last executing test programs: 13m30.364770426s ago: executing program 2 (id=1429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xb, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x5c061}, 0x4008000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000004c0)="800000800000210ee7decd7a0000", 0xe, 0x20040054, &(0x7f0000000080)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @link_local}, 0x14) 13m29.99622834s ago: executing program 2 (id=1434): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) r1 = dup(r0) write$cgroup_int(r1, &(0x7f0000000040)=0x1000, 0x12) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000014}) r6 = socket$alg(0x26, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0x4}) close_range(r3, r5, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r7 = fsopen(&(0x7f0000000440)='gfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='source', &(0x7f0000000080)='\\/', 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x1, 0x7800, 0x1, 0x80000001, {{0xe, 0x4, 0x2, 0x2d, 0x38, 0x1ff, 0x0, 0x7, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x2c}, {[@timestamp={0x44, 0x8, 0x69, 0x0, 0x5, [0x3]}, @noop, @end, @ssrr={0x89, 0x17, 0xe3, [@empty, @broadcast, @private=0xa010101, @multicast2, @rand_addr=0x64010102]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x11, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="d08600011100"/16], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xa4, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x8, 0x1ff, 0x7fffffff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[r1], &(0x7f0000001440)=[{0x2, 0x5, 0x4, 0x4}], 0x10, 0x5}, 0x94) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) openat$binder_debug(0xffffff9c, &(0x7f0000001540)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x100) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x3d, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x14440, 0x0) r10 = syz_io_uring_setup(0x240, &(0x7f0000000680)={0x0, 0x425e5, 0x10100, 0x3, 0x202e2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r11, r12, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(r10, 0x2648, 0x1d5e, 0x2, 0x0, 0x0) exit(0xffff) ioctl$SNDCTL_DSP_CHANNELS(r9, 0xc0045006, &(0x7f0000000080)=0x7f) sendto$inet(r2, &(0x7f0000001600)="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", 0x188, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000440)="6d482c037a0fe61b77e0636d4ee3b496ae543f99eb82f7db695f3dfa7a01e34469d53ce7eccacfa6e94474eeabaf1f966fd3b37c5d857776807e7e34a9bd26b75ea7e8a05cdbde40adad61ea2e97b06562d10c679ee94e7dd9ed19e845fb982a88f85ccac6bfe09051b7f937c6cfcec31b03168bd196e863f4c5819ac96cb2fd0c050b2dbf08fe8656396394df3b79fb5142c0ea259d10722df94d617933d51b8abfa70dc1abf9d37c36c06a7ceb197d25bd86e0155e8dcc97a6540766536ba66e50aa73e5d061ae3fc18c93cab2118c741e22dd8429b9049873868257840bfb9685466022a97cce96ae1484320a0e404020bb24960a66deefca48dc0bdbd907bd3c3a5722242704d60a244e7d335efe641fb9b74c02d7dcd8878bb89a393483e2aa3f5c9ce9c1a66e953be8a973794eee78fcbee4f8595f2b17f182fe90c706ccb9ce8279e4249d6042be3764b391d1ccf45f3c6467b1d8e6e61525f5b060850d02c55b933c579d95697ad7daeff74b4896129b97543e43c3ff68e3d24df552c3ec8973e5270e4142e916ec9054728a5a4d9ccb9dcf21e7e86410b5982a919eda9a99d4b708bbeaaaaf1ff45f451362b1c320dd81603cef0d2e11add21662763b3bc9ffa8e5e1e800009d5d9b0a8e8e62caf3d910fad3cd9daaf1422367796b052873bffb94f7e292a81d2f8bbfe01601dcd3f9c0209bf376b800b0485454a001b57c8cb54ce26a3c51148c7023c15356529381e51e5884b88fdd2125fa56f54e0d41d4b996f2df5c0225d31f393e6718ed6168a0460d0fa0e7012f9dc090651db7c34e0be660e37a4011b72fd8cc436d5c1eab22dbe86fc40fe3bd0e44a8fe19f8f8da4c4b8329b94a536309aa460fd94d9bb1de8a17c1fdd263f4d8bd336021847dfe6567fb278837ed1393f2e465257668e6f95c9d8fbfc01dc0a9b60bd03142eef8a67c0fce954a4e3f4c4890f36fe60238be058694d7c39864f0f7709c5a0d8de69c61f18da60666d87da1da7e7951c69b969049d5ae819a66ca4d079a946ef8b2e10f812a06003fd07d9d62cbadc613985c0c0725dce00a976261db6ad5a9e994a4baf4172937237d9b62d2795e889692ea43187a1190587be0dcca2fa301c5795146cd98464423a8d43787ca1470ebc5fd739b8b53e3857c582b35d4ed5f4e83121c14a4beb56b333aab01d185d8db595872c54faec31c1c9209df8980a8b440d049e0be7ae95d61f06c430c1dd3b044dd24275bb14402ee9d3e2e28b918aa379aa030865638bb0d67510c22d91e4362f7bec7273e7abaeca35af8b01ef4f9e2cb1dfafed17df782743b88d7c5917f53605855f6b5aa7044efadcd9df63442957416a31cfd519b7253e843b8326da9253bdaa5b48d0eea382572f39d6a03c5abc2a5d18bbec46e2aba3dd762e83039958103f76a8f17b6d7fa0f3b3c66479bcaa117f6b1d4fbd569dc76c38c2df5866af5e1a901453be4f593fed80db428873e77cb2b197aaeeef3866f6b2dfa96dad67325136a423786460f4ea38df38730e65af5552e337012103b384137b1c1590ea4ad108b5cbf65b3888e4c0386026491a63bdc01a0c3508d3f535c36dc132a995f28cd984d580b835c4661921a5ea769dbcf03845ed6182228dca646161a814a7da8afd16d586858cdf7b629d99c6c4f4958a242675031e9c46f9d660d3d9f1bbeb38dbf0db53b06c71c39a2d0bd6ccb9ee3820e40090e79ee35bca6eb92e5211f8cd7a0ee6145732f8748653db06c0e8c36012dec7a217d2b09d71914d3e9bf086034914cdc8418e1c60e09a4d729e01291d28cb5dd56021f8a03ab23687f59d028accd756c60c5604d121e9abbdc22cce66e5008ac1361976e7c525f7bc31ecec0a1da9a1414b8408e09ff9bf249bce5f5501a6b820704e4721a505406208df3611a310e3d07757117a316e09a55fec998c43ac2803c00155a08aa8b1d944ed4bfb5ee91f93e316a0a83ff38a18c7ce02dc013dd7001e0bbe31175030524a5dc765a5667e352714d5db093a5649e9367924d6e86d98ca303cfc83c02b5f6c5c10ea85105846cc4f2a4f91d0fc27e6f659e7108a86b162b720a295775800149efc63f335343f7abb81d5e75bf96ca80c14f122dd9aa6eacc53ca92183801264cd535d40a8a666c5d724baf60d0eb5b5dd025f050e445ff8536a9dd39b242a8a3967878736252245afed28f9df65fdf46f7344a91f10deb4ada406458b43e017fc719afc5ef2e439d48a0ce755252786c3a04c609f093fcff518f0f22fd588cbc0dc60df312159021320ae8098efd0c1a5e913ee2de4a6e4eb34a3d10c66054bdf73990a76a775d0ffee68bdd3135b0c1a00d82f9c7fecc4a0d5377d96137800a2f397034b63b7112e5e7004fd33ec7f9a31a48dc77af38daa8f956254ff734241781eaa2eeb8c143250d24f3e66469d009e0f49145611ac184fdad5313a5cdd983337be60b4ef7271d49c43b61de9dc18f34a9d096c661f875e63749040e148297120808642023ca47c6583bef0cf5bbc7095c590d9902b35758ac733ad2a73686ac16dba494a26158c0c6e9007efc96ebb75c890459f117b6c94148bc4861d804613330b65840e3bf60a43f5f7526d4efe9e877780700f42aca421ba3fe42fe7f731993c24212095032295c959b59a5c926815bd8824798d16cbd1e81848a1ea51b7885b8da90731fe523e8ce989d1314ec3a2b68a090d3e7b40c73897312acdbbda7344b1382c52aad4d26fdfd05df5f20e028552679b8348afc40a1dc1dfe0b463b3cacfef65a54da575fcaafd3cda06b3e02a6aeca26f3afa5e6cd3b51a5cb68ca14253877bb69b4e1377bdb63c0a5947142f6194ab56834a9f48dbc2c553734ab2815cddb37d38f109d82fd449da76dfa75912e5060b6db86739b5b5906a64c19b49fd9e83cf2f939a89b11d8f12da726ad8d175bd303ee481ef9250df8fadeec90c88f0572ed9e153aa5645476d9374ecdd7912494ae5188dc4085b1fc1ac3f462dde454834fca3b22f70f4c13246fd40dd9b1d748a32d7beb9f3e3ef01e41a9f3adfced367b60fab37e60cb7142efbd799394157ab3744de816d008542cc4a21949bc3de974b6295ec5f1df4ca191b7a7c83802e45429c04a7f8aa903a55d24023df557bbb32c948b3dbdf66c9f3a3909771b3db9a481eb2dc02f5dcb074112988a03aeb90d7f8cd71c8dfd01b34e628212e172850ed19e526efbd5830a25d9278e673c309c78747d3355a5cf7f800112c74ea8742129b46094c7115c1f8200d93e5271756ddbdf7ce7f52b62e7aadd6f15aaab6d2aa04c4d4e68fb6c24999d31fc844e691cc829a9ed86f69d2da4bf83572a778b5924e72948c9e6eb88e13fa2edfb5b7c5b069d77d9364178f5671d020be097bbdbfc4d65f59e35d2cf4b3b88a28c2320097a167c5a9bc51aa77adabe4d9f1493ffbca9b70bd038dfe2762063c1e487d4eb57b39d5d4da4f84e153c1a205ab058a3c6c1dd5d18f05ecfbb2589e9da4153267d8655e5d920723a36b8fc84758e2918704b160fc7cc9b8807cfe1e4178e5d9ed87aa9b65d4272a7316c7b391ad7967d19e3164a3f2ac8bf5a82ada595a6ad225c089c5f64db34b3ea4e3e4e082f60cb98b916494143b115aaccbe01bda8fd4e88897f106884c1b75d94a787f889652503b2aca849aae6cbb1bef2979d6605221bd7c828b229a0f095ec835b3749b6adb6ccb75619ec2dc1d8ccc54122525b1a79c27a168d578e498356c0d14e6c1257e18a28c3324ce7c51f2bbcdbe41d8aa51594e887de8f5389f5e8c8affe5f271e51990f916884cff9940b933d5301f23214f75f1b505712172143f804f68936267433f4231f39bfcc327819fe74ddf022eee9c8dc993c14be93b90f4bb112e4809259159414c93eb3d42a56f971bbf98a1323b986db390f8b45816386099231d1dcb09179ceb16f37495ab63766f45c5ca668b918297bcc6a76f24ad5a87a0ad6e2a6881708787091d7ec8c2395b3d29d5013f6d44fbdd2eb4eb433c94f675d8f39b659ae7e238c12d9e62eab36b186e4a1eadf2aa54b5e353e43c1d41a1274e6c06e36c40e3523c6c9cd6afa8777e62f1234000d0bd96badd2eb9413e9a68384ceea573137e977104a6c852352b3c9fe275e622dee953482927e31577751382af162d341833ab3fd1727e55cee677bff37fb869687f5b264a91762bdb4ee5b17194e3019023beff346d431f35062d43cc3ec1d3a64883f26d94483fa8630b9ec6054ef57027bfb5ffa2c5b8b6ed12c6e970eb3a1693f70b99e8277e60e15bbb633da2f99cfbb1b85aba953481dde8d99857a1ddf2ec70f8463637b10f7cfa8131e83b5d208883b879000ec15270b90885d488c51477aa2b74ac47101b1cecc52d87623be90eb35eabb30a85b479d0625f9e36ca6e0e0cacd8f452f3982dd3e90d7c8350e457e0ab8b7dbe9678ab734c0ef6cbdab9f42e91e15080b6319f8337ee8388d5150bcff167a80fd41bcd6f51c1e4dfabfc609a0c4b4f1e48dacc7e8dda0c406bbd8d560e6319515cecd8c8343f2b99b957b342b59d9aa732c96950532cbff519072b5c78b316e6895100ff8d4e99364bd708085634a17b5705f62bac5b6fcaf4f874c5d4e429610780810d5df8158dcbde665f5e148b2cc59ea95ff7df7a6a02c36292904c521cfcaf7f057d0ad92f58ff0d1c24cd9a3ae49c14404f1dd899d2d18de83420c7d51ffeee7e296fcd7505f0e1d36df40af5c9d380b9c22e162dca12a863e86d1a1bdf2bdab58ef7691fd0ef7a0767b7c2eb6a1ed897ee2e68b6d3b6850181418358c863ddf29d50980d06e8a11e881bb02b191d1959e27776773c6141fd4b10a912ba116fc858392ef0ccd0f33a84dcaae5a3cb90a662ed267fc68d3521c7abad3ad2b4f23ac9ab88ffeabf7371a9f3a03792fe1326343b2398d99ca9f0af51734a50a947cb41766cbfc5d79ee639a76c572523ba384c7bf30c49ca6e7a0cfcfdf3b08341950d224291a9de4bbceffcc83fd97c9404bc732649a6fe8aa530d192e1faab1668527797e3d3821f89dc22c27df74a95317611eddbbf7bbd0c519210b970eaca580d8ddeab3f1b548056c868067e820a8d452ebec3e62caf97d30fb9c3abb7e647a3331951445e09b3fcd194987cc0869619cb9a63bccba13261224cf66c4707b23045cf46a8bf267d48b8783467455e5e24868cf62d8e6c59978829727d8ad721deb6003c8cb40c6c72f857ba2dd7fe34f6df9c6ad9da8452e637e6309a1d9cf3050024f1edd59ae1f9bcfda1d2ff87dc47452fd8e342a01ffc27b136b03e7160352a07fd52cdcb3bd1ffd22a7bef2c7ebac5fe41d5d1a68f4de2b74173f3920cfa315a9f08a9647bc65c1b45cd7c01ce701a62ad4f36355a20084e252bb144c843e80cdfa159413f43cb79c4aa64fb6994116cb0ebfede973df3094bcff74a22800f4739b2c8831341f20d68be671576b37c58d3a4b4e029647f297087008f67855abc89a14d8c0eab5f3b7f625416dd261d9e1c15a6f19aff4fed9148fbc504a0f2fbf262c9e8c600fc5d3093818856cf08dfa11736a75a9d108e973356c387cef1fb91e60f62d94da27df345fe439a4ff5e4cb4f3418f5da8c1437e5088c8d2c60ff6c5953e2ec09a823504f72b48a216eb6f7a773d61c237d14c605b0f1252ce05335c18560283aad53cb54c99753d7aca2435f94cb174b7b128d3cebb884b8e8b5cb12c80b2a6bf8c75b0d0499f5f920b0212d3dcb2b267496edfac0b7cb7af9194d", 0x1000, 0x20008080, 0x0, 0x0) 13m28.763722826s ago: executing program 2 (id=1437): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x50, 0x1, 0x0, "d02067046edd9a2ad5b4f84e565c6f0f30807278f8983c3c0a31965ebd9ca8ac"}) 13m28.505228464s ago: executing program 2 (id=1439): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) chown(&(0x7f0000001940)='./file0\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2092) syz_fuse_handle_req(r3, &(0x7f0000002580)="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", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f00000046c0)={0x50, 0x0, r4, {0x7, 0x9, 0x0, 0x403a1810, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cbc-des3_ede-asm,xcbc(aes-fixed-time))\x00'}, 0x58) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xd6, 0x7f, 0x9}, 0x9c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000000e84f08000300", @ANYRES32=r8, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="10010000", @ANYRES16=r7, @ANYBLOB="050000040000000000000f00000008000300", @ANYRES32=r8, @ANYBLOB="2c000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100060209009c005a800c00038005000600020000005000038014000300f8ffe49d000205000b0002006b00070005000600010000002f0002001a1b0219514d17492d0843134f0448333a294a5404043c432245361e4e5210103135493a31230902482556003c00038005000700020000000500060000000000140005000800f90002000200100080009e720200140005004000ffff020007000600ff000100000808000c006400000008000d00000000000a0034000202020202020000080035000000000008007e0001000000"], 0x110}}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r9, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r11, 0x8208ae63, &(0x7f0000000840)={0x1, 0x0, @pic={0x2a, 0xc0, 0x7, 0x7, 0x7f, 0x0, 0xf, 0x9, 0x2, 0x41, 0x3, 0x7, 0x90, 0x5, 0xb, 0x7f}}) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x4, 0x6d, 0x2, 0x1002, 0xef, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613}) ioctl$KVM_RUN(r12, 0xae80, 0x0) 13m26.87175045s ago: executing program 2 (id=1443): unshare(0x2040400) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 13m23.536292101s ago: executing program 2 (id=1460): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7\x88\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7`\x9b=\xec\x9f\x1d\x9b@$\x8c\bb\x1a\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\'\xffO,4\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2\x01G\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\rr\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\xc6\x8a=\x04\xa35\x9b\xf5\x80E\x8f\x1e\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x10\x00'/276, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a0001002bbd70000000000002000000", @ANYRES32=0x0, @ANYBLOB="e9ffc3030800040007080000"], 0x24}}, 0x40000) r4 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYRES32=0x0, @ANYRES32=0xee01], 0x217) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x80) getdents64(r7, 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000100)={0x800000, 0x2, 0x0, "8aabfaaeb4dfa137d07d5565179214539c1b555a8298fcc9e2bfd519563c6347", 0x31364d4e}) r8 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={r1, 0x0, 0x0, 0x1000}) r9 = syz_io_uring_setup(0x31eb, &(0x7f0000000140)={0x0, 0x334e, 0x1000, 0x4, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24008880) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x1, 0x7, 0x1}) write$UHID_CREATE2(r12, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) r13 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r13, 0x0, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r12, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0xb, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xeb}) io_uring_enter(r9, 0x7277, 0x0, 0x28, 0x0, 0x0) 13m8.483533821s ago: executing program 32 (id=1460): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7\x88\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7`\x9b=\xec\x9f\x1d\x9b@$\x8c\bb\x1a\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\'\xffO,4\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2\x01G\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\rr\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\xc6\x8a=\x04\xa35\x9b\xf5\x80E\x8f\x1e\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x10\x00'/276, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a0001002bbd70000000000002000000", @ANYRES32=0x0, @ANYBLOB="e9ffc3030800040007080000"], 0x24}}, 0x40000) r4 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYRES32=0x0, @ANYRES32=0xee01], 0x217) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x80) getdents64(r7, 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000100)={0x800000, 0x2, 0x0, "8aabfaaeb4dfa137d07d5565179214539c1b555a8298fcc9e2bfd519563c6347", 0x31364d4e}) r8 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={r1, 0x0, 0x0, 0x1000}) r9 = syz_io_uring_setup(0x31eb, &(0x7f0000000140)={0x0, 0x334e, 0x1000, 0x4, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24008880) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x1, 0x7, 0x1}) write$UHID_CREATE2(r12, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) r13 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r13, 0x0, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r12, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0xb, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xeb}) io_uring_enter(r9, 0x7277, 0x0, 0x28, 0x0, 0x0) 2.499781345s ago: executing program 5 (id=4929): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) creat(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x0, 0x8, 0xbac8, 0x31e4, 0x7}, {0x48, 0x1, 0xfcbf, 0xfff7, 0x1ff, 0x5}, 0x4eef, 0x2, 0x19b0}}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xffffffff, 0x3, 0x9, 0x1, 0x800, 0x9c3, 0x4, 0x0, 0x8, 0xffffffff, 0x3, 0x8, 0x8, 0xfffffffd, 0x8, 0x8001, 0x100, 0x3, 0x0, 0x588e, 0x1, 0x1e00, 0x101, 0x7, 0x80000000, 0xf8f1, 0x0, 0x401, 0x10, 0x1, 0xc00000, 0xfffffff7, 0x400, 0x7f, 0x80000000, 0x3, 0x6ade, 0x0, 0x4, 0x77c8, 0x1, 0x5, 0x8, 0x1, 0x7, 0x3, 0x80, 0x7fffffff, 0x2, 0x9, 0x3, 0x80, 0x8, 0xe, 0x6, 0x0, 0x2, 0x4, 0xfffffffa, 0x4, 0x1, 0x4, 0x200, 0x1, 0x8, 0x2, 0xe757, 0xfffffff7, 0x8001, 0x45f, 0x1ff, 0xe, 0xd, 0x7d3, 0x4, 0xb, 0x58c4637b, 0x5, 0x0, 0x1, 0x2, 0x6, 0xb90, 0x203, 0x6, 0x842f, 0x7, 0x10000, 0x4, 0xffffff25, 0xa04, 0x78da, 0x0, 0x0, 0xffffffff, 0x80000001, 0x0, 0x5, 0x465, 0x1000006, 0xcd17, 0x9, 0x6, 0x2, 0xfffffffc, 0xfffffff7, 0x7f, 0x2, 0x6, 0x1, 0x40000, 0x6, 0x6, 0x0, 0x40, 0x8, 0x3, 0x23, 0x0, 0x6, 0x1, 0x2fe, 0x96, 0x0, 0x2, 0x5, 0x2, 0x9, 0x8, 0x0, 0x0, 0x7, 0x6, 0x80, 0x1, 0x7, 0x7f, 0x2, 0x200, 0x8, 0xe330fdc7, 0x9, 0x5, 0x7e, 0x2, 0x5, 0x5, 0xffff0000, 0x2, 0x1, 0x401, 0x7, 0x8, 0xffff669d, 0xffffff94, 0x7, 0x5, 0x10001, 0x7, 0x7, 0x4, 0x5, 0xb2fb, 0x1, 0x7ff, 0x85, 0xffffffff, 0x4aa, 0xfc9, 0x80000000, 0x1, 0xfb, 0x6, 0xb, 0x3, 0x0, 0x5, 0x2, 0x83, 0x6, 0x7ff, 0x0, 0x9, 0x9, 0x1, 0x7, 0x1, 0x4, 0xe, 0x6, 0x6, 0x8, 0x0, 0xfffffffe, 0x5, 0x44, 0x4, 0x2, 0x3, 0xfffffff1, 0x6, 0x80000000, 0x4, 0x100, 0xfffffff7, 0x2a8, 0x2, 0x9, 0x7f, 0x4, 0x8, 0xffffffff, 0x6ed916d9, 0xfffffff8, 0x38, 0x3, 0x2, 0xd0, 0x36a0, 0xc, 0x3, 0x2, 0x1, 0x7df0, 0x9, 0x2009, 0x5, 0xfff, 0xc, 0x87, 0x8, 0x8, 0x80000000, 0x5, 0x3, 0x800, 0x1c43, 0x7, 0xa66, 0x6, 0x18000, 0x6, 0x4, 0x86f9, 0x6, 0x80, 0x200, 0x28000, 0x401, 0xffff, 0x4d, 0x2, 0xfc, 0x7, 0x2]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4009c}, 0x0) 2.348391075s ago: executing program 5 (id=4931): r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0xcc1, 0x8100) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x86cbf) 