeout [ 833.970001][ T1223] ch9200 5-1:2.31: probe with driver ch9200 failed with error -110 [ 834.218175][T21700] ceph: No mds server is up or the cluster is laggy [ 834.456747][T21715] FAULT_INJECTION: forcing a failure. [ 834.456747][T21715] name failslab, interval 1, probability 0, space 0, times 0 [ 834.456783][T21715] CPU: 0 UID: 0 PID: 21715 Comm: syz.3.4910 Tainted: G L syzkaller #0 PREEMPT(full) [ 834.456811][T21715] Tainted: [L]=SOFTLOCKUP [ 834.456819][T21715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 834.456832][T21715] Call Trace: [ 834.456841][T21715] [ 834.456850][T21715] dump_stack_lvl+0xe8/0x150 [ 834.456883][T21715] should_fail_ex+0x3eb/0x540 [ 834.456915][T21715] should_failslab+0xa8/0x100 [ 834.456939][T21715] __kmalloc_cache_noprof+0x9e/0x600 [ 834.456968][T21715] ? __raw_spin_lock_init+0x45/0x100 [ 834.456993][T21715] ? __kthread_create_on_node+0x115/0x3d0 [ 834.457019][T21715] ? __kthread_create_on_node+0x115/0x3d0 [ 834.457046][T21715] ? __init_swait_queue_head+0xa8/0x150 [ 834.457069][T21715] ? __pfx_rescuer_thread+0x10/0x10 [ 834.457097][T21715] __kthread_create_on_node+0x115/0x3d0 [ 834.457126][T21715] ? __pfx___kthread_create_on_node+0x10/0x10 [ 834.457165][T21715] ? __pfx_rescuer_thread+0x10/0x10 [ 834.457191][T21715] ? __pfx_rescuer_thread+0x10/0x10 [ 834.457218][T21715] kthread_create_on_node+0xeb/0x140 [ 834.457250][T21715] ? __pfx_kthread_create_on_node+0x10/0x10 [ 834.457279][T21715] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 834.457306][T21715] ? init_rescuer+0x167/0x530 [ 834.457325][T21715] ? init_rescuer+0x167/0x530 [ 834.457351][T21715] init_rescuer+0x312/0x530 [ 834.457374][T21715] ? __pfx_init_rescuer+0x10/0x10 [ 834.457406][T21715] ? wq_adjust_max_active+0x1eb/0x570 [ 834.457434][T21715] ? __alloc_workqueue+0x1bf2/0x21d0 [ 834.457468][T21715] __alloc_workqueue+0x1d85/0x21d0 [ 834.457517][T21715] alloc_workqueue_noprof+0xe3/0x210 [ 834.457549][T21715] ? is_dynamic_key+0xd4/0x1c0 [ 834.457579][T21715] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 834.457614][T21715] ? ceph_msgpool_init+0xdd/0x1c0 [ 834.457648][T21715] ceph_osdc_init+0x62d/0x900 [ 834.457685][T21715] ceph_create_client+0x246/0x310 [ 834.457720][T21715] ceph_get_tree+0x1ca/0x1a40 [ 834.457745][T21715] ? apparmor_capable+0x126/0x170 [ 834.457774][T21715] vfs_get_tree+0x92/0x2a0 [ 834.457798][T21715] do_new_mount+0x325/0xb00 [ 834.457832][T21715] ? __pfx_do_new_mount+0x10/0x10 [ 834.457860][T21715] ? ns_capable+0x84/0xe0 [ 834.457884][T21715] ? path_mount+0x647/0x1050 [ 834.457913][T21715] ? user_path_at+0xd4/0x160 [ 834.457945][T21715] __se_sys_mount+0x31d/0x420 [ 834.457978][T21715] ? __pfx___se_sys_mount+0x10/0x10 [ 834.458009][T21715] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 834.458034][T21715] ? __x64_sys_mount+0x20/0xc0 [ 834.458063][T21715] do_syscall_64+0x166/0x520 [ 834.458089][T21715] ? trace_irq_disable+0x3b/0x140 [ 834.458109][T21715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.458130][T21715] ? clear_bhb_loop+0x70/0xc0 [ 834.458154][T21715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.458174][T21715] RIP: 0033:0x7f2889f9e559 [ 834.458193][T21715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.458209][T21715] RSP: 002b:00007f288add5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 834.458230][T21715] RAX: ffffffffffffffda RBX: 00007f288a225fa0 RCX: 00007f2889f9e559 [ 834.458246][T21715] RDX: 00002000000028c0 RSI: 0000200000002880 RDI: 0000200000002840 [ 834.458260][T21715] RBP: 00007f288a0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 834.458273][T21715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.458286][T21715] R13: 00007f288a226038 R14: 00007f288a225fa0 R15: 00007fffe48b4828 [ 834.458319][T21715] [ 834.567344][T21715] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -ENOMEM [ 834.755880][T21719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4913'. [ 834.755916][T21719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 834.824970][T14492] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 834.872979][ T54] Bluetooth: hci2: unexpected event for opcode 0x0c0d [ 834.884852][T21724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 835.029500][T14492] usb 7-1: Using ep0 maxpacket: 8 [ 835.030070][T14492] usb 7-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 835.031060][T14492] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 835.031083][T14492] usb 7-1: config 2 has no interface number 0 [ 835.031123][T14492] usb 7-1: config 2 interface 31 has no altsetting 0 [ 835.033970][T14492] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.033993][T14492] usb 7-1: Product: syz [ 835.034014][T14492] usb 7-1: Manufacturer: syz [ 835.034028][T14492] usb 7-1: SerialNumber: syz [ 835.097087][T21729] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4916'. [ 835.102031][T21729] 9p: Bad value for 'cachetag' [ 835.139281][ T1223] usb 5-1: USB disconnect, device number 14 [ 835.202527][T21731] netlink: NAT attribute has 8 unknown bytes [ 835.202554][T21731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 835.278323][T21733] FAULT_INJECTION: forcing a failure. [ 835.278323][T21733] name failslab, interval 1, probability 0, space 0, times 0 [ 835.278357][T21733] CPU: 0 UID: 0 PID: 21733 Comm: syz.5.4919 Tainted: G L syzkaller #0 PREEMPT(full) [ 835.278384][T21733] Tainted: [L]=SOFTLOCKUP [ 835.278392][T21733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 835.278408][T21733] Call Trace: [ 835.278416][T21733] [ 835.278426][T21733] dump_stack_lvl+0xe8/0x150 [ 835.278458][T21733] should_fail_ex+0x3eb/0x540 [ 835.278493][T21733] should_failslab+0xa8/0x100 [ 835.278517][T21733] __kmalloc_cache_node_noprof+0xa5/0x620 [ 835.278548][T21733] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 835.278576][T21733] ? __alloc_workqueue+0x7dc/0x21d0 [ 835.278603][T21733] ? __alloc_workqueue+0x7dc/0x21d0 [ 835.278645][T21733] __alloc_workqueue+0x7dc/0x21d0 [ 835.278694][T21733] alloc_workqueue_noprof+0xe3/0x210 [ 835.278720][T21733] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 835.278750][T21733] ? is_dynamic_key+0xd4/0x1c0 [ 835.278780][T21733] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 835.278809][T21733] ? __ceph_monc_want_map+0x105/0x4a0 [ 835.278840][T21733] ceph_get_tree+0x4cb/0x1a40 [ 835.278864][T21733] ? apparmor_capable+0x126/0x170 [ 835.278892][T21733] vfs_get_tree+0x92/0x2a0 [ 835.278913][T21733] do_new_mount+0x325/0xb00 [ 835.278946][T21733] ? __pfx_do_new_mount+0x10/0x10 [ 835.278974][T21733] ? ns_capable+0x84/0xe0 [ 835.278996][T21733] ? path_mount+0x647/0x1050 [ 835.279025][T21733] ? user_path_at+0xd4/0x160 [ 835.279056][T21733] __se_sys_mount+0x31d/0x420 [ 835.279089][T21733] ? __pfx___se_sys_mount+0x10/0x10 [ 835.279122][T21733] ? __x64_sys_mount+0x20/0xc0 [ 835.279151][T21733] do_syscall_64+0x166/0x520 [ 835.279177][T21733] ? trace_irq_disable+0x3b/0x140 [ 835.279197][T21733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.279218][T21733] ? clear_bhb_loop+0x70/0xc0 [ 835.279243][T21733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.279262][T21733] RIP: 0033:0x7f853319e559 [ 835.279282][T21733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.279298][T21733] RSP: 002b:00007f8534048028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 835.279320][T21733] RAX: ffffffffffffffda RBX: 00007f8533425fa0 RCX: 00007f853319e559 [ 835.279335][T21733] RDX: 00002000000028c0 RSI: 0000200000002880 RDI: 0000200000002840 [ 835.279349][T21733] RBP: 00007f85332358b0 R08: 0000000000000000 R09: 0000000000000000 [ 835.279362][T21733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.279375][T21733] R13: 00007f8533426038 R14: 00007f8533425fa0 R15: 00007ffe8d3d9be8 [ 835.279406][T21733] [ 836.092050][ T5751] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 836.270712][ T5751] usb 4-1: Using ep0 maxpacket: 32 [ 836.271433][ T5751] usb 4-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 836.274418][ T5751] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 836.274441][ T5751] usb 4-1: config 0 has no interface number 0 [ 836.274487][ T5751] usb 4-1: config 0 interface 12 has no altsetting 0 [ 836.278252][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.278275][ T5751] usb 4-1: Product: syz [ 836.278289][ T5751] usb 4-1: Manufacturer: syz [ 836.278323][ T5751] usb 4-1: SerialNumber: syz [ 836.362395][ T5751] usb 4-1: config 0 descriptor?? [ 836.364725][T21753] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 836.485576][T21758] FAULT_INJECTION: forcing a failure. [ 836.485576][T21758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.485608][T21758] CPU: 0 UID: 0 PID: 21758 Comm: syz.4.4926 Tainted: G L syzkaller #0 PREEMPT(full) [ 836.485637][T21758] Tainted: [L]=SOFTLOCKUP [ 836.485645][T21758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 836.485656][T21758] Call Trace: [ 836.485664][T21758] [ 836.485672][T21758] dump_stack_lvl+0xe8/0x150 [ 836.485702][T21758] should_fail_ex+0x3eb/0x540 [ 836.485734][T21758] _copy_to_user+0x31/0xb0 [ 836.485763][T21758] snd_seq_oss_read+0x31e/0x4f0 [ 836.485797][T21758] ? __pfx_snd_seq_oss_read+0x10/0x10 [ 836.485824][T21758] ? security_file_permission+0x75/0x260 [ 836.485860][T21758] odev_read+0x54/0x80 [ 836.485879][T21758] ? __pfx_odev_read+0x10/0x10 [ 836.485898][T21758] vfs_read+0x213/0xa80 [ 836.485932][T21758] ? __pfx_vfs_read+0x10/0x10 [ 836.485960][T21758] ? __fget_files+0x2a/0x420 [ 836.485990][T21758] ? __fget_files+0x2a/0x420 [ 836.486014][T21758] ? __fget_files+0x3a2/0x420 [ 836.486039][T21758] ? __fget_files+0x2a/0x420 [ 836.486069][T21758] ? fdget+0x1ac/0x250 [ 836.486097][T21758] __x64_sys_pread64+0x196/0x220 [ 836.486128][T21758] ? __pfx___x64_sys_pread64+0x10/0x10 [ 836.486169][T21758] do_syscall_64+0x166/0x520 [ 836.486194][T21758] ? trace_irq_disable+0x3b/0x140 [ 836.486214][T21758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.486233][T21758] ? clear_bhb_loop+0x70/0xc0 [ 836.486257][T21758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.486276][T21758] RIP: 0033:0x7f02eb59e559 [ 836.486294][T21758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.486310][T21758] RSP: 002b:00007f02ec4b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 836.486332][T21758] RAX: ffffffffffffffda RBX: 00007f02eb826090 RCX: 00007f02eb59e559 [ 836.486346][T21758] RDX: 0000000000000036 RSI: 00002000000004c0 RDI: 0000000000000003 [ 836.486359][T21758] RBP: 00007f02ec4b1090 R08: 0000000000000000 R09: 0000000000000000 [ 836.486371][T21758] R10: 00000000000000ff R11: 0000000000000246 R12: 0000000000000001 [ 836.486383][T21758] R13: 00007f02eb826128 R14: 00007f02eb826090 R15: 00007ffe299dff58 [ 836.486415][T21758] [ 836.981840][T14492] ch9200 7-1:2.31: probe with driver ch9200 failed with error -110 [ 837.032006][T21764] FAULT_INJECTION: forcing a failure. [ 837.032006][T21764] name failslab, interval 1, probability 0, space 0, times 0 [ 837.032040][T21764] CPU: 1 UID: 0 PID: 21764 Comm: syz.6.4929 Tainted: G L syzkaller #0 PREEMPT(full) [ 837.032069][T21764] Tainted: [L]=SOFTLOCKUP [ 837.032077][T21764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 837.032096][T21764] Call Trace: [ 837.032114][T21764] [ 837.032124][T21764] dump_stack_lvl+0xe8/0x150 [ 837.032157][T21764] should_fail_ex+0x3eb/0x540 [ 837.032193][T21764] should_failslab+0xa8/0x100 [ 837.032217][T21764] __kmalloc_cache_node_noprof+0xa5/0x620 [ 837.032248][T21764] ? __kmalloc_noprof+0x1a6/0x710 [ 837.032274][T21764] ? __alloc_workqueue+0x7dc/0x21d0 [ 837.032303][T21764] ? __alloc_workqueue+0x7dc/0x21d0 [ 837.032345][T21764] __alloc_workqueue+0x7dc/0x21d0 [ 837.032394][T21764] alloc_workqueue_noprof+0xe3/0x210 [ 837.032424][T21764] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 837.032455][T21764] ? is_dynamic_key+0xd4/0x1c0 [ 837.032486][T21764] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 837.032516][T21764] ? __ceph_monc_want_map+0x105/0x4a0 [ 837.032547][T21764] ceph_get_tree+0x4cb/0x1a40 [ 837.032571][T21764] ? apparmor_capable+0x126/0x170 [ 837.032599][T21764] vfs_get_tree+0x92/0x2a0 [ 837.032621][T21764] do_new_mount+0x325/0xb00 [ 837.032654][T21764] ? __pfx_do_new_mount+0x10/0x10 [ 837.032683][T21764] ? ns_capable+0x84/0xe0 [ 837.032706][T21764] ? path_mount+0x647/0x1050 [ 837.032737][T21764] ? user_path_at+0xd4/0x160 [ 837.032767][T21764] __se_sys_mount+0x31d/0x420 [ 837.032801][T21764] ? __pfx___se_sys_mount+0x10/0x10 [ 837.032834][T21764] ? __x64_sys_mount+0x20/0xc0 [ 837.032863][T21764] do_syscall_64+0x166/0x520 [ 837.032889][T21764] ? trace_irq_disable+0x3b/0x140 [ 837.032909][T21764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.032930][T21764] ? clear_bhb_loop+0x70/0xc0 [ 