last executing test programs: 1m41.922008539s ago: executing program 0 (id=18): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000380)=@other={'lock', ' ', 'none'}, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setns(0xc9, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) sendmmsg$inet(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002fc0)="a6", 0x5dc}], 0x1}}], 0x5, 0x4040000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket(0x840000000002, 0x3, 0xff) close(0x3) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x6c}, 0x1, 0x0, 0x0, 0xc80a1b85b93b45e2}, 0x24000800) 1m41.021948226s ago: executing program 0 (id=30): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) socket(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x28e}], 0x1}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x29}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0xb00}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 1m40.577960012s ago: executing program 0 (id=27): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0xc) connect$x25(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000280)={0x0, 0x7, 0x1, "1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$uac2(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, &(0x7f00000000c0)={0x14, 0x0, 0x0}, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x0, 0x14, 0xbf, "e48a534c520985777cb5727e517cf61c5dc4fad6aaf1a6b4783862ec5ac84ceeb0f2661f52b24264bb04230015ef2cf6cc4437de9791341e36240e9861c65c6fd141f94fb9480437ee36b473ff8a0612e0252e1eb703f93b5103276f984f35f170e551f8ba46b36131ffd5d4bf12cc1da4419b9bc7a34535d792fb4277eb36af105212b27c56d647b49998aefa150e5340b4ce6caa44e97306a4eb3f0cb0db30bba79598c88434c481cd74275b023f83a11945754519d9f090f1fd9b2733fa"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$set_timeout(0xf, 0x0, 0x6) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000006c0)={0x0, r5}, &(0x7f0000000700)=""/39, 0x27, &(0x7f0000000780)={&(0x7f0000000740)={'sha3-256\x00'}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000300)={0x100, r6, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4004031}, 0x40) 1m38.48613298s ago: executing program 0 (id=36): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000a00)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="2397ff00010078", 0x7) 1m38.257594534s ago: executing program 0 (id=38): write(0xffffffffffffffff, &(0x7f0000000180)="1d04000012005f0214f9f4070000fbe40a", 0x11) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newsa={0x144, 0x10, 0x1, 0xbffffffd, 0x800fe, {{@in=@multicast2, @in=@broadcast, 0x3, 0x794, 0x4e23, 0x20, 0x2, 0x20, 0x0, 0x3c}, {@in=@loopback, 0x4d6, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, {0x1, 0x9, 0x6, 0xffff, 0x8251c, 0x1, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0x2, 0x9}, 0x70bd2c, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075d, 0xffffffd1}}]}, 0x144}, 0x1, 0x0, 0x0, 0xc801}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0xe599, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {0xfffffffffffffffc, 0x3}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0x4d6, 0x6c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3a00, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102ed5c01dc0000000008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f3036db45ef0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x55}], 0x47, 0x42, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m37.810279866s ago: executing program 0 (id=42): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff4]}, 0x8) fcntl$F_SET_RW_HINT(r1, 0x40c, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @vbi={0x8, 0x4, 0x31384142, 0x32315559, [0x5, 0x8], [0x3], 0x1}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="c4c1d5592966ba2100b0b8eeb9310a00000f3266baf80cb814cab68eef66bafc0c66ed66baf80cb824577689ef66bafc0cb8e5000000ef66baf80cb83e088183ef66bafc0c66b87b0066ef8adb66f30f09643e0fc7b100000100b9800000c00f3235004000000f30", 0x68}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0x4068aea3, &(0x7f00000002c0)={0xbc, 0x0, 0x2}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff4]}, 0x8) (async) fcntl$F_SET_RW_HINT(r1, 0x40c, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @vbi={0x8, 0x4, 0x31384142, 0x32315559, [0x5, 0x8], [0x3], 0x1}}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) dup(r4) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="c4c1d5592966ba2100b0b8eeb9310a00000f3266baf80cb814cab68eef66bafc0c66ed66baf80cb824577689ef66bafc0cb8e5000000ef66baf80cb83e088183ef66bafc0c66b87b0066ef8adb66f30f09643e0fc7b100000100b9800000c00f3235004000000f30", 0x68}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0x4068aea3, &(0x7f00000002c0)={0xbc, 0x0, 0x2}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) 1m37.52258054s ago: executing program 32 (id=42): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff4]}, 0x8) fcntl$F_SET_RW_HINT(r1, 0x40c, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @vbi={0x8, 0x4, 0x31384142, 0x32315559, [0x5, 0x8], [0x3], 0x1}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="c4c1d5592966ba2100b0b8eeb9310a00000f3266baf80cb814cab68eef66bafc0c66ed66baf80cb824577689ef66bafc0cb8e5000000ef66baf80cb83e088183ef66bafc0c66b87b0066ef8adb66f30f09643e0fc7b100000100b9800000c00f3235004000000f30", 0x68}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0x4068aea3, &(0x7f00000002c0)={0xbc, 0x0, 0x2}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff4]}, 0x8) (async) fcntl$F_SET_RW_HINT(r1, 0x40c, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @vbi={0x8, 0x4, 0x31384142, 0x32315559, [0x5, 0x8], [0x3], 0x1}}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) dup(r4) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="c4c1d5592966ba2100b0b8eeb9310a00000f3266baf80cb814cab68eef66bafc0c66ed66baf80cb824577689ef66bafc0cb8e5000000ef66baf80cb83e088183ef66bafc0c66b87b0066ef8adb66f30f09643e0fc7b100000100b9800000c00f3235004000000f30", 0x68}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0x4068aea3, &(0x7f00000002c0)={0xbc, 0x0, 0x2}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) 1m12.580738035s ago: executing program 4 (id=184): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f0000000680)="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", 0x15f) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000240)) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118008100fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002b000701fcffffffffdbdf2503"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc040) r5 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000480)={0x10, 0xffffffffffff0814, 0x8, 0x81, 0x40000000, 0x5, "a86d00000000000000000600", 0x40, 0x3, 0x0, 0x0, 0x0, 0x1, 0x80}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r6, 0x400c0930, 0x0) 1m11.649959584s ago: executing program 4 (id=189): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x4c27e, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17ffff7, 0x12, r1, 0x0) fallocate(r1, 0x0, 0x9, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000400)='./sys\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./devices/platform/pcspkr/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='i2c_designware\x00', 0xf) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./bus/platform/drivers/i2c_designware/bind\x00', 0x1, 0x19) write(r3, &(0x7f0000000800)='pcspkr\x00', 0x7) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006600000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c930f0cf315ef9000000000000000000000000000000000000000000000000000002000000ac1414bb00"/528], 0x210) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x19) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) munmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000) write$eventfd(r9, &(0x7f00000001c0)=0x3, 0x50) 1m11.017667426s ago: executing program 2 (id=190): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/49, 0x210000, 0x800, 0x0, 0x2}, 0x1c) mremap(&(0x7f000023c000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000385000/0x4000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x2) write(r2, &(0x7f0000000e80)="01000000070538abb5ce00", 0xb) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 1m10.373952132s ago: executing program 4 (id=193): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x6, 0x0, 0x2, 0x2, 0x5775d27c, 0x158, 0x100}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000030001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) 1m10.253859464s ago: executing program 2 (id=195): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000140)=@updpolicy={0xbc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0xffffffffffffffc0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x8001, 0x0, 0x1, 0x0, 0x0, 0x1}, [@tmpl={0x4}]}, 0xbc}}, 0x84) (async) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000040c0)=0xc29, 0x4) (async) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f00000001c0)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 1m9.866500469s ago: executing program 2 (id=196): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040)="666f6f23646e736572726f723d3120a11909b98b6beb329196f9ebdda50c906a5588df6996f431972ae2e0562c4bbf91f648e52712e630a2a4e61cee9abcc8dc8fd958ba81afcc3c2ec38670a5a73af75f8d1f4cc923e4c715a93f6fc8eb839f57bdce1c83de28f664ee0ff01c12cc9bd4cf7002f85ec3af38c609dd1ff5584b0ed274d40f2e2e2b6a1758167073ed7ad1d4fb180db81bd4ff6788487b93e926b77d9628da7f299365d2d3482f0c06cf6b3b524518c18aa8e3c218c91710063c00", 0xc1, 0xfffffffffffffffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4, 0x2}], 0x3e8, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x3e) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000400)=0x1, 0x4) r4 = socket(0x2a, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x45, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x81, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10, 0x4, 0x9}}}}}]}}]}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, 0x0, 0x40000) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00221800"], 0x0}, 0x0) setsockopt(r4, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r7 = accept$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000280)=@fragment={0x62, 0x0, 0x2, 0x1, 0x0, 0x2, 0x68}, 0x8) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000200)={0x0, 0x1000}, 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg(r4, &(0x7f0000000000)={&(0x7f0000000580)=@ll={0x11, 0xf5, r9, 0x1, 0x7}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000003c0)="5401020001000000ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f0000000140)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6f", 0x35}, {&(0x7f0000000480)="f76e14895b4c948e303e1fe34234a0a92e302fd3b1f42a71ef951440a9163dbb26d2305eee9b8b7f9e78f6519bdb7c74c66332bb1e3e6b1e905da63d88034af67bfbdfd841e082bc82b16f3e3a7286861d59497e1db230ab2f1013dc1b2550e9c621605a679ec586e1114948829b789a66cc8eb8782fcca10f908209202d75f5bd2994e3c2bffc22680249a09377e8e524d03507534473c79041957bf3f025c26f794ec491e8ddd0f49196811e2ac7ff3c1f7516dbfa7a46edb765f5165cbe41ae3f28", 0xc3}], 0x3}, 0x0) 1m9.729916923s ago: executing program 4 (id=199): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, 0x0, 0x0}, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x0, 0x14, 0xbf, "e48a534c520985777cb5727e517cf61c5dc4fad6aaf1a6b4783862ec5ac84ceeb0f2661f52b24264bb04230015ef2cf6cc4437de9791341e36240e9861c65c6fd141f94fb9480437ee36b473ff8a0612e0252e1eb703f93b5103276f984f35f170e551f8ba46b36131ffd5d4bf12cc1da4419b9bc7a34535d792fb4277eb36af105212b27c56d647b49998aefa150e5340b4ce6caa44e97306a4eb3f0cb0db30bba79598c88434c481cd74275b023f83a11945754519d9f090f1fd9b2733fa"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m7.450679318s ago: executing program 2 (id=207): r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0xb, 0xfffb, 0xa}, 0x0, 0x0}}) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) r2 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x7, 0xc82) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0xf010000, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xfe46ac0cad8edeb8, 0x8000, '\x00', @ptr=0x20001102}}) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0xf7}, 0xfffffffffffffffa) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x107a01, 0x185, 0x4}, 0x18) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000080)) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000240)={0x4, @sliced={0x9, [0x7, 0x572e, 0x9, 0x2, 0x3, 0x0, 0x23, 0x1, 0xff, 0x5, 0xa65f, 0x4, 0x8, 0x3ff, 0x9, 0x8, 0x8, 0x0, 0x10, 0x401, 0x8, 0x5, 0x10, 0xbc5, 0x1, 0xff00, 0x10, 0xd, 0x100, 0xb17c, 0xb1ba, 0x8001, 0x7, 0x992, 0x7fff, 0x0, 0x9, 0x6, 0xffff, 0x1, 0x100, 0xf9, 0x206, 0x2eb, 0xffff, 0x7d51, 0x4, 0x8], 0x1}}) read$nci(0xffffffffffffffff, &(0x7f0000000100)=""/107, 0x6b) write$nci(0xffffffffffffffff, 0x0, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x1, 0x7, 0x8000001}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) cachestat(r7, &(0x7f0000000000)={0x264, 0x1}, 0x0, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') ioctl$DVB_DVR_DMX_EXPBUF(r6, 0xc00c6f3e, &(0x7f0000000180)={0x0, 0x0, r6}) setns(r5, 0x24020000) read(r0, &(0x7f0000000180), 0x0) 1m7.199798438s ago: executing program 4 (id=210): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="05000000800400000800000000000000766688126a7a8a143710d6efe00cf1825e201d34165c2c86eee7c147a2c9f0dac453263f0890", @ANYRES64=0x0, @ANYRES64=0x0], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040051) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) chdir(&(0x7f0000000140)='./file1\x00') timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc70000", @ANYRESOCT=r7, @ANYRES16], 0x38}}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) r8 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x1) ioctl$SG_IO(r8, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000400)="a1117e7c21d7", 0x0, 0xfffffff9, 0x0, 0xffffffffffffffff, 0x0}) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') read$FUSE(r10, &(0x7f0000005780)={0x2020}, 0x2020) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="400104"], 0x14) 1m5.696445701s ago: executing program 4 (id=212): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001003238010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031") 1m5.298782719s ago: executing program 2 (id=213): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000, 0xfffffffffffffffc}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x32}, 0x2, @in=@empty, 0x7, 0x4, 0x1, 0x0, 0xe}]}]}, 0xfc}}, 0x0) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) setsockopt(r1, 0x11b, 0x9, 0x0, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="34010000170001002cbd7000fbdbdf25ac1414bb000000000000000000000000000004d56c000000fc0200"/52, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000038ffffffff0000000000000000000000004e2200074e2200050200200033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0500000000000000010001000000000007000000000000000000000001000000060000000000000004000000000000000f000000000000000100000000000000ffffffff0000000000800000000000000400000000000000000000000000000003000000000020000000000300000000ec00000005000000010000002d"], 0x134}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r5, 0x8911, &(0x7f0000000000)={'veth0\x00', @ifru_addrs=@xdp={0x2c, 0x8, 0x0, 0x13}}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000100)=@x86={0x8, 0x3, 0xff, 0x0, 0xf84, 0x28, 0x0, 0xfa, 0x5, 0x40, 0x2, 0x3, 0x0, 0x10, 0x2, 0x8, 0x4, 0x1, 0x0, '\x00', 0x5, 0x7}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m4.458132562s ago: executing program 2 (id=214): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001003238010000010000000000000000100000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") 50.038678034s ago: executing program 33 (id=212): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001003238010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031") 48.946811263s ago: executing program 34 (id=214): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001003238010000010000000000000000100000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") 44.284112242s ago: executing program 1 (id=253): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x17e) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) inotify_init() r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c00ec2d369c5a294b18b17bf0fc001321db59920298c0d298d0a47edc7cc9c1277c0df2438cf29b59dce86b94d5efabc62822bcc0bac58f33b20df3c3deb5f39461bd1fdda3592febf98de2bc4dd5a19469f3f4515935a87d32fc2b98c0b99fa4a189c2666d9e2e150e3fb4330f38325fe2096b0d26bf2f2ce73d905671f75835"]) 43.222032053s ago: executing program 1 (id=254): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004100010000000800040000000f0000000400cb8014000180100010800800010005000000040007800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x7c000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0xd) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, 0x0) r5 = dup(r0) write$UHID_INPUT(r5, 0x0, 0x0) 42.198828676s ago: executing program 3 (id=256): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f0000000680)="3a2e2e7a4f637573749b6ed5156f6d3a4d3a303a5c7d0004974c463a7830d6d4f0b3a470f8829cc517e325315c78c92b9aa523c095d6d92b66c96ee0c8f40f0000000000000043ec4336ef9eca7c2cea625481fa5ceee70ee98361af49b13fcd67368b57c3af6483040adba150608f85c3720b84b45c8a099d08e4b1bf34ed2a08d556dc1c8082c64c4d2b20e03cecb76cde70c28f1208fac0fc40149ea6e03820d473a2cc4cb09ee1029244f1205f10bc34e728eef9f6c9d9301a1427cc82e3c8a4bcbb2c4ff306eae9af45f7389e554252375bfbe1aca8e6a47c32c7f94dfb748367b6331140245de31cb23ecc0988f86900000000000000000000000000000000000000ca1662c31aae1885c4889701bf9c7ce7004c2bc4c43ae4bc62bbdef2367a7561dcb5fdd7489f1e32ac2cea1a2fe9858c42055f8723bbecf05d784c0a4ef672482636b5f787ffc5f533450121cdf86f56de41c4e69144faf3330e", 