2.294540227s ago: executing program 5 (id=4933): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) syz_clone3(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) 2.172162403s ago: executing program 5 (id=4935): r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) lsm_list_modules(&(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=0x10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000200000000e1ffffff851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080200ffd00000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x24) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001180)={0x4, [0x0, 0x1, 0x6, 0x1]}, &(0x7f00000011c0)=0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x3, 0xfffffffe, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$TIOCL_BLANKSCREEN(r7, 0x4b67, &(0x7f0000000180)) 1.838524988s ago: executing program 0 (id=4938): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000001600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) 1.636553722s ago: executing program 1 (id=4940): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0xc814) sendmsg$IPSET_CMD_DESTROY(r2, 0x0, 0x840) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x4000, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1.62661048s ago: executing program 0 (id=4941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002042642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) 1.346402298s ago: executing program 4 (id=4944): bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 1.168587387s ago: executing program 0 (id=4945): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) inotify_init() 1.167726782s ago: executing program 4 (id=4947): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) io_uring_enter(r2, 0x23ca, 0xb392, 0x5, &(0x7f0000000100)={[0xcb6]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x41cfaa655c5b4876}, 0xc) syz_emit_ethernet(0x5e, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000086dd602c96ed00283c00fe800000000000000000000000000000fe8000000000000000000000000000aa0003000000000000c910fc0100000000000000000000000000000001000502000600800000000000"], 0x0) bind$qrtr(r3, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0xc5ec3, 0x0) flock(r4, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0xa28b8fafe3d95ea0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500"], 0x38}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r4) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000540)) get_mempolicy(0x0, 0x0, 0xff, &(0x7f0000ffb000/0x3000)=nil, 0x1) 1.11625186s ago: executing program 1 (id=4948): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18010000fcff0000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x404}, 0x18) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca}]}, 0x10) 1.003599027s ago: executing program 3 (id=4949): socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xa00) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000a00)={{0x80, 0x6}, 'port0\x00', 0x82, 0x250012, 0x0, 0x2c1d, 0x4, 0x2, 0x4, 0x0, 0x7cce8c743ee810de}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000200)={0x800080, 0x858, 0x8, 0x7, 0x43}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 984.935516ms ago: executing program 0 (id=4950): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, 0x2}, 0x1c) 967.260839ms ago: executing program 1 (id=4951): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000060a010400000000000000000a0000010900010073797a31000040001400048010000180070001"], 0x68}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 912.831223ms ago: executing program 4 (id=4961): close(0xffffffffffffffff) socket(0x28, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000240)={0x0, 0x11, 0x0, 0x42d, 0x0, 0x0, &(0x7f00000002c0)}) read(r0, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r0, 0x0, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) lstat(&(0x7f0000001bc0)='./file0\x00', 0x0) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 814.667287ms ago: executing program 3 (id=4952): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) 807.25197ms ago: executing program 0 (id=4953): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2001000012001307"], 0x120}}, 0x0) 715.288735ms ago: executing program 5 (id=4954): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = gettid() r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 630.676741ms ago: executing program 1 (id=4955): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000008c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {}, {0x6, 0xa}, {0x1, 0xfff3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xd}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 526.038266ms ago: executing program 4 (id=4956): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x111, &(0x7f0000000100)={0x0, 0x2e1a, 0x2, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000180)) r4 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x2f7}) close_range(r4, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r2, 0x7c00, 0x940a, 0x4, 0x0, 0x0) 511.074437ms ago: executing program 0 (id=4957): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) 510.244787ms ago: executing program 3 (id=4958): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000080000009500000000000e00"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) 387.386412ms ago: executing program 1 (id=4959): openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x2642, 0x0) r0 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_unlink(0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$inet_mreqn(r3, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) unshare(0x2a020400) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) 386.976469ms ago: executing program 5 (id=4960): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000045c0)=@newtfilter={0x74, 0x28, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0x8, 0x0, 0x8, 0x80, {0x4, 0x1, 0x0, 0x2, 0x1000, 0x10000}, {0x5, 0x1, 0x6b4a, 0x9, 0xa6, 0x10000}, 0x4, 0x80000001, 0xc6}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0x3, 0x1}}}, 0x7f}}, 0x10) 305.80638ms ago: executing program 4 (id=4962): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x3000008, 0x10, r0, 0x7450e000) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x20, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, {0x0, 0x0, 0xffffffdc, 0x0, 0xff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) 305.52096ms ago: executing program 3 (id=4963): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x9, 0x5, 0xf4, 0x1}]}) readlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000005c0)=""/15, 0xf) 142.834121ms ago: executing program 3 (id=4964): setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) 31.610018ms ago: executing program 4 (id=4965): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) getresuid(&(0x7f0000000080), &(0x7f0000000400), &(0x7f00000009c0)) 10.906616ms ago: executing program 1 (id=4966): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x5, 0x7ffc0002}]}) io_setup(0x1, &(0x7f00000001c0)=0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000580)={0x1, &(0x7f0000000480)=[{0x7, 0x0, 0x8, 0x4}]}) io_pgetevents(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES8=r1, @ANYBLOB="30dcf52a63cff4fa038d1b", @ANYRESOCT=r3, @ANYRES16=r0, @ANYBLOB="1100b8f309fd8d0b6f398913cfeac168b4927e93adf4f96468db7632b742281947637189f0e6f42b7b5852bc3d413a69427c63f37a76810318e24eac8ef212c59339f4be9a22255ecaf3b0248576a71ff93d65b85d1db72fe951fb26e763cf13eacaa564f36da4d068b590ae43587576e6291d73edf535c18e71c29cdcf1acd91c7dc9a369644601b991f6a77cfc6901dd0dbb3db198a80a78510aa65e3e96", @ANYRESDEC, @ANYRES16=r1, @ANYRESHEX=r3, @ANYRESHEX=r2], 0x50) r4 = socket$inet6(0xa, 0x2, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0xfffffffb, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xa1c}, 0x1c) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x9001) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, r5, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x2000402) utime(&(0x7f00000000c0)='./file0\x00', 0x0) lseek(r7, 0x0, 0x3) r8 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) cachestat(r8, &(0x7f00000002c0)={0x400, 0x2400000000000000}, 0xffffffffffffffff, 0x0) r9 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r9, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x22c7, &(0x7f0000000780)=ANY=[@ANYRES64=r10, @ANYRES32=r6, @ANYBLOB="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"], 0x0, 0x9d, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r11) sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r13}, 0x18) 0s ago: executing program 3 (id=4967): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x1e1301) socket(0x200000000000011, 0x2, 0xd) socket(0x200000000000011, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x3, @private=0xa010102}]}, &(0x7f0000000240)=0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x7, 0x20001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd3187bbffb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f0688772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5c0600000000000000f14eee6863e0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) kernel console output (not intermixed with test programs): 1150.558201][T20549] FAULT_INJECTION: forcing a failure. [ 1150.558201][T20549] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.571972][T20549] CPU: 0 UID: 0 PID: 20549 Comm: syz.1.4282 Tainted: G L syzkaller #0 PREEMPT(full) [ 1150.572008][T20549] Tainted: [L]=SOFTLOCKUP [ 1150.572018][T20549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1150.572032][T20549] Call Trace: [ 1150.572043][T20549] [ 1150.572053][T20549] dump_stack_lvl+0xe8/0x150 [ 1150.572087][T20549] should_fail_ex+0x414/0x560 [ 1150.572128][T20549] should_failslab+0xa8/0x100 [ 1150.572157][T20549] kmem_cache_alloc_noprof+0x88/0x710 [ 1150.572190][T20549] ? apparmor_capable+0x137/0x1a0 [ 1150.572226][T20549] ? skb_clone+0x212/0x3a0 [ 1150.572259][T20549] skb_clone+0x212/0x3a0 [ 1150.572285][T20549] ? nfnetlink_rcv+0x4ba/0x2590 [ 1150.572313][T20549] nfnetlink_rcv+0x4ec/0x2590 [ 1150.572350][T20549] ? lockdep_hardirqs_on+0x7b/0x110 [ 1150.572373][T20549] ? __dev_queue_xmit+0x289/0x31c0 [ 1150.572406][T20549] ? __local_bh_enable_ip+0xd0/0x130 [ 1150.572428][T20549] ? __dev_queue_xmit+0x289/0x31c0 [ 1150.572458][T20549] ? __dev_queue_xmit+0x19cb/0x31c0 [ 1150.572486][T20549] ? ___sys_sendmsg+0x21f/0x2a0 [ 1150.572519][T20549] ? __dev_queue_xmit+0x289/0x31c0 [ 1150.572555][T20549] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1150.572596][T20549] ? ref_tracker_free+0x63a/0x7d0 [ 1150.572619][T20549] ? __asan_memcpy+0x40/0x70 [ 1150.572660][T20549] ? __pfx_ref_tracker_free+0x10/0x10 [ 1150.572699][T20549] ? skb_clone+0x246/0x3a0 [ 1150.572731][T20549] ? __netlink_deliver_tap+0x807/0x850 [ 1150.572760][T20549] ? netlink_deliver_tap+0x2e/0x1b0 [ 1150.572806][T20549] netlink_unicast+0x82f/0x9e0 [ 1150.572840][T20549] ? __pfx_netlink_unicast+0x10/0x10 [ 1150.572864][T20549] ? __alloc_skb+0x198/0x3a0 [ 1150.572887][T20549] ? netlink_sendmsg+0x642/0xb30 [ 1150.572914][T20549] ? skb_put+0x11b/0x210 [ 1150.572942][T20549] netlink_sendmsg+0x805/0xb30 [ 1150.572981][T20549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1150.573012][T20549] ? __import_iovec+0x5d4/0x7f0 [ 1150.573036][T20549] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1150.573066][T20549] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1150.573088][T20549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1150.573119][T20549] __sock_sendmsg+0x21c/0x270 [ 1150.573155][T20549] ____sys_sendmsg+0x505/0x820 [ 1150.573187][T20549] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1150.573219][T20549] ? kstrtouint+0x6e/0xe0 [ 1150.573260][T20549] ___sys_sendmsg+0x21f/0x2a0 [ 1150.573289][T20549] ? __pfx____sys_sendmsg+0x10/0x10 [ 1150.573316][T20549] ? get_pid_task+0x20/0x1f0 [ 1150.573344][T20549] ? get_pid_task+0x20/0x1f0 [ 1150.573369][T20549] ? get_pid_task+0x20/0x1f0 [ 1150.573428][T20549] ? __fget_files+0x2a/0x420 [ 1150.573455][T20549] ? __fget_files+0x3a0/0x420 [ 1150.573492][T20549] __sys_sendmsg+0x164/0x220 [ 1150.573522][T20549] ? __pfx___sys_sendmsg+0x10/0x10 [ 1150.573559][T20549] ? __pfx_ksys_write+0x10/0x10 [ 1150.573592][T20549] __do_fast_syscall_32+0x1dc/0x570 [ 1150.573617][T20549] ? lockdep_hardirqs_on+0x7b/0x110 [ 1150.573638][T20549] ? do_fast_syscall_32+0x34/0x80 [ 1150.573669][T20549] ? irqentry_exit+0x10f/0x670 [ 1150.573695][T20549] do_fast_syscall_32+0x34/0x80 [ 1150.573721][T20549] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1150.573749][T20549] RIP: 0023:0xf700d539 [ 1150.573768][T20549] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1150.573789][T20549] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1150.573813][T20549] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 1150.573830][T20549] RDX: 00000000240408d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1150.573845][T20549] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1150.573859][T20549] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1150.573873][T20549] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1150.573905][T20549] [ 1151.308359][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1151.323090][ T30] audit: type=1326 audit(1767842864.449:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20550 comm="syz.1.4284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1151.420025][ T30] audit: type=1326 audit(1767842864.449:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20550 comm="syz.1.4284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1151.486654][ T30] audit: type=1326 audit(1767842864.459:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20550 comm="syz.1.4284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1151.530447][ T30] audit: type=1326 audit(1767842864.459:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20550 comm="syz.1.4284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1151.553323][ T30] audit: type=1326 audit(1767842864.459:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20550 comm="syz.1.4284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1151.603604][ T30] audit: type=1326 audit(1767842864.459:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20550 comm="syz.1.4284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1151.647341][ T30] audit: type=1326 audit(1767842864.459:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20550 comm="syz.1.4284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1151.686030][ T30] audit: type=1326 audit(1767842864.459:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20550 comm="syz.1.4284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1151.737392][ T30] audit: type=1326 audit(1767842864.459:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20550 comm="syz.1.4284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1151.782575][ T30] audit: type=1326 audit(1767842864.459:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20550 comm="syz.1.4284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1151.806641][T18280] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1151.966415][T18280] usb 5-1: Using ep0 maxpacket: 16 [ 1151.975819][T18280] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1151.994281][T18280] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1152.011638][T18280] usb 5-1: Product: syz [ 1152.016169][T18280] usb 5-1: Manufacturer: syz [ 1152.025569][T18280] usb 5-1: SerialNumber: syz [ 1152.059145][T18280] usb 5-1: config 0 descriptor?? [ 1152.293316][T20555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1152.315201][T20555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1152.846770][T18280] usb 5-1: USB disconnect, device number 47 [ 1153.239307][T20587] __nla_validate_parse: 2 callbacks suppressed [ 1153.239323][T20587] netlink: 528 bytes leftover after parsing attributes in process `syz.3.4296'. [ 1153.416471][ T6890] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1153.512020][T20589] netlink: 'syz.3.4297': attribute type 10 has an invalid length. [ 1153.524094][T20591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4298'. [ 1153.553836][T20589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.561287][T20589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.609134][ T6890] usb 2-1: device descriptor read/64, error -71 [ 1153.623246][T20589] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.630480][T20589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1153.638099][T20589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.645347][T20589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1153.668415][T20593] FAULT_INJECTION: forcing a failure. [ 1153.668415][T20593] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1153.681940][T20593] CPU: 1 UID: 0 PID: 20593 Comm: syz.4.4299 Tainted: G L syzkaller #0 PREEMPT(full) [ 1153.681965][T20593] Tainted: [L]=SOFTLOCKUP [ 1153.681972][T20593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1153.681982][T20593] Call Trace: [ 1153.681989][T20593] [ 1153.681997][T20593] dump_stack_lvl+0xe8/0x150 [ 1153.682022][T20593] should_fail_ex+0x414/0x560 [ 1153.682051][T20593] prepare_alloc_pages+0x22b/0x650 [ 1153.682075][T20593] __alloc_frozen_pages_noprof+0x123/0x370 [ 1153.682096][T20593] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1153.682121][T20593] ? policy_nodemask+0x27c/0x720 [ 1153.682139][T20593] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1153.682160][T20593] alloc_pages_mpol+0x232/0x4a0 [ 1153.682182][T20593] alloc_pages_noprof+0xa9/0x190 [ 1153.682203][T20593] binder_alloc_new_buf+0x1e0f/0x2fa0 [ 1153.682245][T20593] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 1153.682268][T20593] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 1153.682290][T20593] binder_transaction+0x23a4/0x6430 [ 1153.682328][T20593] ? __lock_acquire+0x6b6/0x2cf0 [ 1153.682349][T20593] ? __pfx_binder_transaction+0x10/0x10 [ 1153.682376][T20593] ? __might_fault+0xb0/0x130 [ 1153.682400][T20593] ? __might_fault+0xb0/0x130 [ 1153.682437][T20593] binder_ioctl_write_read+0xd5a/0x9f60 [ 