837.032954][T21764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.032974][T21764] RIP: 0033:0x7f375519e559 [ 837.032994][T21764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.033011][T21764] RSP: 002b:00007f375611c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 837.033033][T21764] RAX: ffffffffffffffda RBX: 00007f3755425fa0 RCX: 00007f375519e559 [ 837.033048][T21764] RDX: 00002000000028c0 RSI: 0000200000002880 RDI: 0000200000002840 [ 837.033062][T21764] RBP: 00007f37552358b0 R08: 0000000000000000 R09: 0000000000000000 [ 837.033075][T21764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.033089][T21764] R13: 00007f3755426038 R14: 00007f3755425fa0 R15: 00007ffd2645bc88 [ 837.033121][T21764] [ 837.396767][T21768] FAULT_INJECTION: forcing a failure. [ 837.396767][T21768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.396799][T21768] CPU: 1 UID: 0 PID: 21768 Comm: syz.5.4930 Tainted: G L syzkaller #0 PREEMPT(full) [ 837.396825][T21768] Tainted: [L]=SOFTLOCKUP [ 837.396832][T21768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 837.396844][T21768] Call Trace: [ 837.396852][T21768] [ 837.396861][T21768] dump_stack_lvl+0xe8/0x150 [ 837.396891][T21768] should_fail_ex+0x3eb/0x540 [ 837.396921][T21768] _copy_from_user+0x2d/0xb0 [ 837.396949][T21768] kvm_arch_vm_ioctl+0x66a/0x1a10 [ 837.396975][T21768] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 837.397001][T21768] ? __lock_acquire+0x747/0x2de0 [ 837.397045][T21768] ? lock_acquire+0x115/0x350 [ 837.397069][T21768] ? lock_acquire+0x115/0x350 [ 837.397096][T21768] ? is_bpf_text_address+0x26/0x2b0 [ 837.397125][T21768] ? is_bpf_text_address+0x292/0x2b0 [ 837.397149][T21768] ? is_bpf_text_address+0x26/0x2b0 [ 837.397175][T21768] ? kernel_text_address+0xa5/0xe0 [ 837.397195][T21768] ? __kernel_text_address+0xd/0x30 [ 837.397214][T21768] ? unwind_get_return_address+0x4d/0x90 [ 837.397235][T21768] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 837.397254][T21768] ? arch_stack_walk+0xfb/0x150 [ 837.397291][T21768] ? stack_trace_save+0xa9/0x100 [ 837.397310][T21768] ? __pfx_stack_trace_save+0x10/0x10 [ 837.397327][T21768] ? kasan_save_track+0x4f/0x80 [ 837.397357][T21768] ? stack_depot_save_flags+0x33/0x7f0 [ 837.397383][T21768] ? __lock_acquire+0x747/0x2de0 [ 837.397404][T21768] ? kasan_save_track+0x4f/0x80 [ 837.397429][T21768] ? kasan_save_track+0x3e/0x80 [ 837.397454][T21768] ? kasan_save_free_info+0x40/0x50 [ 837.397476][T21768] ? __kasan_slab_free+0x5c/0x80 [ 837.397493][T21768] ? kfree+0x1c5/0x650 [ 837.397514][T21768] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 837.397537][T21768] ? security_file_ioctl+0xc3/0x2a0 [ 837.397558][T21768] ? __se_sys_ioctl+0x47/0x170 [ 837.397576][T21768] ? do_syscall_64+0x166/0x520 [ 837.397601][T21768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.397640][T21768] kvm_vm_ioctl+0x883/0xcb0 [ 837.397670][T21768] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 837.397707][T21768] ? kasan_quarantine_put+0xbb/0x1f0 [ 837.397745][T21768] ? tomoyo_path_number_perm+0x219/0x5f0 [ 837.397770][T21768] ? tomoyo_path_number_perm+0x219/0x5f0 [ 837.397796][T21768] ? do_vfs_ioctl+0x116f/0x1530 [ 837.397819][T21768] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 837.397872][T21768] ? __fget_files+0x2a/0x420 [ 837.397902][T21768] ? __fget_files+0x2a/0x420 [ 837.397928][T21768] ? __fget_files+0x2a/0x420 [ 837.397958][T21768] ? bpf_lsm_file_ioctl+0x9/0x20 [ 837.397977][T21768] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 837.398002][T21768] __se_sys_ioctl+0xfc/0x170 [ 837.398024][T21768] do_syscall_64+0x166/0x520 [ 837.398048][T21768] ? trace_irq_disable+0x3b/0x140 [ 837.398069][T21768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.398088][T21768] ? clear_bhb_loop+0x70/0xc0 [ 837.398112][T21768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.398131][T21768] RIP: 0033:0x7f853319e559 [ 837.398149][T21768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.398164][T21768] RSP: 002b:00007f8534048028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 837.398185][T21768] RAX: ffffffffffffffda RBX: 00007f8533425fa0 RCX: 00007f853319e559 [ 837.398200][T21768] RDX: 0000200000000980 RSI: 000000004018aebd RDI: 0000000000000004 [ 837.398212][T21768] RBP: 00007f8534048090 R08: 0000000000000000 R09: 0000000000000000 [ 837.398225][T21768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.398237][T21768] R13: 00007f8533426038 R14: 00007f8533425fa0 R15: 00007ffe8d3d9be8 [ 837.398267][T21768] [ 838.159668][ T1223] usb 7-1: USB disconnect, device number 17 [ 838.332653][T21784] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 838.385389][T21786] FAULT_INJECTION: forcing a failure. [ 838.385389][T21786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 838.385421][T21786] CPU: 1 UID: 0 PID: 21786 Comm: syz.4.4936 Tainted: G L syzkaller #0 PREEMPT(full) [ 838.385446][T21786] Tainted: [L]=SOFTLOCKUP [ 838.385454][T21786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 838.385465][T21786] Call Trace: [ 838.385473][T21786] [ 838.385481][T21786] dump_stack_lvl+0xe8/0x150 [ 838.385513][T21786] should_fail_ex+0x3eb/0x540 [ 838.385543][T21786] _copy_from_user+0x2d/0xb0 [ 838.385569][T21786] video_usercopy+0x359/0x1430 [ 838.385605][T21786] ? __pfx___video_do_ioctl+0x10/0x10 [ 838.385634][T21786] ? __pfx_video_usercopy+0x10/0x10 [ 838.385675][T21786] ? __fget_files+0x2a/0x420 [ 838.385700][T21786] ? __fget_files+0x2a/0x420 [ 838.385730][T21786] v4l2_ioctl+0x18d/0x1e0 [ 838.385757][T21786] ? __pfx_v4l2_ioctl+0x10/0x10 [ 838.385783][T21786] __se_sys_ioctl+0xfc/0x170 [ 838.385806][T21786] do_syscall_64+0x166/0x520 [ 838.385830][T21786] ? trace_irq_disable+0x3b/0x140 [ 838.385850][T21786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.385870][T21786] ? clear_bhb_loop+0x70/0xc0 [ 838.385892][T21786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.385911][T21786] RIP: 0033:0x7f02eb59e559 [ 838.385931][T21786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.385947][T21786] RSP: 002b:00007f02ec4d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 838.385968][T21786] RAX: ffffffffffffffda RBX: 00007f02eb825fa0 RCX: 00007f02eb59e559 [ 838.385982][T21786] RDX: 0000200000000280 RSI: 00000000c0585609 RDI: 0000000000000003 [ 838.385994][T21786] RBP: 00007f02ec4d2090 R08: 0000000000000000 R09: 0000000000000000 [ 838.386006][T21786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.386018][T21786] R13: 00007f02eb826038 R14: 00007f02eb825fa0 R15: 00007ffe299dff58 [ 838.386048][T21786] [ 838.387803][T21782] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4932'. [ 838.387839][T21782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 838.679539][T18908] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 838.829635][T18908] usb 5-1: Using ep0 maxpacket: 8 [ 838.830308][T18908] usb 5-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 838.831251][T18908] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 838.831273][T18908] usb 5-1: config 2 has no interface number 0 [ 838.831310][T18908] usb 5-1: config 2 interface 31 has no altsetting 0 [ 838.833070][T18908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.833086][T18908] usb 5-1: Product: syz [ 838.833100][T18908] usb 5-1: Manufacturer: syz [ 838.833114][T18908] usb 5-1: SerialNumber: syz [ 839.052823][ T5751] f81534 4-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 839.052880][ T5751] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 839.052898][ T5751] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 839.052981][ T5751] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 839.057746][ T5751] usb 4-1: USB disconnect, device number 46 [ 839.147065][T21794] FAULT_INJECTION: forcing a failure. [ 839.147065][T21794] name failslab, interval 1, probability 0, space 0, times 0 [ 839.147107][T21794] CPU: 0 UID: 0 PID: 21794 Comm: syz.5.4939 Tainted: G L syzkaller #0 PREEMPT(full) [ 839.147135][T21794] Tainted: [L]=SOFTLOCKUP [ 839.147143][T21794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 839.147155][T21794] Call Trace: [ 839.147163][T21794] [ 839.147172][T21794] dump_stack_lvl+0xe8/0x150 [ 839.147204][T21794] should_fail_ex+0x3eb/0x540 [ 839.147235][T21794] should_failslab+0xa8/0x100 [ 839.147259][T21794] __kmalloc_noprof+0xf9/0x710 [ 839.147288][T21794] ? __alloc_workqueue+0x655/0x21d0 [ 839.147314][T21794] ? __alloc_workqueue+0x655/0x21d0 [ 839.147347][T21794] __alloc_workqueue+0x655/0x21d0 [ 839.147381][T21794] ? ceph_monc_want_map+0x42/0x60 [ 839.147411][T21794] alloc_workqueue_noprof+0xe3/0x210 [ 839.147440][T21794] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 839.147464][T21794] ? ceph_get_tree+0x438/0x1a40 [ 839.147486][T21794] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 839.147514][T21794] ? __ceph_monc_want_map+0x105/0x4a0 [ 839.147545][T21794] ceph_get_tree+0x489/0x1a40 [ 839.147567][T21794] ? apparmor_capable+0x126/0x170 [ 839.147593][T21794] vfs_get_tree+0x92/0x2a0 [ 839.147621][T21794] do_new_mount+0x325/0xb00 [ 839.147656][T21794] ? __pfx_do_new_mount+0x10/0x10 [ 839.147689][T21794] ? ns_capable+0x84/0xe0 [ 839.147713][T21794] ? path_mount+0x647/0x1050 [ 839.147742][T21794] ? user_path_at+0xd4/0x160 [ 839.147779][T21794] __se_sys_mount+0x31d/0x420 [ 839.147812][T21794] ? __pfx___se_sys_mount+0x10/0x10 [ 839.147842][T21794] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 839.147867][T21794] ? __x64_sys_mount+0x20/0xc0 [ 839.147895][T21794] do_syscall_64+0x166/0x520 [ 839.147920][T21794] ? trace_irq_disable+0x3b/0x140 [ 839.147944][T21794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.147964][T21794] ? clear_bhb_loop+0x70/0xc0 [ 839.147989][T21794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.148009][T21794] RIP: 0033:0x7f853319e559 [ 839.148028][T21794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.148045][T21794] RSP: 002b:00007f8534048028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 839.148066][T21794] RAX: ffffffffffffffda RBX: 00007f8533425fa0 RCX: 00007f853319e559 [ 839.148089][T21794] RDX: 00002000000028c0 RSI: 0000200000002880 RDI: 0000200000002840 [ 839.148104][T21794] RBP: 00007f85332358b0 R08: 0000000000000000 R09: 0000000000000000 [ 839.148118][T21794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 839.148130][T21794] R13: 00007f8533426038 R14: 00007f8533425fa0 R15: 00007ffe8d3d9be8 [ 839.148163][T21794] [ 840.451223][T21810] FAULT_INJECTION: forcing a failure. [ 840.451223][T21810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.451254][T21810] CPU: 0 UID: 0 PID: 21810 Comm: syz.3.4943 Tainted: G L syzkaller #0 PREEMPT(full) [ 840.451280][T21810] Tainted: [L]=SOFTLOCKUP [ 840.451287][T21810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 840.451298][T21810] Call Trace: [ 840.451306][T21810] [ 840.451314][T21810] dump_stack_lvl+0xe8/0x150 [ 840.451345][T21810] should_fail_ex+0x3eb/0x540 [ 840.451376][T21810] _copy_from_user+0x2d/0xb0 [ 840.451403][T21810] csum_and_copy_from_iter_full+0x210/0x2000 [ 840.451449][T21810] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 840.451482][T21810] ? rcu_is_watching+0x16/0xb0 [ 840.451516][T21810] ? trace_kmalloc+0x2a/0xf0 [ 840.451546][T21810] ip_generic_getfrag+0x149/0x2d0 [ 840.451570][T21810] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 840.451601][T21810] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 840.451623][T21810] ? raw6_getfrag+0x116/0x3a0 [ 840.451647][T21810] ? __alloc_skb+0x4d0/0x7a0 [ 840.451669][T21810] ? skb_put+0x112/0x210 [ 840.451696][T21810] __ip6_append_data+0x3b26/0x40c0 [ 840.451714][T21810] ? __lock_acquire+0x747/0x2de0 [ 840.451750][T21810] ? __pfx_raw6_getfrag+0x10/0x10 [ 840.451789][T21810] ? ip6_mtu+0x7d/0x4a0 [ 840.451821][T21810] ? __pfx___ip6_append_data+0x10/0x10 [ 840.451840][T21810] ? __pfx_ip6_mtu+0x10/0x10 [ 840.451865][T21810] ? ip6_setup_cork+0x631/0xfb0 [ 840.451894][T21810] ? ip6_append_data+0x1a6/0x270 [ 840.451923][T21810] ip6_append_data+0x108/0x270 [ 840.451953][T21810] ? __pfx_raw6_getfrag+0x10/0x10 [ 840.451975][T21810] rawv6_sendmsg+0x1298/0x18c0 [ 840.452007][T21810] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 840.452049][T21810] ? __lock_acquire+0x747/0x2de0 [ 840.452071][T21810] ? aa_sock_msg_perm+0xf5/0x210 [ 840.452095][T21810] ? sock_rps_record_flow+0x19/0x350 [ 840.452121][T21810] ? inet_sendmsg+0x298/0x320 [ 840.452142][T21810] ? apparmor_socket_sendmsg+0x98/0x360 [ 840.452167][T21810] ? __pfx_inet_sendmsg+0x10/0x10 [ 840.452188][T21810] sock_sendmsg_nosec+0x10f/0x190 [ 840.452209][T21810] ____sys_sendmsg+0x54e/0x850 [ 840.452239][T21810] ? __pfx_____sys_sendmsg+0x10/0x10 [ 840.452274][T21810] ? import_iovec+0x73/0xa0 [ 840.452303][T21810] ___sys_sendmsg+0x2a5/0x360 [ 840.452327][T21810] ? __lock_acquire+0x747/0x2de0 [ 