0x15f) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000240)) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118008100fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002b000701fcffffffffdbdf2503"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc040) r5 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000480)={0x10, 0xffffffffffff0814, 0x8, 0x81, 0x40000000, 0x5, "a86d00000000000000000600", 0x40, 0x3, 0x0, 0x0, 0x0, 0x1, 0x80}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r6, 0x400c0930, 0x0) 41.903884673s ago: executing program 1 (id=257): r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f00000000c0)=0x4, 0x4) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, 0x0, 0x24048804) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x5, &(0x7f0000000100)="0000000000000002", 0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = dup2(r5, r8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000008b00)={r7, 0x0, 0x1, "b9"}, 0x9) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r7, 0xff}, &(0x7f0000000080)=0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000001d0083a60000000100000000073b16c028000000", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002bbd7000fddbdf251b00000008009a"], 0x24}}, 0x40004) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22700, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r15, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x45, 0x0, 0x0) ioctl$KVM_SET_MSRS(r15, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x48b, 0x0, 0x8}]}) socket$key(0xf, 0x3, 0x2) 41.175703203s ago: executing program 3 (id=258): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x6) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) 40.487556942s ago: executing program 1 (id=259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0xf, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x2000c050) (fail_nth: 3) 39.943160225s ago: executing program 3 (id=260): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2842, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x200000000000000) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000012c0)=0x2) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r4, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004080}, 0x4012) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000001240)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001280)=0x14) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000001300)={0x0, 0x1ea0, 0x9, 0x8f, 0x2, 0x3, 0x2, 0x1ff, {r5, @in6={{0xa, 0x4e22, 0x7f, @local, 0x455}}, 0x2, 0xfffffffb, 0x3, 0x150, 0xac}}, &(0x7f00000013c0)=0xb0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000001200)={r6, 0x84000000}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000001100), &(0x7f0000000080)=0x4) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$binfmt_script(r7, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$tipc(r3, &(0x7f0000001400)=@nameseq={0x1e, 0x1, 0x3, {0xc4, 0x0, 0x2}}, 0x10) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000021000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008840) (async) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000000)=0x8000000000000001) (async) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)={0x3b, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x246}, @pad1]}, 0x18) 39.511538898s ago: executing program 1 (id=261): r0 = inotify_init() write(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES64=r0], 0x0) syz_usb_connect$midi(0x5, 0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="120110030034008dc835120e0040000102030109022c000101078002090400072401cd0007000d24030209030003fe07ff402a062402010c000000000000"], &(0x7f0000000540)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x2, 0x6, 0x8, 0x8, 0x7}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x3009}}, {0x71, &(0x7f0000000380)=@string={0x71, 0x3, "ab4e88afd08a642f6d5b9b55d981833536e8922080e2e1a2ce5544b3dd646d1d0e36796a7c262b8ec30b7874f0ef382f5d7ea8fb13e350836aecb21d1f1c707153148ffcf42328dfcd899f07782cfa4cbaeb53b7b18725da988f7d35dbd8e13f34d9d318de5b87571cd775374ad714"}}, {0xe8, &(0x7f0000000400)=@string={0xe8, 0x3, "ffe83068deee48cc90926a6221637adb30cb5038449e8b31e5de118b6daa8ab4da034547a708827a88baad1db8bb32455390329101e404e51bac53aa42ab7439795fe59e8388ac4cb85fb0bb651bc7f4535d6fc17c8d800e0db39c001014788d558c8f8d38af170a08ba0c77ac3dc6aac72100350659a47b409faa61b1be7ff835c54a4f2a949e197e86ada788a1183965f133ab3a45e11f2f06cd074d58662ce078dcc811a10515add4e315d1df97a8a14f808d55e9e4704b440a6bb29de73e6983e00a35015e224098d9db277458ca9aa1b1d72bcd4a9dc5aeb80a79552d71d027e4a04d7e"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x412}}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x2, 0x801) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r3, 0xb}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000040)={0x8, 0x0, [{0x25, 0x2, 0x0, 0x0, @sint={0x81, 0x1abf}}, {0x6, 0x3, 0x0, 0x0, @msi={0x10, 0x3, 0x1, 0xfffffff7}}, {0xb, 0x2, 0x0, 0x0, @adapter={0x1, 0x7, 0xffffffffffffcfeb, 0x2, 0x6}}, {0x2, 0x4, 0x1, 0x0, @irqchip={0x2, 0x3}}, {0x2, 0x2, 0x1, 0x0, @adapter={0x6, 0x9, 0x7fffffff, 0x800, 0x27}}, {0x101, 0x2, 0x0, 0x0, @adapter={0x314, 0x8, 0x5, 0x7, 0x10001}}, {0xa5f3, 0x5, 0x0, 0x0, @irqchip={0x100, 0xfff0}}, {0x7ff, 0x1, 0x0, 0x0, @msi={0x2, 0x774b, 0x0, 0x40}}]}) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) close(0x3) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 38.897921157s ago: executing program 3 (id=262): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/ieee80211/phy0/reset\x00', 0x1, 0x0) write(r1, 0x0, 0x500) 37.475276171s ago: executing program 3 (id=263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x1) r2 = socket$rxrpc(0x21, 0x2, 0xa) write(r2, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x105600, 0x0) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r3, 0x4048aecb, &(0x7f0000000100)="070000000000000001000000ffffffff0010a5d4") 36.387546666s ago: executing program 3 (id=264): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f0000000680)="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", 0x15f) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000240)) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118008100fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002b000701fcffffffffdbdf2503"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc040) r5 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000480)={0x10, 0xffffffffffff0814, 0x8, 0x81, 0x40000000, 0x5, "a86d00000000000000000600", 0x40, 0x3, 0x0, 0x0, 0x0, 0x1, 0x80}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r6, 0x400c0930, 0x0) 35.999700346s ago: executing program 1 (id=265): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) umount2(&(0x7f00000000c0)='./sys/block/md0/md/dev-ram0/state\x00', 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x15, &(0x7f0000000100)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004010}, 0x4000801) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0105500, &(0x7f0000000140)=ANY=[@ANYBLOB="a1"]) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "82839b1b38c84fd3", "caa7d5ed8e5fef82f29fded2982e1053", "e6f0aa7b", "49153cb4aa35a48d"}, 0x28) lseek(0xffffffffffffffff, 0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setuid(0xee00) mkdir(&(0x7f00000001c0)='mtd0\x00', 0x46) read$FUSE(r2, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x40050, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') open(&(0x7f0000000300)='./file0/../file0/file0\x00', 0x101001, 0xb) syz_fuse_handle_req(r2, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x6b, 0x0, 0x0, 0x1000000000005, 0x0, 0x0, 0x82, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) sendto(r5, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) 0s ago: executing program 35 (id=264): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f0000000680)="3a2e2e7a4f637573749b6ed5156f6d3a4d3a303a5c7d0004974c463a7830d6d4f0b3a470f8829cc517e325315c78c92b9aa523c095d6d92b66c96ee0c8f40f0000000000000043ec4336ef9eca7c2cea625481fa5ceee70ee98361af49b13fcd67368b57c3af6483040adba150608f85c3720b84b45c8a099d08e4b1bf34ed2a08d556dc1c8082c64c4d2b20e03cecb76cde70c28f1208fac0fc40149ea6e03820d473a2cc4cb09ee1029244f1205f10bc34e728eef9f6c9d9301a1427cc82e3c8a4bcbb2c4ff306eae9af45f7389e554252375bfbe1aca8e6a47c32c7f94dfb748367b6331140245de31cb23ecc0988f86900000000000000000000000000000000000000ca1662c31aae1885c4889701bf9c7ce7004c2bc4c43ae4bc62bbdef2367a7561dcb5fdd7489f1e32ac2cea1a2fe9858c42055f8723bbecf05d784c0a4ef672482636b5f787ffc5f533450121cdf86f56de41c4e69144faf3330e", 0x15f) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000240)) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118008100fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002b000701fcffffffffdbdf2503"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc040) r5 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000480)={0x10, 0xffffffffffff0814, 0x8, 0x81, 0x40000000, 0x5, "a86d00000000000000000600", 0x40, 0x3, 0x0, 0x0, 0x0, 0x1, 0x80}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r6, 0x400c0930, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.189' (ED25519) to the list of known hosts. [ 63.697763][ T5597] cgroup: Unknown subsys name 'net' [ 63.779547][ T5597] cgroup: Unknown subsys name 'cpuset' [ 63.782213][ T5597] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.158053][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.739721][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.741861][ T5615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.742730][ T5615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.744395][ T5615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.745751][ T5615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.783250][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.784382][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.784830][ T5615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.785985][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.787355][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.812683][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.813723][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.814124][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.815162][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.815681][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.868143][ T4932] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.870249][ T4932] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.871490][ T4932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.872601][ T4932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.873156][ T4932] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.220425][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.220531][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.220717][ T5618] bridge_slave_0: entered allmulticast mode [ 70.223010][ T5618] bridge_slave_0: entered promiscuous mode [ 70.266419][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.266589][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.266833][ T5618] bridge_slave_1: entered allmulticast mode [ 70.267836][ T5618] bridge_slave_1: entered promiscuous mode [ 70.345937][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.346032][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.347054][ T5619] bridge_slave_0: entered allmulticast mode [ 70.348786][ T5619] bridge_slave_0: entered promiscuous mode [ 70.364346][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.373809][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.373907][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.374262][ T5619] bridge_slave_1: entered allmulticast mode [ 70.377191][ T5619] bridge_slave_1: entered promiscuous mode [ 70.419109][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.441153][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.441293][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.441746][ T5612] bridge_slave_0: entered allmulticast mode [ 70.442733][ T5612] bridge_slave_0: entered promiscuous mode [ 70.481510][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.481655][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.481777][ T5612] bridge_slave_1: entered allmulticast mode [ 70.483235][ T5612] bridge_slave_1: entered promiscuous mode [ 70.498394][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.499561][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.499707][ T5617] bridge_slave_0: entered allmulticast mode [ 70.501437][ T5617] bridge_slave_0: entered promiscuous mode [ 70.507800][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.525479][ T5618] team0: Port device team_slave_0 added [ 70.525796][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.526222][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.526346][ T5617] bridge_slave_1: entered allmulticast mode [ 70.528562][ T5617] bridge_slave_1: entered promiscuous mode [ 70.534151][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.552363][ T5618] team0: Port device team_slave_1 added [ 70.597272][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.621135][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.636046][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.650672][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.650700][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.650714][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.653603][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.655639][ T5619] team0: Port device team_slave_0 added [ 70.672119][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.672137][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.672162][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.675474][ T5612] team0: Port device team_slave_0 added [ 70.724400][ T5612] team0: Port device team_slave_1 added [ 70.759077][ T5619] team0: Port device team_slave_1 added [ 70.792067][ T5617] team0: Port device team_slave_0 added [ 70.806014][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.806030][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.806052][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.807622][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.807635][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.807658][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.812389][ T5617] team0: Port device team_slave_1 added [ 70.826393][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.826411][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.826435][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.841893][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.841909][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.841934][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.847611][ T5615] Bluetooth: hci2: command tx timeout [ 70.847746][ T5615] Bluetooth: hci0: command tx timeout [ 70.847819][ T5615] Bluetooth: hci1: command tx timeout [ 70.856456][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.856473][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.856497][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.917225][ T4932] Bluetooth: hci3: command tx timeout [ 70.948097][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.948114][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.948138][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.129425][ T5619] hsr_slave_0: entered promiscuous mode [ 71.130246][ T5619] hsr_slave_1: entered promiscuous mode [ 71.138582][ T5618] hsr_slave_0: entered promiscuous mode [ 71.139653][ T5618] hsr_slave_1: entered promiscuous mode [ 71.140357][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 71.140463][ T5618] Cannot create hsr debugfs directory [ 71.161943][ T5612] hsr_slave_0: entered promiscuous mode [ 71.162978][ T5612] hsr_slave_1: entered promiscuous mode [ 71.163661][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 71.163678][ T5612] Cannot create hsr debugfs directory [ 71.248786][ T5617] hsr_slave_0: entered promiscuous mode [ 71.249429][ T5617] hsr_slave_1: entered promiscuous mode [ 71.249819][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 71.249837][ T5617] Cannot create hsr debugfs directory [ 71.468656][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.468698][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.662065][ T5619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.679372][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.680601][ T5619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.698057][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.702240][ T5619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.714562][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.715956][ T5619] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.731352][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.802261][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.808383][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.812215][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.818717][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.819486][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.827354][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.832389][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.840111][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.962486][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.966077][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.967706][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.977612][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.001928][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.008067][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.008953][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.017907][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.092681][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.116030][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.143503][ T5617] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.149753][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.154634][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.159007][ T5617] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.165036][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.169289][ T5617] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.181703][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.198280][ T5617] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.202099][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.219633][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.219843][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.231358][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.261491][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.261592][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.263070][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.263154][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.264299][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.264353][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.389799][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.441048][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.492634][ T1045] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.492731][ T1045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.531632][ T1045] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.531744][ T1045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.658243][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.715682][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.746297][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.746394][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.769718][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.769816][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.916703][ T5615] Bluetooth: hci0: command tx timeout [ 72.916736][ T5615] Bluetooth: hci2: command tx timeout [ 72.916844][ T4932] Bluetooth: hci1: command tx timeout [ 72.998990][ T4932] Bluetooth: hci3: command tx timeout [ 73.330485][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.440922][ T5618] veth0_vlan: entered promiscuous mode [ 73.460126][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.478894][ T5618] veth1_vlan: entered promiscuous mode [ 73.587689][ T5618] veth0_macvtap: entered promiscuous mode [ 73.595051][ T5619] veth0_vlan: entered promiscuous mode [ 73.603952][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.628113][ T5618] veth1_macvtap: entered promiscuous mode [ 73.651802][ T5619] veth1_vlan: entered promiscuous mode [ 73.704398][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.732989][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.754186][ T5612] veth0_vlan: entered promiscuous mode [ 73.764885][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.782657][ T5619] veth0_macvtap: entered promiscuous mode [ 73.801607][ T5612] veth1_vlan: entered promiscuous mode [ 73.815350][ T5619] veth1_macvtap: entered promiscuous mode [ 73.839390][ T1111] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.899489][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.945644][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.965095][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.965121][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.982635][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.982684][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.983282][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.005293][ T5612] veth0_macvtap: entered promiscuous mode [ 74.028196][ T5617] veth0_vlan: entered promiscuous mode [ 74.045946][ T5612] veth1_macvtap: entered promiscuous mode [ 74.081772][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.081794][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.082508][ T5617] veth1_vlan: entered promiscuous mode [ 74.092420][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.097620][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.110870][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.111869][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.112140][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.112977][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.113678][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.113947][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.114244][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.196920][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.291698][ T5618] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.324076][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.324097][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.418409][ T5617] veth0_macvtap: entered promiscuous mode [ 74.438238][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.438261][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.503865][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.503881][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.529541][ T5617] veth1_macvtap: entered promiscuous mode [ 74.571940][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.571962][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.613674][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.635590][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.680503][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.680890][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.758420][ T63] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.758702][ T63] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.987111][ T4932] Bluetooth: hci1: command tx timeout [ 74.987145][ T4932] Bluetooth: hci2: command tx timeout [ 74.987168][ T4932] Bluetooth: hci0: command tx timeout [ 75.002062][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.002081][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.066945][ T5623] Bluetooth: hci3: command tx timeout [ 75.110441][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.110463][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.273609][ T5770] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.276889][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.409378][ T5783] UBIFS error (pid: 5783): cannot open "ubi0_0", error -19 [ 75.458583][ T9] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 75.484424][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.484451][ T9] usb 2-1: Product: syz [ 75.484465][ T9] usb 2-1: Manufacturer: syz [ 75.484480][ T9] usb 2-1: SerialNumber: syz [ 75.533043][ T9] usb 2-1: config 0 descriptor?? [ 75.620028][ T5785] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3'. [ 75.624504][ T5785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 75.624553][ T5785] nbd: must specify a device to reconfigure [ 75.644517][ T5791] capability: warning: `syz.0.10' uses 32-bit capabilities (legacy support in use) [ 75.645188][ T5792] Zero length message leads to an empty skb [ 75.742637][ T5785] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 75.893337][ T5785] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 75.893372][ T5785] md: pers->run() failed ... [ 76.198762][ T5772] FAULT_INJECTION: forcing a failure. [ 76.198762][ T5772] name failslab, interval 1, probability 0, space 0, times 1 [ 76.198807][ T5772] CPU: 1 UID: 0 PID: 5772 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 76.198829][ T5772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.198848][ T5772] Call Trace: [ 76.198860][ T5772] [ 76.198868][ T5772] dump_stack_lvl+0xe8/0x150 [ 76.198903][ T5772] should_fail_ex+0x3eb/0x540 [ 76.198928][ T5772] should_failslab+0xa8/0x100 [ 76.198949][ T5772] ? __kernfs_new_node+0xe6/0x980 [ 76.198976][ T5772] kmem_cache_alloc_noprof+0x9c/0x600 [ 76.199004][ T5772] ? __kernfs_new_node+0xe6/0x980 [ 76.199037][ T5772] __kernfs_new_node+0xe6/0x980 [ 76.199064][ T5772] ? kasan_save_track+0x4f/0x80 [ 76.199092][ T5772] ? kasan_save_free_info+0x40/0x50 [ 76.199116][ T5772] ? __kasan_slab_free+0x5c/0x80 [ 76.199134][ T5772] ? kfree+0x1c5/0x650 [ 76.199160][ T5772] ? __pfx___kernfs_new_node+0x10/0x10 [ 76.199190][ T5772] ? kernfs_root+0x1c/0x230 [ 76.199221][ T5772] ? kernfs_root+0x1c/0x230 [ 76.199249][ T5772] ? kernfs_root+0x1c/0x230 [ 76.199275][ T5772] ? kernfs_root+0x1c/0x230 [ 76.199306][ T5772] kernfs_new_node+0xea/0x140 [ 76.199341][ T5772] __kernfs_create_file+0x4b/0x2e0 [ 76.199368][ T5772] sysfs_add_file_mode_ns+0x237/0x300 [ 76.199398][ T5772] sysfs_create_file_ns+0x12b/0x1b0 [ 76.199425][ T5772] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 76.199454][ T5772] ? module_add_driver+0x31b/0x320 [ 76.199489][ T5772] bus_add_driver+0x3b5/0x670 [ 76.199519][ T5772] driver_register+0x23a/0x320 [ 76.199553][ T5772] usb_gadget_register_driver_owner+0xf9/0x270 [ 76.199583][ T5772] raw_ioctl+0x1541/0x41c0 [ 76.199609][ T5772] ? tomoyo_path_number_perm+0x219/0x5f0 [ 76.199631][ T5772] ? do_vfs_ioctl+0x116f/0x1530 [ 76.199652][ T5772] ? __pfx_raw_ioctl+0x10/0x10 [ 76.199683][ T5772] ? hook_file_ioctl+0x1f2/0x600 [ 76.199726][ T5772] ? __fget_files+0x2a/0x420 [ 76.199755][ T5772] ? __fget_files+0x2a/0x420 [ 76.199777][ T5772] ? __fget_files+0x3a2/0x420 [ 76.199798][ T5772] ? __fget_files+0x2a/0x420 [ 76.199823][ T5772] ? bpf_lsm_file_ioctl+0x9/0x20 [ 76.199847][ T5772] ? __pfx_raw_ioctl+0x10/0x10 [ 76.199862][ T5772] __se_sys_ioctl+0xfc/0x170 [ 76.199894][ T5772] do_syscall_64+0x166/0x520 [ 76.199911][ T5772] ? trace_irq_disable+0x3b/0x140 [ 76.199936][ T5772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.199955][ T5772] ? clear_bhb_loop+0x70/0xc0 [ 76.199979][ T5772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.199997][ T5772] RIP: 0033:0x7f691399ddeb [ 76.200025][ T5772] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 76.200041][ T5772] RSP: 002b:00007f69148c0f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.200067][ T5772] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f691399ddeb [ 76.200081][ T5772] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 76.200092][ T5772] RBP: 00007f69148c1fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 76.200103][ T5772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.200115][ T5772] R13: 0000200000000040 R14: 0000000000000000 R15: 0000000000000868 [ 76.200144][ T5772] [ 76.218607][ T5772] bus_add_driver: uevent attr (raw-gadget.1) failed [ 76.218850][ T5772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.219230][ T5772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.291147][ T5809] netlink: 'syz.3.13': attribute type 10 has an invalid length. [ 76.298822][ T9] usb 2-1: f81604_read: reg: 105 failed: -EPROTO [ 76.298856][ T9] f81604 2-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 76.298881][ T9] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 76.608830][ T9] usb 2-1: USB disconnect, device number 2 [ 76.910267][ T5828] Bluetooth: MGMT ver 1.23 [ 77.067353][ T5623] Bluetooth: hci0: command tx timeout [ 77.067389][ T5623] Bluetooth: hci2: command tx timeout [ 77.067409][ T5623] Bluetooth: hci1: command tx timeout [ 77.146490][ T4932] Bluetooth: hci3: command tx timeout [ 77.561407][ T5840] kvm: user requested TSC rate below hardware speed [ 78.041365][ T5863] syz.0.30 uses obsolete (PF_INET,SOCK_PACKET) [ 78.069409][ T5864] netlink: 132 bytes leftover after parsing attributes in process `syz.3.23'. [ 78.088437][ T5864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 78.088461][ T5864] nbd: must specify a device to reconfigure [ 78.156035][ T5864] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 78.185313][ T5871] netlink: 'syz.2.25': attribute type 10 has an invalid length. [ 78.185396][ T5871] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 78.185415][ T5871] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 78.185605][ T5871] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 78.192524][ T5864] md: array md0 already has disks! [ 78.270401][ T5864] md: could not open device unknown-block(1,1). [ 78.270485][ T5864] md: error, md_import_device() returned -16 [ 78.341015][ T5864] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 78.341038][ T5864] md: pers->run() failed ... [ 78.743789][ T5765] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.901389][ T5765] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 78.905361][ T5765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.905389][ T5765] usb 1-1: Product: syz [ 78.905403][ T5765] usb 1-1: Manufacturer: syz [ 78.905417][ T5765] usb 1-1: SerialNumber: syz [ 78.931790][ T5765] usb 1-1: config 0 descriptor?? [ 79.594845][ T5884] FAULT_INJECTION: forcing a failure. [ 79.594845][ T5884] name failslab, interval 1, probability 0, space 0, times 0 [ 79.594878][ T5884] CPU: 1 UID: 0 PID: 5884 Comm: syz.0.27 Not tainted syzkaller #0 PREEMPT(full) [ 79.594915][ T5884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.594928][ T5884] Call Trace: [ 79.594937][ T5884] [ 79.594946][ T5884] dump_stack_lvl+0xe8/0x150 [ 79.594978][ T5884] should_fail_ex+0x3eb/0x540 [ 79.595005][ T5884] should_failslab+0xa8/0x100 [ 79.595028][ T5884] ? __kernfs_new_node+0xe6/0x980 [ 79.595059][ T5884] kmem_cache_alloc_noprof+0x9c/0x600 [ 79.595090][ T5884] ? __kernfs_new_node+0xe6/0x980 [ 79.595126][ T5884] __kernfs_new_node+0xe6/0x980 [ 79.595164][ T5884] ? __pfx___kernfs_new_node+0x10/0x10 [ 79.595195][ T5884] ? kernfs_root+0x1c/0x230 [ 79.595230][ T5884] ? kernfs_root+0x1c/0x230 [ 79.595254][ T5884] ? kernfs_root+0x1c/0x230 [ 79.595277][ T5884] ? kernfs_root+0x1c/0x230 [ 79.595307][ T5884] kernfs_new_node+0xea/0x140 [ 79.595339][ T5884] __kernfs_create_file+0x4b/0x2e0 [ 79.595364][ T5884] sysfs_add_file_mode_ns+0x237/0x300 [ 79.595395][ T5884] sysfs_create_file_ns+0x12b/0x1b0 [ 79.595493][ T5884] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 79.595531][ T5884] ? module_add_driver+0x31b/0x320 [ 79.595560][ T5884] ? sysfs_create_groups+0xa0/0x120 [ 79.595592][ T5884] bus_add_driver+0x459/0x670 [ 79.595622][ T5884] driver_register+0x23a/0x320 [ 79.595654][ T5884] usb_gadget_register_driver_owner+0xf9/0x270 [ 79.595685][ T5884] raw_ioctl+0x1541/0x41c0 [ 79.595711][ T5884] ? tomoyo_path_number_perm+0x219/0x5f0 [ 79.595735][ T5884] ? do_vfs_ioctl+0x116f/0x1530 [ 79.595757][ T5884] ? __pfx_raw_ioctl+0x10/0x10 [ 79.595789][ T5884] ? hook_file_ioctl+0x1f2/0x600 [ 79.595830][ T5884] ? __fget_files+0x2a/0x420 [ 79.595858][ T5884] ? __fget_files+0x2a/0x420 [ 79.595882][ T5884] ? __fget_files+0x3a2/0x420 [ 79.595905][ T5884] ? __fget_files+0x2a/0x420 [ 79.595933][ T5884] ? bpf_lsm_file_ioctl+0x9/0x20 [ 79.595959][ T5884] ? __pfx_raw_ioctl+0x10/0x10 [ 79.595979][ T5884] __se_sys_ioctl+0xfc/0x170 [ 79.596014][ T5884] do_syscall_64+0x166/0x520 [ 79.596035][ T5884] ? trace_irq_disable+0x3b/0x140 [ 79.596066][ T5884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.596088][ T5884] ? clear_bhb_loop+0x70/0xc0 [ 79.596111][ T5884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.596128][ T5884] RIP: 0033:0x7f54f959ddeb [ 79.596155][ T5884] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 79.596171][ T5884] RSP: 002b:00007f54fa510f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.596195][ T5884] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f54f959ddeb [ 79.596210][ T5884] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 79.596231][ T5884] RBP: 00007f54fa511fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 79.596245][ T5884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.596258][ T5884] R13: 0000200000000040 R14: 0000000000000000 R15: 0000000000000868 [ 79.596288][ T5884] [ 79.723008][ T5884] bus_add_driver: add_bind_files(raw-gadget.1) failed [ 79.723176][ T5884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.726769][ T5884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.872505][ T5765] usb 1-1: f81604_read: reg: 105 failed: -EPROTO [ 79.872533][ T5765] f81604 1-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 79.872559][ T5765] f81604 1-1:0.0: probe with driver f81604 failed with error -71 [ 79.985945][ T5765] usb 1-1: USB disconnect, device number 2 [ 80.183193][ T5923] netlink: 40 bytes leftover after parsing attributes in process `syz.3.34'. [ 80.486825][ T5917] kvm: user requested TSC rate below hardware speed [ 81.109426][ T5949] netlink: 'syz.3.41': attribute type 5 has an invalid length. [ 81.136083][ T5950] netlink: 132 bytes leftover after parsing attributes in process `syz.1.39'. [ 81.143169][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 81.143203][ T5950] nbd: must specify a device to