1153.682469][T20593] ? __kernel_text_address+0xd/0x40 [ 1153.682493][T20593] ? arch_stack_walk+0xfc/0x150 [ 1153.682518][T20593] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 1153.682533][T20593] ? stack_trace_save+0x9c/0xe0 [ 1153.682563][T20593] ? __pfx_stack_trace_save+0x10/0x10 [ 1153.682589][T20593] ? stack_depot_save_flags+0x33/0x810 [ 1153.682619][T20593] ? __lock_acquire+0x6b6/0x2cf0 [ 1153.682637][T20593] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1153.682665][T20593] ? binder_debug+0x13f/0x1b0 [ 1153.682696][T20593] ? _raw_spin_unlock+0x28/0x50 [ 1153.682719][T20593] ? binder_get_thread+0x178/0x6d0 [ 1153.682738][T20593] binder_ioctl+0x3c5/0x19d0 [ 1153.682753][T20593] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1153.682772][T20593] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1153.682792][T20593] ? do_vfs_ioctl+0xbe8/0x1430 [ 1153.682806][T20593] ? __pfx_binder_ioctl+0x10/0x10 [ 1153.682822][T20593] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1153.682837][T20593] ? get_pid_task+0x20/0x1f0 [ 1153.682863][T20593] ? get_pid_task+0x20/0x1f0 [ 1153.682896][T20593] ? __fget_files+0x2a/0x420 [ 1153.682918][T20593] ? __fget_files+0x3a0/0x420 [ 1153.682937][T20593] ? __fget_files+0x2a/0x420 [ 1153.682959][T20593] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1153.682979][T20593] __ia32_compat_sys_ioctl+0x543/0x840 [ 1153.682997][T20593] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1153.683012][T20593] ? __fget_files+0x3a0/0x420 [ 1153.683036][T20593] ? fput+0xa0/0xd0 [ 1153.683057][T20593] ? ksys_write+0x22a/0x250 [ 1153.683074][T20593] ? __pfx_ksys_write+0x10/0x10 [ 1153.683096][T20593] __do_fast_syscall_32+0x1dc/0x570 [ 1153.683114][T20593] ? lockdep_hardirqs_on+0x7b/0x110 [ 1153.683129][T20593] ? do_fast_syscall_32+0x34/0x80 [ 1153.683146][T20593] ? irqentry_exit+0x10f/0x670 [ 1153.683164][T20593] do_fast_syscall_32+0x34/0x80 [ 1153.683182][T20593] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1153.683201][T20593] RIP: 0023:0xf7fa7539 [ 1153.683214][T20593] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1153.683229][T20593] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1153.683245][T20593] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0306201 [ 1153.683257][T20593] RDX: 0000000080004a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 1153.683267][T20593] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1153.683276][T20593] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1153.683285][T20593] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1153.683307][T20593] [ 1154.077611][T20589] team0: Port device bridge0 added [ 1154.207366][T20597] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1154.256511][ T6890] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1154.331883][T20598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4300'. [ 1154.396781][ T6890] usb 2-1: device descriptor read/64, error -71 [ 1154.508566][ T6890] usb usb2-port1: attempt power cycle [ 1154.637000][ T5899] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1154.796601][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 1154.804889][ T5899] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1154.816488][ T5899] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 1154.827255][ T5899] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1056, setting to 1024 [ 1154.838443][ T5899] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1154.848632][ T6890] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1154.861304][ T5899] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1154.870643][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.887155][ T5899] usb 5-1: Product: syz [ 1154.891498][ T5899] usb 5-1: Manufacturer: syz [ 1154.901481][ T6890] usb 2-1: device descriptor read/8, error -71 [ 1154.913477][ T5899] usb 5-1: SerialNumber: syz [ 1154.965743][T20613] bond1: (slave lo): Releasing backup interface [ 1154.976650][T20613] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1155.009908][T20613] bridge_slave_0: left allmulticast mode [ 1155.015718][T20613] bridge_slave_0: left promiscuous mode [ 1155.022144][T20613] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.026797][ T43] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1155.042582][T20614] netlink: 'syz.5.4306': attribute type 10 has an invalid length. [ 1155.053651][T20613] bridge_slave_1: left allmulticast mode [ 1155.059723][T20613] bridge_slave_1: left promiscuous mode [ 1155.066052][T20613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.084740][T20613] bond0: (slave bond_slave_0): Releasing backup interface [ 1155.096759][T20615] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4306'. [ 1155.120096][T20613] bond0: (slave bond_slave_1): Releasing backup interface [ 1155.152827][T20613] team0: Port device team_slave_0 removed [ 1155.176472][ T6890] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1155.188963][T20613] team0: Port device team_slave_1 removed [ 1155.196203][T20613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1155.203739][T20613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1155.212432][ T6890] usb 2-1: device descriptor read/8, error -71 [ 1155.216218][T20613] batman_adv: batadv0: Interface deactivated: 26±ÿ [ 1155.220825][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1155.234870][T20613] batman_adv: batadv0: Removing interface: 26±ÿ [ 1155.237491][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1155.237528][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1155.265111][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1155.274530][T20613] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1155.280247][ T43] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1155.308281][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.327473][ T43] usb 4-1: config 0 descriptor?? [ 1155.337316][ T5899] cdc_ncm 5-1:1.0: bind() failure [ 1155.346824][ T6890] usb usb2-port1: unable to enumerate USB device [ 1155.368966][ T5899] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1155.376026][ T5899] cdc_ncm 5-1:1.1: bind() failure [ 1155.395120][ T5899] usb 5-1: USB disconnect, device number 48 [ 1155.407974][T20614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.578511][T20614] team0: Port device bond0 added [ 1155.792664][ T43] hid_parser_main: 5 callbacks suppressed [ 1155.792691][ T43] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 1155.832109][ T43] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1155.998947][T20615] team0 (unregistering): Port device bond0 removed [ 1156.054145][T20618] FAULT_INJECTION: forcing a failure. [ 1156.054145][T20618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1156.073711][T20618] CPU: 0 UID: 0 PID: 20618 Comm: syz.1.4308 Tainted: G L syzkaller #0 PREEMPT(full) [ 1156.073749][T20618] Tainted: [L]=SOFTLOCKUP [ 1156.073758][T20618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1156.073772][T20618] Call Trace: [ 1156.073781][T20618] [ 1156.073791][T20618] dump_stack_lvl+0xe8/0x150 [ 1156.073825][T20618] should_fail_ex+0x414/0x560 [ 1156.073866][T20618] _copy_from_user+0x2d/0xb0 [ 1156.073897][T20618] kstrtouint_from_user+0xc4/0x170 [ 1156.073932][T20618] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1156.073978][T20618] proc_fail_nth_write+0x88/0x200 [ 1156.074016][T20618] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1156.074047][T20618] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1156.074074][T20618] vfs_write+0x27e/0xb30 [ 1156.074105][T20618] ? __pfx_vfs_write+0x10/0x10 [ 1156.074129][T20618] ? __fget_files+0x2a/0x420 [ 1156.074162][T20618] ? __fget_files+0x3a0/0x420 [ 1156.074189][T20618] ? __fget_files+0x2a/0x420 [ 1156.074232][T20618] ksys_write+0x145/0x250 [ 1156.074257][T20618] ? __pfx_ksys_write+0x10/0x10 [ 1156.074292][T20618] __do_fast_syscall_32+0x1dc/0x570 [ 1156.074325][T20618] ? lockdep_hardirqs_on+0x7b/0x110 [ 1156.074346][T20618] ? do_fast_syscall_32+0x34/0x80 [ 1156.074371][T20618] ? irqentry_exit+0x10f/0x670 [ 1156.074398][T20618] do_fast_syscall_32+0x34/0x80 [ 1156.074424][T20618] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1156.074450][T20618] RIP: 0023:0xf700d539 [ 1156.074469][T20618] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1156.074489][T20618] RSP: 002b:00000000f53fd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1156.074513][T20618] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53fd620 [ 1156.074529][T20618] RDX: 0000000000000001 RSI: 00000000f73a6ff4 RDI: 0000000000000000 [ 1156.074544][T20618] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1156.074558][T20618] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1156.074571][T20618] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1156.074604][T20618] [ 1156.420924][ T6890] usb 4-1: USB disconnect, device number 48 [ 1156.696475][ T5899] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1156.826442][ T5899] usb 5-1: device descriptor read/64, error -71 [ 1156.972903][T20645] syzkaller0: entered promiscuous mode [ 1156.979098][T20645] syzkaller0: entered allmulticast mode [ 1156.996940][T20645] fuse: blksize only supported for fuseblk [ 1157.067470][ T5899] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1157.207807][ T5899] usb 5-1: device descriptor read/64, error -71 [ 1157.316507][ T6890] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1157.325538][ T5899] usb usb5-port1: attempt power cycle [ 1157.476380][ T6890] usb 4-1: Using ep0 maxpacket: 8 [ 1157.486202][ T6890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1157.497674][ T6890] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1157.506913][ T6890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.525812][ T6890] usb 4-1: config 0 descriptor?? [ 1157.676474][ T5899] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1157.708474][ T5899] usb 5-1: device descriptor read/8, error -71 [ 1157.740640][ T6890] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1157.964106][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1157.964126][ T30] audit: type=1326 audit(1767842871.109:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.1.4321" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7fc00000 [ 1157.992565][ T5899] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1158.007261][T20662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1158.017070][ T5899] usb 5-1: device descriptor read/8, error -71 [ 1158.018761][T20662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1158.176762][ T5899] usb usb5-port1: unable to enumerate USB device [ 1158.474646][ T30] audit: type=1326 audit(1767842871.619:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.1.4321" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700d539 code=0x7fc00000 [ 1158.531802][ T30] audit: type=1326 audit(1767842871.619:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.1.4321" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7fc00000 [ 1158.557870][ T30] audit: type=1326 audit(1767842871.619:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.1.4321" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7fc00000 [ 1158.593323][ T30] audit: type=1326 audit(1767842871.619:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.1.4321" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7fc00000 [ 1158.624098][ T30] audit: type=1326 audit(1767842871.619:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.1.4321" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7fc00000 [ 1158.673799][ T30] audit: type=1326 audit(1767842871.619:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.1.4321" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7fc00000 [ 1158.703271][ T30] audit: type=1326 audit(1767842871.619:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.1.4321" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7fc00000 [ 1158.735341][ T30] audit: type=1326 audit(1767842871.619:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.1.4321" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7fc00000 [ 1158.759533][ T30] audit: type=1326 audit(1767842871.619:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.1.4321" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7fc00000 [ 1159.562789][T20675] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4326'. [ 1159.592699][T20677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1159.603164][T20675] FAULT_INJECTION: forcing a failure. [ 1159.603164][T20675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1159.631944][T20675] CPU: 1 UID: 0 PID: 20675 Comm: syz.4.4326 Tainted: G L syzkaller #0 PREEMPT(full) [ 1159.631985][T20675] Tainted: [L]=SOFTLOCKUP [ 1159.631995][T20675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1159.632007][T20675] Call Trace: [ 1159.632015][T20675] [ 1159.632025][T20675] dump_stack_lvl+0xe8/0x150 [ 1159.632059][T20675] should_fail_ex+0x414/0x560 [ 1159.632100][T20675] _copy_to_user+0x31/0xb0 [ 1159.632131][T20675] simple_read_from_buffer+0xe1/0x170 [ 1159.632162][T20675] proc_fail_nth_read+0x1b3/0x220 [ 1159.632189][T20675] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1159.632214][T20675] ? rw_verify_area+0x2a6/0x4d0 [ 1159.632247][T20675] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1159.632273][T20675] vfs_read+0x200/0xa30 [ 1159.632293][T20675] ? fdget_pos+0x247/0x320 [ 1159.632326][T20675] ? __pfx___mutex_lock+0x10/0x10 [ 1159.632352][T20675] ? __pfx_vfs_read+0x10/0x10 [ 1159.632375][T20675] ? __fget_files+0x2a/0x420 [ 1159.632408][T20675] ? __fget_files+0x3a0/0x420 [ 1159.632435][T20675] ? __fget_files+0x2a/0x420 [ 1159.632472][T20675] ksys_read+0x145/0x250 [ 1159.632497][T20675] ? __pfx_ksys_read+0x10/0x10 [ 1159.632530][T20675] __do_fast_syscall_32+0x1dc/0x570 [ 1159.632556][T20675] ? lockdep_hardirqs_on+0x7b/0x110 [ 1159.632577][T20675] ? do_fast_syscall_32+0x34/0x80 [ 1159.632609][T20675] ? irqentry_exit+0x10f/0x670 [ 1159.632636][T20675] do_fast_syscall_32+0x34/0x80 [ 1159.632662][T20675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1159.632689][T20675] RIP: 0023:0xf7fa7539 [ 1159.632708][T20675] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1159.632728][T20675] RSP: 002b:00000000f5496590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1159.632752][T20675] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5496620 [ 1159.632769][T20675] RDX: 000000000000000f RSI: 00000000f7436ff4 RDI: 0000000000000000 [ 1159.632782][T20675] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1159.632796][T20675] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1159.632809][T20675] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1159.632840][T20675] [ 1160.104089][ T5921] usb 4-1: USB disconnect, device number 49 [ 1160.274695][T20680] binder: 20678:20680 ioctl c0306201 80000440 returned -14 [ 1160.322830][T20685] FAULT_INJECTION: forcing a failure. [ 1160.322830][T20685] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1160.337266][T20685] CPU: 1 UID: 0 PID: 20685 Comm: syz.3.4331 Tainted: G L syzkaller #0 PREEMPT(full) [ 1160.337302][T20685] Tainted: [L]=SOFTLOCKUP [ 1160.337310][T20685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1160.337323][T20685] Call Trace: [ 1160.337332][T20685] [ 1160.337341][T20685] dump_stack_lvl+0xe8/0x150 [ 1160.337376][T20685] should_fail_ex+0x414/0x560 [ 1160.337417][T20685] prepare_alloc_pages+0x22b/0x650 [ 1160.337450][T20685] __alloc_frozen_pages_noprof+0x123/0x370 [ 1160.337481][T20685] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1160.337517][T20685] ? policy_nodemask+0x27c/0x720 [ 1160.337550][T20685] alloc_pages_mpol+0x232/0x4a0 [ 1160.337582][T20685] alloc_pages_noprof+0xa9/0x190 [ 1160.337611][T20685] get_free_pages_noprof+0xf/0x80 [ 1160.337636][T20685] __pollwait+0x263/0x430 [ 1160.337662][T20685] ? __pfx___pollwait+0x10/0x10 [ 1160.337686][T20685] pipe_poll+0x16f/0x470 [ 1160.337710][T20685] ? __pfx_pipe_poll+0x10/0x10 [ 1160.337734][T20685] do_sys_poll+0x8c9/0x1070 [ 1160.337775][T20685] ? __pfx_do_sys_poll+0x10/0x10 [ 1160.337807][T20685] ? __lock_acquire+0x6b6/0x2cf0 [ 1160.337829][T20685] ? __pfx___pollwait+0x10/0x10 [ 1160.337865][T20685] ? __pfx_pollwake+0x10/0x10 [ 1160.337894][T20685] ? __pfx_pollwake+0x10/0x10 [ 1160.337922][T20685] ? __pfx_pollwake+0x10/0x10 [ 1160.337950][T20685] ? __pfx_pollwake+0x10/0x10 [ 1160.337979][T20685] ? __pfx_pollwake+0x10/0x10 [ 1160.338007][T20685] ? __pfx_pollwake+0x10/0x10 [ 1160.338035][T20685] ? __pfx_pollwake+0x10/0x10 [ 1160.338064][T20685] ? __pfx_pollwake+0x10/0x10 [ 1160.338093][T20685] ? __pfx_pollwake+0x10/0x10 [ 1160.338130][T20685] ? get_signal+0x123/0x1340 [ 1160.338175][T20685] ? __pfx_timespec64_add_safe+0x10/0x10 [ 1160.338202][T20685] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1160.338246][T20685] do_restart_poll+0x16a/0x290 [ 1160.338275][T20685] ? __pfx_do_restart_poll+0x10/0x10 [ 1160.338307][T20685] ? asm_int80_emulation+0x1a/0x20 [ 1160.338332][T20685] ? asm_int80_emulation+0x1a/0x20 [ 1160.338354][T20685] do_int80_emulation+0x11b/0x420 [ 1160.338381][T20685] ? clear_bhb_loop+0x60/0xb0 [ 1160.338402][T20685] ? clear_bhb_loop+0x60/0xb0 [ 1160.338429][T20685] asm_int80_emulation+0x1a/0x20 [ 1160.338450][T20685] RIP: 0023:0xf708d539 [ 1160.338469][T20685] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1160.338490][T20685] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000000 [ 1160.338513][T20685] RAX: ffffffffffffffda RBX: 0000000080009b00 RCX: 0000000000000020 [ 1160.338530][T20685] RDX: 0000000000000072 RSI: 0000000000000000 RDI: 0000000000000000 [ 1160.338544][T20685] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1160.338558][T20685] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1160.338572][T20685] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1160.338603][T20685] [ 1160.807685][T20691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1160.875078][T20691] loop6: detected capacity change from 0 to 2640 [ 1160.972223][T20693] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1161.098279][T20691] buffer_io_error: 45 callbacks suppressed [ 1161.098301][T20691] Buffer I/O error on dev loop6, logical block 0, async page read [ 1161.120139][T20691] Buffer