840.452350][T21810] ? __pfx____sys_sendmsg+0x10/0x10 [ 840.452410][T21810] ? __fget_files+0x3a2/0x420 [ 840.452435][T21810] ? __fget_files+0x2a/0x420 [ 840.452469][T21810] __x64_sys_sendmsg+0x1b1/0x290 [ 840.452506][T21810] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 840.452548][T21810] do_syscall_64+0x166/0x520 [ 840.452572][T21810] ? trace_irq_disable+0x3b/0x140 [ 840.452592][T21810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.452611][T21810] ? clear_bhb_loop+0x70/0xc0 [ 840.452634][T21810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.452653][T21810] RIP: 0033:0x7f2889f9e559 [ 840.452671][T21810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.452686][T21810] RSP: 002b:00007f288add5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 840.452707][T21810] RAX: ffffffffffffffda RBX: 00007f288a225fa0 RCX: 00007f2889f9e559 [ 840.452721][T21810] RDX: 0000000000044004 RSI: 0000200000000840 RDI: 0000000000000003 [ 840.452734][T21810] RBP: 00007f288add5090 R08: 0000000000000000 R09: 0000000000000000 [ 840.452746][T21810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.452758][T21810] R13: 00007f288a226038 R14: 00007f288a225fa0 R15: 00007fffe48b4828 [ 840.452788][T21810] [ 840.694818][T18908] ch9200 5-1:2.31: probe with driver ch9200 failed with error -110 [ 840.700977][ T5046] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 840.852920][ T5046] usb 7-1: Using ep0 maxpacket: 8 [ 840.855284][ T5046] usb 7-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 840.874124][ T5046] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 840.874152][ T5046] usb 7-1: config 2 has no interface number 0 [ 840.874189][ T5046] usb 7-1: config 2 interface 31 has no altsetting 0 [ 840.884205][ T5046] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.884230][ T5046] usb 7-1: Product: syz [ 840.884245][ T5046] usb 7-1: Manufacturer: syz [ 840.884258][ T5046] usb 7-1: SerialNumber: syz [ 840.993847][T21824] netlink: 'syz.5.4948': attribute type 16 has an invalid length. [ 840.993869][T21824] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.4948'. [ 841.156981][ T1223] usb 5-1: USB disconnect, device number 15 [ 841.233695][T21827] FAULT_INJECTION: forcing a failure. [ 841.233695][T21827] name failslab, interval 1, probability 0, space 0, times 0 [ 841.233729][T21827] CPU: 1 UID: 0 PID: 21827 Comm: syz.3.4950 Tainted: G L syzkaller #0 PREEMPT(full) [ 841.233756][T21827] Tainted: [L]=SOFTLOCKUP [ 841.233764][T21827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 841.233776][T21827] Call Trace: [ 841.233785][T21827] [ 841.233793][T21827] dump_stack_lvl+0xe8/0x150 [ 841.233829][T21827] should_fail_ex+0x3eb/0x540 [ 841.233870][T21827] should_failslab+0xa8/0x100 [ 841.233895][T21827] __kmalloc_noprof+0xf9/0x710 [ 841.233926][T21827] ? __alloc_workqueue+0x655/0x21d0 [ 841.233956][T21827] ? __alloc_workqueue+0x655/0x21d0 [ 841.233992][T21827] __alloc_workqueue+0x655/0x21d0 [ 841.234029][T21827] ? ceph_monc_want_map+0x42/0x60 [ 841.234061][T21827] alloc_workqueue_noprof+0xe3/0x210 [ 841.234091][T21827] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 841.234119][T21827] ? ceph_get_tree+0x438/0x1a40 [ 841.234143][T21827] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 841.234173][T21827] ? __ceph_monc_want_map+0x105/0x4a0 [ 841.234204][T21827] ceph_get_tree+0x489/0x1a40 [ 841.234228][T21827] ? apparmor_capable+0x126/0x170 [ 841.234256][T21827] vfs_get_tree+0x92/0x2a0 [ 841.234279][T21827] do_new_mount+0x325/0xb00 [ 841.234312][T21827] ? __pfx_do_new_mount+0x10/0x10 [ 841.234342][T21827] ? ns_capable+0x84/0xe0 [ 841.234365][T21827] ? path_mount+0x647/0x1050 [ 841.234395][T21827] ? user_path_at+0xd4/0x160 [ 841.234426][T21827] __se_sys_mount+0x31d/0x420 [ 841.234459][T21827] ? __pfx___se_sys_mount+0x10/0x10 [ 841.234490][T21827] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 841.234516][T21827] ? __x64_sys_mount+0x20/0xc0 [ 841.234545][T21827] do_syscall_64+0x166/0x520 [ 841.234570][T21827] ? trace_irq_disable+0x3b/0x140 [ 841.234593][T21827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.234613][T21827] ? clear_bhb_loop+0x70/0xc0 [ 841.234638][T21827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.234660][T21827] RIP: 0033:0x7f2889f9e559 [ 841.234680][T21827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.234698][T21827] RSP: 002b:00007f288add5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 841.234721][T21827] RAX: ffffffffffffffda RBX: 00007f288a225fa0 RCX: 00007f2889f9e559 [ 841.234738][T21827] RDX: 00002000000028c0 RSI: 0000200000002880 RDI: 0000200000002840 [ 841.234753][T21827] RBP: 00007f288a0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 841.234767][T21827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.234781][T21827] R13: 00007f288a226038 R14: 00007f288a225fa0 R15: 00007fffe48b4828 [ 841.234815][T21827] [ 841.239709][ T5751] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 841.500640][ T5751] usb 6-1: New USB device found: idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 841.545704][ T5751] usb 6-1: config 0 has an invalid interface number: 6 but max is 0 [ 841.545728][ T5751] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 841.545745][ T5751] usb 6-1: config 0 has no interface number 0 [ 841.575703][ T5751] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.575729][ T5751] usb 6-1: Product: syz [ 841.575743][ T5751] usb 6-1: Manufacturer: syz [ 841.575757][ T5751] usb 6-1: SerialNumber: syz [ 841.579972][ T5751] usb 6-1: config 0 descriptor?? [ 841.637513][ T5751] vmk80xx 6-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 841.679718][T21837] netlink: 'syz.4.4952': attribute type 1 has an invalid length. [ 841.786318][T21839] FAULT_INJECTION: forcing a failure. [ 841.786318][T21839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 841.786351][T21839] CPU: 1 UID: 0 PID: 21839 Comm: syz.3.4953 Tainted: G L syzkaller #0 PREEMPT(full) [ 841.786377][T21839] Tainted: [L]=SOFTLOCKUP [ 841.786384][T21839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 841.786396][T21839] Call Trace: [ 841.786404][T21839] [ 841.786413][T21839] dump_stack_lvl+0xe8/0x150 [ 841.786447][T21839] should_fail_ex+0x3eb/0x540 [ 841.786479][T21839] _copy_from_user+0x2d/0xb0 [ 841.786507][T21839] kvm_vcpu_ioctl+0x492/0xfd0 [ 841.786542][T21839] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 841.786592][T21839] ? __fget_files+0x2a/0x420 [ 841.786621][T21839] ? __fget_files+0x2a/0x420 [ 841.786646][T21839] ? __fget_files+0x2a/0x420 [ 841.786675][T21839] ? bpf_lsm_file_ioctl+0x9/0x20 [ 841.786694][T21839] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 841.786722][T21839] __se_sys_ioctl+0xfc/0x170 [ 841.786746][T21839] do_syscall_64+0x166/0x520 [ 841.786768][T21839] ? trace_irq_disable+0x3b/0x140 [ 841.786788][T21839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.786808][T21839] ? clear_bhb_loop+0x70/0xc0 [ 841.786831][T21839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.786850][T21839] RIP: 0033:0x7f2889f9e559 [ 841.786868][T21839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.786884][T21839] RSP: 002b:00007f288add5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 841.786904][T21839] RAX: ffffffffffffffda RBX: 00007f288a225fa0 RCX: 00007f2889f9e559 [ 841.786919][T21839] RDX: 0000200000000000 RSI: 000000004004ae99 RDI: 0000000000000005 [ 841.786932][T21839] RBP: 00007f288add5090 R08: 0000000000000000 R09: 0000000000000000 [ 841.786944][T21839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 841.786956][T21839] R13: 00007f288a226038 R14: 00007f288a225fa0 R15: 00007fffe48b4828 [ 841.786988][T21839] [ 841.811657][T18908] usb 6-1: USB disconnect, device number 6 [ 842.493880][T21850] FAULT_INJECTION: forcing a failure. [ 842.493880][T21850] name failslab, interval 1, probability 0, space 0, times 0 [ 842.493913][T21850] CPU: 0 UID: 0 PID: 21850 Comm: syz.3.4959 Tainted: G L syzkaller #0 PREEMPT(full) [ 842.493940][T21850] Tainted: [L]=SOFTLOCKUP [ 842.493948][T21850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 842.493960][T21850] Call Trace: [ 842.493969][T21850] [ 842.493977][T21850] dump_stack_lvl+0xe8/0x150 [ 842.494009][T21850] should_fail_ex+0x3eb/0x540 [ 842.494041][T21850] should_failslab+0xa8/0x100 [ 842.494064][T21850] __kmalloc_cache_node_noprof+0xa5/0x620 [ 842.494100][T21850] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 842.494127][T21850] ? __alloc_workqueue+0x7dc/0x21d0 [ 842.494153][T21850] ? __alloc_workqueue+0x7dc/0x21d0 [ 842.494191][T21850] __alloc_workqueue+0x7dc/0x21d0 [ 842.494239][T21850] alloc_workqueue_noprof+0xe3/0x210 [ 842.494267][T21850] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 842.494296][T21850] ? ceph_get_tree+0x438/0x1a40 [ 842.494319][T21850] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 842.494349][T21850] ? __ceph_monc_want_map+0x105/0x4a0 [ 842.494379][T21850] ceph_get_tree+0x489/0x1a40 [ 842.494402][T21850] ? apparmor_capable+0x126/0x170 [ 842.494429][T21850] vfs_get_tree+0x92/0x2a0 [ 842.494451][T21850] do_new_mount+0x325/0xb00 [ 842.494486][T21850] ? __pfx_do_new_mount+0x10/0x10 [ 842.494514][T21850] ? ns_capable+0x84/0xe0 [ 842.494536][T21850] ? path_mount+0x647/0x1050 [ 842.494563][T21850] ? user_path_at+0xd4/0x160 [ 842.494592][T21850] __se_sys_mount+0x31d/0x420 [ 842.494622][T21850] ? __pfx___se_sys_mount+0x10/0x10 [ 842.494653][T21850] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 842.494677][T21850] ? __x64_sys_mount+0x20/0xc0 [ 842.494704][T21850] do_syscall_64+0x166/0x520 [ 842.494730][T21850] ? trace_irq_disable+0x3b/0x140 [ 842.494759][T21850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.494781][T21850] ? clear_bhb_loop+0x70/0xc0 [ 842.494806][T21850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.494826][T21850] RIP: 0033:0x7f2889f9e559 [ 842.494846][T21850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.494862][T21850] RSP: 002b:00007f288add5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 842.494884][T21850] RAX: ffffffffffffffda RBX: 00007f288a225fa0 RCX: 00007f2889f9e559 [ 842.494900][T21850] RDX: 00002000000028c0 RSI: 0000200000002880 RDI: 0000200000002840 [ 842.494933][T21850] RBP: 00007f288a0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 842.494947][T21850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.494959][T21850] R13: 00007f288a226038 R14: 00007f288a225fa0 R15: 00007fffe48b4828 [ 842.494991][T21850] [ 842.790407][ T5046] ch9200 7-1:2.31: probe with driver ch9200 failed with error -110 [ 842.832931][T21851] rxe_eth0 speed is unknown, defaulting to 1000 [ 843.216549][T21878] FAULT_INJECTION: forcing a failure. [ 843.216549][T21878] name failslab, interval 1, probability 0, space 0, times 0 [ 843.216580][T21878] CPU: 1 UID: 0 PID: 21878 Comm: syz.6.4966 Tainted: G L syzkaller #0 PREEMPT(full) [ 843.216605][T21878] Tainted: [L]=SOFTLOCKUP [ 843.216612][T21878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 843.216623][T21878] Call Trace: [ 843.216632][T21878] [ 843.216641][T21878] dump_stack_lvl+0xe8/0x150 [ 843.216671][T21878] should_fail_ex+0x3eb/0x540 [ 843.216701][T21878] should_failslab+0xa8/0x100 [ 843.216724][T21878] __kmalloc_noprof+0xf9/0x710 [ 843.216751][T21878] ? copy_splice_read+0x16f/0xaa0 [ 843.216777][T21878] ? copy_splice_read+0x16f/0xaa0 [ 843.216809][T21878] copy_splice_read+0x16f/0xaa0 [ 843.216846][T21878] ? rcu_is_watching+0x16/0xb0 [ 843.216868][T21878] ? __pfx_copy_splice_read+0x10/0x10 [ 843.216892][T21878] ? trace_kmalloc+0x2a/0xf0 [ 843.216918][T21878] ? look_up_lock_class+0x57/0x110 [ 843.216943][T21878] ? register_lock_class+0x31/0x2e0 [ 843.216974][T21878] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 843.216999][T21878] ? alloc_pipe_info+0x358/0x4c0 [ 843.217020][T21878] ? __pfx_copy_splice_read+0x10/0x10 [ 843.217046][T21878] splice_direct_to_actor+0x48b/0xcb0 [ 843.217092][T21878] ? __pfx_direct_splice_actor+0x10/0x10 [ 843.217120][T21878] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 843.217157][T21878] do_splice_direct+0x195/0x290 [ 843.217187][T21878] ? __pfx_do_splice_direct+0x10/0x10 [ 843.217216][T21878] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 843.217241][T21878] ? rw_verify_area+0x203/0x4c0 [ 843.217267][T21878] ? fdget+0x1ac/0x250 [ 843.217302][T21878] do_sendfile+0x52e/0x7c0 [ 843.217334][T21878] ? __pfx_do_sendfile+0x10/0x10 [ 843.217358][T21878] ? fdget+0x1ac/0x250 [ 843.217389][T21878] __se_sys_sendfile64+0x144/0x1a0 [ 843.217414][T21878] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 843.217447][T21878] do_syscall_64+0x166/0x520 [ 843.217472][T21878] ? trace_irq_disable+0x3b/0x140 [ 843.217494][T21878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.217514][T21878] ? clear_bhb_loop+0x70/0xc0 [ 