reconfigure [ 81.160825][ T1152] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.161688][ T5950] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 81.177488][ T5950] md: array md0 already has disks! [ 81.239853][ T5950] md: could not open device unknown-block(1,1). [ 81.239917][ T5950] md: error, md_import_device() returned -16 [ 81.313041][ T1152] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.326586][ T5706] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.340443][ T5950] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 81.340466][ T5950] md: pers->run() failed ... [ 81.464740][ T1152] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.478682][ T5706] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 81.479846][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.479874][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.479911][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.529545][ T5706] usb 3-1: config 0 descriptor?? [ 81.752767][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.763333][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.771098][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.780257][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.780916][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.833642][ T1152] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.289946][ T5948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.290470][ T5948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.440020][ T1152] bridge_slave_1: left allmulticast mode [ 82.440090][ T1152] bridge_slave_1: left promiscuous mode [ 82.446559][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.464482][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.482457][ T5706] usbhid 3-1:0.0: can't add hid device: -71 [ 82.483151][ T5706] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 82.506452][ T5706] usb 3-1: USB disconnect, device number 2 [ 82.541201][ T1152] bridge_slave_0: left allmulticast mode [ 82.541228][ T1152] bridge_slave_0: left promiscuous mode [ 82.545509][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.599213][ T9] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 82.604392][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.604418][ T9] usb 4-1: Product: syz [ 82.604439][ T9] usb 4-1: Manufacturer: syz [ 82.604453][ T9] usb 4-1: SerialNumber: syz [ 82.616966][ T9] usb 4-1: config 0 descriptor?? [ 82.779312][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.782970][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.784771][ T1152] bond0 (unregistering): Released all slaves [ 83.243041][ T1152] hsr_slave_0: left promiscuous mode [ 83.243761][ T1152] hsr_slave_1: left promiscuous mode [ 83.245526][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.245556][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.250283][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.250304][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.266935][ T5980] FAULT_INJECTION: forcing a failure. [ 83.266935][ T5980] name failslab, interval 1, probability 0, space 0, times 0 [ 83.266971][ T5980] CPU: 1 UID: 0 PID: 5980 Comm: syz.3.45 Not tainted syzkaller #0 PREEMPT(full) [ 83.266993][ T5980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.267005][ T5980] Call Trace: [ 83.267013][ T5980] [ 83.267022][ T5980] dump_stack_lvl+0xe8/0x150 [ 83.267054][ T5980] should_fail_ex+0x3eb/0x540 [ 83.267082][ T5980] should_failslab+0xa8/0x100 [ 83.267103][ T5980] ? __kernfs_new_node+0xe6/0x980 [ 83.267131][ T5980] kmem_cache_alloc_noprof+0x9c/0x600 [ 83.267161][ T5980] ? __kernfs_new_node+0xe6/0x980 [ 83.267195][ T5980] __kernfs_new_node+0xe6/0x980 [ 83.267232][ T5980] ? __pfx___kernfs_new_node+0x10/0x10 [ 83.267262][ T5980] ? kernfs_root+0x1c/0x230 [ 83.267294][ T5980] ? kernfs_root+0x1c/0x230 [ 83.267319][ T5980] ? kernfs_root+0x1c/0x230 [ 83.267344][ T5980] ? kernfs_root+0x1c/0x230 [ 83.267374][ T5980] kernfs_new_node+0xea/0x140 [ 83.267407][ T5980] __kernfs_create_file+0x4b/0x2e0 [ 83.267431][ T5980] sysfs_add_file_mode_ns+0x237/0x300 [ 83.267461][ T5980] sysfs_create_file_ns+0x12b/0x1b0 [ 83.267486][ T5980] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 83.267516][ T5980] ? module_add_driver+0x31b/0x320 [ 83.267543][ T5980] ? sysfs_create_groups+0xa0/0x120 [ 83.267572][ T5980] bus_add_driver+0x459/0x670 [ 83.267599][ T5980] driver_register+0x23a/0x320 [ 83.267629][ T5980] usb_gadget_register_driver_owner+0xf9/0x270 [ 83.267659][ T5980] raw_ioctl+0x1541/0x41c0 [ 83.267683][ T5980] ? tomoyo_path_number_perm+0x219/0x5f0 [ 83.267707][ T5980] ? do_vfs_ioctl+0x116f/0x1530 [ 83.267728][ T5980] ? __pfx_raw_ioctl+0x10/0x10 [ 83.267757][ T5980] ? hook_file_ioctl+0x1f2/0x600 [ 83.267794][ T5980] ? __fget_files+0x2a/0x420 [ 83.267820][ T5980] ? __fget_files+0x2a/0x420 [ 83.267843][ T5980] ? __fget_files+0x3a2/0x420 [ 83.267865][ T5980] ? __fget_files+0x2a/0x420 [ 83.267892][ T5980] ? bpf_lsm_file_ioctl+0x9/0x20 [ 83.267916][ T5980] ? __pfx_raw_ioctl+0x10/0x10 [ 83.267934][ T5980] __se_sys_ioctl+0xfc/0x170 [ 83.267970][ T5980] do_syscall_64+0x166/0x520 [ 83.267989][ T5980] ? trace_irq_disable+0x3b/0x140 [ 83.268016][ T5980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.268035][ T5980] ? clear_bhb_loop+0x70/0xc0 [ 83.268059][ T5980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.268077][ T5980] RIP: 0033:0x7fe73979ddeb [ 83.268095][ T5980] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 83.268112][ T5980] RSP: 002b:00007fe73a58ff00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.268133][ T5980] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fe73979ddeb [ 83.268146][ T5980] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 83.268158][ T5980] RBP: 00007fe73a590fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 83.268170][ T5980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.268181][ T5980] R13: 0000200000000040 R14: 0000000000000000 R15: 0000000000000868 [ 83.268209][ T5980] [ 83.268290][ T5980] bus_add_driver: add_bind_files(raw-gadget.2) failed [ 83.268467][ T5980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.268824][ T5980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.310069][ T1152] veth1_macvtap: left promiscuous mode [ 83.310165][ T1152] veth0_macvtap: left promiscuous mode [ 83.310274][ T1152] veth1_vlan: left promiscuous mode [ 83.310360][ T1152] veth0_vlan: left promiscuous mode [ 83.480259][ T5698] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.664180][ T5698] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 83.683382][ T5698] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.704315][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.704345][ T5698] usb 3-1: Product: syz [ 83.704361][ T5698] usb 3-1: Manufacturer: syz [ 83.704375][ T5698] usb 3-1: SerialNumber: syz [ 83.747424][ T5698] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 83.876780][ T4932] Bluetooth: hci3: command tx timeout [ 83.897084][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 83.905129][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 84.069911][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 84.075240][ T9] usb 4-1: f81604_read: reg: 105 failed: -EPROTO [ 84.075270][ T9] f81604 4-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 84.075297][ T9] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 84.153903][ T9] usb 4-1: USB disconnect, device number 2 [ 84.165479][ T6008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.166049][ T6008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.358175][ T5698] gspca_mr97310a: reg write [21] error -71 [ 84.358256][ T5698] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -71 [ 84.383864][ T5698] usb 3-1: USB disconnect, device number 3 [ 84.569686][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.569881][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.570007][ T5971] bridge_slave_0: entered allmulticast mode [ 84.571984][ T5971] bridge_slave_0: entered promiscuous mode [ 84.577953][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.578091][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.578217][ T5971] bridge_slave_1: entered allmulticast mode [ 84.579869][ T5971] bridge_slave_1: entered promiscuous mode [ 84.616598][ T5971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.620555][ T5971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.650844][ T5971] team0: Port device team_slave_0 added [ 84.653633][ T5971] team0: Port device team_slave_1 added [ 84.735874][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.735893][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.735918][ T5971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.746445][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.746462][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.746487][ T5971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.847041][ T6027] netlink: 72 bytes leftover after parsing attributes in process `syz.3.47'. [ 84.863267][ T5971] hsr_slave_0: entered promiscuous mode [ 84.869159][ T5971] hsr_slave_1: entered promiscuous mode [ 84.869804][ T5971] debugfs: 'hsr0' already exists in 'hsr' [ 84.869821][ T5971] Cannot create hsr debugfs directory [ 85.080651][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 85.215466][ T6035] netlink: 44 bytes leftover after parsing attributes in process `syz.3.49'. [ 85.215511][ T6035] netlink: 32 bytes leftover after parsing attributes in process `syz.3.49'. [ 85.215696][ T6035] netlink: 44 bytes leftover after parsing attributes in process `syz.3.49'. [ 85.215711][ T6035] netlink: 32 bytes leftover after parsing attributes in process `syz.3.49'. [ 85.215875][ T6035] netlink: 44 bytes leftover after parsing attributes in process `syz.3.49'. [ 85.215890][ T6035] netlink: 32 bytes leftover after parsing attributes in process `syz.3.49'. [ 85.225563][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.49'. [ 85.521395][ T5971] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.557629][ T6050] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 85.559261][ T6050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.559736][ T6050] rust_binder: 6045:6050 got transaction to invalid handle 1 [ 85.559796][ T6050] rust_binder: 6045:6050 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 85.637335][ T5971] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.642252][ T6052] warning: `syz.1.53' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.642556][ T5971] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.663737][ T5971] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.665490][ T5971] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.713361][ T5971] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.719671][ T5971] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.755916][ T5971] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.942836][ T6068] bonding: bo is being created... [ 85.946451][ T4932] Bluetooth: hci3: command tx timeout [ 86.102609][ T5971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.139666][ T5971] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.168356][ T6067] kvm: user requested TSC rate below hardware speed [ 86.171927][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.172030][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.183932][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.184069][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.212555][ T6050] syz.2.51 (6050) used greatest stack depth: 17456 bytes left [ 86.217464][ T25] rust_binder: 6045: undelivered TRANSACTION_ERROR: 29201 [ 86.285309][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 86.834341][ T44] cfg80211: failed to load regulatory.db [ 86.864804][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 86.941747][ T5971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.190907][ T5971] veth0_vlan: entered promiscuous mode [ 87.197403][ T5971] veth1_vlan: entered promiscuous mode [ 87.222270][ T5971] veth0_macvtap: entered promiscuous mode [ 87.225215][ T5971] veth1_macvtap: entered promiscuous mode [ 87.242872][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.260532][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.277735][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.278474][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.278512][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.278544][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.367195][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.367216][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.400652][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.400674][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.590637][ T6119] kvm: user requested TSC rate below hardware speed [ 87.631152][ T6118] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (288 ns). Using initial count to start timer. [ 88.026813][ T4932] Bluetooth: hci3: command tx timeout [ 90.106938][ T4932] Bluetooth: hci3: command tx timeout [ 90.679365][ T6140] __nla_validate_parse: 2 callbacks suppressed [ 90.679379][ T6140] netlink: 132 bytes leftover after parsing attributes in process `syz.4.56'. [ 90.681371][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.56'. [ 90.681393][ T6140] nbd: must specify a device to reconfigure [ 90.699224][ T6140] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 90.719306][ T6140] md: array md0 already has disks! [ 90.767036][ T6140] md: could not open device unknown-block(1,1). [ 90.767095][ T6140] md: error, md_import_device() returned -16 [ 90.824677][ T6140] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 90.824701][ T6140] md: pers->run() failed ... [ 90.837140][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.926316][ T5691] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 90.987303][ T9] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 90.988409][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 90.988440][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.096962][ T5691] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 91.099827][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.099853][ T5691] usb 3-1: Product: syz [ 91.099867][ T5691] usb 3-1: Manufacturer: syz [ 91.099881][ T5691] usb 3-1: SerialNumber: syz [ 91.103667][ T5691] usb 3-1: config 0 descriptor?? [ 91.107360][ T5698] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.235688][ T9] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 91.236951][ T5706] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 91.249965][ T9] wwan wwan0: port wwan0qmi0 attached [ 91.268299][ T5698] usb 2-1: unable to get BOS descriptor or descriptor too short [ 91.268346][ T5698] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 91.269217][ T5698] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.269257][ T5698] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.271092][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.271113][ T5698] usb 2-1: Product: syz [ 91.271127][ T5698] usb 2-1: Manufacturer: syz [ 91.271141][ T5698] usb 2-1: SerialNumber: syz [ 91.286894][ T5698] usb 2-1: selecting invalid altsetting 1 [ 91.366740][ T5698] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 91.387386][ T5706] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 91.392268][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.392296][ T5706] usb 5-1: Product: syz [ 91.392310][ T5706] usb 5-1: Manufacturer: syz [ 91.392346][ T5706] usb 5-1: SerialNumber: syz [ 91.395607][ T5706] usb 5-1: config 0 descriptor?? [ 91.454326][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.464772][ T9] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 7e:61:5f:97:9a:43 [ 91.500476][ T6147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.501024][ T6147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.513370][ T6147] netlink: 112 bytes leftover after parsing attributes in process `syz.1.60'. [ 91.605419][ T5706] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 91.648871][ T9] usb 4-1: USB disconnect, device number 3 [ 91.664997][ T9] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 91.727561][ T9] wwan wwan0: port wwan0qmi0 disconnected [ 91.757424][ T6138] FAULT_INJECTION: forcing a failure. [ 91.757424][ T6138] name failslab, interval 1, probability 0, space 0, times 0 [ 91.757477][ T6138] CPU: 0 UID: 0 PID: 6138 Comm: syz.2.57 Not tainted syzkaller #0 PREEMPT(full) [ 91.757499][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.757538][ T6138] Call Trace: [ 91.757546][ T6138] [ 91.757555][ T6138] dump_stack_lvl+0xe8/0x150 [ 91.757595][ T6138] should_fail_ex+0x3eb/0x540 [ 91.757624][ T6138] should_failslab+0xa8/0x100 [ 91.757646][ T6138] ? __kernfs_new_node+0xe6/0x980 [ 91.757674][ T6138] kmem_cache_alloc_noprof+0x9c/0x600 [ 91.757702][ T6138] ? __kernfs_new_node+0xe6/0x980 [ 91.757736][ T6138] __kernfs_new_node+0xe6/0x980 [ 91.757771][ T6138] ? __pfx___kernfs_new_node+0x10/0x10 [ 91.757797][ T6138] ? kernfs_root+0x1c/0x230 [ 91.757827][ T6138] ? kernfs_root+0x1c/0x230 [ 91.757851][ T6138] ? kernfs_root+0x1c/0x230 [ 91.757872][ T6138] ? kernfs_root+0x1c/0x230 [ 91.757902][ T6138] kernfs_new_node+0xea/0x140 [ 91.757933][ T6138] __kernfs_create_file+0x4b/0x2e0 [ 91.757956][ T6138] sysfs_add_file_mode_ns+0x237/0x300 [ 91.757986][ T6138] sysfs_create_file_ns+0x12b/0x1b0 [ 91.758013][ T6138] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 91.758042][ T6138] ? module_add_driver+0x31b/0x320 [ 91.758066][ T6138] ? sysfs_create_groups+0xa0/0x120 [ 91.758095][ T6138] bus_add_driver+0x459/0x670 [ 91.758121][ T6138] driver_register+0x23a/0x320 [ 91.758149][ T6138] usb_gadget_register_driver_owner+0xf9/0x270 [ 91.758179][ T6138] raw_ioctl+0x1541/0x41c0 [ 91.758203][ T6138] ? tomoyo_path_number_perm+0x219/0x5f0 [ 91.758226][ T6138] ? do_vfs_ioctl+0x116f/0x1530 [ 91.758247][ T6138] ? __pfx_raw_ioctl+0x10/0x10 [ 91.758274][ T6138] ? trace_irq_disable+0x3b/0x140 [ 91.758301][ T6138] ? hook_file_ioctl+0x1f2/0x600 [ 91.758339][ T6138] ? __fget_files+0x2a/0x420 [ 91.758363][ T6138] ? __fget_files+0x2a/0x420 [ 91.758386][ T6138] ? __fget_files+0x3a2/0x420 [ 91.758408][ T6138] ? __fget_files+0x2a/0x420 [ 91.758432][ T6138] ? bpf_lsm_file_ioctl+0x9/0x20 [ 91.758455][ T6138] ? __pfx_raw_ioctl+0x10/0x10 [ 91.758473][ T6138] __se_sys_ioctl+0xfc/0x170 [ 91.758504][ T6138] do_syscall_64+0x166/0x520 [ 91.758521][ T6138] ? trace_irq_disable+0x3b/0x140 [ 91.758544][ T6138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.758563][ T6138] ? clear_bhb_loop+0x70/0xc0 [ 91.758597][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.758616][ T6138] RIP: 0033:0x7f5a45f9ddeb [ 91.758634][ T6138] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 91.758651][ T6138] RSP: 002b:00007f5a46e61f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.758671][ T6138] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f5a45f9ddeb [ 91.758684][ T6138] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 91.758697][ T6138] RBP: 00007f5a46e62fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 91.758711][ T6138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.758722][ T6138] R13: 0000200000000040 R14: 0000000000000000 R15: 0000000000000868 [ 91.758751][ T6138] [ 91.765546][ T6138] bus_add_driver: add_bind_files(raw-gadget.0) failed [ 91.765770][ T6138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.769196][ T6138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.833116][ T5691] usb 3-1: f81604_read: reg: 105 failed: -EPROTO [ 91.833143][ T5691] f81604 3-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 91.833168][ T5691] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 92.150006][ T5691] usb 3-1: USB disconnect, device number 4 [ 92.194154][ T9] usb 2-1: USB disconnect, device number 3 [ 92.341757][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.68'. [ 92.733357][ T6176] openvswitch: netlink: Flow actions attr not present in new flow. [ 93.097888][ T6205] netlink: 132 bytes leftover after parsing attributes in process `syz.1.74'. [ 93.098765][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 93.098786][ T6205] nbd: must specify a device to reconfigure [ 93.133714][ T6205] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 93.160152][ T5706] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 93.169244][ T6205] md: array md0 already has disks! [ 93.177851][ T5706] usb 5-1: USB disconnect, device number 2 [ 93.240100][ T6205] md: could not open device unknown-block(1,1). [ 93.240162][ T6205] md: error, md_import_device() returned -16 [ 93.240435][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 93.300228][ T6205] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 93.300252][ T6205] md: pers->run() failed ... [ 93.386936][ T9] usb 3-1: New USB device found, idVendor=110a, idProduct=1410, bcdDevice= 0.00 [ 93.388059][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.388108][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.629378][ T6225] netlink: 'syz.3.78': attribute type 10 has an invalid length. [ 93.629415][ T6225] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 93.629443][ T6225] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 93.629605][ T6225] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 93.642977][ T9] mxuport 3-1:1.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 93.643317][ T9] mxuport 3-1:1.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 93.643379][ T9] mxuport 3-1:1.0: probe with driver mxuport failed with error -71 [ 93.657798][ T9] usb 3-1: USB disconnect, device number 5 [ 94.136213][ T5691] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 94.166809][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.288742][ T5691] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 94.294101][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.294129][ T5691] usb 4-1: Product: syz [ 94.294144][ T5691] usb 4-1: Manufacturer: syz [ 94.294158][ T5691] usb 4-1: SerialNumber: syz [ 94.328005][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 94.328941][ T5691] usb 4-1: config 0 descriptor?? [ 94.334600][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 94.334649][ T9] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 94.335806][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 94.366407][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.366433][ T9] usb 5-1: Product: syz [ 94.366446][ T9] usb 5-1: Manufacturer: syz [ 94.366459][ T9] usb 5-1: SerialNumber: syz [ 94.605489][ T6231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.605962][ T6231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.623793][ T6232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.624296][ T6232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.675584][ T6231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.682327][ T6231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.690614][ T6232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.691096][ T6232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.699280][ T6231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.715330][ T6231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.767157][ T9] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 94.767547][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 94.942906][ T6229] FAULT_INJECTION: forcing a failure. [ 94.942906][ T6229] name failslab, interval 1, probability 0, space 0, times 0 [ 94.942936][ T6229] CPU: 1 UID: 0 PID: 6229 Comm: syz.3.79 Not tainted syzkaller #0 PREEMPT(full) [ 94.942962][ T6229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.942974][ T6229] Call Trace: [ 94.942981][ T6229] [ 94.942990][ T6229] dump_stack_lvl+0xe8/0x150 [ 94.943022][ T6229] should_fail_ex+0x3eb/0x540 [ 94.943050][ T6229] should_failslab+0xa8/0x100 [ 94.943073][ T6229] __kmalloc_cache_noprof+0x9e/0x600 [ 94.943104][ T6229] ? kobject_uevent_env+0x289/0x9e0 [ 94.943128][ T6229] ? kobject_uevent_env+0x289/0x9e0 [ 94.943154][ T6229] ? module_add_driver+0x31b/0x320 [ 94.943186][ T6229] kobject_uevent_env+0x289/0x9e0 [ 94.943220][ T6229] driver_register+0x2d4/0x320 [ 94.943251][ T6229] usb_gadget_register_driver_owner+0xf9/0x270 [ 94.943281][ T6229] raw_ioctl+0x1541/0x41c0 [ 94.943307][ T6229] ? tomoyo_path_number_perm+0x219/0x5f0 [ 94.943338][ T6229] ? do_vfs_ioctl+0x116f/0x1530 [ 94.943360][ T6229] ? __pfx_raw_ioctl+0x10/0x10 [ 94.943392][ T6229] ? hook_file_ioctl+0x1f2/0x600 [ 94.943431][ T6229] ? __fget_files+0x2a/0x420 [ 94.943460][ T6229] ? __fget_files+0x2a/0x420 [ 94.943483][ T6229] ? __fget_files+0x3a2/0x420 [ 94.943506][ T6229] ? __fget_files+0x2a/0x420 [ 94.943534][ T6229] ? bpf_lsm_file_ioctl+0x9/0x20 [ 94.943559][ T6229] ? __pfx_raw_ioctl+0x10/0x10 [ 94.943578][ T6229] __se_sys_ioctl+0xfc/0x170 [ 94.943610][ T6229] do_syscall_64+0x166/0x520 [ 94.943628][ T6229] ? trace_irq_disable+0x3b/0x140 [ 94.943656][ T6229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.943675][ T6229] ? clear_bhb_loop+0x70/0xc0 [ 94.943699][ T6229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.943718][ T6229] RIP: 0033:0x7fe73979ddeb [ 94.943737][ T6229] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 94.943751][ T6229] RSP: 002b:00007fe73a58ff00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.943770][ T6229] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fe73979ddeb [ 94.943782][ T6229] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 94.943793][ T6229] RBP: 00007fe73a590fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 94.943805][ T6229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.943817][ T6229] R13: 0000200000000040 R14: 0000000000000000 R15: 0000000000000868 [ 94.943846][ T6229] [ 94.943893][ T6229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.944223][ T6229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.970056][ T5691] usb 4-1: f81604_read: reg: 105 failed: -EPROTO [ 94.970083][ T5691] f81604 4-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 94.970109][ T5691] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 94.982042][ T9] usb 5-1: USB disconnect, device number 3 [ 95.038394][ T6250] FAULT_INJECTION: forcing a failure. [ 95.038394][ T6250] name failslab, interval 1, probability 0, space 0, times 0 [ 95.038435][ T6250] CPU: 0 UID: 0 PID: 6250 Comm: syz.1.89 Not tainted syzkaller #0 PREEMPT(full) [ 95.038457][ T6250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.038469][ T6250] Call Trace: [ 95.038476][ T6250] [ 95.038485][ T6250] dump_stack_lvl+0xe8/0x150 [ 95.038515][ T6250] should_fail_ex+0x3eb/0x540 [ 95.038543][ T6250] should_failslab+0xa8/0x100 [ 95.038564][ T6250] ? new_userfaultfd+0x88/0x3d0 [ 95.038588][ T6250] kmem_cache_alloc_noprof+0x9c/0x600 [ 95.038618][ T6250] ? new_userfaultfd+0x88/0x3d0 [ 95.038646][ T6250] new_userfaultfd+0x88/0x3d0 [ 95.038672][ T6250] __x64_sys_userfaultfd+0x81/0xa0 [ 95.038709][ T6250] do_syscall_64+0x166/0x520 [ 95.038729][ T6250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.038750][ T6250] ? clear_bhb_loop+0x70/0xc0 [ 95.038774][ T6250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.038793][ T6250] RIP: 0033:0x7f691399e159 [ 95.038811][ T6250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.038827][ T6250] RSP: 002b:00007f69148c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 95.038848][ T6250] RAX: ffffffffffffffda RBX: 00007f6913c25fa0 RCX: 00007f691399e159 [ 95.038863][ T6250] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000801 [ 95.038874][ T6250] RBP: 00007f6913a3503b R08: 0000000000000000 R09: 0000000000000000 [ 95.038886][ T6250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.038897][ T6250] R13: 00007f6913c26038 R14: 00007f6913c25fa0 R15: 00007ffd49a337e8 [ 95.038926][ T6250] [ 95.101683][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.211510][ T5691] usb 4-1: USB disconnect, device number 4 [ 95.296211][ T5765] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 95.459420][ T5765] usb 3-1: Using ep0 maxpacket: 8 [ 95.460133][ T5765] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 95.468012][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.468038][ T5765] usb 3-1: Product: syz [ 95.468052][ T5765] usb 3-1: Manufacturer: syz [ 95.468065][ T5765] usb 3-1: SerialNumber: syz [ 95.473539][ T5765] usb 3-1: config 0 descriptor?? [ 95.562171][ T6256] netlink: 'syz.4.91': attribute type 1 has an invalid length. [ 95.681324][ T5765] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -71 [ 95.681378][ T5765] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 95.685159][ T5765] usb 3-1: USB disconnect, device number 6 [ 95.795528][ T6263] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 95.795553][ T6263] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 95.795574][ T6263] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 95.797022][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.802787][ T6263] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 95.814399][ T6263] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 95.947469][ T25] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 95.950912][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.950940][ T25] usb 5-1: Product: syz [ 95.950952][ T25] usb 5-1: Manufacturer: syz [ 95.950961][ T25] usb 5-1: SerialNumber: syz [ 95.952341][ T1152] smbdirect: ib_dev[syz2] removed [ 96.153963][ T6271] netlink: 24 bytes leftover after parsing attributes in process `syz.3.98'. [ 96.386726][ T5698] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.408461][ T25] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 96.408512][ T25] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 96.409732][ T25] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 96.459342][ T25] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 96.536387][ T5698] usb 2-1: Using ep0 maxpacket: 8 [ 96.537223][ T5698] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 96.542809][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.542836][ T5698] usb 2-1: Product: syz [ 96.542851][ T5698] usb 2-1: Manufacturer: syz [ 96.542865][ T5698] usb 2-1: SerialNumber: syz [ 96.583980][ T5698] usb 2-1: config 0 descriptor?? [ 96.596984][ T5698] gspca_main: se401-2.14.0 probing 047d:5003 [ 96.640224][ T6290] FAULT_INJECTION: forcing a failure. [ 96.640224][ T6290] name failslab, interval 1, probability 0, space 0, times 0 [ 96.640244][ T6290] CPU: 1 UID: 0 PID: 6290 Comm: syz.2.103 Not tainted syzkaller #0 PREEMPT(full) [ 96.640256][ T6290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.640264][ T6290] Call Trace: [ 96.640268][ T6290] [ 96.640273][ T6290] dump_stack_lvl+0xe8/0x150 [ 96.640304][ T6290] should_fail_ex+0x3eb/0x540 [ 96.640332][ T6290] should_failslab+0xa8/0x100 [ 96.640355][ T6290] __kmalloc_cache_noprof+0x9e/0x600 [ 96.640376][ T6290] ? kstrdup+0x81/0x100 [ 96.640392][ T6290] ? create_filter_start+0x144/0x1e0 [ 96.640405][ T6290] ? create_filter_start+0x144/0x1e0 [ 96.640420][ T6290] create_filter_start+0x144/0x1e0 [ 96.640443][ T6290] create_filter+0x7c/0x180 [ 96.640472][ T6290] apply_event_filter+0x154/0x510 [ 96.640503][ T6290] event_filter_write+0x16f/0x220 [ 96.640526][ T6290] ? __pfx_event_filter_write+0x10/0x10 [ 96.640540][ T6290] vfs_write+0x296/0xba0 [ 96.640560][ T6290] ? __pfx_vfs_write+0x10/0x10 [ 96.640574][ T6290] ? __fget_files+0x2a/0x420 [ 96.640611][ T6290] ? __fget_files+0x3a2/0x420 [ 96.640634][ T6290] ? __fget_files+0x2a/0x420 [ 96.640665][ T6290] ksys_write+0x150/0x270 [ 96.640683][ T6290] ? __pfx_ksys_write+0x10/0x10 [ 96.640702][ T6290] do_syscall_64+0x166/0x520 [ 96.640713][ T6290] ? trace_irq_disable+0x3b/0x140 [ 96.640727][ T6290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.640747][ T6290] ? clear_bhb_loop+0x70/0xc0 [ 96.640771][ T6290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.640790][ T6290] RIP: 0033:0x7f5a45f9e159 [ 96.640808][ T6290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.640821][ T6290] RSP: 002b:00007f5a46e64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 96.640834][ T6290] RAX: ffffffffffffffda RBX: 00007f5a46225fa0 RCX: 00007f5a45f9e159 [ 96.640841][ T6290] RDX: 000000000000000f RSI: 0000200000000240 RDI: 0000000000000003 [ 96.640848][ T6290] RBP: 00007f5a46e64090 R08: 0000000000000000 R09: 0000000000000000 [ 96.640854][ T6290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.640860][ T6290] R13: 00007f5a46226038 R14: 00007f5a46225fa0 R15: 00007ffdb69975d8 [ 96.640877][ T6290] [ 96.799275][ T44] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.947006][ T44] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 96.950134][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.950161][ T44] usb 4-1: Product: syz [ 96.950189][ T44] usb 4-1: Manufacturer: syz [ 96.950203][ T44] usb 4-1: SerialNumber: syz [ 96.953735][ T44] usb 4-1: config 0 descriptor?? [ 97.236520][ T5698] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 97.245993][ T6302] overlayfs: failed to resolve './file0/file0': -2 [ 97.248940][ T6302] CacheFiles: Failed to register: -95 [ 97.273874][ T5698] usb 2-1: USB disconnect, device number 4 [ 97.344084][ T6305] cgroup: Unknown subsys name './file2' [ 97.454343][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'. [ 97.454447][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'. [ 97.562853][ T6288] FAULT_INJECTION: forcing a failure. [ 97.562853][ T6288] name failslab, interval 1, probability 0, space 0, times 0 [ 97.562886][ T6288] CPU: 0 UID: 0 PID: 6288 Comm: syz.3.102 Not tainted syzkaller #0 PREEMPT(full) [ 97.562909][ T6288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.562923][ T6288] Call Trace: [ 97.562931][ T6288] [ 97.562940][ T6288] dump_stack_lvl+0xe8/0x150 [ 97.562970][ T6288] should_fail_ex+0x3eb/0x540 [ 97.562996][ T6288] should_failslab+0xa8/0x100 [ 97.563018][ T6288] ? __kernfs_new_node+0xe6/0x980 [ 97.563049][ T6288] kmem_cache_alloc_noprof+0x9c/0x600 [ 97.563079][ T6288] ? __kernfs_new_node+0xe6/0x980 [ 97.563113][ T6288] __kernfs_new_node+0xe6/0x980 [ 97.563141][ T6288] ? kasan_save_track+0x4f/0x80 [ 97.563170][ T6288] ? kasan_save_free_info+0x40/0x50 [ 97.563193][ T6288] ? __kasan_slab_free+0x5c/0x80 [ 97.563211][ T6288] ? kfree+0x1c5/0x650 [ 97.563238][ T6288] ? __pfx___kernfs_new_node+0x10/0x10 [ 97.563274][ T6288] ? kernfs_root+0x1c/0x230 [ 97.563307][ T6288] ? kernfs_root+0x1c/0x230 [ 97.563334][ T6288] ? kernfs_root+0x1c/0x230 [ 97.563359][ T6288] ? kernfs_root+0x1c/0x230 [ 97.563388][ T6288] kernfs_new_node+0xea/0x140 [ 97.563418][ T6288] __kernfs_create_file+0x4b/0x2e0 [ 97.563446][ T6288] sysfs_add_file_mode_ns+0x237/0x300 [ 97.563478][ T6288] sysfs_create_file_ns+0x12b/0x1b0 [ 97.563504][ T6288] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 97.563532][ T6288] ? module_add_driver+0x31b/0x320 [ 97.563562][ T6288] bus_add_driver+0x3b5/0x670 [ 97.563586][ T6288] driver_register+0x23a/0x320 [ 97.563613][ T6288] usb_gadget_register_driver_owner+0xf9/0x270 [ 97.563649][ T6288] raw_ioctl+0x1541/0x41c0 [ 97.563674][ T6288] ? tomoyo_path_number_perm+0x219/0x5f0 [ 97.563695][ T6288] ? do_vfs_ioctl+0x116f/0x1530 [ 97.563715][ T6288] ? __pfx_raw_ioctl+0x10/0x10 [ 97.563746][ T6288] ? hook_file_ioctl+0x1f2/0x600 [ 97.563784][ T6288] ? __fget_files+0x2a/0x420 [ 97.563812][ T6288] ? __fget_files+0x2a/0x420 [ 97.563834][ T6288] ? __fget_files+0x3a2/0x420 [ 97.563857][ T6288] ? __fget_files+0x2a/0x420 [ 97.563884][ T6288] ? bpf_lsm_file_ioctl+0x9/0x20 [ 97.563908][ T6288] ? __pfx_raw_ioctl+0x10/0x10 [ 97.563926][ T6288] __se_sys_ioctl+0xfc/0x170 [ 97.563958][ T6288] do_syscall_64+0x166/0x520 [ 97.563976][ T6288] ? trace_irq_disable+0x3b/0x140 [ 97.564003][ T6288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.564024][ T6288] ? clear_bhb_loop+0x70/0xc0 [ 97.564047][ T6288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.564067][ T6288] RIP: 0033:0x7fe73979ddeb [ 97.564086][ T6288] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 97.564103][ T6288] RSP: 002b:00007fe73a58ff00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.564125][ T6288] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fe73979ddeb [ 97.564140][ T6288] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 97.564151][ T6288] RBP: 00007fe73a590fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 97.564164][ T6288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.564174][ T6288] R13: 0000200000000040 R14: 0000000000000000 R15: 0000000000000868 [ 97.564201][ T6288] [ 97.564284][ T6288] bus_add_driver: uevent attr (raw-gadget.1) failed [ 97.564501][ T6288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.564912][ T6288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.566862][ T44] usb 4-1: f81604_read: reg: 105 failed: -EPROTO [ 97.566885][ T44] f81604 4-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 97.566910][ T44] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 97.580423][ T44] usb 4-1: USB disconnect, device number 5 [ 97.951222][ T6318] netlink: 132 bytes leftover after parsing attributes in process `syz.1.113'. [ 97.953004][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 97.953025][ T6318] nbd: must specify a device to reconfigure [ 97.968386][ T6318] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 97.998935][ T6318] md: array md0 already has disks! [ 98.046054][ T6318] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 98.046079][ T6318] md: pers->run() failed ... [ 98.068839][ T6321] nfs4: Unknown parameter ''' [ 98.226025][ T31] audit: type=1800 audit(1789510931.750:2): pid=6327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.116" name="SYSV798dd81a" dev="tmpfs" ino=0 res=0 errno=0 [ 98.408213][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.115'. [ 98.429834][ T6328] netlink: 20 bytes leftover after parsing attributes in process `syz.3.115'. [ 98.661773][ T44] usb 5-1: USB disconnect, device number 4 [ 98.884853][ T6354] netlink: 'syz.2.122': attribute type 2 has an invalid length. [ 99.098732][ T44] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 99.140605][ T6367] netlink: 132 bytes leftover after parsing attributes in process `syz.2.125'. [ 99.143211][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 99.143234][ T6367] nbd: must specify a device to reconfigure [ 99.148765][ T6367] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 99.155282][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 99.188204][ T6367] md: array md0 already has disks! [ 99.231643][ T6367] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 99.231667][ T6367] md: pers->run() failed ... [ 99.249735][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 99.254435][ T44] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 99.256266][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 99.258422][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.258454][ T44] usb 5-1: Product: syz [ 99.258467][ T44] usb 5-1: Manufacturer: syz [ 99.258481][ T44] usb 5-1: SerialNumber: syz [ 99.263788][ T44] usb 5-1: config 0 descriptor?? [ 99.277847][ T44] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 99.336213][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 99.336945][ T9] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 99.338051][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 99.338075][ T9] usb 2-1: config 0 has no interface number 0 [ 99.340476][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.340499][ T9] usb 2-1: Product: syz [ 99.340511][ T9] usb 2-1: Manufacturer: syz [ 99.340525][ T9] usb 2-1: SerialNumber: syz [ 99.402305][ T9] usb 2-1: config 0 descriptor?? [ 99.413551][ T25] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 99.413767][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 99.423262][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.423289][ T25] usb 4-1: Product: syz [ 99.423302][ T25] usb 4-1: Manufacturer: syz [ 99.423338][ T25] usb 4-1: SerialNumber: syz [ 99.440658][ T25] usb 4-1: config 0 descriptor?? [ 99.441206][ T6375] netlink: 36 bytes leftover after parsing attributes in process `syz.2.126'. [ 100.022847][ T9] gspca_spca1528: reg_w err -71 [ 100.041124][ T9] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 100.081992][ T9] usb 2-1: USB disconnect, device number 5 [ 100.113429][ T6361] FAULT_INJECTION: forcing a failure. [ 100.113429][ T6361] name failslab, interval 1, probability 0, space 0, times 0 [ 100.113465][ T6361] CPU: 0 UID: 0 PID: 6361 Comm: syz.3.124 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.113494][ T6361] Tainted: [L]=SOFTLOCKUP [ 100.113501][ T6361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.113514][ T6361] Call Trace: [ 100.113523][ T6361] [ 100.113532][ T6361] dump_stack_lvl+0xe8/0x150 [ 100.113565][ T6361] should_fail_ex+0x3eb/0x540 [ 100.113594][ T6361] should_failslab+0xa8/0x100 [ 100.113616][ T6361] ? __kernfs_new_node+0xe6/0x980 [ 100.113651][ T6361] kmem_cache_alloc_noprof+0x9c/0x600 [ 100.113682][ T6361] ? __kernfs_new_node+0xe6/0x980 [ 100.113726][ T6361] __kernfs_new_node+0xe6/0x980 [ 100.113766][ T6361] ? __pfx___kernfs_new_node+0x10/0x10 [ 100.113796][ T6361] ? kernfs_root+0x1c/0x230 [ 100.113837][ T6361] ? kernfs_root+0x1c/0x230 [ 100.113865][ T6361] ? kernfs_root+0x1c/0x230 [ 100.113898][ T6361] ? kernfs_root+0x1c/0x230 [ 100.113930][ T6361] kernfs_new_node+0xea/0x140 [ 100.113965][ T6361] __kernfs_create_file+0x4b/0x2e0 [ 100.113991][ T6361] sysfs_add_file_mode_ns+0x237/0x300 [ 100.114024][ T6361] sysfs_create_file_ns+0x12b/0x1b0 [ 100.114052][ T6361] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 100.114082][ T6361] ? module_add_driver+0x31b/0x320 [ 100.114110][ T6361] ? sysfs_create_groups+0xa0/0x120 [ 100.114141][ T6361] bus_add_driver+0x47d/0x670 [ 100.114169][ T6361] driver_register+0x23a/0x320 [ 100.114200][ T6361] usb_gadget_register_driver_owner+0xf9/0x270 [ 100.114232][ T6361] raw_ioctl+0x1541/0x41c0 [ 100.114258][ T6361] ? tomoyo_path_number_perm+0x219/0x5f0 [ 100.114283][ T6361] ? do_vfs_ioctl+0x116f/0x1530 [ 100.114305][ T6361] ? __pfx_raw_ioctl+0x10/0x10 [ 100.114335][ T6361] ? hook_file_ioctl+0x1f2/0x600 [ 100.114376][ T6361] ? __fget_files+0x2a/0x420 [ 100.114405][ T6361] ? __fget_files+0x2a/0x420 [ 100.114429][ T6361] ? __fget_files+0x3a2/0x420 [ 100.114452][ T6361] ? __fget_files+0x2a/0x420 [ 100.114481][ T6361] ? bpf_lsm_file_ioctl+0x9/0x20 [ 100.114507][ T6361] ? __pfx_raw_ioctl+0x10/0x10 [ 100.114526][ T6361] __se_sys_ioctl+0xfc/0x170 [ 100.114559][ T6361] do_syscall_64+0x166/0x520 [ 100.114578][ T6361] ? trace_irq_disable+0x3b/0x140 [ 100.114605][ T6361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.114626][ T6361] ? clear_bhb_loop+0x70/0xc0 [ 100.114651][ T6361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.114671][ T6361] RIP: 0033:0x7fe73979ddeb [ 100.114691][ T6361] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 100.114709][ T6361] RSP: 002b:00007fe73a58ff00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.114731][ T6361] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fe73979ddeb [ 100.114745][ T6361] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 100.114758][ T6361] RBP: 00007fe73a590fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 100.114771][ T6361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.114783][ T6361] R13: 0000200000000040 R14: 0000000000000000 R15: 0000000000000868 [ 100.114819][ T6361] [ 100.238504][ T6351] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 100.476379][ T6361] bus_add_driver: add_bind_files(raw-gadget.1) failed [ 100.476585][ T6361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.501754][ T6361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.516820][ T25] usb 4-1: f81604_read: reg: 105 failed: -EPROTO [ 100.516849][ T25] f81604 4-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 100.516875][ T25] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 100.528862][ T44] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 100.529204][ T44] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 100.557987][ T44] usb 5-1: USB disconnect, device number 5 [ 100.567890][ T25] usb 4-1: USB disconnect, device number 6 [ 101.557330][ T6429] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 101.561048][ T6429] ======================================================= [ 101.561048][ T6429] WARNING: The mand mount option has been deprecated and [ 101.561048][ T6429] and is ignored by this kernel. Remove the mand [ 101.561048][ T6429] option from the mount to silence this warning. [ 101.561048][ T6429] ======================================================= [ 101.822826][ T6437] __nla_validate_parse: 1 callbacks suppressed [ 101.822845][ T6437] netlink: 132 bytes leftover after parsing attributes in process `syz.2.135'. [ 101.823560][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'. [ 101.823579][ T6437] nbd: must specify a device to reconfigure [ 101.833497][ T6437] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 101.866539][ T6437] md: array md0 already has disks! [ 101.912053][ T6437] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 101.912078][ T6437] md: pers->run() failed ... [ 102.257354][ T6450] fuse: Unknown parameter ' #yu$Z._BO9@&sXSQ6tؘeL^H]Z~`{2cMFʹ.^ma&gj$)J8Z +N-ߖ)KB@12ƭdoCaz2FzȒN>ᕘ(8Λ>ovfxevr/WΛi' [ 102.438507][ T5706] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 102.606252][ T5706] usb 3-1: Using ep0 maxpacket: 8 [ 102.606995][ T5706] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 102.608018][ T5706] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 189, changing to 7 [ 102.610096][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.610119][ T5706] usb 3-1: Product: syz [ 102.610133][ T5706] usb 3-1: Manufacturer: syz [ 102.610146][ T5706] usb 3-1: SerialNumber: syz [ 102.644304][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 102.710808][ T6464] netlink: 132 bytes leftover after parsing attributes in process `syz.1.145'. [ 102.711494][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'. [ 102.711508][ T6464] nbd: must specify a device to reconfigure [ 102.715505][ T6464] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 102.769254][ T6464] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 102.769276][ T6464] md: pers->run() failed ... [ 102.840709][ T9] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 102.841880][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.846528][ T9] usb 4-1: config 0 descriptor?? [ 102.887878][ T5706] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 102.944553][ T5706] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 103.025676][ T6469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.146'. [ 103.025737][ T6469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.146'. [ 103.101542][ T5706] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 103.111056][ T5706] usb 3-1: USB disconnect, device number 7 [ 103.157979][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.367390][ T6477] tipc: Failed to obtain node identity [ 103.367423][ T6477] tipc: Enabling of bearer rejected, failed to enable media [ 103.583848][ T6488] overlayfs: failed to resolve 'lower1': -2 [ 103.661241][ T5706] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 103.674178][ T6494] netlink: 132 bytes leftover after parsing attributes in process `syz.2.154'. [ 103.675648][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'. [ 103.675669][ T6494] nbd: must specify a device to reconfigure [ 103.710881][ T6494] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 103.818082][ T5706] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 103.823107][ T5706] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 103.823135][ T5706] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 103.823155][ T5706] usb 2-1: config 150 has no interface number 0 [ 103.823214][ T5706] usb 2-1: config 150 interface 204 has no altsetting 0 [ 103.826240][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.826263][ T5706] usb 2-1: Product: syz [ 103.826276][ T5706] usb 2-1: Manufacturer: syz [ 103.826289][ T5706] usb 2-1: SerialNumber: syz [ 103.891159][ T6499] netlink: Conntrack attr type has unexpected length (type=0, length=2, expected=0) [ 103.891202][ T6499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.073505][ T5706] xr_serial 2-1:150.204: skipping garbage [ 104.073563][ T5706] xr_serial 2-1:150.204: xr_serial converter detected [ 104.088660][ T9] usb 4-1: Cannot set autoneg [ 104.089180][ T9] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 104.097668][ T9] usb 4-1: USB disconnect, device number 7 [ 104.186226][ T5760] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 104.274422][ T6479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.276949][ T6479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.348873][ T5760] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 104.350690][ T5760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 104.350723][ T5760] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.350787][ T5760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.354091][ T5760] usb 5-1: config 0 descriptor?? [ 104.552674][ T6517] netlink: 132 bytes leftover after parsing attributes in process `syz.2.163'. [ 104.553536][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'. [ 104.553555][ T6517] nbd: must specify a device to reconfigure [ 104.570195][ T6517] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 104.683781][ T5706] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 104.683873][ T5706] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 104.698915][ T5706] usb 2-1: USB disconnect, device number 6 [ 104.735563][ T5706] xr_serial 2-1:150.204: device disconnected [ 104.774071][ T6501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.774577][ T6501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.862636][ T5760] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 104.862676][ T5760] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 104.862701][ T5760] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 104.862727][ T5760] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 104.862752][ T5760] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 104.862776][ T5760] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 104.862802][ T5760] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 104.862827][ T5760] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 104.862861][ T5760] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 104.862886][ T5760] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0x0 [ 104.919610][ T5760] kovaplus 0003:1E7D:2D50.0001: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 104.979809][ T6529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.320660][ T6542] nbd: must specify a device to reconfigure [ 105.327031][ T6542] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 105.416431][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 105.493956][ T6547] netlink: 'syz.1.176': attribute type 23 has an invalid length. [ 105.520252][ T6501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.521715][ T6501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.524566][ T6501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.530304][ T6501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.567565][ T25] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 105.568571][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.571747][ T6549] netlink: 'syz.2.177': attribute type 63 has an invalid length. [ 105.586641][ T25] usb 4-1: config 0 descriptor?? [ 105.598051][ T5760] kovaplus 0003:1E7D:2D50.0001: couldn't init struct kovaplus_device [ 105.598105][ T5760] kovaplus 0003:1E7D:2D50.0001: couldn't install mouse [ 105.620699][ T5760] kovaplus 0003:1E7D:2D50.0001: probe with driver kovaplus failed with error -71 [ 105.629577][ T5760] usb 5-1: USB disconnect, device number 6 [ 106.164631][ T6571] netlink: Unknown NAT attribute (type=33, max=9) [ 106.164670][ T6571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.536572][ T6581] nbd: must specify a device to reconfigure [ 106.860751][ T25] usb 4-1: Cannot set autoneg [ 106.860969][ T25] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 106.893438][ T25] usb 4-1: USB disconnect, device number 8 [ 106.985295][ T6581] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 106.985321][ T6581] md: pers->run() failed ... [ 107.379136][ T6593] FAULT_INJECTION: forcing a failure. [ 107.379136][ T6593] name failslab, interval 1, probability 0, space 0, times 0 [ 107.379171][ T6593] CPU: 