I/O error on dev loop6, logical block 0, async page read [ 1161.128213][T20691] Buffer I/O error on dev loop6, logical block 0, async page read [ 1161.136495][T20691] Buffer I/O error on dev loop6, logical block 0, async page read [ 1161.144536][T20691] Buffer I/O error on dev loop6, logical block 0, async page read [ 1161.160193][T20693] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1161.196800][T20691] Buffer I/O error on dev loop6, logical block 0, async page read [ 1161.204682][T20691] Buffer I/O error on dev loop6, logical block 0, async page read [ 1161.221158][T20691] Buffer I/O error on dev loop6, logical block 0, async page read [ 1161.259482][T20691] ldm_validate_partition_table(): Disk read failed. [ 1161.268029][T20691] Buffer I/O error on dev loop6, logical block 0, async page read [ 1161.275979][T20691] Buffer I/O error on dev loop6, logical block 0, async page read [ 1161.284686][T20691] Dev loop6: unable to read RDB block 0 [ 1161.290985][T20691] loop6: unable to read partition table [ 1161.316721][T20691] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1161.644831][T20714] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4339'. [ 1162.449681][T20734] FAULT_INJECTION: forcing a failure. [ 1162.449681][T20734] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.495741][T20734] CPU: 0 UID: 0 PID: 20734 Comm: syz.1.4344 Tainted: G L syzkaller #0 PREEMPT(full) [ 1162.495785][T20734] Tainted: [L]=SOFTLOCKUP [ 1162.495792][T20734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1162.495802][T20734] Call Trace: [ 1162.495809][T20734] [ 1162.495817][T20734] dump_stack_lvl+0xe8/0x150 [ 1162.495842][T20734] should_fail_ex+0x414/0x560 [ 1162.495872][T20734] should_failslab+0xa8/0x100 [ 1162.495893][T20734] __kmalloc_cache_noprof+0x84/0x700 [ 1162.495910][T20734] ? nfnetlink_rcv+0xf97/0x2590 [ 1162.495933][T20734] nfnetlink_rcv+0xf97/0x2590 [ 1162.495974][T20734] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1162.496004][T20734] ? ref_tracker_free+0x63a/0x7d0 [ 1162.496040][T20734] ? __netlink_deliver_tap+0x807/0x850 [ 1162.496061][T20734] ? netlink_deliver_tap+0x2e/0x1b0 [ 1162.496093][T20734] netlink_unicast+0x82f/0x9e0 [ 1162.496117][T20734] ? __pfx_netlink_unicast+0x10/0x10 [ 1162.496134][T20734] ? __alloc_skb+0x198/0x3a0 [ 1162.496151][T20734] ? netlink_sendmsg+0x642/0xb30 [ 1162.496170][T20734] ? skb_put+0x11b/0x210 [ 1162.496189][T20734] netlink_sendmsg+0x805/0xb30 [ 1162.496216][T20734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1162.496240][T20734] ? __import_iovec+0x5d4/0x7f0 [ 1162.496257][T20734] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1162.496311][T20734] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1162.496331][T20734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1162.496361][T20734] __sock_sendmsg+0x21c/0x270 [ 1162.496407][T20734] ____sys_sendmsg+0x505/0x820 [ 1162.496438][T20734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1162.496461][T20734] ? kstrtouint+0x6e/0xe0 [ 1162.496491][T20734] ___sys_sendmsg+0x21f/0x2a0 [ 1162.496519][T20734] ? __pfx____sys_sendmsg+0x10/0x10 [ 1162.496537][T20734] ? get_pid_task+0x20/0x1f0 [ 1162.496559][T20734] ? get_pid_task+0x20/0x1f0 [ 1162.496578][T20734] ? get_pid_task+0x20/0x1f0 [ 1162.496619][T20734] ? __fget_files+0x2a/0x420 [ 1162.496638][T20734] ? __fget_files+0x3a0/0x420 [ 1162.496666][T20734] __sys_sendmsg+0x164/0x220 [ 1162.496686][T20734] ? __pfx___sys_sendmsg+0x10/0x10 [ 1162.496712][T20734] ? __pfx_ksys_write+0x10/0x10 [ 1162.496736][T20734] __do_fast_syscall_32+0x1dc/0x570 [ 1162.496778][T20734] ? lockdep_hardirqs_on+0x7b/0x110 [ 1162.496799][T20734] ? do_fast_syscall_32+0x34/0x80 [ 1162.496824][T20734] ? irqentry_exit+0x10f/0x670 [ 1162.496854][T20734] do_fast_syscall_32+0x34/0x80 [ 1162.496872][T20734] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1162.496892][T20734] RIP: 0023:0xf700d539 [ 1162.496906][T20734] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1162.496921][T20734] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1162.496938][T20734] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 1162.496950][T20734] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1162.496959][T20734] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1162.496969][T20734] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1162.496979][T20734] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1162.497001][T20734] [ 1163.178173][T20736] binder: 20732:20736 ioctl c0306201 0 returned -14 [ 1163.185796][T20736] binder: 20732:20736 ioctl c0306201 0 returned -14 [ 1163.696853][ T5919] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1163.731924][T20752] FAULT_INJECTION: forcing a failure. [ 1163.731924][T20752] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.748426][T20752] CPU: 0 UID: 0 PID: 20752 Comm: syz.3.4350 Tainted: G L syzkaller #0 PREEMPT(full) [ 1163.748463][T20752] Tainted: [L]=SOFTLOCKUP [ 1163.748473][T20752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1163.748487][T20752] Call Trace: [ 1163.748497][T20752] [ 1163.748507][T20752] dump_stack_lvl+0xe8/0x150 [ 1163.748541][T20752] should_fail_ex+0x414/0x560 [ 1163.748570][T20752] should_failslab+0xa8/0x100 [ 1163.748592][T20752] kmem_cache_alloc_noprof+0x88/0x710 [ 1163.748617][T20752] ? skb_clone+0x212/0x3a0 [ 1163.748641][T20752] skb_clone+0x212/0x3a0 [ 1163.748664][T20752] __netlink_deliver_tap+0x404/0x850 [ 1163.748694][T20752] ? netlink_deliver_tap+0x2e/0x1b0 [ 1163.748715][T20752] netlink_deliver_tap+0x19c/0x1b0 [ 1163.748736][T20752] netlink_sendskb+0x68/0x140 [ 1163.748755][T20752] netlink_unicast+0x397/0x9e0 [ 1163.748772][T20752] ? __asan_memcpy+0x40/0x70 [ 1163.748801][T20752] ? __pfx_netlink_unicast+0x10/0x10 [ 1163.748826][T20752] netlink_rcv_skb+0x28c/0x470 [ 1163.748846][T20752] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1163.748865][T20752] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1163.748893][T20752] ? netlink_deliver_tap+0x2e/0x1b0 [ 1163.748919][T20752] netlink_unicast+0x82f/0x9e0 [ 1163.748972][T20752] ? __pfx_netlink_unicast+0x10/0x10 [ 1163.748996][T20752] ? __alloc_skb+0x198/0x3a0 [ 1163.749019][T20752] ? netlink_sendmsg+0x642/0xb30 [ 1163.749048][T20752] ? skb_put+0x11b/0x210 [ 1163.749067][T20752] netlink_sendmsg+0x805/0xb30 [ 1163.749095][T20752] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1163.749123][T20752] ? __import_iovec+0x5d4/0x7f0 [ 1163.749142][T20752] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1163.749163][T20752] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1163.749178][T20752] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1163.749199][T20752] __sock_sendmsg+0x21c/0x270 [ 1163.749225][T20752] ____sys_sendmsg+0x505/0x820 [ 1163.749248][T20752] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1163.749271][T20752] ? kstrtouint+0x6e/0xe0 [ 1163.749301][T20752] ___sys_sendmsg+0x21f/0x2a0 [ 1163.749322][T20752] ? __pfx____sys_sendmsg+0x10/0x10 [ 1163.749341][T20752] ? get_pid_task+0x20/0x1f0 [ 1163.749369][T20752] ? get_pid_task+0x20/0x1f0 [ 1163.749388][T20752] ? get_pid_task+0x20/0x1f0 [ 1163.749429][T20752] ? __fget_files+0x2a/0x420 [ 1163.749449][T20752] ? __fget_files+0x3a0/0x420 [ 1163.749477][T20752] __sys_sendmsg+0x164/0x220 [ 1163.749517][T20752] ? __pfx___sys_sendmsg+0x10/0x10 [ 1163.749558][T20752] ? __pfx_ksys_write+0x10/0x10 [ 1163.749582][T20752] __do_fast_syscall_32+0x1dc/0x570 [ 1163.749601][T20752] ? lockdep_hardirqs_on+0x7b/0x110 [ 1163.749616][T20752] ? do_fast_syscall_32+0x34/0x80 [ 1163.749633][T20752] ? irqentry_exit+0x10f/0x670 [ 1163.749652][T20752] do_fast_syscall_32+0x34/0x80 [ 1163.749670][T20752] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1163.749690][T20752] RIP: 0023:0xf708d539 [ 1163.749704][T20752] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1163.749719][T20752] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1163.749736][T20752] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001200 [ 1163.749747][T20752] RDX: 0000000004000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1163.749757][T20752] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1163.749767][T20752] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1163.749777][T20752] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1163.749799][T20752] [ 1164.385351][ T5919] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1164.401079][ T5919] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1164.410797][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1164.420101][ T5919] usb 2-1: Product: syz [ 1164.424550][ T5919] usb 2-1: Manufacturer: syz [ 1164.429240][ T5919] usb 2-1: SerialNumber: syz [ 1164.675571][ T5919] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1165.036451][ T5899] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 1165.243849][ T5899] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1165.259858][ T5899] usb 5-1: config 0 has no interface number 0 [ 1165.285378][ T5899] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1165.315861][T12586] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1165.329185][T12586] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1165.338096][T12586] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1165.349476][ T5899] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1165.368831][ T5899] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1165.383469][T12586] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1165.394336][T12586] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1165.418120][ T5899] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1165.460342][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1165.473584][ T5899] usb 5-1: Product: syz [ 1165.478224][ T5899] usb 5-1: SerialNumber: syz [ 1165.489703][ T5899] usb 5-1: config 0 descriptor?? [ 1165.523530][ T5899] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 1165.533634][ T5899] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input66 [ 1166.133260][ T61] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1166.147433][ T61] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.261837][T20780] bond2 (unregistering): Released all slaves [ 1166.363703][ T61] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1166.376000][ T61] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.563038][ T61] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1166.574076][ T61] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.600357][ T5899] usb 2-1: USB disconnect, device number 51 [ 1166.627830][ T5899] usblp0: removed [ 1166.729815][T20789] FAULT_INJECTION: forcing a failure. [ 1166.729815][T20789] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.742562][T20789] CPU: 1 UID: 0 PID: 20789 Comm: syz.1.4363 Tainted: G L syzkaller #0 PREEMPT(full) [ 1166.742596][T20789] Tainted: [L]=SOFTLOCKUP [ 1166.742605][T20789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1166.742618][T20789] Call Trace: [ 1166.742628][T20789] [ 1166.742637][T20789] dump_stack_lvl+0xe8/0x150 [ 1166.742672][T20789] should_fail_ex+0x414/0x560 [ 1166.742713][T20789] should_failslab+0xa8/0x100 [ 1166.742743][T20789] kmem_cache_alloc_noprof+0x88/0x710 [ 1166.742777][T20789] ? mptcp_token_get_sock+0x81/0x650 [ 1166.742811][T20789] ? skb_ext_add+0x148/0x8f0 [ 1166.742842][T20789] skb_ext_add+0x148/0x8f0 [ 1166.742879][T20789] subflow_add_reset_reason+0x19/0x90 [ 1166.742907][T20789] subflow_check_req+0x998/0x1350 [ 1166.742943][T20789] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 1166.743006][T20789] ? __pfx_subflow_check_req+0x10/0x10 [ 1166.743060][T20789] ? __pfx_inet6_csk_route_req+0x10/0x10 [ 1166.743114][T20789] subflow_v6_route_req+0x1e4/0x4c0 [ 1166.743149][T20789] tcp_conn_request+0xc00/0x3410 [ 1166.743210][T20789] ? __pfx_tcp_conn_request+0x10/0x10 [ 1166.743243][T20789] ? __lock_acquire+0x6b6/0x2cf0 [ 1166.743292][T20789] ? subflow_v6_conn_request+0x25b/0x460 [ 1166.743321][T20789] ? tcp_rcv_state_process+0x20a/0x4520 [ 1166.743349][T20789] tcp_rcv_state_process+0x19c0/0x4520 [ 1166.743386][T20789] ? sk_filter_trim_cap+0x1e1/0xd60 [ 1166.743423][T20789] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 1166.743449][T20789] ? sk_filter_trim_cap+0x932/0xd60 [ 1166.743498][T20789] tcp_v6_do_rcv+0xbef/0x1ba0 [ 1166.743532][T20789] tcp_v6_rcv+0x1fb2/0x2ae0 [ 1166.743552][T20789] ? raw6_local_deliver+0x15d/0xad0 [ 1166.743581][T20789] ? lock_acquire+0x107/0x340 [ 1166.743637][T20789] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 1166.743656][T20789] ? nf_nat_ipv6_fn+0xe7/0x2d0 [ 1166.743686][T20789] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1166.743719][T20789] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 1166.743739][T20789] ip6_protocol_deliver_rcu+0xcb0/0x15c0 [ 1166.743797][T20789] ip6_input_finish+0x191/0x370 [ 1166.743830][T20789] NF_HOOK+0x30c/0x3a0 [ 1166.743861][T20789] ? __pfx_ip6_input_finish+0x10/0x10 [ 1166.743891][T20789] ? NF_HOOK+0x9a/0x3a0 [ 1166.743919][T20789] ? __pfx_NF_HOOK+0x10/0x10 [ 1166.743951][T20789] ? __pfx_ip6_input_finish+0x10/0x10 [ 1166.743994][T20789] ip6_input+0x16a/0x270 [ 1166.744022][T20789] ? ip6_input+0x23/0x270 [ 1166.744054][T20789] NF_HOOK+0x30c/0x3a0 [ 1166.744081][T20789] ? skb_orphan+0x4f/0xd0 [ 1166.744139][T20789] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1166.744168][T20789] ? NF_HOOK+0x9a/0x3a0 [ 1166.744195][T20789] ? __pfx_NF_HOOK+0x10/0x10 [ 1166.744227][T20789] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1166.744267][T20789] __netif_receive_skb+0xd3/0x380 [ 1166.744296][T20789] ? netif_receive_skb+0x105/0x750 [ 1166.744329][T20789] netif_receive_skb+0x1bb/0x750 [ 1166.744362][T20789] ? __lock_acquire+0x6b6/0x2cf0 [ 1166.744384][T20789] ? __pfx_netif_receive_skb+0x10/0x10 [ 1166.744424][T20789] ? tun_rx_batched+0x160/0x730 [ 1166.744456][T20789] tun_rx_batched+0x1b9/0x730 [ 1166.744491][T20789] ? __pfx_tun_rx_batched+0x10/0x10 [ 1166.744519][T20789] ? tun_get_user+0x266d/0x3dc0 [ 1166.744546][T20789] ? tun_get_user+0x266d/0x3dc0 [ 1166.744577][T20789] ? tun_get_user+0x2331/0x3dc0 [ 1166.744604][T20789] ? __local_bh_enable_ip+0xd0/0x130 [ 1166.744631][T20789] ? tun_get_user+0x266d/0x3dc0 [ 1166.744659][T20789] tun_get_user+0x2aa3/0x3dc0 [ 1166.744691][T20789] ? tun_get_user+0x6fc/0x3dc0 [ 1166.744732][T20789] ? aa_file_perm+0x44c/0x1530 [ 1166.744763][T20789] ? __pfx_tun_get_user+0x10/0x10 [ 1166.744794][T20789] ? __lock_acquire+0x6b6/0x2cf0 [ 1166.744820][T20789] ? kstrtoull+0x12f/0x1d0 [ 1166.744863][T20789] ? ref_tracker_alloc+0x318/0x460 [ 1166.744883][T20789] ? get_pid_task+0x20/0x1f0 [ 1166.744914][T20789] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1166.744939][T20789] ? tun_get+0x1c/0x2f0 [ 1166.744966][T20789] ? tun_get+0x1c/0x2f0 [ 1166.744997][T20789] ? tun_get+0x1c/0x2f0 [ 1166.745023][T20789] ? tun_get+0x1c/0x2f0 [ 1166.745054][T20789] tun_chr_write_iter+0x113/0x200 [ 1166.745085][T20789] vfs_write+0x5c9/0xb30 [ 1166.745120][T20789] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1166.745149][T20789] ? __pfx_vfs_write+0x10/0x10 [ 1166.745181][T20789] ? __fget_files+0x2a/0x420 [ 1166.745216][T20789] ksys_write+0x145/0x250 [ 1166.745258][T20789] ? __pfx_ksys_write+0x10/0x10 [ 1166.745292][T20789] __do_fast_syscall_32+0x1dc/0x570 [ 1166.745318][T20789] ? lockdep_hardirqs_on+0x7b/0x110 [ 1166.745339][T20789] ? do_fast_syscall_32+0x34/0x80 [ 1166.745363][T20789] ? irqentry_exit+0x10f/0x670 [ 1166.745391][T20789] do_fast_syscall_32+0x34/0x80 [ 1166.745417][T20789] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1166.745444][T20789] RIP: 0023:0xf700d539 [ 1166.745464][T20789] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1166.745485][T20789] RSP: 002b:00000000f53fd520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1166.745509][T20789] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000240 [ 1166.745526][T20789] RDX: 0000000000000056 RSI: 00000000f73a6ff4 RDI: 0000000000000000 [ 1166.745540][T20789] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1166.745554][T20789] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1166.745568][T20789] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1166.745602][T20789] [ 1167.466656][T12586] Bluetooth: hci0: command tx timeout [ 1167.590243][T20772] chnl_net:caif_netlink_parms(): no params data found [ 1167.699572][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1167.709054][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1167.716393][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1167.723605][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1167.731300][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1167.739297][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1167.746727][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1167.754085][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1167.761561][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1167.768988][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1167.776490][ T5921] usb 5-1: USB disconnect, device number 53 [ 1167.776549][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1167.812323][ T5921] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1167.813788][T20799] FAULT_INJECTION: forcing a failure. [ 1167.813788][T20799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1167.846392][ T5899] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 1167.920485][T20799] CPU: 0 UID: 0 PID: 20799 Comm: syz.1.4366 Tainted: G L syzkaller #0 PREEMPT(full) [ 1167.920522][T20799] Tainted: [L]=SOFTLOCKUP [ 1167.920531][T20799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1167.920545][T20799] Call Trace: [ 1167.920555][T20799] [ 1167.920565][T20799] dump_stack_lvl+0xe8/0x150 [ 1167.920600][T20799] should_fail_ex+0x414/0x560 [ 1167.920641][T20799] _copy_to_user+0x31/0xb0 [ 1167.920670][T20799] bpf_test_finish+0x1dd/0x6d0 [ 1167.920709][T20799] ? __pfx_bpf_test_finish+0x10/0x10 [ 1167.920736][T20799] ? eth_type_trans+0x43b/0x6d0 [ 1167.920778][T20799] bpf_prog_test_run_skb+0x1150/0x1d50 [ 1167.920821][T20799] ? __fget_files+0x2a/0x420 [ 1167.920848][T20799] ? __fget_files+0x3a0/0x420 [ 1167.920875][T20799] ? __fget_files+0x2a/0x420 [ 