843.217537][T21878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.217556][T21878] RIP: 0033:0x7f375519e559 [ 843.217575][T21878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.217590][T21878] RSP: 002b:00007f375611c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 843.217611][T21878] RAX: ffffffffffffffda RBX: 00007f3755425fa0 RCX: 00007f375519e559 [ 843.217625][T21878] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 843.217637][T21878] RBP: 00007f375611c090 R08: 0000000000000000 R09: 0000000000000000 [ 843.217649][T21878] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 843.217660][T21878] R13: 00007f3755426038 R14: 00007f3755425fa0 R15: 00007ffd2645bc88 [ 843.217690][T21878] [ 843.519507][ T1223] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 843.592007][T21884] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4967'. [ 843.622459][T21853] rxe_eth0 speed is unknown, defaulting to 1000 [ 843.671754][ T1223] usb 4-1: New USB device found: idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 843.674175][ T1223] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 843.674226][ T1223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.716016][ T1223] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 843.820518][ T3106] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 843.974535][ T3106] usb 5-1: New USB device found: idVendor=072f, idProduct=2200, bcdDevice=1.00 [ 843.979950][ T3106] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.131809][T14492] usb 7-1: USB disconnect, device number 18 [ 844.397987][T21886] xt_IDLETIMER: label is empty or not nul-terminated [ 844.415670][ T3106] pn533_usb 5-1:1.0: NFC: Couldn't poweron the reader (error -71) [ 844.415754][ T3106] pn533_usb 5-1:1.0: probe with driver pn533_usb failed with error -71 [ 844.429173][ T3106] usb 5-1: USB disconnect, device number 16 [ 844.503360][T14492] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 844.659524][T14492] usb 7-1: Using ep0 maxpacket: 8 [ 844.660378][T14492] usb 7-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 844.663233][T14492] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 844.663258][T14492] usb 7-1: config 2 has no interface number 0 [ 844.663296][T14492] usb 7-1: config 2 interface 31 has no altsetting 0 [ 844.665408][T14492] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.665429][T14492] usb 7-1: Product: syz [ 844.665440][T14492] usb 7-1: Manufacturer: syz [ 844.665452][T14492] usb 7-1: SerialNumber: syz [ 844.970752][T21899] FAULT_INJECTION: forcing a failure. [ 844.970752][T21899] name failslab, interval 1, probability 0, space 0, times 0 [ 844.970785][T21899] CPU: 1 UID: 0 PID: 21899 Comm: syz.5.4971 Tainted: G L syzkaller #0 PREEMPT(full) [ 844.970813][T21899] Tainted: [L]=SOFTLOCKUP [ 844.970820][T21899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 844.970838][T21899] Call Trace: [ 844.970847][T21899] [ 844.970857][T21899] dump_stack_lvl+0xe8/0x150 [ 844.970888][T21899] should_fail_ex+0x3eb/0x540 [ 844.970921][T21899] should_failslab+0xa8/0x100 [ 844.970944][T21899] __kmalloc_noprof+0xf9/0x710 [ 844.970973][T21899] ? __alloc_workqueue+0x10d/0x21d0 [ 844.971002][T21899] ? __alloc_workqueue+0x10d/0x21d0 [ 844.971038][T21899] __alloc_workqueue+0x10d/0x21d0 [ 844.971079][T21899] ? is_dynamic_key+0xd4/0x1c0 [ 844.971110][T21899] ? is_dynamic_key+0xd4/0x1c0 [ 844.971138][T21899] ? is_dynamic_key+0xd4/0x1c0 [ 844.971176][T21899] alloc_workqueue_noprof+0xe3/0x210 [ 844.971205][T21899] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 844.971234][T21899] ? is_dynamic_key+0xd4/0x1c0 [ 844.971264][T21899] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 844.971294][T21899] ? __ceph_monc_want_map+0x105/0x4a0 [ 844.971325][T21899] ceph_get_tree+0x4cb/0x1a40 [ 844.971348][T21899] ? apparmor_capable+0x126/0x170 [ 844.971376][T21899] vfs_get_tree+0x92/0x2a0 [ 844.971400][T21899] do_new_mount+0x325/0xb00 [ 844.971433][T21899] ? __pfx_do_new_mount+0x10/0x10 [ 844.971462][T21899] ? ns_capable+0x84/0xe0 [ 844.971486][T21899] ? path_mount+0x647/0x1050 [ 844.971515][T21899] ? user_path_at+0xd4/0x160 [ 844.971547][T21899] __se_sys_mount+0x31d/0x420 [ 844.971579][T21899] ? __pfx___se_sys_mount+0x10/0x10 [ 844.971610][T21899] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 844.971635][T21899] ? __x64_sys_mount+0x20/0xc0 [ 844.971664][T21899] do_syscall_64+0x166/0x520 [ 844.971690][T21899] ? trace_irq_disable+0x3b/0x140 [ 844.971710][T21899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.971730][T21899] ? clear_bhb_loop+0x70/0xc0 [ 844.971754][T21899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.971774][T21899] RIP: 0033:0x7f853319e559 [ 844.971793][T21899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.971809][T21899] RSP: 002b:00007f8534048028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 844.971831][T21899] RAX: ffffffffffffffda RBX: 00007f8533425fa0 RCX: 00007f853319e559 [ 844.971847][T21899] RDX: 00002000000028c0 RSI: 0000200000002880 RDI: 0000200000002840 [ 844.971862][T21899] RBP: 00007f85332358b0 R08: 0000000000000000 R09: 0000000000000000 [ 844.971875][T21899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.971888][T21899] R13: 00007f8533426038 R14: 00007f8533425fa0 R15: 00007ffe8d3d9be8 [ 844.971920][T21899] [ 845.282648][ T1223] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 845.282671][ T1223] stv0680 4-1:4.0: last error: 86, command = 0x78 [ 845.365120][T21909] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 845.387461][T21911] trusted_key: encrypted_key: insufficient parameters specified [ 845.488398][T21915] FAULT_INJECTION: forcing a failure. [ 845.488398][T21915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 845.488431][T21915] CPU: 1 UID: 0 PID: 21915 Comm: syz.4.4976 Tainted: G L syzkaller #0 PREEMPT(full) [ 845.488466][T21915] Tainted: [L]=SOFTLOCKUP [ 845.488473][T21915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 845.488484][T21915] Call Trace: [ 845.488492][T21915] [ 845.488501][T21915] dump_stack_lvl+0xe8/0x150 [ 845.488531][T21915] should_fail_ex+0x3eb/0x540 [ 845.488562][T21915] _copy_from_user+0x2d/0xb0 [ 845.488589][T21915] video_usercopy+0x359/0x1430 [ 845.488624][T21915] ? __pfx___video_do_ioctl+0x10/0x10 [ 845.488653][T21915] ? __pfx_video_usercopy+0x10/0x10 [ 845.488693][T21915] ? __fget_files+0x2a/0x420 [ 845.488720][T21915] ? __fget_files+0x2a/0x420 [ 845.488745][T21915] v4l2_ioctl+0x18d/0x1e0 [ 845.488773][T21915] ? __pfx_v4l2_ioctl+0x10/0x10 [ 845.488799][T21915] __se_sys_ioctl+0xfc/0x170 [ 845.488821][T21915] do_syscall_64+0x166/0x520 [ 845.488846][T21915] ? trace_irq_disable+0x3b/0x140 [ 845.488867][T21915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.488886][T21915] ? clear_bhb_loop+0x70/0xc0 [ 845.488909][T21915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.488928][T21915] RIP: 0033:0x7f02eb59e559 [ 845.488945][T21915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.488961][T21915] RSP: 002b:00007f02ec4d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 845.488982][T21915] RAX: ffffffffffffffda RBX: 00007f02eb825fa0 RCX: 00007f02eb59e559 [ 845.488997][T21915] RDX: 0000200000000040 RSI: 00000000c040565f RDI: 0000000000000003 [ 845.489010][T21915] RBP: 00007f02ec4d2090 R08: 0000000000000000 R09: 0000000000000000 [ 845.489021][T21915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.489033][T21915] R13: 00007f02eb826038 R14: 00007f02eb825fa0 R15: 00007ffe299dff58 [ 845.489063][T21915] [ 845.684021][T21921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.684450][T21921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.716514][T21922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.716972][T21922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.899591][T18908] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 845.907783][T21929] FAULT_INJECTION: forcing a failure. [ 845.907783][T21929] name failslab, interval 1, probability 0, space 0, times 0 [ 845.907817][T21929] CPU: 1 UID: 0 PID: 21929 Comm: syz.5.4981 Tainted: G L syzkaller #0 PREEMPT(full) [ 845.907844][T21929] Tainted: [L]=SOFTLOCKUP [ 845.907853][T21929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 845.907865][T21929] Call Trace: [ 845.907873][T21929] [ 845.907890][T21929] dump_stack_lvl+0xe8/0x150 [ 845.907923][T21929] should_fail_ex+0x3eb/0x540 [ 845.907953][T21929] ? alloc_pwq+0xb7b/0x12f0 [ 845.907977][T21929] should_failslab+0xa8/0x100 [ 845.908000][T21929] ? alloc_pwq+0xb7b/0x12f0 [ 845.908020][T21929] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 845.908049][T21929] ? alloc_pwq+0xb7b/0x12f0 [ 845.908079][T21929] alloc_pwq+0xb7b/0x12f0 [ 845.908114][T21929] apply_wqattrs_prepare+0x79c/0xe70 [ 845.908166][T21929] __alloc_workqueue+0x11b8/0x21d0 [ 845.908217][T21929] alloc_workqueue_noprof+0xe3/0x210 [ 845.908246][T21929] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 845.908276][T21929] ? ceph_get_tree+0x438/0x1a40 [ 845.908300][T21929] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 845.908330][T21929] ? __ceph_monc_want_map+0x105/0x4a0 [ 845.908360][T21929] ceph_get_tree+0x489/0x1a40 [ 845.908383][T21929] ? apparmor_capable+0x126/0x170 [ 845.908411][T21929] vfs_get_tree+0x92/0x2a0 [ 845.908433][T21929] do_new_mount+0x325/0xb00 [ 845.908466][T21929] ? __pfx_do_new_mount+0x10/0x10 [ 845.908494][T21929] ? ns_capable+0x84/0xe0 [ 845.908517][T21929] ? path_mount+0x647/0x1050 [ 845.908547][T21929] ? user_path_at+0xd4/0x160 [ 845.908578][T21929] __se_sys_mount+0x31d/0x420 [ 845.908611][T21929] ? __pfx___se_sys_mount+0x10/0x10 [ 845.908642][T21929] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 845.908667][T21929] ? __x64_sys_mount+0x20/0xc0 [ 845.908697][T21929] do_syscall_64+0x166/0x520 [ 845.908722][T21929] ? trace_irq_disable+0x3b/0x140 [ 845.908743][T21929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.908763][T21929] ? clear_bhb_loop+0x70/0xc0 [ 845.908790][T21929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.908809][T21929] RIP: 0033:0x7f853319e559 [ 845.908828][T21929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.908844][T21929] RSP: 002b:00007f8534048028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 845.908865][T21929] RAX: ffffffffffffffda RBX: 00007f8533425fa0 RCX: 00007f853319e559 [ 845.908879][T21929] RDX: 00002000000028c0 RSI: 0000200000002880 RDI: 0000200000002840 [ 845.908903][T21929] RBP: 00007f85332358b0 R08: 0000000000000000 R09: 0000000000000000 [ 845.908915][T21929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 845.908928][T21929] R13: 00007f8533426038 R14: 00007f8533425fa0 R15: 00007ffe8d3d9be8 [ 845.908960][T21929] [ 846.031597][T18908] usb 5-1: device descriptor read/64, error -71 [ 846.164770][ T3106] usb 4-1: USB disconnect, device number 47 [ 846.269865][T18908] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 846.391774][T21937] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 846.400458][T18908] usb 5-1: device descriptor read/64, error -71 [ 846.510651][T18908] usb usb5-port1: attempt power cycle [ 846.610977][T14492] ch9200 7-1:2.31: probe with driver ch9200 failed with error -110 [ 846.851590][T18908] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 846.870456][T18908] usb 5-1: device descriptor read/8, error -71 [ 846.917338][T21951] FAULT_INJECTION: forcing a failure. [ 846.917338][T21951] name failslab, interval 1, probability 0, space 0, times 0 [ 846.917370][T21951] CPU: 1 UID: 0 PID: 21951 Comm: syz.3.4991 Tainted: G L syzkaller #0 PREEMPT(full) [ 846.917396][T21951] Tainted: [L]=SOFTLOCKUP [ 846.917404][T21951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 846.917416][T21951] Call Trace: [ 846.917424][T21951] [ 846.917433][T21951] dump_stack_lvl+0xe8/0x150 [ 846.917464][T21951] should_fail_ex+0x3eb/0x540 [ 846.917495][T21951] should_failslab+0xa8/0x100 [ 846.917519][T21951] __kmalloc_noprof+0xf9/0x710 [ 846.917546][T21951] ? tomoyo_encode+0x2ad/0x570 [ 846.917572][T21951] ? tomoyo_encode+0x2ad/0x570 [ 846.917606][T21951] tomoyo_encode+0x2ad/0x570 [ 846.917639][T21951] tomoyo_realpath_from_path+0x5fa/0x640 [ 846.917674][T21951] ? tomoyo_path_number_perm+0x219/0x5f0 [ 846.917697][T21951] tomoyo_path_number_perm+0x246/0x5f0 [ 846.917724][T21951] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 846.917747][T21951] ? __lock_acquire+0x747/0x2de0 [ 846.917815][T21951] ? __fget_files+0x2a/0x420 [ 846.917845][T21951] ? __fget_files+0x2a/0x420 [ 846.917872][T21951] ? __fget_files+0x2a/0x420 [ 846.917903][T21951] security_file_ioctl+0xc3/0x2a0 [ 846.917930][T21951] __se_sys_ioctl+0x47/0x170 [ 846.917953][T21951] do_syscall_64+0x166/0x520 [ 846.917978][T21951] ? trace_irq_disable+0x3b/0x140 [ 846.917998][T21951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.918024][T21951] ? clear_bhb_loop+0x70/0xc0 [ 846.918048][T21951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.918068][T21951] RIP: 0033:0x7f2889f9e559 [ 846.918086][T21951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.918103][T21951] RSP: 002b:00007f288add5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 846.918124][T21951] RAX: ffffffffffffffda RBX: 00007f288a225fa0 RCX: 00007f2889f9e559 [ 846.918139][T21951] RDX: 0000200000000640 RSI: 000000000000127f RDI: 0000000000000003 [ 846.918152][T21951] RBP: 00007f288add5090 R08: 0000000000000000 R09: 0000000000000000 [ 846.918164][T21951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.918177][T21951] R13: 00007f288a226038 R14: 00007f288a225fa0 R15: 00007fffe48b4828 [ 846.918210][T21951] [ 846.951216][T21949] FAULT_INJECTION: forcing a failure. [ 846.951216][T21949] name failslab, interval 1, probability 0, space 0, times 0 [ 846.951248][T21949] CPU: 0 UID: 0 PID: 21949 Comm: syz.6.4990 Tainted: G L syzkaller #0 PREEMPT(full) [ 846.951276][T21949] Tainted: [L]=SOFTLOCKUP [ 846.951283][T21949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 846.951295][T21949] Call Trace: [ 846.951302][T21949] [ 846.951311][T21949] dump_stack_lvl+0xe8/0x150 [ 846.951344][T21949] should_fail_ex+0x3eb/0x540 [ 846.951374][T21949] ? alloc_pwq+0xb7b/0x12f0 [ 846.951396][T21949] should_failslab+0xa8/0x100 [ 846.951418][T21949] ? alloc_pwq+0xb7b/0x12f0 [ 846.951439][T21949] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 846.951480][T21949] ? alloc_pwq+0xb7b/0x12f0 [ 846.951510][T21949] alloc_pwq+0xb7b/0x12f0 [ 846.951544][T21949] apply_wqattrs_prepare+0x3ff/0xe70 [ 846.951594][T21949] __alloc_workqueue+0x11b8/0x21d0 [ 846.951644][T21949] alloc_workqueue_noprof+0xe3/0x210 [ 846.951672][T21949] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 846.951699][T21949] ? ceph_get_tree+0x438/0x1a40 [ 846.951724][T21949] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 846.951752][T21949] ? __ceph_monc_want_map+0x105/0x4a0 [ 846.951791][T21949] ceph_get_tree+0x489/0x1a40 [ 846.951814][T21949] ? apparmor_capable+0x126/0x170 [ 846.951842][T21949] vfs_get_tree+0x92/0x2a0 [ 846.951865][T21949] do_new_mount+0x325/0xb00 [ 846.951898][T21949] ? __pfx_do_new_mount+0x10/0x10 [ 846.951926][T21949] ? ns_capable+0x84/0xe0 [ 846.951947][T21949] ? path_mount+0x647/0x1050 [ 846.951976][T21949] ? user_path_at+0xd4/0x160 [ 846.952006][T21949] __se_sys_mount+0x31d/0x420 [ 846.952038][T21949] ? __pfx___se_sys_mount+0x10/0x10 [ 846.952069][T21949] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 846.952093][T21949] ? __x64_sys_mount+0x20/0xc0 [ 846.952122][T21949] do_syscall_64+0x166/0x520 [ 846.952146][T21949] ? trace_irq_disable+0x3b/0x140 [ 846.952166][T21949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.952186][T21949] ? clear_bhb_loop+0x70/0xc0 [ 846.952212][T21949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.952231][T21949] RIP: 0033:0x7f375519e559 [ 846.952251][T21949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.952266][T21949] RSP: 002b:00007f375611c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 846.952288][T21949] RAX: ffffffffffffffda RBX: 00007f3755425fa0 RCX: 00007f375519e559 [ 846.952303][T21949] RDX: 00002000000028c0 RSI: 0000200000002880 RDI: 0000200000002840 [ 846.952317][T21949] RBP: 00007f37552358b0 R08: 0000000000000000 R09: 0000000000000000 [ 846.952330][T21949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 846.952342][T21949] R13: 00007f3755426038 R14: 00007f3755425fa0 R15: 00007ffd2645bc88 [ 846.952373][T21949] [ 846.961964][T21951] ERROR: Out of memory at tomoyo_realpath_from_path. [ 847.239611][T18908] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 847.270132][T18908] usb 5-1: device descriptor read/8, error -71 [ 847.381226][T18908] usb usb5-port1: unable to enumerate USB device [ 847.453629][T21958] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 847.877717][ T4926] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 847.897211][ T4926] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 847.905996][ T4926] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 847.909131][ T4926] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 847.924441][ T4926] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 848.027658][T18908] usb 7-1: USB disconnect, device number 19 [ 848.392568][ T9978] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.539989][T14492] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 848.622503][ T9978] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.700510][T14492] usb 4-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 848.701781][T14492] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 848.701826][T14492] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 848.701847][T14492] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 848.701869][T14492] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 848.701908][T14492] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.716171][T21964] rxe_eth0 speed is unknown, defaulting to 1000 [ 848.728487][T21982] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4999'. [ 848.846002][ T9978] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.965818][T18908] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 848.974103][ T9978] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.212839][ T3106] usb 4-1: USB disconnect, device number 48 [ 849.226577][ T5686] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 849.344630][ T9978] bridge_slave_1: left allmulticast mode [ 849.344654][ T9978] bridge_slave_1: left promiscuous mode [ 849.344841][ T9978] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.347096][T21994] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 849.364255][ T9978] bridge_slave_0: left allmulticast mode [ 849.364278][ T9978] bridge_slave_0: left promiscuous mode [ 849.364477][ T9978] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.579091][ T9978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.593559][ T9978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.595372][ T9978] bond0 (unregistering): Released all slaves [ 849.675858][T21984] ceph: No mds server is up or the cluster is laggy [ 850.028480][T22014] FAULT_INJECTION: forcing a failure. [ 850.028480][T22014] name failslab, interval 1, probability 0, space 0, times 0 [ 850.028513][T22014] CPU: 1 UID: 0 PID: 22014 Comm: syz.4.5009 Tainted: G L syzkaller #0 PREEMPT(full) [ 850.028539][T22014] Tainted: [L]=SOFTLOCKUP [ 850.028546][T22014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 850.028557][T22014] Call Trace: [ 850.028565][T22014] [ 850.028574][T22014] dump_stack_lvl+0xe8/0x150 [ 850.028611][T22014] should_fail_ex+0x3eb/0x540 [ 850.028642][T22014] should_failslab+0xa8/0x100 [ 850.028664][T22014] __kmalloc_noprof+0xf9/0x710 [ 850.028690][T22014] ? tomoyo_encode+0x2ad/0x570 [ 850.028716][T22014] ? tomoyo_encode+0x2ad/0x570 [ 850.028749][T22014] tomoyo_encode+0x2ad/0x570 [ 850.028782][T22014] tomoyo_realpath_from_path+0x5fa/0x640 [ 850.028819][T22014] ? tomoyo_path_number_perm+0x219/0x5f0 [ 850.028843][T22014] tomoyo_path_number_perm+0x246/0x5f0 [ 850.028870][T22014] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 850.028893][T22014] ? __lock_acquire+0x747/0x2de0 [ 850.028948][T22014] ? __fget_files+0x2a/0x420 [ 850.028977][T22014] ? __fget_files+0x2a/0x420 [ 850.029002][T22014] ? __fget_files+0x2a/0x420 [ 850.029031][T22014] security_file_ioctl+0xc3/0x2a0 [ 850.029056][T22014] __se_sys_ioctl+0x47/0x170 [ 850.029080][T22014] do_syscall_64+0x166/0x520 [ 850.029104][T22014] ? trace_irq_disable+0x3b/0x140 [ 850.029124][T22014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.029144][T22014] ? clear_bhb_loop+0x70/0xc0 [ 850.029167][T22014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.029186][T22014] RIP: 0033:0x7f02eb59e559 [ 850.029204][T22014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.029219][T22014] RSP: 002b:00007f02ec4d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 850.029240][T22014] RAX: ffffffffffffffda RBX: 00007f02eb825fa0 RCX: 00007f02eb59e559 [ 850.029255][T22014] RDX: 0000200000000640 RSI: 000000000000127f RDI: 0000000000000003 [ 850.029268][T22014] RBP: 00007f02ec4d2090 R08: 0000000000000000 R09: 0000000000000000 [ 850.029280][T22014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.029292][T22014] R13: 00007f02eb826038 R14: 00007f02eb825fa0 R15: 00007ffe299dff58 [ 850.029324][T22014] [ 850.029344][T22014] ERROR: Out of memory at tomoyo_realpath_from_path. [ 850.060939][ T4926] Bluetooth: hci4: command tx timeout [ 850.420393][T22023] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 850.872657][T18908] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 850.923276][ T9978] hsr_slave_0: left promiscuous mode [ 850.925695][ T9978] hsr_slave_1: left promiscuous mode [ 850.926555][ T9978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.926575][ T9978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.927895][ T9978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.927913][ T9978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.977886][ T9978] veth1_macvtap: left promiscuous mode [ 850.977911][ T9978] veth0_macvtap: left promiscuous mode [ 850.977974][ T9978] veth1_vlan: left promiscuous mode [ 850.978011][ T9978] veth0_vlan: left promiscuous mode [ 851.007510][T22045] fuse: Bad value for 'user_id' [ 851.007527][T22045] fuse: Bad value for 'user_id' [ 851.020199][T14492] kernel write not supported for file /vbi5 (pid: 14492 comm: kworker/0:7) [ 851.130421][ T5686] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 851.321684][T22057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 851.407542][ T9978] team0 (unregistering): Port device team_slave_1 removed [ 851.410336][T14492] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 851.429031][ T9978] team0 (unregistering): Port device team_slave_0 removed [ 851.532898][T21964] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.533053][T21964] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.533174][T21964] bridge_slave_0: entered allmulticast mode [ 851.534192][T21964] bridge_slave_0: entered promiscuous mode [ 851.536690][ T5272] 8021q: adding VLAN 0 to HW filter on device eth13 [ 851.537547][T21964] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.537648][T21964] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.537764][T21964] bridge_slave_1: entered allmulticast mode [ 851.538739][T21964] bridge_slave_1: entered promiscuous mode [ 851.591238][T22037] ceph: No mds server is up or the cluster is laggy [ 851.594421][T14492] usb 4-1: unable to get BOS descriptor or descriptor too short [ 851.594467][T14492] usb 4-1: New USB device found: idVendor=0499, idProduct=5006, bcdDevice=0.40 [ 851.595712][T14492] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 851.595732][T14492] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 851.608470][T14492] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.608495][T14492] usb 4-1: Product: syz [ 851.608509][T14492] usb 4-1: Manufacturer: ᡺ [ 851.608522][T14492] usb 4-1: SerialNumber: syz [ 851.643033][T21964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 851.655685][T21964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 851.662354][T18908] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 851.738971][T21964] team0: Port device team_slave_0 added [ 851.747567][T21964] team0: Port device team_slave_1 added [ 851.782770][T21964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.782787][T21964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.782809][T21964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.784607][T21964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.784620][T21964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.784640][T21964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.886570][T14492] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 851.889194][T14492] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 851.902294][T14492] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 852.074533][T21964] hsr_slave_0: entered promiscuous mode [ 852.080255][T21964] hsr_slave_1: entered promiscuous mode [ 852.080907][T21964] debugfs: 'hsr0' already exists in 'hsr' [ 852.080924][T21964] Cannot create hsr debugfs directory [ 852.142432][ T4926] Bluetooth: hci4: command tx timeout [ 852.184772][T14492] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 852.346694][T21584] udevd[21584]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 852.402909][ T9978] IPVS: stop unused estimator thread 0... [ 852.680862][ T5272] 8021q: adding VLAN 0 to HW filter on device eth14 [ 853.123383][T22105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 