1 UID: 0 PID: 6593 Comm: syz.2.187 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.379197][ T6593] Tainted: [L]=SOFTLOCKUP [ 107.379204][ T6593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.379216][ T6593] Call Trace: [ 107.379224][ T6593] [ 107.379232][ T6593] dump_stack_lvl+0xe8/0x150 [ 107.379263][ T6593] should_fail_ex+0x3eb/0x540 [ 107.379290][ T6593] should_failslab+0xa8/0x100 [ 107.379312][ T6593] ? mas_alloc_nodes+0x291/0x350 [ 107.379340][ T6593] kmem_cache_alloc_noprof+0x9c/0x600 [ 107.379369][ T6593] ? mas_alloc_nodes+0x291/0x350 [ 107.379403][ T6593] mas_alloc_nodes+0x291/0x350 [ 107.379435][ T6593] mas_preallocate+0x42a/0x840 [ 107.379463][ T6593] ? rcu_is_watching+0x16/0xb0 [ 107.379483][ T6593] ? trace_kmem_cache_alloc+0x29/0xe0 [ 107.379509][ T6593] ? __pfx_mas_preallocate+0x10/0x10 [ 107.379548][ T6593] ? __mas_set_range+0x11a/0x3a0 [ 107.379574][ T6593] __split_vma+0x2fb/0xa60 [ 107.379597][ T6593] ? mas_next_slot+0xc91/0xd70 [ 107.379627][ T6593] ? __pfx___split_vma+0x10/0x10 [ 107.379660][ T6593] ? mas_find+0x6d6/0xcb0 [ 107.379683][ T6593] vms_gather_munmap_vmas+0x4e3/0x1370 [ 107.379718][ T6593] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 107.379744][ T6593] ? mas_walk+0x37e/0x490 [ 107.379780][ T6593] mmap_region+0x928/0x2270 [ 107.379815][ T6593] ? __pfx_mmap_region+0x10/0x10 [ 107.379834][ T6593] ? process_measurement+0x7b2/0x1c10 [ 107.379866][ T6593] ? up_write+0x19d/0x4a0 [ 107.379893][ T6593] ? __lock_acquire+0x747/0x2de0 [ 107.379979][ T6593] ? arch_get_unmapped_area_topdown+0x269/0xb50 [ 107.380023][ T6593] ? mm_get_unmapped_area+0xd3/0x100 [ 107.380058][ T6593] ? shmem_get_unmapped_area+0x2cf/0x8f0 [ 107.380080][ T6593] ? cap_mmap_addr+0xaa/0xf0 [ 107.380099][ T6593] ? bpf_lsm_mmap_addr+0x9/0x50 [ 107.380122][ T6593] ? security_mmap_addr+0x71/0x240 [ 107.380156][ T6593] ? shmem_mapping+0xd/0x50 [ 107.380183][ T6593] ? memfd_check_seals_mmap+0x16f/0x220 [ 107.380209][ T6593] do_mmap+0xe0a/0x1300 [ 107.380230][ T6593] ? get_pid_task+0x20/0x1f0 [ 107.380263][ T6593] ? __pfx_do_mmap+0x10/0x10 [ 107.380296][ T6593] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 107.380314][ T6593] ? down_write_killable+0x179/0x230 [ 107.380339][ T6593] ? __pfx_down_write_killable+0x10/0x10 [ 107.380360][ T6593] ? apparmor_mmap_file+0x2e7/0x390 [ 107.380395][ T6593] vm_mmap_pgoff+0x272/0x4e0 [ 107.380415][ T6593] ? lock_acquire+0x115/0x350 [ 107.380445][ T6593] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 107.380467][ T6593] ? __fget_files+0x2a/0x420 [ 107.380495][ T6593] ? __fget_files+0x3a2/0x420 [ 107.380518][ T6593] ? __fget_files+0x2a/0x420 [ 107.380544][ T6593] ksys_mmap_pgoff+0x4dc/0x760 [ 107.380574][ T6593] do_syscall_64+0x166/0x520 [ 107.380592][ T6593] ? trace_irq_disable+0x3b/0x140 [ 107.380618][ T6593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.380655][ T6593] ? clear_bhb_loop+0x70/0xc0 [ 107.380680][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.380699][ T6593] RIP: 0033:0x7f5a45f9e159 [ 107.380718][ T6593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.380734][ T6593] RSP: 002b:00007f5a46e64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 107.380755][ T6593] RAX: ffffffffffffffda RBX: 00007f5a46225fa0 RCX: 00007f5a45f9e159 [ 107.380770][ T6593] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 107.380783][ T6593] RBP: 00007f5a46e64090 R08: 0000000000000004 R09: 0000000000000000 [ 107.380795][ T6593] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000001 [ 107.380807][ T6593] R13: 00007f5a46226038 R14: 00007f5a46225fa0 R15: 00007ffdb69975d8 [ 107.380838][ T6593] [ 107.907347][ T31] audit: type=1800 audit(1789510941.420:3): pid=6597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.189" name="bus" dev="tmpfs" ino=147 res=0 errno=0 [ 107.971658][ T6597] i2c_designware pcspkr: error -EINVAL: invalid resource (null) [ 107.971695][ T6597] i2c_designware pcspkr: probe with driver i2c_designware failed with error -22 [ 108.356778][ T6601] gadgetfs: bound to dummy_udc driver [ 108.964347][ T6617] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 108.964390][ T6617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.347754][ T6631] Option 'dnserror' to dns_resolver key: bad/missing value [ 109.428313][ T6634] __nla_validate_parse: 5 callbacks suppressed [ 109.428335][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'. [ 109.428352][ T6634] nbd: must specify a device to reconfigure [ 109.441277][ T6628] netlink: 132 bytes leftover after parsing attributes in process `syz.3.197'. [ 109.618518][ T6637] loop5: detected capacity change from 0 to 14 [ 109.646272][ T5765] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 109.666240][ T30] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 109.672280][ T6628] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 109.672301][ T6628] md: pers->run() failed ... [ 109.764437][ T6637] Dev loop5: unable to read RDB block 14 [ 109.764485][ T6637] loop5: AHDI p1 p3 p4 [ 109.764508][ T6637] loop5: partition table partially beyond EOD, truncated [ 109.790183][ T6637] loop5: p1 size 100663296 extends beyond EOD, truncated [ 109.793682][ T6637] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 109.814008][ T5765] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 109.831183][ T5765] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.847783][ T5765] usb 5-1: config 0 descriptor?? [ 109.848978][ T30] usb 3-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 109.853283][ T30] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.853312][ T30] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.853337][ T30] usb 3-1: config 0 interface 0 has no altsetting 0 [ 109.853370][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.089523][ T30] usb 3-1: config 0 descriptor?? [ 110.303253][ T6638] Dev loop5: unable to read RDB block 14 [ 110.303318][ T6638] loop5: AHDI p1 p3 p4 [ 110.303339][ T6638] loop5: partition table partially beyond EOD, truncated [ 110.304977][ T6638] loop5: p1 size 100663296 extends beyond EOD, truncated [ 110.379180][ T6638] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 110.581489][ T6648] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd43 [ 110.781450][ T5613] udevd[5613]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 110.784595][ T5633] udevd[5633]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 110.815451][ T30] usbhid 3-1:0.0: can't add hid device: -71 [ 110.815578][ T30] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 110.864812][ T30] usb 3-1: USB disconnect, device number 8 [ 110.993937][ T5633] udevd[5633]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 111.019673][ T5613] udevd[5613]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 111.095064][ T5765] usb 5-1: Cannot set autoneg [ 111.095282][ T5765] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 111.135489][ T5765] usb 5-1: USB disconnect, device number 7 [ 111.234024][ T6656] syzkaller1: entered promiscuous mode [ 111.234049][ T6656] syzkaller1: entered allmulticast mode [ 111.828465][ T30] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 111.832763][ T6669] netlink: 132 bytes leftover after parsing attributes in process `syz.3.209'. [ 111.861044][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 111.861073][ T6669] nbd: must specify a device to reconfigure [ 111.978303][ T30] usb 3-1: Using ep0 maxpacket: 8 [ 111.980488][ T30] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 111.981705][ T30] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 111.981730][ T30] usb 3-1: config 179 has no interface number 0 [ 111.981772][ T30] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 111.981798][ T30] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 111.981823][ T30] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 111.981847][ T30] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 111.981872][ T30] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 111.981911][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.102060][ T6665] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 112.381208][ T6665] misc userio: Invalid payload size [ 112.433405][ T6665] capability: warning: `syz.2.207' uses deprecated v2 capabilities in a way that may be insecure [ 112.682557][ T44] usb 3-1: USB disconnect, device number 9 [ 112.682640][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 112.682687][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 113.112005][ T6686] netlink: 60 bytes leftover after parsing attributes in process `syz.3.211'. [ 113.721702][ T6691] netlink: 'syz.2.213': attribute type 12 has an invalid length. [ 116.866851][ T44] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 117.061153][ T44] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 117.079027][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.079054][ T44] usb 2-1: Product: syz [ 117.079067][ T44] usb 2-1: Manufacturer: syz [ 117.079081][ T44] usb 2-1: SerialNumber: syz [ 117.114987][ T44] usb 2-1: config 0 descriptor?? [ 117.268866][ T6707] netlink: 132 bytes leftover after parsing attributes in process `syz.3.219'. [ 117.295347][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.219'. [ 117.295372][ T6707] nbd: must specify a device to reconfigure [ 117.852082][ T6705] FAULT_INJECTION: forcing a failure. [ 117.852082][ T6705] name failslab, interval 1, probability 0, space 0, times 0 [ 117.852117][ T6705] CPU: 1 UID: 0 PID: 6705 Comm: syz.1.218 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.852148][ T6705] Tainted: [L]=SOFTLOCKUP [ 117.852155][ T6705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.852187][ T6705] Call Trace: [ 117.852195][ T6705] [ 117.852204][ T6705] dump_stack_lvl+0xe8/0x150 [ 117.852236][ T6705] should_fail_ex+0x3eb/0x540 [ 117.852263][ T6705] should_failslab+0xa8/0x100 [ 117.852286][ T6705] ? __kernfs_new_node+0xe6/0x980 [ 117.852317][ T6705] kmem_cache_alloc_noprof+0x9c/0x600 [ 117.852348][ T6705] ? __kernfs_new_node+0xe6/0x980 [ 117.852383][ T6705] __kernfs_new_node+0xe6/0x980 [ 117.852421][ T6705] ? __pfx___kernfs_new_node+0x10/0x10 [ 117.852451][ T6705] ? kernfs_root+0x1c/0x230 [ 117.852484][ T6705] ? kernfs_root+0x1c/0x230 [ 117.852519][ T6705] ? kernfs_root+0x1c/0x230 [ 117.852545][ T6705] ? kernfs_root+0x1c/0x230 [ 117.852577][ T6705] kernfs_new_node+0xea/0x140 [ 117.852611][ T6705] __kernfs_create_file+0x4b/0x2e0 [ 117.852638][ T6705] sysfs_add_file_mode_ns+0x237/0x300 [ 117.852671][ T6705] sysfs_create_file_ns+0x12b/0x1b0 [ 117.852698][ T6705] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 117.852727][ T6705] ? module_add_driver+0x31b/0x320 [ 117.852755][ T6705] ? sysfs_create_groups+0xa0/0x120 [ 117.852787][ T6705] bus_add_driver+0x459/0x670 [ 117.852814][ T6705] driver_register+0x23a/0x320 [ 117.852845][ T6705] usb_gadget_register_driver_owner+0xf9/0x270 [ 117.852876][ T6705] raw_ioctl+0x1541/0x41c0 [ 117.852902][ T6705] ? tomoyo_path_number_perm+0x219/0x5f0 [ 117.852926][ T6705] ? do_vfs_ioctl+0x116f/0x1530 [ 117.852947][ T6705] ? __pfx_raw_ioctl+0x10/0x10 [ 117.852978][ T6705] ? hook_file_ioctl+0x1f2/0x600 [ 117.853020][ T6705] ? __fget_files+0x2a/0x420 [ 117.853049][ T6705] ? __fget_files+0x2a/0x420 [ 117.853072][ T6705] ? __fget_files+0x3a2/0x420 [ 117.853095][ T6705] ? __fget_files+0x2a/0x420 [ 117.853123][ T6705] ? bpf_lsm_file_ioctl+0x9/0x20 [ 117.853148][ T6705] ? __pfx_raw_ioctl+0x10/0x10 [ 117.853167][ T6705] __se_sys_ioctl+0xfc/0x170 [ 117.853199][ T6705] do_syscall_64+0x166/0x520 [ 117.853218][ T6705] ? trace_irq_disable+0x3b/0x140 [ 117.853245][ T6705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.853265][ T6705] ? clear_bhb_loop+0x70/0xc0 [ 117.853289][ T6705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.853309][ T6705] RIP: 0033:0x7f691399ddeb [ 117.853330][ T6705] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 117.853346][ T6705] RSP: 002b:00007f69148c0f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.853368][ T6705] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f691399ddeb [ 117.853383][ T6705] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 117.853395][ T6705] RBP: 00007f69148c1fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 117.853408][ T6705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.853420][ T6705] R13: 0000200000000040 R14: 0000000000000000 R15: 0000000000000868 [ 117.853449][ T6705] [ 118.193663][ T6705] bus_add_driver: add_bind_files(raw-gadget.1) failed [ 118.227452][ T6705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.246735][ T6705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.342140][ T44] usb 2-1: f81604_read: reg: 105 failed: -EPROTO [ 118.342168][ T44] f81604 2-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 118.342192][ T44] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 118.387804][ T44] usb 2-1: USB disconnect, device number 7 [ 119.295099][ T6717] syz.3.221 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 119.345935][ T6717] FAULT_INJECTION: forcing a failure. [ 119.345935][ T6717] name failslab, interval 1, probability 0, space 0, times 0 [ 119.345975][ T6717] CPU: 1 UID: 0 PID: 6717 Comm: syz.3.221 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.346003][ T6717] Tainted: [L]=SOFTLOCKUP [ 119.346011][ T6717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.346023][ T6717] Call Trace: [ 119.346031][ T6717] [ 119.346040][ T6717] dump_stack_lvl+0xe8/0x150 [ 119.346073][ T6717] should_fail_ex+0x3eb/0x540 [ 119.346100][ T6717] should_failslab+0xa8/0x100 [ 119.346123][ T6717] __kmalloc_cache_noprof+0x9e/0x600 [ 119.346154][ T6717] ? ceph_get_tree+0x1b7/0x1a40 [ 119.346183][ T6717] ? ceph_get_tree+0x1b7/0x1a40 [ 119.346217][ T6717] ceph_get_tree+0x1b7/0x1a40 [ 119.346247][ T6717] ? apparmor_capable+0x126/0x170 [ 119.346290][ T6717] vfs_get_tree+0x92/0x2a0 [ 119.346323][ T6717] vfs_cmd_create+0xa2/0x200 [ 119.346348][ T6717] __se_sys_fsconfig+0x6b9/0x810 [ 119.346376][ T6717] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 119.346400][ T6717] ? rcu_is_watching+0x16/0xb0 [ 119.346428][ T6717] ? __x64_sys_fsconfig+0x20/0xc0 [ 119.346452][ T6717] do_syscall_64+0x166/0x520 [ 119.346471][ T6717] ? trace_irq_disable+0x3b/0x140 [ 119.346499][ T6717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.346520][ T6717] ? clear_bhb_loop+0x70/0xc0 [ 119.346546][ T6717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.346566][ T6717] RIP: 0033:0x7fe73979e159 [ 119.346586][ T6717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.346601][ T6717] RSP: 002b:00007fe7379f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 119.346623][ T6717] RAX: ffffffffffffffda RBX: 00007fe739a26090 RCX: 00007fe73979e159 [ 119.346638][ T6717] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000008 [ 119.346650][ T6717] RBP: 00007fe73983503b R08: 0000000000000000 R09: 0000000000000000 [ 119.346662][ T6717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.346674][ T6717] R13: 00007fe739a26128 R14: 00007fe739a26090 R15: 00007ffe8bc6e428 [ 119.346705][ T6717] [ 120.358625][ T6724] netlink: 'syz.3.224': attribute type 12 has an invalid length. [ 120.556404][ T6727] netlink: 20 bytes leftover after parsing attributes in process `syz.3.224'. [ 120.556431][ T6727] openvswitch: netlink: Flow actions attr not present in new flow. [ 121.910684][ T6737] netlink: 132 bytes leftover after parsing attributes in process `syz.1.228'. [ 121.929654][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'. [ 121.929680][ T6737] nbd: must specify a device to reconfigure [ 123.128448][ T5767] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 123.301961][ T5767] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 123.328390][ T5767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.328419][ T5767] usb 2-1: Product: syz [ 123.328433][ T5767] usb 2-1: Manufacturer: syz [ 123.328447][ T5767] usb 2-1: SerialNumber: syz [ 123.379297][ T5767] usb 2-1: config 0 descriptor?? [ 124.091294][ T6744] FAULT_INJECTION: forcing a failure. [ 124.091294][ T6744] name failslab, interval 1, probability 0, space 0, times 0 [ 124.091351][ T6744] CPU: 1 UID: 0 PID: 6744 Comm: syz.1.231 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.091392][ T6744] Tainted: [L]=SOFTLOCKUP [ 124.091400][ T6744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.091412][ T6744] Call Trace: [ 124.091420][ T6744] [ 124.091430][ T6744] dump_stack_lvl+0xe8/0x150 [ 124.091466][ T6744] should_fail_ex+0x3eb/0x540 [ 124.091494][ T6744] should_failslab+0xa8/0x100 [ 124.091516][ T6744] ? __kernfs_new_node+0xe6/0x980 [ 124.091547][ T6744] kmem_cache_alloc_noprof+0x9c/0x600 [ 124.091578][ T6744] ? __kernfs_new_node+0xe6/0x980 [ 124.091613][ T6744] __kernfs_new_node+0xe6/0x980 [ 124.091650][ T6744] ? __pfx___kernfs_new_node+0x10/0x10 [ 124.091681][ T6744] ? kernfs_root+0x1c/0x230 [ 124.091715][ T6744] ? kernfs_root+0x1c/0x230 [ 124.091742][ T6744] ? kernfs_root+0x1c/0x230 [ 124.091767][ T6744] ? kernfs_root+0x1c/0x230 [ 124.091798][ T6744] kernfs_new_node+0xea/0x140 [ 124.091831][ T6744] __kernfs_create_file+0x4b/0x2e0 [ 124.091857][ T6744] sysfs_add_file_mode_ns+0x237/0x300 [ 124.091888][ T6744] sysfs_create_file_ns+0x12b/0x1b0 [ 124.091915][ T6744] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 124.091944][ T6744] ? module_add_driver+0x31b/0x320 [ 124.091971][ T6744] ? sysfs_create_groups+0xa0/0x120 [ 124.092001][ T6744] bus_add_driver+0x459/0x670 [ 124.092029][ T6744] driver_register+0x23a/0x320 [ 124.092060][ T6744] usb_gadget_register_driver_owner+0xf9/0x270 [ 124.092091][ T6744] raw_ioctl+0x1541/0x41c0 [ 124.092117][ T6744] ? tomoyo_path_number_perm+0x219/0x5f0 [ 124.092143][ T6744] ? do_vfs_ioctl+0x116f/0x1530 [ 124.092164][ T6744] ? __pfx_raw_ioctl+0x10/0x10 [ 124.092195][ T6744] ? hook_file_ioctl+0x1f2/0x600 [ 124.092236][ T6744] ? __fget_files+0x2a/0x420 [ 124.092264][ T6744] ? __fget_files+0x2a/0x420 [ 124.092288][ T6744] ? __fget_files+0x3a2/0x420 [ 124.092311][ T6744] ? __fget_files+0x2a/0x420 [ 124.092338][ T6744] ? bpf_lsm_file_ioctl+0x9/0x20 [ 124.092363][ T6744] ? __pfx_raw_ioctl+0x10/0x10 [ 124.092390][ T6744] __se_sys_ioctl+0xfc/0x170 [ 124.092423][ T6744] do_syscall_64+0x166/0x520 [ 124.092441][ T6744] ? trace_irq_disable+0x3b/0x140 [ 124.092469][ T6744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.092489][ T6744] ? clear_bhb_loop+0x70/0xc0 [ 124.092514][ T6744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.092534][ T6744] RIP: 0033:0x7f691399ddeb [ 124.092554][ T6744] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 124.092571][ T6744] RSP: 002b:00007f69148c0f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.092594][ T6744] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f691399ddeb [ 124.092608][ T6744] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 124.092621][ T6744] RBP: 00007f69148c1fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 124.092635][ T6744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.092647][ T6744] R13: 0000200000000040 R14: 0000000000000000 R15: 0000000000000868 [ 124.092677][ T6744] [ 124.497892][ T6744] bus_add_driver: add_bind_files(raw-gadget.1) failed [ 124.498114][ T6744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.498566][ T6744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.571091][ T5767] usb 2-1: f81604_read: reg: 105 failed: -EPROTO [ 124.571120][ T5767] f81604 2-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 124.571145][ T5767] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 124.604634][ T5767] usb 2-1: USB disconnect, device number 8 [ 125.786270][ T44] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 125.846491][ T25] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 125.987828][ T25] usb 4-1: device descriptor read/64, error -71 [ 126.008245][ T44] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 126.009356][ T44] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.009385][ T44] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 126.009407][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.011340][ T44] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 126.011363][ T44] usb 2-1: Product: syz [ 126.011377][ T44] usb 2-1: Manufacturer: syz [ 126.011390][ T44] usb 2-1: SerialNumber: syz [ 126.015936][ T44] usb 2-1: config 0 descriptor?? [ 126.110511][ T44] usb 2-1: selecting invalid altsetting 0 [ 126.227400][ T25] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 126.356255][ T25] usb 4-1: device descriptor read/64, error -71 [ 126.468224][ T25] usb usb4-port1: attempt power cycle [ 126.470650][ T44] usb 2-1: USB disconnect, device number 9 [ 126.694333][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.857369][ T25] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 126.877023][ T25] usb 4-1: device descriptor read/8, error -71 [ 127.116346][ T25] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 127.137032][ T25] usb 4-1: device descriptor read/8, error -71 [ 127.254454][ T25] usb usb4-port1: unable to enumerate USB device [ 127.688748][ T6756] netlink: 'syz.1.237': attribute type 4 has an invalid length. [ 127.688774][ T6756] netlink: 152 bytes leftover after parsing attributes in process `syz.1.237'. [ 128.301246][ T6759] netlink: 132 bytes leftover after parsing attributes in process `syz.1.238'. [ 128.336173][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 128.336199][ T6758] nbd: must specify a device to reconfigure [ 129.550132][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 129.564223][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 129.729996][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 129.733973][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 129.736437][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.276974][ T6771] process 'syz.1.242' launched '/dev/fd/4' with NULL argv: empty string added [ 130.701953][ T4932] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 130.732643][ T4932] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 130.772218][ T4932] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 130.788427][ T4932] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 130.789039][ T4932] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 131.786281][ T5623] Bluetooth: hci4: command tx timeout [ 132.211304][ T6795] netlink: 132 bytes leftover after parsing attributes in process `syz.3.249'. [ 132.381115][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.249'. [ 132.381141][ T6795] nbd: must specify a device to reconfigure [ 132.910338][ T5623] Bluetooth: hci5: command tx timeout [ 133.008721][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.026261][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.866383][ T5623] Bluetooth: hci4: command tx timeout [ 134.146385][ T6820] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 134.876213][ T25] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 134.987372][ T5623] Bluetooth: hci5: command tx timeout [ 135.033390][ T25] usb 4-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec [ 135.034501][ T25] usb 4-1: config 0 has an invalid interface number: 148 but max is 0 [ 135.034526][ T25] usb 4-1: config 0 has no interface number 0 [ 135.034565][ T25] usb 4-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 135.034590][ T25] usb 4-1: config 0 interface 148 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 135.148600][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.148628][ T25] usb 4-1: Product: syz [ 135.148642][ T25] usb 4-1: Manufacturer: syz [ 135.148656][ T25] usb 4-1: SerialNumber: syz [ 135.182972][ T25] usb 4-1: config 0 descriptor?? [ 135.212948][ T25] kobil_sct 4-1:0.148: KOBIL USB smart card terminal converter detected [ 135.304958][ T25] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 135.495795][ T25] usb 4-1: USB disconnect, device number 13 [ 135.651229][ T25] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 135.719062][ T25] kobil_sct 4-1:0.148: device disconnected [ 135.948192][ T5623] Bluetooth: hci4: command tx timeout [ 137.066300][ T5623] Bluetooth: hci5: command tx timeout [ 137.162662][ T6845] netlink: 132 bytes leftover after parsing attributes in process `syz.3.256'. [ 137.188930][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 137.188958][ T6845] nbd: must specify a device to reconfigure [ 138.031816][ T5623] Bluetooth: hci4: command tx timeout [ 138.449421][ T6765] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.449532][ T6765] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.449702][ T6765] bridge_slave_0: entered allmulticast mode [ 138.491452][ T6765] bridge_slave_0: entered promiscuous mode [ 138.792878][ T6765] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.793014][ T6765] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.793175][ T6765] bridge_slave_1: entered allmulticast mode [ 138.977404][ T6765] bridge_slave_1: entered promiscuous mode [ 139.146394][ T5623] Bluetooth: hci5: command tx timeout [ 139.561361][ T6765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.653588][ T6775] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.653758][ T6775] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.653905][ T6775] bridge_slave_0: entered allmulticast mode [ 139.683616][ T6775] bridge_slave_0: entered promiscuous mode [ 139.705539][ T6775] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.705645][ T6775] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.705793][ T6775] bridge_slave_1: entered allmulticast mode [ 139.754184][ T6775] bridge_slave_1: entered promiscuous mode [ 139.936237][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 139.986487][ T6765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.066260][ T25] usb 2-1: device descriptor read/64, error -71 [ 140.311126][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 140.382441][ T6765] team0: Port device team_slave_0 added [ 140.415389][ T6765] team0: Port device team_slave_1 added [ 140.467203][ T25] usb 2-1: device descriptor read/64, error -71 [ 140.577390][ T25] usb usb2-port1: attempt power cycle [ 140.734116][ T6775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.767530][ T6765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.767548][ T6765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.767573][ T6765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.916905][ T25] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 140.944615][ T25] usb 2-1: device descriptor read/8, error -71 [ 141.029081][ T6775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.029870][ T6765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.029885][ T6765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.029911][ T6765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.238702][ T25] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 141.272636][ T25] usb 2-1: device descriptor read/8, error -71 [ 141.385676][ T25] usb usb2-port1: unable to enumerate USB device [ 142.031547][ T6765] hsr_slave_0: entered promiscuous mode [ 142.042912][ T6765] hsr_slave_1: entered promiscuous mode [ 142.043638][ T6765] debugfs: 'hsr0' already exists in 'hsr' [ 142.043657][ T6765] Cannot create hsr debugfs directory [ 142.083951][ T6775] team0: Port device team_slave_0 added [ 142.102334][ T6775] team0: Port device team_slave_1 added [ 142.368586][ T6775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.368603][ T6775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.368629][ T6775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.606666][ T6775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.606685][ T6775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.606718][ T6775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.941259][ T6898] netlink: 132 bytes leftover after parsing attributes in process `syz.3.264'. [ 142.964368][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.264'. [ 142.964394][ T6898] nbd: must specify a device to reconfigure [ 143.365157][ T6898] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 143.365182][ T6898] md: pers->run() failed ... [ 148.933628][ C1] sched: DL replenish lagged too much [ 194.952089][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.958243][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 228.965127][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 228.965170][ T5615] Bluetooth: hci0: command 0x0406 tx timeout [ 231.515768][ T5615] Bluetooth: hci1: command tx timeout [ 255.991596][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.998584][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 281.840189][ T5623] Bluetooth: hci4: command tx timeout [ 293.548525][ T53] Bluetooth: hci5: command tx timeout [ 295.112724][ T32] INFO: task syz-executor:6775 blocked for more than 145 seconds. [ 295.112754][ T32] Tainted: G L syzkaller #0 [ 295.112766][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 295.112775][ T32] task:syz-executor state:D stack:22384 pid:6775 tgid:6775 ppid:6768 task_flags:0x400140 flags:0x00080000 [ 295.112855][ T32] Call Trace: [ 295.112863][ T32] [ 295.112877][ T32] __schedule+0x17dd/0x5940 [ 295.112938][ T32] ? __pfx___schedule+0x10/0x10 [ 295.112974][ T32] ? schedule+0x90/0x2b0 [ 295.113005][ T32] schedule+0x164/0x2b0 [ 295.113034][ T32] schedule_preempt_disabled+0x13/0x30 [ 295.113062][ T32] __mutex_lock+0x7c4/0x15a0 [ 295.113085][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 295.113109][ T32] ? rtnl_newlink+0xc10/0x1c30 [ 295.113132][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 295.113160][ T32] ? ns_capable+0x84/0xe0 [ 295.113184][ T32] ? rtnl_nets_add+0x16c/0x300 [ 295.113203][ T32] ? refcount_inc+0x46/0x70 [ 295.113233][ T32] rtnl_newlink+0xc10/0x1c30 [ 295.113268][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 295.113288][ T32] ? __lock_acquire+0x747/0x2de0 [ 295.113324][ T32] ? __lock_acquire+0x747/0x2de0 [ 295.113365][ T32] ? lock_acquire+0x115/0x350 [ 295.113399][ T32] ? lock_acquire+0x115/0x350 [ 295.113431][ T32] ? is_bpf_text_address+0x26/0x2b0 [ 295.113459][ T32] ? __lock_acquire+0x747/0x2de0 [ 295.113489][ T32] ? __kernel_text_address+0xd/0x30 [ 295.113516][ T32] ? unwind_get_return_address+0x4d/0x90 [ 295.113536][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 295.113561][ T32] ? arch_stack_walk+0xfb/0x150 [ 295.113586][ T32] ? lock_acquire+0x115/0x350 [ 295.113619][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 295.113636][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 295.113653][ T32] ? netlink_sendmsg+0x577/0xae0 [ 295.113679][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 295.113696][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 295.113715][ T32] ? __lock_acquire+0x747/0x2de0 [ 295.113748][ T32] netlink_rcv_skb+0x226/0x4a0 [ 295.113771][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 295.113791][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 295.113821][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 295.113842][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 295.113867][ T32] netlink_unicast+0x7bd/0x940 [ 295.113894][ T32] netlink_sendmsg+0x7c3/0xae0 [ 295.113922][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.113954][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 295.113978][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.114000][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 295.114031][ T32] __sys_sendto+0x408/0x5a0 [ 295.114056][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 295.114073][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 295.114113][ T32] ? fput_close_sync+0x11f/0x240 [ 295.114137][ T32] ? kmem_cache_free+0x471/0x650 [ 295.114174][ T32] ? __pfx_fput_close_sync+0x10/0x10 [ 295.114205][ T32] __x64_sys_sendto+0xde/0x100 [ 295.114229][ T32] do_syscall_64+0x166/0x520 [ 295.114248][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.114268][ T32] ? clear_bhb_loop+0x70/0xc0 [ 295.114293][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.114313][ T32] RIP: 0033:0x7f696c75e98e [ 295.114332][ T32] RSP: 002b:00007ffe30662348 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 295.114353][ T32] RAX: ffffffffffffffda RBX: 000055557fdfb500 RCX: 00007f696c75e98e [ 295.114368][ T32] RDX: 0000000000000058 RSI: 00007f696d554670 RDI: 0000000000000003 [ 295.114381][ T32] RBP: 0000000000000001 R08: 00007ffe306623c4 R09: 000000000000000c [ 295.114393][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 295.114405][ T32] R13: 0000000000000000 R14: 00007f696d554670 R15: 0000000000000000 [ 295.114435][ T32] [ 295.114465][ T32] [ 295.114465][ T32] Showing all locks held in the system: [ 295.114473][ T32] locks held by kthreadd/2: 2, last CPU#1: [ 295.114487][ T32] #0: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 295.114545][ T32] #1: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 295.114595][ T32] locks held by kworker/R-kvfre/6: 1, on CPU#1: [ 295.114610][ T32] #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0 [ 295.114663][ T32] locks held by kworker/0:0/9: 3, last CPU#0: [ 295.114677][ T32] #0: ffff88807af40940 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 295.114733][ T32] #1: ffffc900000e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 295.114798][ T32] #2: ffff88802d23d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 295.114862][ T32] locks held by kworker/0:1/10: 4, last CPU#0: [ 295.114876][ T32] #0: ffff888034a85140 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 295.114931][ T32] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 295.114995][ T32] #2: ffff88807cc76640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 295.115049][ T32] #3: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 295.115104][ T32] locks held by kworker/u8:0/12: 3, last CPU#1: [ 295.115118][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 295.115168][ T32] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 295.115218][ T32] #2: ffff8880679b07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 295.115273][ T32] locks held by kworker/u8:1/13: 2, on CPU#1: [ 295.115286][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 295.115336][ T32] #1: ffffc90000127c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 295.115387][ T32] locks held by kworker/R-mm_pe/14: 1, on CPU#0: [ 295.115401][ T32] #0: ffffffff8edf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 295.115462][ T32] locks held by kworker/1:0/25: 3, last CPU#1: [ 295.115476][ T32] #0: ffff88807af40940 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 295.115530][ T32] #1: ffffc900001f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 295.115594][ T32] #2: ffff88807a63f028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 295.115650][ T32] locks held by kworker/1:1/30: 3, last CPU#1: [ 295.115663][ T32] #0: ffff88813ff43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 295.115713][ T32] #1: ffffc90000a57c40 (cleanup_vm_area){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 295.115762][ T32] #2: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550