1167.920914][T20799] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1167.920943][T20799] bpf_prog_test_run+0x2c7/0x340 [ 1167.920981][T20799] __sys_bpf+0x562/0x860 [ 1167.921014][T20799] ? __pfx___sys_bpf+0x10/0x10 [ 1167.921061][T20799] ? ksys_write+0x22a/0x250 [ 1167.921085][T20799] ? __pfx_ksys_write+0x10/0x10 [ 1167.921114][T20799] __ia32_sys_bpf+0x7c/0x90 [ 1167.921144][T20799] __do_fast_syscall_32+0x1dc/0x570 [ 1167.921170][T20799] ? lockdep_hardirqs_on+0x7b/0x110 [ 1167.921191][T20799] ? do_fast_syscall_32+0x34/0x80 [ 1167.921215][T20799] ? irqentry_exit+0x10f/0x670 [ 1167.921241][T20799] do_fast_syscall_32+0x34/0x80 [ 1167.921267][T20799] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1167.921294][T20799] RIP: 0023:0xf700d539 [ 1167.921313][T20799] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1167.921332][T20799] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1167.921357][T20799] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000240 [ 1167.921373][T20799] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 1167.921387][T20799] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1167.921401][T20799] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1167.921415][T20799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1167.921447][T20799] [ 1168.183931][ T5899] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1168.208322][ T5899] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1168.216006][ T5899] usb 4-1: can't read configurations, error -61 [ 1168.366438][ T5899] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 1168.588719][ T5899] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1168.609982][ T5899] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1168.627574][ T5899] usb 4-1: can't read configurations, error -61 [ 1168.634790][ T5899] usb usb4-port1: attempt power cycle [ 1168.863331][ T61] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 1168.883679][ T61] ip6gre1 (unregistering): left promiscuous mode [ 1168.996403][ T5919] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1169.019213][ T5899] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 1169.047892][ T5899] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1169.072784][ T5899] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1169.092288][ T5899] usb 4-1: can't read configurations, error -61 [ 1169.158620][ T5919] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1169.189932][ T5919] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1169.208770][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1169.236419][ T5919] usb 5-1: Product: syz [ 1169.244263][ T5919] usb 5-1: Manufacturer: syz [ 1169.256471][ T5919] usb 5-1: SerialNumber: syz [ 1169.264572][ T5899] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 1169.321055][ T5899] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1169.338223][ T5899] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1169.356726][ T5899] usb 4-1: can't read configurations, error -61 [ 1169.366920][ T5899] usb usb4-port1: unable to enumerate USB device [ 1169.418353][ T61] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1169.526799][ T5919] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 54 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1169.558215][T12586] Bluetooth: hci0: command tx timeout [ 1169.945093][ T61] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1169.972841][ T61] bond0 (unregistering): Released all slaves [ 1169.995004][ T61] bond1 (unregistering): Released all slaves [ 1170.212496][ T61] bond2 (unregistering): Released all slaves [ 1170.304249][T20842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4375'. [ 1170.563380][ T61] bond3 (unregistering): Released all slaves [ 1170.621440][T20772] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.640780][T20772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.668960][T20772] bridge_slave_0: entered allmulticast mode [ 1170.706872][T20846] FAULT_INJECTION: forcing a failure. [ 1170.706872][T20846] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1170.713281][T20772] bridge_slave_0: entered promiscuous mode [ 1170.722535][T20846] CPU: 1 UID: 0 PID: 20846 Comm: syz.3.4376 Tainted: G L syzkaller #0 PREEMPT(full) [ 1170.722628][T20846] Tainted: [L]=SOFTLOCKUP [ 1170.722650][T20846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1170.722684][T20846] Call Trace: [ 1170.722717][T20846] [ 1170.722741][T20846] dump_stack_lvl+0xe8/0x150 [ 1170.722837][T20846] should_fail_ex+0x414/0x560 [ 1170.722944][T20846] prepare_alloc_pages+0x22b/0x650 [ 1170.723029][T20846] __alloc_frozen_pages_noprof+0x123/0x370 [ 1170.723112][T20846] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1170.723227][T20846] ? policy_nodemask+0x27c/0x720 [ 1170.723327][T20846] alloc_pages_mpol+0x232/0x4a0 [ 1170.723544][T20846] vma_alloc_folio_noprof+0xe4/0x200 [ 1170.723603][T20846] ? finish_task_switch+0x162/0x940 [ 1170.723700][T20846] ? lock_acquire+0x107/0x340 [ 1170.723763][T20846] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1170.723850][T20846] ? ___pte_offset_map+0x29/0x240 [ 1170.723947][T20846] folio_prealloc+0x30/0x180 [ 1170.724037][T20846] do_pte_missing+0x14e8/0x3330 [ 1170.724155][T20846] handle_mm_fault+0x1b26/0x32b0 [ 1170.724233][T20846] ? __pte_offset_map_lock+0x13e/0x210 [ 1170.724351][T20846] ? handle_mm_fault+0xdb/0x32b0 [ 1170.724503][T20846] ? __pfx_handle_mm_fault+0x10/0x10 [ 1170.724627][T20846] ? follow_page_pte+0x7ef/0x13e0 [ 1170.724749][T20846] ? __pfx_follow_page_pte+0x10/0x10 [ 1170.724859][T20846] __get_user_pages+0x1650/0x29f0 [ 1170.725025][T20846] __gup_longterm_locked+0xde4/0x1660 [ 1170.725138][T20846] ? sanity_check_pinned_pages+0x1241/0x1300 [ 1170.725238][T20846] gup_fast_fallback+0x1d26/0x2290 [ 1170.725314][T20846] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 1170.725412][T20846] ? mempool_alloc_noprof+0x1c9/0x2f0 [ 1170.725488][T20846] ? blkdev_read_iter+0x23d/0x440 [ 1170.725636][T20846] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1170.725739][T20846] ? pin_user_pages_fast+0x4d/0xb0 [ 1170.725826][T20846] iov_iter_extract_pages+0x35f/0x5e0 [ 1170.725926][T20846] bio_iov_iter_get_pages+0x499/0x1490 [ 1170.726002][T20846] ? bio_associate_blkg_from_css+0xb3/0xd10 [ 1170.726092][T20846] ? lockdep_hardirqs_on+0x7b/0x110 [ 1170.726132][T20846] ? irqentry_exit+0x5e8/0x670 [ 1170.726236][T20846] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 1170.726352][T20846] __blkdev_direct_IO+0x663/0xf80 [ 1170.726511][T20846] ? __pfx___blkdev_direct_IO+0x10/0x10 [ 1170.726612][T20846] ? blkdev_direct_IO+0x518/0x1800 [ 1170.726725][T20846] blkdev_direct_IO+0x127e/0x1800 [ 1170.726833][T20846] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1170.726925][T20846] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 1170.727012][T20846] ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0 [ 1170.727077][T20846] ? blkdev_read_iter+0x210/0x440 [ 1170.727164][T20846] ? current_time+0x222/0x360 [ 1170.727269][T20846] ? blkdev_read_iter+0x210/0x440 [ 1170.727365][T20846] ? touch_atime+0x384/0x6d0 [ 1170.727445][T20846] ? blkdev_read_iter+0x210/0x440 [ 1170.727541][T20846] blkdev_read_iter+0x23d/0x440 [ 1170.727682][T20846] do_iter_readv_writev+0x623/0x8c0 [ 1170.727768][T20846] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1170.727831][T20846] ? common_file_perm+0x1b5/0x220 [ 1170.727911][T20846] ? bpf_lsm_file_permission+0x9/0x20 [ 1170.727966][T20846] ? security_file_permission+0x75/0x290 [ 1170.728029][T20846] ? rw_verify_area+0x2a6/0x4d0 [ 1170.728127][T20846] vfs_readv+0x253/0x850 [ 1170.728213][T20846] ? __pfx_vfs_readv+0x10/0x10 [ 1170.728322][T20846] ? __fget_files+0x2a/0x420 [ 1170.728409][T20846] ? __fget_files+0x3a0/0x420 [ 1170.728482][T20846] ? __fget_files+0x2a/0x420 [ 1170.728571][T20846] __ia32_compat_sys_preadv2+0x227/0x320 [ 1170.728653][T20846] ? __pfx___ia32_compat_sys_preadv2+0x10/0x10 [ 1170.728760][T20846] __do_fast_syscall_32+0x1dc/0x570 [ 1170.728825][T20846] ? lockdep_hardirqs_on+0x7b/0x110 [ 1170.728878][T20846] ? do_fast_syscall_32+0x34/0x80 [ 1170.728935][T20846] ? irqentry_exit+0x10f/0x670 [ 1170.729026][T20846] do_fast_syscall_32+0x34/0x80 [ 1170.729112][T20846] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1170.729186][T20846] RIP: 0023:0xf708d539 [ 1170.729242][T20846] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1170.729288][T20846] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 000000000000017a [ 1170.729362][T20846] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 1170.729415][T20846] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1170.729455][T20846] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1170.729488][T20846] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1170.729520][T20846] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1170.729599][T20846] [ 1171.278197][T20841] macsec0: entered promiscuous mode [ 1171.285770][T20842] veth1_macvtap: left promiscuous mode [ 1171.317277][T20842] macsec0 (unregistering): left promiscuous mode [ 1171.329551][ T61] tipc: Disabling bearer [ 1171.335279][ T61] tipc: Disabling bearer [ 1171.341492][ T61] tipc: Left network mode [ 1171.346578][T20772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.354382][T20772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.402746][T20772] bridge_slave_1: entered allmulticast mode [ 1171.433371][T20772] bridge_slave_1: entered promiscuous mode [ 1171.571577][T20772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1171.597432][T20772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1171.626564][T12586] Bluetooth: hci0: command tx timeout [ 1171.748944][T20772] team0: Port device team_slave_0 added [ 1171.769994][T20772] team0: Port device team_slave_1 added [ 1171.844130][T20772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1171.870516][T20772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1171.899678][T20772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1171.940391][T20772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1171.947613][T20772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1171.974526][T20772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1172.126497][ T61] hsr_slave_0: left promiscuous mode [ 1172.144376][ T61] hsr_slave_1: left promiscuous mode [ 1172.225062][ T61] batadv0: left allmulticast mode [ 1172.252454][ T61] batadv0: left promiscuous mode [ 1172.264108][ T61] veth1_macvtap: left promiscuous mode [ 1172.279142][ T61] veth0_macvtap: left promiscuous mode [ 1172.292857][ T61] veth1_vlan: left promiscuous mode [ 1172.305661][ T61] veth0_vlan: left promiscuous mode [ 1172.389448][ T6338] usb 5-1: USB disconnect, device number 54 [ 1172.420388][ T6338] usblp0: removed [ 1172.665083][T20873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4381'. [ 1173.199004][T20882] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1173.205587][T20882] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1173.228645][T20882] vhci_hcd vhci_hcd.0: Device attached [ 1173.538192][ T5899] usb 40-1: SetAddress Request (18) to port 0 [ 1173.569742][ T5899] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1173.672285][T20884] vhci_hcd: connection closed [ 1173.677305][ T6139] vhci_hcd vhci_hcd.3: stop threads [ 1173.706844][T12586] Bluetooth: hci0: command tx timeout [ 1173.713826][ T6139] vhci_hcd vhci_hcd.3: release socket [ 1173.736738][ T6139] vhci_hcd vhci_hcd.3: disconnect device [ 1174.298870][T20898] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4387'. [ 1174.834291][T20772] hsr_slave_0: entered promiscuous mode [ 1174.841325][T20772] hsr_slave_1: entered promiscuous mode [ 1174.847855][T20772] debugfs: 'hsr0' already exists in 'hsr' [ 1174.853820][T20772] Cannot create hsr debugfs directory [ 1175.359220][ T61] IPVS: stop unused estimator thread 0... [ 1176.196430][ T43] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1176.228489][T20926] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4395'. [ 1176.366400][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 1176.397419][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.433792][ T43] usb 2-1: config 0 has no interfaces? [ 1176.457568][ T43] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1176.489674][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.532027][ T43] usb 2-1: config 0 descriptor?? [ 1176.652922][T20772] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1176.693662][T20772] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1176.732643][T20772] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1176.839629][T20772] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1177.074932][T20772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1177.154323][T20772] 8021q: adding VLAN 0 to HW filter on device team0 [ 1177.303687][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.310981][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1177.420613][ T6139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.427903][ T6139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1177.732084][T20772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1177.998125][T20772] veth0_vlan: entered promiscuous mode [ 1178.121891][T20772] veth1_vlan: entered promiscuous mode [ 1178.244649][T20772] veth0_macvtap: entered promiscuous mode [ 1178.270817][T20772] veth1_macvtap: entered promiscuous mode [ 1178.337691][T20772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1178.372707][T20772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1178.410325][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.426066][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.521608][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.537357][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.768303][ T43] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1178.815080][ T6139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.835164][ T6139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1178.846535][ T5899] usb 40-1: device descriptor read/8, error -110 [ 1178.926413][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 1178.942204][ T43] usb 4-1: config 106 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.965784][ T43] usb 4-1: config 106 has 0 interfaces, different from the descriptor's value: 1 [ 1179.005521][ T6139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.022317][ T6139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.033740][ T43] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 1179.111632][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.141047][ T43] usb 4-1: Product: syz [ 1179.172212][ T43] usb 4-1: Manufacturer: syz [ 1179.209308][T19896] usb 2-1: USB disconnect, device number 52 [ 1179.223179][ T43] usb 4-1: SerialNumber: syz [ 1179.317802][ T5899] usb usb40-port1: attempt power cycle [ 1179.866618][T19896] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1179.944501][ T5899] usb usb40-port1: unable to enumerate USB device [ 1180.847450][T19896] usb 2-1: device descriptor read/64, error -71 [ 1181.086501][T19896] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1181.248048][T19896] usb 2-1: Using ep0 maxpacket: 32 [ 1181.258999][T19896] usb 2-1: config 1 has an invalid interface number: 233 but max is 0 [ 1181.269723][T19896] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1181.305106][T19896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.440582][T19896] usb 2-1: config 1 has no interface number 0 [ 1181.465383][T19896] usb 2-1: config 1 interface 233 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1181.508724][T19896] usb 2-1: config 1 interface 233 has no altsetting 0 [ 1181.541270][T19896] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=34.ac [ 1181.556339][T19896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.576647][T19896] usb 2-1: Product: syz [ 1181.585765][T19896] usb 2-1: Manufacturer: syz [ 1181.600797][T19896] usb 2-1: SerialNumber: syz [ 1181.863967][T19896] imon_raw 2-1:1.233: IR endpoint missing [ 1181.890321][T19896] usb 2-1: USB disconnect, device number 54 [ 1182.004675][ T43] usb 4-1: USB disconnect, device number 54 [ 1182.591453][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.598042][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.672956][T19896] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1183.056403][T21050] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4416'. [ 1183.096375][T19896] usb 4-1: Using ep0 maxpacket: 16 [ 1183.120493][T19896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.132583][T19896] usb 4-1: config 0 has no interfaces? [ 1183.140444][T19896] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1183.177763][T19896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.203943][T19896] usb 4-1: config 0 descriptor?? [ 1183.307121][ T5958] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1183.490303][ T5958] usb 5-1: Using ep0 maxpacket: 16 [ 1183.517745][ T5958] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 1183.558487][ T5958] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.588491][ T5958] usb 5-1: config 0 has no interface number 0 [ 1183.598648][ T5958] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1183.623586][ T5958] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 1183.644266][ T5958] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1183.665009][ T5958] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1183.686746][ T5958] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1183.706686][ T5958] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1183.728839][ T5958] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1183.748518][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.786852][ T5958] usb 5-1: config 0 descriptor?? [ 1183.792666][T21050] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1183.809192][ T5958] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1184.009390][T19896] usb 5-1: USB disconnect, device number 55 [ 1184.557934][T21062] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1184.572849][T21062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4420'. [ 1185.082248][T21069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4422'. [ 