853.211689][T21964] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 853.218152][T21964] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 853.219043][T21964] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 853.246420][T21964] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 853.247341][T21964] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 853.266018][T21964] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 853.269008][T21964] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 853.292528][T21964] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 853.309335][T14492] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 853.412007][T21964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 853.436141][T21964] 8021q: adding VLAN 0 to HW filter on device team0 [ 853.457485][T18935] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.457582][T18935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.471837][ T1043] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.471934][ T1043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.571664][ T5702] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 854.046134][T22108] ceph: No mds server is up or the cluster is laggy [ 854.080231][ T5702] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 854.086741][T21964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.209685][ T4926] Bluetooth: hci4: command tx timeout [ 854.271844][ T5702] usb 4-1: USB disconnect, device number 49 [ 854.413275][ T4926] Bluetooth: hci2: unexpected event for opcode 0x203c [ 854.437610][T22159] FAULT_INJECTION: forcing a failure. [ 854.437610][T22159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 854.437642][T22159] CPU: 0 UID: 0 PID: 22159 Comm: syz.6.5032 Tainted: G L syzkaller #0 PREEMPT(full) [ 854.437667][T22159] Tainted: [L]=SOFTLOCKUP [ 854.437675][T22159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 854.437686][T22159] Call Trace: [ 854.437693][T22159] [ 854.437702][T22159] dump_stack_lvl+0xe8/0x150 [ 854.437733][T22159] should_fail_ex+0x3eb/0x540 [ 854.437765][T22159] _copy_to_user+0x31/0xb0 [ 854.437793][T22159] simple_read_from_buffer+0xe1/0x170 [ 854.437826][T22159] proc_fail_nth_read+0x1bb/0x230 [ 854.437849][T22159] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 854.437871][T22159] ? rw_verify_area+0x24a/0x4c0 [ 854.437899][T22159] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 854.437929][T22159] vfs_read+0x213/0xa80 [ 854.437962][T22159] ? __pfx___mutex_lock+0x10/0x10 [ 854.437990][T22159] ? __pfx_vfs_read+0x10/0x10 [ 854.438019][T22159] ? __fget_files+0x2a/0x420 [ 854.438045][T22159] ? __fget_files+0x3a2/0x420 [ 854.438070][T22159] ? __fget_files+0x2a/0x420 [ 854.438099][T22159] ? fdget+0x1ac/0x250 [ 854.438131][T22159] ksys_read+0x150/0x270 [ 854.438157][T22159] ? __fget_files+0x3a2/0x420 [ 854.438185][T22159] ? __pfx_ksys_read+0x10/0x10 [ 854.438224][T22159] do_syscall_64+0x166/0x520 [ 854.438247][T22159] ? trace_irq_disable+0x3b/0x140 [ 854.438267][T22159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.438287][T22159] ? clear_bhb_loop+0x70/0xc0 [ 854.438311][T22159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.438330][T22159] RIP: 0033:0x7f375515ed8e [ 854.438348][T22159] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 854.438364][T22159] RSP: 002b:00007f375611bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 854.438388][T22159] RAX: ffffffffffffffda RBX: 00007f375611c6c0 RCX: 00007f375515ed8e [ 854.438403][T22159] RDX: 000000000000000f RSI: 00007f375611c0a0 RDI: 0000000000000003 [ 854.438414][T22159] RBP: 00007f375611c090 R08: 0000000000000000 R09: 0000000000000000 [ 854.438427][T22159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.438439][T22159] R13: 00007f3755426038 R14: 00007f3755425fa0 R15: 00007ffd2645bc88 [ 854.438470][T22159] [ 854.811715][T21964] veth0_vlan: entered promiscuous mode [ 854.831797][T21964] veth1_vlan: entered promiscuous mode [ 854.907064][T22172] FAULT_INJECTION: forcing a failure. [ 854.907064][T22172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 854.907096][T22172] CPU: 1 UID: 0 PID: 22172 Comm: syz.6.5035 Tainted: G L syzkaller #0 PREEMPT(full) [ 854.907121][T22172] Tainted: [L]=SOFTLOCKUP [ 854.907128][T22172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 854.907139][T22172] Call Trace: [ 854.907149][T22172] [ 854.907158][T22172] dump_stack_lvl+0xe8/0x150 [ 854.907187][T22172] should_fail_ex+0x3eb/0x540 [ 854.907218][T22172] _copy_to_user+0x31/0xb0 [ 854.907246][T22172] simple_read_from_buffer+0xe1/0x170 [ 854.907277][T22172] proc_fail_nth_read+0x1bb/0x230 [ 854.907301][T22172] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 854.907325][T22172] ? rw_verify_area+0x24a/0x4c0 [ 854.907355][T22172] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 854.907375][T22172] vfs_read+0x213/0xa80 [ 854.907433][T22172] ? __pfx___mutex_lock+0x10/0x10 [ 854.907460][T22172] ? __pfx_vfs_read+0x10/0x10 [ 854.907489][T22172] ? __fget_files+0x2a/0x420 [ 854.907512][T22172] ? __fget_files+0x3a2/0x420 [ 854.907535][T22172] ? __fget_files+0x2a/0x420 [ 854.907573][T22172] ? fdget+0x1ac/0x250 [ 854.907602][T22172] ksys_read+0x150/0x270 [ 854.907627][T22172] ? __pfx_ksys_read+0x10/0x10 [ 854.907651][T22172] ? __pfx_rtc_dev_ioctl+0x10/0x10 [ 854.907680][T22172] do_syscall_64+0x166/0x520 [ 854.907704][T22172] ? trace_irq_disable+0x3b/0x140 [ 854.907723][T22172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.907742][T22172] ? clear_bhb_loop+0x70/0xc0 [ 854.907764][T22172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.907782][T22172] RIP: 0033:0x7f375515ed8e [ 854.907800][T22172] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 854.907817][T22172] RSP: 002b:00007f375611bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 854.907837][T22172] RAX: ffffffffffffffda RBX: 00007f375611c6c0 RCX: 00007f375515ed8e [ 854.907850][T22172] RDX: 000000000000000f RSI: 00007f375611c0a0 RDI: 0000000000000004 [ 854.907862][T22172] RBP: 00007f375611c090 R08: 0000000000000000 R09: 0000000000000000 [ 854.907873][T22172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.907883][T22172] R13: 00007f3755426038 R14: 00007f3755425fa0 R15: 00007ffd2645bc88 [ 854.907914][T22172] [ 854.909230][T21964] veth0_macvtap: entered promiscuous mode [ 854.923993][T21964] veth1_macvtap: entered promiscuous mode [ 854.965167][T21964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.986537][T21964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 855.029848][ T165] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.112807][ T165] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.160672][ T165] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.160719][ T165] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.338571][T22180] CIFS: Invalid mount helper version specified [ 855.371260][T22178] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 855.470759][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.470781][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.529548][ T5686] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 855.558280][ T4926] Bluetooth: hci2: unexpected event for opcode 0x0809 [ 855.654841][ T9978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.654862][ T9978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.739730][T22199] FAULT_INJECTION: forcing a failure. [ 855.739730][T22199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 855.739760][T22199] CPU: 1 UID: 0 PID: 22199 Comm: syz.4.5042 Tainted: G L syzkaller #0 PREEMPT(full) [ 855.739793][T22199] Tainted: [L]=SOFTLOCKUP [ 855.739800][T22199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 855.739814][T22199] Call Trace: [ 855.739820][T22199] [ 855.739829][T22199] dump_stack_lvl+0xe8/0x150 [ 855.739858][T22199] should_fail_ex+0x3eb/0x540 [ 855.739888][T22199] _copy_from_user+0x2d/0xb0 [ 855.739915][T22199] dma_buf_ioctl+0x168/0x8d0 [ 855.739942][T22199] ? __pfx_dma_buf_ioctl+0x10/0x10 [ 855.739968][T22199] ? __fget_files+0x2a/0x420 [ 855.739996][T22199] ? __fget_files+0x2a/0x420 [ 855.740022][T22199] ? __fget_files+0x2a/0x420 [ 855.740050][T22199] ? bpf_lsm_file_ioctl+0x9/0x20 [ 855.740069][T22199] ? __pfx_dma_buf_ioctl+0x10/0x10 [ 855.740091][T22199] __se_sys_ioctl+0xfc/0x170 [ 855.740115][T22199] do_syscall_64+0x166/0x520 [ 855.740138][T22199] ? trace_irq_disable+0x3b/0x140 [ 855.740158][T22199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.740177][T22199] ? clear_bhb_loop+0x70/0xc0 [ 855.740200][T22199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.740218][T22199] RIP: 0033:0x7f02eb59e559 [ 855.740235][T22199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.740249][T22199] RSP: 002b:00007f02ec4d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 855.740269][T22199] RAX: ffffffffffffffda RBX: 00007f02eb825fa0 RCX: 00007f02eb59e559 [ 855.740282][T22199] RDX: 0000200000000200 RSI: 0000000040086200 RDI: 0000000000000004 [ 855.740295][T22199] RBP: 00007f02ec4d2090 R08: 0000000000000000 R09: 0000000000000000 [ 855.740307][T22199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 855.740318][T22199] R13: 00007f02eb826038 R14: 00007f02eb825fa0 R15: 00007ffe299dff58 [ 855.740349][T22199] [ 855.793747][ T5046] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 856.004181][T22205] binder: Write failure EFAULT in pid:1462 [ 856.049898][ T5702] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 856.209981][ T5702] usb 6-1: Using ep0 maxpacket: 8 [ 856.211876][ T5702] usb 6-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 856.227379][ T5702] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 856.227396][ T5702] usb 6-1: config 2 has no interface number 0 [ 856.227421][ T5702] usb 6-1: config 2 interface 31 has no altsetting 0 [ 856.229306][ T5702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.229329][ T5702] usb 6-1: Product: syz [ 856.229342][ T5702] usb 6-1: Manufacturer: syz [ 856.229356][ T5702] usb 6-1: SerialNumber: syz [ 856.299732][ T4926] Bluetooth: hci4: command tx timeout [ 856.300192][ T3106] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 856.333859][T22186] ceph: No mds server is up or the cluster is laggy [ 856.614964][T22214] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 856.659581][ T2256] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 856.805080][T22219] zero sized request [ 856.809524][ T2256] usb 4-1: Using ep0 maxpacket: 8 [ 856.819247][ T2256] usb 4-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 856.830409][ T2256] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 856.830433][ T2256] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 856.830475][ T2256] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 856.830538][ T2256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.834000][T22222] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 856.891098][ T2256] hub 4-1:1.0: bad descriptor, ignoring hub [ 856.891125][ T2256] hub 4-1:1.0: probe with driver hub failed with error -5 [ 856.894458][ T2256] cdc_wdm 4-1:1.0: skipping garbage [ 856.894477][ T2256] cdc_wdm 4-1:1.0: skipping garbage [ 856.894490][ T2256] cdc_wdm 4-1:1.0: skipping garbage [ 856.894513][ T2256] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 857.159823][ T2256] usb 4-1: USB disconnect, device number 50 [ 857.406970][T14492] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 857.660393][ T2256] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 857.934436][T22236] FAULT_INJECTION: forcing a failure. [ 857.934436][T22236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.934467][T22236] CPU: 1 UID: 0 PID: 22236 Comm: syz.5.5054 Tainted: G L syzkaller #0 PREEMPT(full) [ 857.934493][T22236] Tainted: [L]=SOFTLOCKUP [ 857.934500][T22236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 857.934512][T22236] Call Trace: [ 857.934520][T22236] [ 857.934529][T22236] dump_stack_lvl+0xe8/0x150 [ 857.934558][T22236] should_fail_ex+0x3eb/0x540 [ 857.934587][T22236] _copy_to_user+0x31/0xb0 [ 857.934615][T22236] simple_read_from_buffer+0xe1/0x170 [ 857.934647][T22236] proc_fail_nth_read+0x1bb/0x230 [ 857.934672][T22236] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 857.934696][T22236] ? rw_verify_area+0x24a/0x4c0 [ 857.934728][T22236] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 857.934748][T22236] vfs_read+0x213/0xa80 [ 857.934780][T22236] ? __pfx___mutex_lock+0x10/0x10 [ 857.934808][T22236] ? __pfx_vfs_read+0x10/0x10 [ 857.934837][T22236] ? __fget_files+0x2a/0x420 [ 857.934862][T22236] ? __fget_files+0x3a2/0x420 [ 857.934887][T22236] ? __fget_files+0x2a/0x420 [ 857.934917][T22236] ? fdget+0x1ac/0x250 [ 857.934950][T22236] ksys_read+0x150/0x270 [ 857.934980][T22236] ? __pfx_ksys_read+0x10/0x10 [ 857.935007][T22236] ? __pfx_ppp_ioctl+0x10/0x10 [ 857.935041][T22236] do_syscall_64+0x166/0x520 [ 857.935066][T22236] ? trace_irq_disable+0x3b/0x140 [ 857.935095][T22236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.935115][T22236] ? clear_bhb_loop+0x70/0xc0 [ 857.935140][T22236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.935159][T22236] RIP: 0033:0x7f78c135ed8e [ 857.935178][T22236] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 857.935194][T22236] RSP: 002b:00007f78bf5f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 857.935214][T22236] RAX: ffffffffffffffda RBX: 00007f78bf5f66c0 RCX: 00007f78c135ed8e [ 857.935228][T22236] RDX: 000000000000000f RSI: 00007f78bf5f60a0 RDI: 0000000000000005 [ 857.935240][T22236] RBP: 00007f78bf5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 857.935252][T22236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.935264][T22236] R13: 00007f78c1626038 R14: 00007f78c1625fa0 R15: 00007ffcad0e9278 [ 857.935295][T22236] [ 858.060218][ T5702] ch9200 6-1:2.31: probe with driver ch9200 failed with error -110 [ 858.194056][ T5702] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 858.198208][T22228] ceph: No mds server is up or the cluster is laggy [ 858.286762][T22238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.287191][T22238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.441606][T22240] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 858.494007][T22238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.494371][T22238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.885076][T18908] usb 6-1: USB disconnect, device number 7 [ 859.132965][T22247] FAULT_INJECTION: forcing a failure. [ 859.132965][T22247] name failslab, interval 1, probability 0, space 0, times 0 [ 859.132998][T22247] CPU: 0 UID: 0 PID: 22247 Comm: syz.3.5059 Tainted: G L syzkaller #0 PREEMPT(full) [ 859.133025][T22247] Tainted: [L]=SOFTLOCKUP [ 859.133032][T22247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 859.133044][T22247] Call Trace: [ 859.133053][T22247] [ 859.133061][T22247] dump_stack_lvl+0xe8/0x150 [ 859.133094][T22247] should_fail_ex+0x3eb/0x540 [ 859.133125][T22247] should_failslab+0xa8/0x100 [ 859.133146][T22247] ? security_inode_alloc+0x39/0x310 [ 859.133193][T22247] kmem_cache_alloc_noprof+0x9c/0x600 [ 859.133220][T22247] ? __pfx_make_kgid+0x10/0x10 [ 859.133238][T22247] ? security_inode_alloc+0x39/0x310 [ 859.133272][T22247] security_inode_alloc+0x39/0x310 [ 859.133303][T22247] inode_init_always_gfp+0x97e/0xd30 [ 859.133336][T22247] alloc_inode+0x82/0x1b0 [ 859.133362][T22247] new_inode+0x1f/0x170 [ 859.133392][T22247] devpts_pty_new+0xd3/0x5d0 [ 859.133423][T22247] ? __pfx_devpts_pty_new+0x10/0x10 [ 859.133461][T22247] ? do_raw_spin_unlock+0xf5/0x200 [ 859.133491][T22247] ptmx_open+0x1c8/0x2e0 [ 859.133520][T22247] chrdev_open+0x4d9/0x600 [ 859.133545][T22247] ? __pfx_chrdev_open+0x10/0x10 [ 859.133568][T22247] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 859.133591][T22247] ? devcgroup_check_permission+0x31/0x8f0 [ 859.133618][T22247] ? __pfx_chrdev_open+0x10/0x10 [ 859.133638][T22247] do_dentry_open+0x80e/0x1360 [ 859.133671][T22247] vfs_open_consume+0x4a/0x350 [ 859.133693][T22247] ? path_openat+0x16e1/0x20f0 [ 859.133714][T22247] path_openat+0x16fc/0x20f0 [ 859.133753][T22247] do_file_open+0x23e/0x4a0 [ 859.133778][T22247] ? __pfx_do_file_open+0x10/0x10 [ 859.133819][T22247] ? _raw_spin_unlock+0x28/0x50 [ 859.133840][T22247] ? alloc_fd+0x6af/0x760 [ 859.133877][T22247] do_sys_openat2+0x115/0x200 [ 859.133901][T22247] ? __se_sys_futex+0x3a8/0x450 [ 859.133931][T22247] ? __pfx_do_sys_openat2+0x10/0x10 [ 859.133961][T22247] ? rcu_is_watching+0x16/0xb0 [ 859.133989][T22247] __x64_sys_openat+0x138/0x170 [ 859.134020][T22247] do_syscall_64+0x166/0x520 [ 859.134045][T22247] ? trace_irq_disable+0x3b/0x140 [ 859.134066][T22247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.134087][T22247] ? clear_bhb_loop+0x70/0xc0 [ 859.134111][T22247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.134130][T22247] RIP: 0033:0x7f2889f9e559 [ 859.134148][T22247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.134162][T22247] RSP: 002b:00007f288add5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 859.134183][T22247] RAX: ffffffffffffffda RBX: 00007f288a225fa0 RCX: 00007f2889f9e559 [ 859.134198][T22247] RDX: 0000000000102001 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 859.134213][T22247] RBP: 00007f288a0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 859.134227][T22247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 859.134239][T22247] R13: 00007f288a226038 R14: 00007f288a225fa0 R15: 00007fffe48b4828 [ 859.134272][T22247] [ 859.267537][ T2256] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 859.521182][T14492] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 859.790382][T14492] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 859.934976][T22246] ceph: No mds server is up or the cluster is laggy [ 859.939527][T14492] usb 4-1: Using ep0 maxpacket: 8 [ 859.940327][T14492] usb 4-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 859.958277][T14492] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 859.958303][T14492] usb 4-1: config 2 has no interface number 0 [ 859.958341][T14492] usb 4-1: config 2 interface 31 has no altsetting 0 [ 859.960994][T14492] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.961023][T14492] usb 4-1: Product: syz [ 859.961037][T14492] usb 4-1: Manufacturer: syz [ 859.961050][T14492] usb 4-1: SerialNumber: syz [ 860.020526][ T5702] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 860.172524][ T5702] usb 6-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 860.174040][ T5702] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 860.174088][ T5702] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 860.174137][ T5702] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 860.174177][ T5702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.235425][T22263] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5065'. [ 860.387359][T22266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 861.017162][T22274] netlink: 512 bytes leftover after parsing attributes in process `syz.5.5063'. [ 861.714765][T22279] FAULT_INJECTION: forcing a failure. [ 861.714765][T22279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 861.714797][T22279] CPU: 1 UID: 0 PID: 22279 Comm: syz.3.5071 Tainted: G L syzkaller #0 PREEMPT(full) [ 861.714822][T22279] Tainted: [L]=SOFTLOCKUP [ 861.714829][T22279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 861.714841][T22279] Call Trace: [ 861.714849][T22279] [ 861.714857][T22279] dump_stack_lvl+0xe8/0x150 [ 861.714889][T22279] should_fail_ex+0x3eb/0x540 [ 861.714920][T22279] _copy_from_user+0x2d/0xb0 [ 861.714948][T22279] video_usercopy+0x359/0x1430 [ 861.714984][T22279] ? __pfx___video_do_ioctl+0x10/0x10 [ 861.715015][T22279] ? __pfx_video_usercopy+0x10/0x10 [ 861.715056][T22279] ? __fget_files+0x2a/0x420 [ 861.715083][T22279] ? __fget_files+0x2a/0x420 [ 861.715111][T22279] v4l2_ioctl+0x18d/0x1e0 [ 861.715139][T22279] ? __pfx_v4l2_ioctl+0x10/0x10 [ 861.715166][T22279] __se_sys_ioctl+0xfc/0x170 [ 861.715189][T22279] do_syscall_64+0x166/0x520 [ 861.715213][T22279] ? trace_irq_disable+0x3b/0x140 [ 861.715234][T22279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.715253][T22279] ? clear_bhb_loop+0x70/0xc0 [ 861.715277][T22279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.715305][T22279] RIP: 0033:0x7f2889f9e559 [ 861.715323][T22279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.715339][T22279] RSP: 002b:00007f288add5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 861.715360][T22279] RAX: ffffffffffffffda RBX: 00007f288a225fa0 RCX: 00007f2889f9e559 [ 861.715374][T22279] RDX: 0000200000000180 RSI: 00000000c008561c RDI: 0000000000000004 [ 861.715387][T22279] RBP: 00007f288add5090 R08: 0000000000000000 R09: 0000000000000000 [ 861.715399][T22279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.715411][T22279] R13: 00007f288a226038 R14: 00007f288a225fa0 R15: 00007fffe48b4828 [ 861.715443][T22279] [ 861.887872][T22281] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5072'. [ 861.913493][T14492] ch9200 4-1:2.31: probe with driver ch9200 failed with error -110 [ 861.987259][ T3106] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 862.016958][T18908] usb 4-1: USB disconnect, device number 51 [ 862.189144][T22292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 862.240139][T18908] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 862.265978][T22294] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 862.750652][ T3106] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 862.802383][T22287] ceph: No mds server is up or the cluster is laggy [ 862.878971][ T5702] cxacru 6-1:1.0: send of cm 0x91 failed (-104) [ 862.881503][ T5702] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -104 [ 862.881520][ T5702] ATM dev 0: usbatm_atm_init: atm_start failed: -104! [ 862.902463][ T5702] cxacru 6-1:1.0: probe with driver cxacru failed with error -104 [ 862.987750][ T5702] usb 6-1: USB disconnect, device number 8 [ 863.087559][T22296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 863.158895][T22299] netlink: 140 bytes leftover after parsing attributes in process `syz.5.5078'. [ 863.479723][T18908] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 863.630141][T18908] usb 7-1: Using ep0 maxpacket: 8 [ 863.630834][T18908] usb 7-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 863.632518][T18908] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 863.632542][T18908] usb 7-1: config 2 has no interface number 0 [ 863.632581][T18908] usb 7-1: config 2 interface 31 has no altsetting 0 [ 863.637730][T18908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.637753][T18908] usb 7-1: Product: syz [ 863.637767][T18908] usb 7-1: Manufacturer: syz [ 863.637789][T18908] usb 7-1: SerialNumber: syz [ 864.800243][ T5046] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 864.908754][ T5702] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 864.950290][ T5046] usb 4-1: New USB device found: idVendor=9710, idProduct=7720, bcdDevice=0.00 [ 864.953009][ T5046] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 864.953038][ T5046] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 864.953061][ T5046] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 864.953083][ T5046] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 864.953103][ T5046] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 864.953139][ T5046] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.969603][T22319] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 864.969738][T22319] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 864.969866][T22319] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 865.061070][ T5046] mos7720 4-1:1.0: Moschip 2 port adapter converter detected [ 865.160292][T14492] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 865.243866][T22319] [ 865.246242][T22319] ====================================================== [ 865.253267][T22319] WARNING: possible circular locking dependency detected [ 865.260300][T22319] syzkaller #0 Tainted: G L [ 865.266363][T22319] ------------------------------------------------------ [ 865.273402][T22319] syz.3.5085/22319 is trying to acquire lock: [ 865.279501][T22319] ffffffff90d64708 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5f0/0x950 [ 865.288822][T22319] [ 865.288822][T22319] but task is already holding lock: [ 865.296186][T22319] ffff8880779bf580 (&sb->s_type->i_mutex_key#35){++++}-{4:4}, at: vfs_rmdir+0xf8/0x6a0 [ 865.305863][T22319] [ 865.305863][T22319] which lock already depends on the new lock. [ 865.305863][T22319] [ 865.316268][T22319] [ 865.316268][T22319] the existing dependency chain (in reverse order) is: [ 865.325284][T22319] [ 865.325284][T22319] -> #2 (&sb->s_type->i_mutex_key#35){++++}-{4:4}: [ 865.333990][T22319] down_write+0x91/0x200 [ 865.338773][T22319] configfs_depend_item_unlocked+0x153/0x420 [ 865.345288][T22319] usbg_make_tpg+0x1e0/0x550 [ 865.350409][T22319] target_fabric_make_tpg+0xa8/0x6d0 [ 865.356228][T22319] configfs_mkdir+0x4f6/0x9e0 [ 865.361432][T22319] vfs_mkdir+0x40e/0x630 [ 865.366208][T22319] filename_mkdirat+0x285/0x510 [ 865.371581][T22319] __se_sys_mkdirat+0x35/0x150 [ 865.376869][T22319] do_syscall_64+0x166/0x520 [ 865.381989][T22319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.388412][T22319] [ 865.388412][T22319] -> #1 (tpg_instances_lock){+.+.