1185.441660][T19896] usb 4-1: USB disconnect, device number 55 [ 1185.506956][ T6338] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1185.688729][ T6338] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1185.699224][ T6338] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1185.731499][ T6338] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1185.749343][ T6338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1185.764745][ T6338] usb 5-1: SerialNumber: syz [ 1186.141088][T21083] syzkaller0: entered promiscuous mode [ 1186.146728][T21083] syzkaller0: entered allmulticast mode [ 1186.846461][T19896] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1187.042677][T19896] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1187.065625][T19896] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1187.083778][T19896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1187.106213][T19896] usb 4-1: Product: syz [ 1187.116529][T19896] usb 4-1: Manufacturer: syz [ 1187.128649][T19896] usb 4-1: SerialNumber: syz [ 1187.148435][ T5919] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1187.326700][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 1187.343272][ T5919] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1187.382178][T19896] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 56 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1187.408915][ T5919] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1187.436479][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1187.453912][ T5919] usb 2-1: Product: syz [ 1187.464054][ T5919] usb 2-1: Manufacturer: syz [ 1187.479038][ T5919] usb 2-1: SerialNumber: syz [ 1187.490613][ T5919] usb 2-1: config 0 descriptor?? [ 1187.506139][T21096] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1187.533167][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1187.533190][ T30] audit: type=1326 audit(1767842900.679:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21104 comm="syz.0.4432" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1187.633089][ T30] audit: type=1326 audit(1767842900.679:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21104 comm="syz.0.4432" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1187.699832][ T30] audit: type=1326 audit(1767842900.729:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21104 comm="syz.0.4432" exe="/root/syz-executor" sig=0 arch=40000003 syscall=244 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1187.758007][ T5952] usb 6-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1187.801143][ T5952] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1187.814653][ T30] audit: type=1326 audit(1767842900.729:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21104 comm="syz.0.4432" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1187.916692][ T30] audit: type=1326 audit(1767842900.729:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21104 comm="syz.0.4432" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1188.021549][ T30] audit: type=1326 audit(1767842900.729:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21104 comm="syz.0.4432" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1188.071684][ T5952] usb 6-1: USB disconnect, device number 114 [ 1188.156996][ T30] audit: type=1326 audit(1767842900.729:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21104 comm="syz.0.4432" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1188.235676][ T30] audit: type=1326 audit(1767842900.729:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21104 comm="syz.0.4432" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1188.342669][ T30] audit: type=1326 audit(1767842900.749:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21104 comm="syz.0.4432" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1188.445026][ T30] audit: type=1326 audit(1767842900.749:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21104 comm="syz.0.4432" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1188.589970][ T6338] usb 5-1: 0:2 : does not exist [ 1188.650557][ T6338] usb 5-1: unit 5 not found! [ 1188.704430][ T6338] usb 5-1: USB disconnect, device number 56 [ 1188.797446][T18290] udevd[18290]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1188.816860][T21118] syzkaller0: entered promiscuous mode [ 1188.825390][T21118] syzkaller0: entered allmulticast mode [ 1189.112538][T21125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4437'. [ 1189.166938][ T5919] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1189.336359][ T5919] usb 6-1: Using ep0 maxpacket: 8 [ 1189.345144][ T5919] usb 6-1: config 0 has an invalid interface number: 56 but max is 0 [ 1189.354240][ T5919] usb 6-1: config 0 has no interface number 0 [ 1189.373141][ T5919] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1189.394438][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.422642][ T5919] usb 6-1: Product: syz [ 1189.432558][ T5919] usb 6-1: Manufacturer: syz [ 1189.441371][ T5919] usb 6-1: SerialNumber: syz [ 1189.457228][ T5919] usb 6-1: config 0 descriptor?? [ 1189.477876][ T5919] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1189.501901][ T5919] pctv452e: pctv452e_power_ctrl: 1 [ 1189.501901][ T5919] [ 1189.520624][ T5919] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1189.520624][ T5919] [ 1189.547055][ T5919] dvb-usb: bulk message failed: -22 (5/0) [ 1189.566577][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1189.586664][ T5919] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1189.630985][ T5919] usb 6-1: media controller created [ 1189.636725][ T5919] dvb-usb: bulk message failed: -22 (8/0) [ 1189.644468][ T5919] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1189.652895][ T5919] dvb-usb: MAC address reading failed. [ 1189.691867][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1189.821865][T21131] overlayfs: missing 'lowerdir' [ 1189.883552][ T5919] DVB: Unable to find symbol stb0899_attach() [ 1189.912135][ T5919] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1189.935590][ T5952] usb 2-1: USB disconnect, device number 55 [ 1190.150251][T21136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.195034][T21136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1190.203327][ T5919] rc_core: IR keymap rc-tt-1500 not found [ 1190.229622][ T5919] Registered IR keymap rc-empty [ 1190.230868][ T6338] usb 4-1: USB disconnect, device number 56 [ 1190.278144][ T6338] usblp0: removed [ 1190.292582][ T5919] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1190.376424][ T10] usb 5-1: new low-speed USB device number 57 using dummy_hcd [ 1190.399445][T21139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4442'. [ 1190.420238][ T5919] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input67 [ 1190.462490][ T5919] dvb-usb: schedule remote query interval to 100 msecs. [ 1190.480840][ T5919] pctv452e: pctv452e_power_ctrl: 0 [ 1190.480840][ T5919] [ 1190.500975][ T5919] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1190.529409][T21143] syzkaller0: entered promiscuous mode [ 1190.543068][T21143] syzkaller0: entered allmulticast mode [ 1190.549876][ T10] usb 5-1: Invalid ep0 maxpacket: 64 [ 1190.555638][ T5919] usb 6-1: USB disconnect, device number 115 [ 1190.696862][ T10] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 1190.713228][ T5919] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1190.856418][ T10] usb 5-1: Invalid ep0 maxpacket: 64 [ 1190.862643][ T10] usb usb5-port1: attempt power cycle [ 1190.945531][T21149] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1191.050067][T21149] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1191.158123][T21150] FAULT_INJECTION: forcing a failure. [ 1191.158123][T21150] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.186049][T21150] CPU: 1 UID: 0 PID: 21150 Comm: syz.1.4446 Tainted: G L syzkaller #0 PREEMPT(full) [ 1191.186098][T21150] Tainted: [L]=SOFTLOCKUP [ 1191.186107][T21150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1191.186119][T21150] Call Trace: [ 1191.186129][T21150] [ 1191.186139][T21150] dump_stack_lvl+0xe8/0x150 [ 1191.186171][T21150] should_fail_ex+0x414/0x560 [ 1191.186208][T21150] should_failslab+0xa8/0x100 [ 1191.186235][T21150] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 1191.186272][T21150] ? __d_alloc+0x37/0x6f0 [ 1191.186307][T21150] __d_alloc+0x37/0x6f0 [ 1191.186344][T21150] d_alloc+0x4b/0x190 [ 1191.186371][T21150] ? lookup_one_qstr_excl+0xc8/0x360 [ 1191.186403][T21150] lookup_one_qstr_excl+0xdc/0x360 [ 1191.186432][T21150] ? lookup_noperm_common+0x245/0x430 [ 1191.186466][T21150] start_dirop+0x5c/0x90 [ 1191.186495][T21150] simple_start_creating+0xc4/0x100 [ 1191.186524][T21150] ? __pfx_simple_start_creating+0x10/0x10 [ 1191.186553][T21150] ? do_raw_spin_unlock+0x122/0x240 [ 1191.186582][T21150] ? mntput+0x65/0xc0 [ 1191.186609][T21150] debugfs_start_creating+0xdb/0x1a0 [ 1191.186636][T21150] __debugfs_create_file+0x6f/0x400 [ 1191.186663][T21150] debugfs_create_file_full+0x3f/0x60 [ 1191.186690][T21150] ref_tracker_dir_debugfs+0x14e/0x2d0 [ 1191.186715][T21150] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1191.186769][T21150] ? trace_kmalloc+0x1f/0xb0 [ 1191.186787][T21150] ? __kvmalloc_node_noprof+0x5f5/0x920 [ 1191.186817][T21150] ? __raw_spin_lock_init+0x45/0x100 [ 1191.186851][T21150] alloc_netdev_mqs+0x272/0x11b0 [ 1191.186883][T21150] ? __pfx_macvlan_setup+0x10/0x10 [ 1191.186922][T21150] rtnl_create_link+0x31f/0xcf0 [ 1191.186963][T21150] rtnl_newlink_create+0x25c/0xb00 [ 1191.187004][T21150] ? __mutex_lock+0x5bb/0x1350 [ 1191.187036][T21150] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1191.187092][T21150] ? __pfx___mutex_lock+0x10/0x10 [ 1191.187129][T21150] ? ns_capable+0x8a/0xf0 [ 1191.187156][T21150] rtnl_newlink+0x16e7/0x1c90 [ 1191.187198][T21150] ? __pfx_rtnl_newlink+0x10/0x10 [ 1191.187220][T21150] ? __do_fast_syscall_32+0x1dc/0x570 [ 1191.187245][T21150] ? do_fast_syscall_32+0x34/0x80 [ 1191.187268][T21150] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1191.187335][T21150] ? kasan_quarantine_put+0xbb/0x1f0 [ 1191.187357][T21150] ? lockdep_hardirqs_on+0x7b/0x110 [ 1191.187386][T21150] ? kmem_cache_free+0x197/0x620 [ 1191.187408][T21150] ? nlmon_xmit+0xb0/0x100 [ 1191.187447][T21150] ? __lock_acquire+0x6b6/0x2cf0 [ 1191.187480][T21150] ? __local_bh_enable_ip+0xd0/0x130 [ 1191.187504][T21150] ? lockdep_hardirqs_on+0x7b/0x110 [ 1191.187525][T21150] ? __dev_queue_xmit+0x289/0x31c0 [ 1191.187555][T21150] ? __local_bh_enable_ip+0xd0/0x130 [ 1191.187576][T21150] ? __dev_queue_xmit+0x289/0x31c0 [ 1191.187613][T21150] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1191.187656][T21150] ? __pfx_rtnl_newlink+0x10/0x10 [ 1191.187682][T21150] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1191.187712][T21150] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1191.187736][T21150] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1191.187760][T21150] ? ref_tracker_free+0x63a/0x7d0 [ 1191.187784][T21150] ? __asan_memcpy+0x40/0x70 [ 1191.187819][T21150] ? __pfx_ref_tracker_free+0x10/0x10 [ 1191.187856][T21150] netlink_rcv_skb+0x208/0x470 [ 1191.187888][T21150] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1191.187916][T21150] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1191.187960][T21150] ? netlink_deliver_tap+0x2e/0x1b0 [ 1191.187999][T21150] netlink_unicast+0x82f/0x9e0 [ 1191.188036][T21150] ? __pfx_netlink_unicast+0x10/0x10 [ 1191.188061][T21150] ? __alloc_skb+0x198/0x3a0 [ 1191.188090][T21150] ? netlink_sendmsg+0x642/0xb30 [ 1191.188114][T21150] ? skb_put+0x11b/0x210 [ 1191.188139][T21150] netlink_sendmsg+0x805/0xb30 [ 1191.188174][T21150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1191.188202][T21150] ? __import_iovec+0x5d4/0x7f0 [ 1191.188224][T21150] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1191.188251][T21150] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1191.188269][T21150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1191.188296][T21150] __sock_sendmsg+0x21c/0x270 [ 1191.188328][T21150] ____sys_sendmsg+0x505/0x820 [ 1191.188365][T21150] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1191.188400][T21150] ? kstrtouint+0x6e/0xe0 [ 1191.188444][T21150] ___sys_sendmsg+0x21f/0x2a0 [ 1191.188476][T21150] ? __pfx____sys_sendmsg+0x10/0x10 [ 1191.188504][T21150] ? get_pid_task+0x20/0x1f0 [ 1191.188534][T21150] ? get_pid_task+0x20/0x1f0 [ 1191.188561][T21150] ? get_pid_task+0x20/0x1f0 [ 1191.188626][T21150] ? __fget_files+0x2a/0x420 [ 1191.188655][T21150] ? __fget_files+0x3a0/0x420 [ 1191.188696][T21150] __sys_sendmsg+0x164/0x220 [ 1191.188728][T21150] ? __pfx___sys_sendmsg+0x10/0x10 [ 1191.188768][T21150] ? __pfx_ksys_write+0x10/0x10 [ 1191.188791][T21150] ? rcu_is_watching+0x15/0xb0 [ 1191.188830][T21150] __do_fast_syscall_32+0x1dc/0x570 [ 1191.188856][T21150] ? lockdep_hardirqs_on+0x7b/0x110 [ 1191.188877][T21150] ? do_fast_syscall_32+0x34/0x80 [ 1191.188903][T21150] ? irqentry_exit+0x10f/0x670 [ 1191.188926][T21150] ? rcu_is_watching+0x15/0xb0 [ 1191.188957][T21150] do_fast_syscall_32+0x34/0x80 [ 1191.188984][T21150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1191.189012][T21150] RIP: 0023:0xf700d539 [ 1191.189033][T21150] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1191.189054][T21150] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1191.189086][T21150] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 1191.189104][T21150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1191.189119][T21150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1191.189133][T21150] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1191.189148][T21150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1191.189184][T21150] [ 1191.764062][ T10] usb 5-1: new low-speed USB device number 59 using dummy_hcd [ 1191.832401][T21150] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1191.843567][T21150] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1191.896455][ T10] usb 5-1: Invalid ep0 maxpacket: 64 [ 1191.925766][T21154] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1191.947859][T21154] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1192.001700][T21155] netlink: 'syz.0.4449': attribute type 1 has an invalid length. [ 1192.046715][ T10] usb 5-1: new low-speed USB device number 60 using dummy_hcd [ 1192.077037][ T10] usb 5-1: Invalid ep0 maxpacket: 64 [ 1192.106840][ T10] usb usb5-port1: unable to enumerate USB device [ 1192.296382][T20972] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1192.429183][ T43] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1192.456479][T20972] usb 2-1: Using ep0 maxpacket: 8 [ 1192.463886][T20972] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 1192.472901][T20972] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1192.483886][T20972] usb 2-1: config 0 has no interface number 0 [ 1192.490453][T20972] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 1192.502113][T20972] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 1192.514521][T20972] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1192.527990][T20972] usb 2-1: config 0 interface 52 has no altsetting 0 [ 1192.539033][T20972] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 1192.556654][T20972] usb 2-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 1192.565241][T20972] usb 2-1: Product: syz [ 1192.575752][T20972] usb 2-1: SerialNumber: syz [ 1192.588681][ T43] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1192.607466][ T43] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1192.618078][T20972] usb 2-1: config 0 descriptor?? [ 1192.632251][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1192.645030][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.655100][ T43] usb 4-1: Product: syz [ 1192.659874][ T43] usb 4-1: Manufacturer: syz [ 1192.665051][ T43] usb 4-1: SerialNumber: syz [ 1192.685634][ T43] cdc_mbim 4-1:1.0: skipping garbage [ 1192.753736][T21172] netlink: 'syz.0.4454': attribute type 1 has an invalid length. [ 1192.806736][T21172] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1192.822625][T21176] netlink: 'syz.5.4456': attribute type 1 has an invalid length. [ 1192.865339][T21175] bond2: (slave geneve2): making interface the new active one [ 1192.891198][T21164] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1192.898753][T21175] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1192.926188][T21177] FAULT_INJECTION: forcing a failure. [ 1192.926188][T21177] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.977739][T20972] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input68 [ 1192.987130][T21177] CPU: 1 UID: 0 PID: 21177 Comm: syz.5.4456 Tainted: G L syzkaller #0 PREEMPT(full) [ 1192.987170][T21177] Tainted: [L]=SOFTLOCKUP [ 1192.987179][T21177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1192.987194][T21177] Call Trace: [ 1192.987204][T21177] [ 1192.987215][T21177] dump_stack_lvl+0xe8/0x150 [ 1192.987251][T21177] should_fail_ex+0x414/0x560 [ 1192.987291][T21177] should_failslab+0xa8/0x100 [ 1192.987321][T21177] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 1192.987358][T21177] ? __d_alloc+0x37/0x6f0 [ 1192.987395][T21177] __d_alloc+0x37/0x6f0 [ 1192.987432][T21177] d_alloc+0x4b/0x190 [ 1192.987460][T21177] ? lookup_one_qstr_excl+0xc8/0x360 [ 1192.987494][T21177] lookup_one_qstr_excl+0xdc/0x360 [ 1192.987523][T21177] ? lookup_noperm_common+0x245/0x430 [ 1192.987557][T21177] start_dirop+0x5c/0x90 [ 1192.987587][T21177] simple_start_creating+0xc4/0x100 [ 1192.987618][T21177] ? __pfx_simple_start_creating+0x10/0x10 [ 1192.987649][T21177] ? do_raw_spin_unlock+0x122/0x240 [ 1192.987680][T21177] ? mntput+0x65/0xc0 [ 1192.987708][T21177] debugfs_start_creating+0xdb/0x1a0 [ 1192.987734][T21177] __debugfs_create_file+0x6f/0x400 [ 1192.987770][T21177] debugfs_create_file_full+0x3f/0x60 [ 1192.987799][T21177] ref_tracker_dir_debugfs+0x14e/0x2d0 [ 1192.987823][T21177] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1192.987877][T21177] ? trace_kmalloc+0x1f/0xb0 [ 1192.987895][T21177] ? __kvmalloc_node_noprof+0x5f5/0x920 [ 1192.987930][T21177] ? __raw_spin_lock_init+0x45/0x100 [ 1192.987964][T21177] alloc_netdev_mqs+0x272/0x11b0 [ 1192.987995][T21177] ? __pfx_geneve_setup+0x10/0x10 [ 1192.988034][T21177] rtnl_create_link+0x31f/0xcf0 [ 1192.988074][T21177] rtnl_newlink_create+0x25c/0xb00 [ 1192.988108][T21177] ? __mutex_lock+0x5bb/0x1350 [ 1192.988138][T21177] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1192.988170][T21177] ? __pfx___mutex_lock+0x10/0x10 [ 1192.988206][T21177] ? ns_capable+0x8a/0xf0 [ 1192.988233][T21177] rtnl_newlink+0x16e7/0x1c90 [ 1192.988275][T21177] ? __pfx_rtnl_newlink+0x10/0x10 [ 1192.988297][T21177] ? __do_fast_syscall_32+0x1dc/0x570 [ 1192.988321][T21177] ? do_fast_syscall_32+0x34/0x80 [ 1192.988345][T21177] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1192.988411][T21177] ? kasan_quarantine_put+0xbb/0x1f0 [ 1192.988433][T21177] ? lockdep_hardirqs_on+0x7b/0x110 [ 1192.988467][T21177] ? kmem_cache_free+0x197/0x620 [ 1192.988488][T21177] ? nlmon_xmit+0xb0/0x100 [ 1192.988527][T21177] ? __lock_acquire+0x6b6/0x2cf0 [ 1192.988561][T21177] ? __local_bh_enable_ip+0xd0/0x130 [ 1192.988584][T21177] ? lockdep_hardirqs_on+0x7b/0x110 [ 1192.988606][T21177] ? __dev_queue_xmit+0x289/0x31c0 [ 1192.988635][T21177] ? __local_bh_enable_ip+0xd0/0x130 [ 1192.988655][T21177] ? __dev_queue_xmit+0x289/0x31c0 [ 1192.988693][T21177] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1192.988744][T21177] ? __pfx_rtnl_newlink+0x10/0x10 [ 1192.988768][T21177] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1192.988797][T21177] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1192.988820][T21177] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1192.988842][T21177] ? ref_tracker_free+0x63a/0x7d0 [ 1192.988865][T21177] ? __asan_memcpy+0x40/0x70 [ 1192.988899][T21177] ? __pfx_ref_tracker_free+0x10/0x10 [ 1192.988939][T21177] netlink_rcv_skb+0x208/0x470 [ 1192.988976][T21177] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1192.989002][T21177] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1192.989044][T21177] ? netlink_deliver_tap+0x2e/0x1b0 [ 1192.989080][T21177] netlink_unicast+0x82f/0x9e0 [ 1192.989115][T21177] ? __pfx_netlink_unicast+0x10/0x10 [ 1192.989139][T21177] ? __alloc_skb+0x198/0x3a0 [ 1192.989163][T21177] ? netlink_sendmsg+0x642/0xb30 [ 1192.989190][T21177] ? skb_put+0x11b/0x210 [ 1192.989218][T21177] netlink_sendmsg+0x805/0xb30 [ 1192.989258][T21177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1192.989298][T21177] ? __import_iovec+0x5d4/0x7f0 [ 1192.989335][T21177] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1192.989367][T21177] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1192.989389][T21177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1192.989419][T21177] __sock_sendmsg+0x21c/0x270 [ 1192.989463][T21177] ____sys_sendmsg+0x505/0x820 [ 1192.989497][T21177] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1192.989529][T21177] ? kstrtouint+0x6e/0xe0 [ 1192.989572][T21177] ___sys_sendmsg+0x21f/0x2a0 [ 1192.989602][T21177] ? __pfx____sys_sendmsg+0x10/0x10 [ 1192.989629][T21177] ? get_pid_task+0x20/0x1f0 [ 1192.989657][T21177] ? get_pid_task+0x20/0x1f0 [ 1192.989683][T21177] ? get_pid_task+0x20/0x1f0 [ 1192.989744][T21177] ? __fget_files+0x2a/0x420 [ 1192.989770][T21177] ? __fget_files+0x3a0/0x420 [ 1192.989810][T21177] __sys_sendmsg+0x164/0x220 [ 1192.989839][T21177] ? __pfx___sys_sendmsg+0x10/0x10 [ 1192.989877][T21177] ? __pfx_ksys_write+0x10/0x10 [ 1192.989912][T21177] __do_fast_syscall_32+0x1dc/0x570 [ 1192.989944][T21177] ? lockdep_hardirqs_on+0x7b/0x110 [ 1192.989966][T21177] ? do_fast_syscall_32+0x34/0x80 [ 1192.989991][T21177] ? irqentry_exit+0x10f/0x670 [ 1192.990018][T21177] do_fast_syscall_32+0x34/0x80 [ 1192.990044][T21177] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1192.990071][T21177] RIP: 0023:0xf705d539 [ 1192.990091][T21177] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1192.990112][T21177] RSP: 002b:00000000f542c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1192.990136][T21177] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1192.990153][T21177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1192.990167][T21177] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1192.990181][T21177] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1192.990195][T21177] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1192.990229][T21177] [ 1193.849597][T18280] usb 2-1: USB disconnect, device number 56 [ 1193.849700][ C1] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 1193.961663][T21164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1193.974630][T21164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.037354][T21164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.087915][T21164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.137688][T21164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.207537][T21164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.239222][T21164] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1194.247703][ T43] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 1194.255198][ T43] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 1194.268872][ T5919] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1194.278094][ T43] wwan wwan0: port wwan0mbim0 attached [ 1194.294516][ T43] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 06:b3:c5:5b:f6:19 [ 1194.469286][ T6338] usb 4-1: USB disconnect, device number 57 [ 1194.482515][ T6338] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 1194.506943][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 1194.527107][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.556328][ T5919] usb 5-1: config 0 has no interfaces? [ 1194.612227][ T5919] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1194.649638][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.725244][ T5919] usb 5-1: config 0 descriptor?? [ 1194.735545][ T6338] wwan wwan0: port wwan0mbim0 disconnected [ 1195.116525][ T5919] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1195.166109][T21189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1195.175648][T21189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.286860][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 1195.295641][ T5919] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1195.305856][ T5919] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1195.320475][ T5919] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 1195.341402][ T5919] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1195.363028][ T5919] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1195.379958][ T5919] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1195.392360][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.446490][ T6338] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1195.608378][ T6338] usb 4-1: Using ep0 maxpacket: 32 [ 1195.616227][ T6338] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 1195.628836][ T5919] usb 2-1: GET_CAPABILITIES returned 0 [ 1195.656406][ T5919] usbtmc 2-1:16.0: can't read capabilities [ 1195.670811][ T6338] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1195.702151][ T6338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.714112][ T6338] usb 4-1: Product: syz [ 1195.718895][ T6338] usb 4-1: Manufacturer: syz [ 1195.724339][ T6338] usb 4-1: SerialNumber: syz [ 1195.737258][ T6338] usb 4-1: config 0 descriptor?? [ 1195.744272][T21203] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1195.779823][ T6338] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1195.885455][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1195.959359][ T43] usb 2-1: USB disconnect, device number 57 [ 1196.069347][ T6338] usb 4-1: USB disconnect, device number 58 [ 1196.096383][T20972] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1196.169469][T18289] udevd[18289]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1196.286585][T20972] usb 6-1: Using ep0 maxpacket: 8 [ 1196.294124][T20972] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1196.303694][T20972] usb 6-1: config 0 has no interface number 0 [ 1196.318305][T20972] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1196.340301][T20972] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1196.360017][T20972] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1196.387680][T20972] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1196.411799][T20972] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1196.430369][T20972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.445539][T20972] usb 6-1: config 0 descriptor?? [ 1196.465850][T20972] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1196.735779][ T6338] usb 5-1: USB disconnect, device number 61 [ 1196.825613][T21224] input: syz0 as /devices/virtual/input/input69 [ 1196.857303][ C1] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 1196.857308][ T5919] usb 6-1: USB disconnect, device number 116 [ 1196.892676][ T5919] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1197.133139][T20972] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1197.241683][T21240] netlink: 'syz.4.4468': attribute type 10 has an invalid length. [ 1197.350144][T20972] usb 4-1: Using ep0 maxpacket: 32 [ 1197.359152][T21240] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4468'. [ 1197.399862][T20972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1197.427368][T21240] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1197.434059][T21240] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.466594][T20972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1197.508236][T20972] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 1197.537002][T20972] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1197.662508][T20972] usb 4-1: Product: syz [ 1197.666967][T21240] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1197.676599][T20972] usb 4-1: SerialNumber: syz [ 1197.743767][T20972] usb 4-1: config 0 descriptor?? [ 1197.919764][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1197.919821][ T30] audit: type=1326 audit(1767842911.069:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21251 comm="syz.0.4471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1197.989846][ T30] audit: type=1326 audit(1767842911.109:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21251 comm="syz.0.4471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1198.051460][ T30] audit: type=1326 audit(1767842911.109:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21251 comm="syz.0.4471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1198.107768][ T30] audit: type=1326 audit(1767842911.109:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21251 comm="syz.0.4471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1198.184077][ T30] audit: type=1326 audit(1767842911.109:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21251 comm="syz.0.4471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1198.251339][ T30] audit: type=1326 audit(1767842911.109:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21251 comm="syz.0.4471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1199.777175][ T30] audit: type=1326 audit(1767842911.109:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21251 comm="syz.0.4471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1199.866585][ T30] audit: type=1326 audit(1767842911.109:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21251 comm="syz.0.4471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1199.946407][ T30] audit: type=1326 audit(1767842911.109:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21251 comm="syz.0.4471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1200.024885][ T30] audit: type=1326 audit(1767842911.309:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21246 comm="syz.1.4470" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 1200.258195][ T43] usb 4-1: USB disconnect, device number 59 [ 1200.501238][T21280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1200.509359][T21280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1200.547501][T21280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1200.566548][T21280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1201.051014][T21304] tipc: Bearer : already 2 bearers with priority 10 [ 1201.106397][T21304] tipc: Bearer : trying with adjusted priority [ 1201.155348][T21304] tipc: New replicast peer: 255.255.255.255 [ 1201.189157][T21304] tipc: Enabled bearer , priority 9 [ 1202.497823][T21335] random: crng reseeded on system resumption [ 1202.692636][T21345] netlink: 8 bytes leftover after parsing attributes in process `+}[K'. [ 1203.048619][T21364] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 1203.121651][ T30] kauditd_printk_skb: 104 callbacks suppressed [ 1203.121671][ T30] audit: type=1326 audit(1767842916.269:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21365 comm="syz.5.4524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1203.167042][T21369] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 1203.331293][ T30] audit: type=1326 audit(1767842916.309:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21365 comm="syz.5.4524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1203.429654][ T30] audit: type=1326 audit(1767842916.309:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21365 comm="syz.5.4524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1203.496430][ T30] audit: type=1326 audit(1767842916.309:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21365 comm="syz.5.4524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1203.606461][ T30] audit: type=1326 audit(1767842916.369:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21365 comm="syz.5.4524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1203.644337][ T30] audit: type=1326 audit(1767842916.369:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21365 comm="syz.5.4524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1203.681389][ T30] audit: type=1326 audit(1767842916.369:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21365 comm="syz.5.4524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1203.774060][ T30] audit: type=1326 audit(1767842916.369:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21365 comm="syz.5.4524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1203.863227][ T30] audit: type=1326 audit(1767842916.369:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21365 comm="syz.5.4524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1203.951648][ T30] audit: type=1326 audit(1767842916.369:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21365 comm="syz.5.4524" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 1203.975823][T21392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4535'. [ 1205.995130][T21452] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4560'. [ 1207.795183][T21481] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4574'. [ 1208.455399][T21505] netlink: 'syz.0.4580': attribute type 12 has an invalid length. [ 1208.730194][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 1208.730214][ T30] audit: type=1326 audit(1767842921.879:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21508 comm="syz.0.4582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1208.896421][ T30] audit: type=1326 audit(1767842921.919:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21508 comm="syz.0.4582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1208.982779][ T30] audit: type=1326 audit(1767842921.919:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21508 comm="syz.0.4582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1209.031354][ T30] audit: type=1326 audit(1767842921.919:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21508 comm="syz.0.4582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1209.084330][ T30] audit: type=1326 audit(1767842921.919:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21508 comm="syz.0.4582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1209.141694][ T30] audit: type=1326 audit(1767842921.919:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21508 comm="syz.0.4582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1209.192428][ T30] audit: type=1326 audit(1767842921.919:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21508 comm="syz.0.4582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1209.265675][ T30] audit: type=1326 audit(1767842921.929:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21508 comm="syz.0.4582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1209.350373][ T30] audit: type=1326 audit(1767842921.929:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21508 comm="syz.0.4582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1209.386908][ T30] audit: type=1326 audit(1767842921.929:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21508 comm="syz.0.4582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1209.521523][T21526] usb usb7: usbfs: process 21526 (syz.0.4590) did not claim interface 0 before use [ 1209.718519][T21534] random: crng reseeded on system resumption [ 1209.814488][T21538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4595'. [ 1210.001409][T21545] tipc: Enabled bearer , priority 0 [ 1210.030601][T21545] syzkaller0: MTU too low for tipc bearer [ 1210.055838][T21545] tipc: Disabling bearer [ 1211.943260][T21630] program syz.0.4641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1211.974704][T21632] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1211.990330][T21631] IPVS: stopping master sync thread 21632 ... [ 1213.026421][ T43] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1213.176917][ T43] usb 4-1: device descriptor read/64, error -71 [ 1213.301223][T21675] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4660'. [ 1213.435500][T21679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4662'. [ 1213.447626][ T43] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1213.586661][ T43] usb 4-1: device descriptor read/64, error -71 [ 1213.696615][ T43] usb usb4-port1: attempt power cycle [ 1214.039389][T21701] random: crng reseeded on system resumption [ 1214.046891][ T43] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1214.080591][ T43] usb 4-1: device