}-{4:4}: [ 865.396322][T22319] __mutex_lock+0x197/0x15a0 [ 865.401616][T22319] usbg_make_tpg+0xf8/0x550 [ 865.406641][T22319] target_fabric_make_tpg+0xa8/0x6d0 [ 865.412460][T22319] configfs_mkdir+0x4f6/0x9e0 [ 865.417677][T22319] vfs_mkdir+0x40e/0x630 [ 865.422437][T22319] filename_mkdirat+0x285/0x510 [ 865.427814][T22319] __se_sys_mkdirat+0x35/0x150 [ 865.433114][T22319] do_syscall_64+0x166/0x520 [ 865.438240][T22319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.444654][T22319] [ 865.444654][T22319] -> #0 (&subsys->su_mutex){+.+.}-{4:4}: [ 865.452467][T22319] __lock_acquire+0x164c/0x2de0 [ 865.457865][T22319] lock_acquire+0x115/0x350 [ 865.462893][T22319] __mutex_lock+0x197/0x15a0 [ 865.468013][T22319] configfs_rmdir+0x5f0/0x950 [ 865.473220][T22319] vfs_rmdir+0x3e6/0x6a0 [ 865.477989][T22319] filename_rmdir+0x292/0x520 [ 865.483189][T22319] __se_sys_rmdir+0x2e/0x140 [ 865.488304][T22319] do_syscall_64+0x166/0x520 [ 865.493432][T22319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.499850][T22319] [ 865.499850][T22319] other info that might help us debug this: [ 865.499850][T22319] [ 865.510076][T22319] Chain exists of: [ 865.510076][T22319] &subsys->su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#35 [ 865.510076][T22319] [ 865.524583][T22319] Possible unsafe locking scenario: [ 865.524583][T22319] [ 865.532035][T22319] CPU0 CPU1 [ 865.537400][T22319] ---- ---- [ 865.542760][T22319] lock(&sb->s_type->i_mutex_key#35); [ 865.548231][T22319] lock(tpg_instances_lock); [ 865.555428][T22319] lock(&sb->s_type->i_mutex_key#35); [ 865.563501][T22319] lock(&subsys->su_mutex); [ 865.568102][T22319] [ 865.568102][T22319] *** DEADLOCK *** [ 865.568102][T22319] [ 865.571969][T18908] ch9200 7-1:2.31: probe with driver ch9200 failed with error -110 [ 865.584118][T22319] locks held by syz.3.5085/22319: 3, last CPU#0: [ 865.590448][T22319] #0: ffff88801ef78460 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 865.599690][T22319] #1: ffff88802553ddc0 (&default_group_class[depth - 1]#7/1){+.+.}-{4:4}, at: filename_rmdir+0x1cd/0x520 [ 865.611011][T22319] #2: ffff8880779bf580 (&sb->s_type->i_mutex_key#35){++++}-{4:4}, at: vfs_rmdir+0xf8/0x6a0 [ 865.621130][T22319] [ 865.621130][T22319] stack backtrace: [ 865.627022][T22319] CPU: 0 UID: 0 PID: 22319 Comm: syz.3.5085 Tainted: G L syzkaller #0 PREEMPT(full) [ 865.638051][T22319] Tainted: [L]=SOFTLOCKUP [ 865.642377][T22319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 865.652437][T22319] Call Trace: [ 865.655742][T22319] [ 865.658678][T22319] dump_stack_lvl+0xe8/0x150 [ 865.663285][T22319] print_circular_bug+0x2e2/0x300 [ 865.668335][T22319] check_noncircular+0x12f/0x150 [ 865.673292][T22319] __lock_acquire+0x164c/0x2de0 [ 865.678156][T22319] ? __bfs+0x153/0x290 [ 865.682226][T22319] ? __pfx_hlock_conflict+0x10/0x10 [ 865.687439][T22319] ? check_path+0x21/0x40 [ 865.691777][T22319] ? check_noncircular+0xdb/0x150 [ 865.696807][T22319] lock_acquire+0x115/0x350 [ 865.701310][T22319] ? configfs_rmdir+0x5f0/0x950 [ 865.706184][T22319] __mutex_lock+0x197/0x15a0 [ 865.710789][T22319] ? configfs_rmdir+0x5f0/0x950 [ 865.715653][T22319] ? reacquire_held_locks+0x117/0x1a0 [ 865.721028][T22319] ? configfs_rmdir+0x5f0/0x950 [ 865.725896][T22319] ? __pfx___mutex_lock+0x10/0x10 [ 865.730940][T22319] ? _raw_spin_unlock+0x28/0x50 [ 865.735798][T22319] ? fast_dput+0x481/0x690 [ 865.740229][T22319] configfs_rmdir+0x5f0/0x950 [ 865.744932][T22319] vfs_rmdir+0x3e6/0x6a0 [ 865.749185][T22319] ? bpf_lsm_path_rmdir+0x9/0x20 [ 865.754135][T22319] filename_rmdir+0x292/0x520 [ 865.758829][T22319] ? __pfx_filename_rmdir+0x10/0x10 [ 865.764038][T22319] ? do_getname+0x151/0x250 [ 865.768557][T22319] __se_sys_rmdir+0x2e/0x140 [ 865.773163][T22319] do_syscall_64+0x166/0x520 [ 865.777767][T22319] ? trace_irq_disable+0x3b/0x140 [ 865.782800][T22319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.788875][T22319] ? clear_bhb_loop+0x70/0xc0 [ 865.793572][T22319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.799478][T22319] RIP: 0033:0x7f2889f9e559 [ 865.803900][T22319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.823506][T22319] RSP: 002b:00007f288add5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 865.831933][T22319] RAX: ffffffffffffffda RBX: 00007f288a225fa0 RCX: 00007f2889f9e559 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 865.839924][T22319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 865.847918][T22319] RBP: 00007f288a0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 865.855904][T22319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 865.863888][T22319] R13: 00007f288a226038 R14: 00007f288a225fa0 R15: 00007fffe48b4828 [ 865.871876][T22319] [ 865.878074][ T5702] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 865.984147][T22327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 866.052823][T22321] ceph: No mds server is up or the cluster is laggy [ 866.412590][ T5686] usb 7-1: USB disconnect, device number 20 [ 866.454581][ T5046] usb 4-1: mos7720: usb_control_msg() failed: -71 [ 866.464015][ T5046] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 866.466572][ T5046] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 866.536079][ T5046] usb 4-1: USB disconnect, device number 52 [ 866.536194][ C1] usb 4-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 866.542985][ T44] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.571803][ T5046] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 866.584895][ T5046] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 866.585399][ T5046] mos7720 4-1:1.0: device disconnected [ 866.635376][ T44] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.732946][ T44] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.776031][ T44] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.980810][ T44] bridge_slave_1: left allmulticast mode [ 866.980834][ T44] bridge_slave_1: left promiscuous mode [ 866.980974][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.003714][ T44] bridge_slave_0: left allmulticast mode [ 867.003736][ T44] bridge_slave_0: left promiscuous mode [ 867.003877][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.152974][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 867.156034][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 867.157013][ T44] bond0 (unregistering): Released all slaves [ 867.463635][ T5272] 8021q: adding VLAN 0 to HW filter on device eth13 [ 867.493420][ T44] hsr_slave_0: left promiscuous mode [ 867.493799][ T44] hsr_slave_1: left promiscuous mode [ 867.494281][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 867.494297][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 867.494756][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 867.494770][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 867.497586][ T44] veth1_macvtap: left promiscuous mode [ 867.497611][ T44] veth0_macvtap: left promiscuous mode [ 867.497671][ T44] veth1_vlan: left promiscuous mode [ 867.497726][ T44] veth0_vlan: left promiscuous mode [ 867.665842][ T44] team0 (unregistering): Port device team_slave_1 removed [ 867.698142][ T44] team0 (unregistering): Port device team_slave_0 removed [ 867.942329][ T5272] 8021q: adding VLAN 0 to HW filter on device eth14 [ 867.947094][ T44] IPVS: stop unused estimator thread 0... [ 867.988393][ T44] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.026105][ T44] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.081574][ T44] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.126239][ T44] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.203757][ T44] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.228922][ T5272] 8021q: adding VLAN 0 to HW filter on device eth15 [ 868.242293][ T44] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.274564][ T44] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.296481][ T44] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.386615][ T44] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.448938][ T44] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.476555][ T44] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.517203][ T44] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.542663][ T5272] 8021q: adding VLAN 0 to HW filter on device eth16 [ 868.603836][ T44] bridge_slave_1: left allmulticast mode [ 868.603852][ T44] bridge_slave_1: left promiscuous mode [ 868.603934][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.604846][ T44] bridge_slave_0: left allmulticast mode [ 868.604858][ T44] bridge_slave_0: left promiscuous mode [ 868.604934][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.645819][ T44] bridge_slave_1: left allmulticast mode [ 868.645836][ T44] bridge_slave_1: left promiscuous mode [ 868.645921][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.646865][ T44] bridge_slave_0: left allmulticast mode [ 868.646877][ T44] bridge_slave_0: left promiscuous mode [ 868.646946][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.741662][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 868.743027][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.744005][ T44] bond0 (unregistering): Released all slaves [ 868.788097][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 868.789130][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.793685][ T44] bond0 (unregistering): Released all slaves [ 868.837102][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 868.838214][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.838894][ T44] bond0 (unregistering): Released all slaves [ 868.924573][ T44] tipc: Disabling bearer [ 868.924951][ T44] tipc: Left network mode [ 868.952091][ T44] IPVS: stopping master sync thread 22222 ... [ 869.160450][ T5272] 8021q: adding VLAN 0 to HW filter on device eth17 [ 869.505586][ T5272] 8021q: adding VLAN 0 to HW filter on device eth18 [ 869.520790][ T44] hsr_slave_0: left promiscuous mode [ 869.521250][ T44] hsr_slave_1: left promiscuous mode [ 869.521738][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.521754][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.522314][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.522328][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.525086][ T44] hsr_slave_0: left promiscuous mode [ 869.525379][ T44] hsr_slave_1: left promiscuous mode [ 869.525708][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.525718][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.526040][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.526053][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.527995][ T44] hsr_slave_0: left promiscuous mode [ 869.528268][ T44] hsr_slave_1: left promiscuous mode [ 869.528595][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.528605][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.528923][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.528936][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.555064][ T44] veth1_macvtap: left promiscuous mode [ 869.555092][ T44] veth0_macvtap: left promiscuous mode [ 869.555152][ T44] veth1_vlan: left promiscuous mode [ 869.555194][ T44] veth0_vlan: left promiscuous mode [ 869.579867][ T44] veth1_macvtap: left promiscuous mode [ 869.579894][ T44] veth0_macvtap: left promiscuous mode [ 869.579953][ T44] veth1_vlan: left promiscuous mode [ 869.579994][ T44] veth0_vlan: left promiscuous mode [ 869.602978][ T44] veth1_macvtap: left promiscuous mode [ 869.603006][ T44] veth0_macvtap: left promiscuous mode [ 869.603077][ T44] veth1_vlan: left promiscuous mode [ 869.603118][ T44] veth0_vlan: left promiscuous mode [ 869.788613][ T44] team0 (unregistering): Port device team_slave_1 removed [ 869.798535][ T44] team0 (unregistering): Port device team_slave_0 removed [ 869.883716][ T44] team0 (unregistering): Port device team_slave_1 removed [ 869.886438][ T44] team0 (unregistering): Port device team_slave_0 removed [ 869.985977][ T44] team0 (unregistering): Port device team_slave_1 removed [ 869.989030][ T44] team0 (unregistering): Port device team_slave_0 removed [ 870.133632][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.426468][ T5272] 8021q: adding VLAN 0 to HW filter on device eth19 [ 870.525061][ T44] IPVS: stop unused estimator thread 0... [ 870.692227][ T5272] 8021q: adding VLAN 0 to HW filter on device eth20 [ 870.892391][ T5272] 8021q: adding VLAN 0 to HW filter on device eth21 [ 871.098834][ T5272] 8021q: adding VLAN 0 to HW filter on device eth22 [ 871.293951][ T5272] 8021q: adding VLAN 0 to HW filter on device eth23 [ 871.505593][ T5272] 8021q: adding VLAN 0 to HW filter on device eth24 [ 871.724692][ T5272] 8021q: adding VLAN 0 to HW filter on device eth25 [ 871.932863][ T5272] 8021q: adding VLAN 0 to HW filter on device eth26 [ 872.143555][ T5272] 8021q: adding VLAN 0 to HW filter on device eth27 [ 872.347175][ T5272] 8021q: adding VLAN 0 to HW filter on device eth28