descriptor read/8, error -71 [ 1214.336442][ T43] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1214.378031][ T43] usb 4-1: device descriptor read/8, error -71 [ 1214.487026][ T43] usb usb4-port1: unable to enumerate USB device [ 1214.787517][ T30] kauditd_printk_skb: 433 callbacks suppressed [ 1214.787537][ T30] audit: type=1326 audit(1767842927.939:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21725 comm="syz.0.4681" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1214.859952][ T30] audit: type=1326 audit(1767842927.969:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21725 comm="syz.0.4681" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1214.883468][ T30] audit: type=1326 audit(1767842927.969:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21725 comm="syz.0.4681" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1214.937138][ T30] audit: type=1326 audit(1767842927.969:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21725 comm="syz.0.4681" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1214.988465][ T30] audit: type=1326 audit(1767842927.979:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21725 comm="syz.0.4681" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1215.039349][ T30] audit: type=1326 audit(1767842927.979:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21725 comm="syz.0.4681" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1215.073336][T21735] IPv6: Can't replace route, no match found [ 1215.102560][ T30] audit: type=1326 audit(1767842927.979:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21725 comm="syz.0.4681" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1215.145471][ T30] audit: type=1326 audit(1767842927.979:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21725 comm="syz.0.4681" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1215.214982][ T30] audit: type=1326 audit(1767842927.979:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21725 comm="syz.0.4681" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1215.243539][ T30] audit: type=1326 audit(1767842927.979:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21725 comm="syz.0.4681" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1215.298076][T21745] netlink: 'syz.1.4689': attribute type 13 has an invalid length. [ 1215.365336][T21745] gretap0: refused to change device tx_queue_len [ 1215.390863][T21745] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1215.435585][T21746] syzkaller0: entered promiscuous mode [ 1215.441775][T21746] syzkaller0: entered allmulticast mode [ 1215.494016][T21752] sch_tbf: burst 22 is lower than device wg0 mtu (1420) ! [ 1219.812527][ T30] kauditd_printk_skb: 253 callbacks suppressed [ 1219.812547][ T30] audit: type=1326 audit(1767842932.959:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21938 comm="syz.0.4774" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1219.912673][ T30] audit: type=1326 audit(1767842932.999:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21938 comm="syz.0.4774" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1219.985933][ T30] audit: type=1326 audit(1767842933.009:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21938 comm="syz.0.4774" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1220.139825][ T30] audit: type=1326 audit(1767842933.039:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21938 comm="syz.0.4774" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1220.266563][ T30] audit: type=1326 audit(1767842933.039:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21938 comm="syz.0.4774" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1220.327158][T21945] @: renamed from vlan0 (while UP) [ 1220.354017][ T30] audit: type=1326 audit(1767842933.039:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21938 comm="syz.0.4774" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1220.449896][ T30] audit: type=1326 audit(1767842933.039:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21938 comm="syz.0.4774" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1220.494057][ T30] audit: type=1326 audit(1767842933.039:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21938 comm="syz.0.4774" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1220.573025][ T30] audit: type=1326 audit(1767842933.039:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21938 comm="syz.0.4774" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1220.620333][ T30] audit: type=1326 audit(1767842933.039:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21938 comm="syz.0.4774" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1220.766000][T21954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4780'. [ 1221.849810][T21983] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4792'. [ 1222.302123][T21990] netlink: 'syz.3.4795': attribute type 4 has an invalid length. [ 1222.338541][T21990] netlink: 'syz.3.4795': attribute type 4 has an invalid length. [ 1222.716457][T22013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4805'. [ 1222.833745][T22018] netlink: 'syz.3.4808': attribute type 13 has an invalid length. [ 1223.198442][T22018] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1223.371971][T22036] hub 9-0:1.0: USB hub found [ 1223.382044][T22036] hub 9-0:1.0: 1 port detected [ 1223.525548][T22045] veth1_macvtap: left promiscuous mode [ 1223.540774][T22045] macsec0: entered promiscuous mode [ 1223.703700][T22053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4824'. [ 1223.793096][T22053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4824'. [ 1224.053780][T22070] IPv6: NLM_F_CREATE should be specified when creating new route [ 1224.257310][T22078] syz.0.4836 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1224.852518][T22103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4846'. [ 1225.145214][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 1225.145291][ T30] audit: type=1326 audit(1767842938.289:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22114 comm="syz.0.4852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1225.221842][ T30] audit: type=1326 audit(1767842938.329:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22114 comm="syz.0.4852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1225.284105][ T30] audit: type=1326 audit(1767842938.329:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22114 comm="syz.0.4852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1225.311471][ T30] audit: type=1326 audit(1767842938.329:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22114 comm="syz.0.4852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1225.363996][ T30] audit: type=1326 audit(1767842938.329:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22114 comm="syz.0.4852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1225.430162][ T30] audit: type=1326 audit(1767842938.329:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22114 comm="syz.0.4852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1225.458916][ T30] audit: type=1326 audit(1767842938.329:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22114 comm="syz.0.4852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1225.504835][ T30] audit: type=1326 audit(1767842938.329:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22114 comm="syz.0.4852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1225.551585][ T30] audit: type=1326 audit(1767842938.329:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22114 comm="syz.0.4852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1225.577109][ T30] audit: type=1326 audit(1767842938.329:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22114 comm="syz.0.4852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000 [ 1226.056170][T22144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4865'. [ 1226.120482][T22144] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1226.179406][T22144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4865'. [ 1226.226364][T22144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4865'. [ 1226.249146][T22148] netlink: 'syz.1.4865': attribute type 10 has an invalid length. [ 1226.296973][T22144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1226.322059][T22144] bond4: (slave bond0): Enslaving as an active interface with an up link [ 1226.345420][T22148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.352782][T22148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.403016][T22148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.410471][T22148] bridge0: port 2(bridge_slave_1) entered listening state [ 1226.418002][T22148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.425295][T22148] bridge0: port 1(bridge_slave_0) entered listening state [ 1226.481368][T22148] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1227.675274][T22190] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1227.755424][T22194] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1227.987249][T22201] usb usb1: usbfs: process 22201 (syz.1.4889) did not claim interface 0 before use [ 1228.022335][T22204] netlink: 'syz.5.4890': attribute type 12 has an invalid length. [ 1228.864688][T22242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4908'. [ 1228.999370][T22242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4908'. [ 1229.001615][T22249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4910'. [ 1229.135134][T22254] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4922'. [ 1229.184652][T22255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4912'. [ 1229.215914][T22254] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4922'. [ 1229.375149][T22258] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4914'. [ 1230.396677][T22308] random: crng reseeded on system resumption [ 1230.529600][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 1230.529620][ T30] audit: type=1326 audit(1767842943.679:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22310 comm="syz.4.4937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1230.601130][ T30] audit: type=1326 audit(1767842943.709:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22310 comm="syz.4.4937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1230.624309][ T30] audit: type=1326 audit(1767842943.709:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22310 comm="syz.4.4937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1230.650541][ T30] audit: type=1326 audit(1767842943.709:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22310 comm="syz.4.4937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1230.686541][ T30] audit: type=1326 audit(1767842943.709:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22310 comm="syz.4.4937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1230.741835][ T30] audit: type=1326 audit(1767842943.709:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22310 comm="syz.4.4937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1230.788010][T22316] veth0_to_team: entered promiscuous mode [ 1230.918394][ T30] audit: type=1326 audit(1767842943.709:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22310 comm="syz.4.4937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1230.947082][ T30] audit: type=1326 audit(1767842943.709:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22310 comm="syz.4.4937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1231.045039][ T30] audit: type=1326 audit(1767842943.709:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22310 comm="syz.4.4937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1231.122572][ T30] audit: type=1326 audit(1767842943.709:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22310 comm="syz.4.4937" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7539 code=0x7ffc0000 [ 1231.630543][T22343] netlink: 'syz.1.4951': attribute type 12 has an invalid length. [ 1231.696767][T22343] netlink: 'syz.1.4951': attribute type 29 has an invalid length. [ 1231.720442][T22343] __nla_validate_parse: 2 callbacks suppressed [ 1231.720474][T22343] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4951'. [ 1231.844497][T22348] netlink: 272 bytes leftover after parsing attributes in process `syz.0.4953'. [ 1232.127037][T22364] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4960'. [ 1232.263923][T22364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4960'. [ 1232.506956][ T31] INFO: task kworker/0:4:5906 blocked for more than 143 seconds. [ 1232.514762][ T31] Tainted: G L syzkaller #0 [ 1232.548628][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1232.568244][ T31] task:kworker/0:4 state:D stack:21880 pid:5906 tgid:5906 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1232.621236][ T31] Workqueue: usb_hub_wq hub_event [ 1232.645428][ T31] Call Trace: [ 1232.662143][ T31] [ 1232.672162][ T31] __schedule+0x149b/0x4fd0 [ 1232.686025][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 1232.699198][ T31] ? wq_worker_sleeping+0xfe/0x250 [ 1232.715678][ T31] ? __pfx___schedule+0x10/0x10 [ 1232.743919][ T31] ? schedule+0x91/0x360 [ 1232.768146][ T31] schedule+0x165/0x360 [ 1232.772409][ T31] schedule_preempt_disabled+0x13/0x30 [ 1232.806848][ T31] __mutex_lock+0x7e6/0x1350 [ 1232.836387][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1232.841259][ T31] ? hub_event+0x2182/0x4ef0 [ 1232.845909][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1232.896453][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1232.902605][ T31] hub_event+0x2182/0x4ef0 [ 1232.909824][ T31] ? __pfx_hub_event+0x10/0x10 [ 1232.952753][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1232.959612][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1232.965534][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1232.971554][ T31] process_scheduled_works+0xad1/0x1770 [ 1232.977433][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1232.983555][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1232.989014][ T31] worker_thread+0x8a0/0xda0 [ 1232.994434][ T31] kthread+0x711/0x8a0 [ 1232.998721][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1233.004325][ T31] ? __pfx_kthread+0x10/0x10 [ 1233.009234][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1233.019715][ T31] ? __pfx_kthread+0x10/0x10 [ 1233.027128][ T31] ret_from_fork+0x510/0xa50 [ 1233.036411][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1233.045081][ T31] ? __switch_to+0xc9e/0x1480 [ 1233.055287][ T31] ? __pfx_kthread+0x10/0x10 [ 1233.062385][ T31] ret_from_fork_asm+0x1a/0x30 [ 1233.072038][ T31] [ 1233.080616][ T31] [ 1233.080616][ T31] Showing all locks held in the system: [ 1233.127829][ T31] 1 lock held by khungtaskd/31: [ 1233.135389][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1233.145931][ T31] 2 locks held by getty/5584: [ 1233.157537][ T31] #0: ffff88814d6d40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1233.168001][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 1233.178600][ T31] 5 locks held by kworker/0:4/5906: [ 1233.183919][ T31] #0: ffff88801eedb548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1233.198662][ T31] #1: ffffc90004427bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1233.212277][ T31] #2: ffff888144373198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 1233.222812][ T31] #3: ffff8881443df518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 1233.245581][ T31] #4: ffff888143bd6e68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 1233.256159][ T31] 5 locks held by kworker/u8:16/6034: [ 1233.262392][ T31] #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1233.274011][ T31] #1: ffffc900047d7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1233.285104][ T31] #2: ffffffff8f304d50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 1233.295162][ T31] #3: ffffffff8f311e08 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 1233.305139][ T31] #4: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2b1/0x6e0 [ 1233.320124][ T31] 5 locks held by kworker/1:11/7910: [ 1233.325561][ T31] #0: ffff88801eedb548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1233.338563][ T31] #1: ffffc9001a77fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1233.350942][ T31] #2: ffff888144345198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 1233.360486][ T31] #3: ffff8881443d8518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 1233.371458][ T31] #4: ffff888143bd6e68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 1233.381704][ T31] 3 locks held by syz-executor/16123: [ 1233.387501][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1233.397856][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1233.407326][ T31] #2: ffffffff99b6d780 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x87/0x540 [ 1233.426771][ T31] [ 1233.431135][ T31] ============================================= [ 1233.431135][ T31] [ 1233.441984][ T31] NMI backtrace for cpu 1 [ 1233.442006][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1233.442037][ T31] Tainted: [L]=SOFTLOCKUP [ 1233.442046][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1233.442060][ T31] Call Trace: [ 1233.442070][ T31] [ 1233.442079][ T31] dump_stack_lvl+0xe8/0x150 [ 1233.442113][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1233.442145][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1233.442181][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1233.442214][ T31] sys_info+0x135/0x170 [ 1233.442239][ T31] watchdog+0xf95/0xfe0 [ 1233.442274][ T31] ? watchdog+0x20a/0xfe0 [ 1233.442310][ T31] kthread+0x711/0x8a0 [ 1233.442342][ T31] ? __pfx_watchdog+0x10/0x10 [ 1233.442371][ T31] ? __pfx_kthread+0x10/0x10 [ 1233.442418][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1233.442451][ T31] ? __pfx_kthread+0x10/0x10 [ 1233.442481][ T31] ret_from_fork+0x510/0xa50 [ 1233.442505][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1233.442524][ T31] ? __switch_to+0xc9e/0x1480 [ 1233.442559][ T31] ? __pfx_kthread+0x10/0x10 [ 1233.442587][ T31] ret_from_fork_asm+0x1a/0x30 [ 1233.442635][ T31] [ 1233.442667][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1233.572862][ C0] NMI backtrace for cpu 0 [ 1233.572884][ C0] CPU: 0 UID: 0 PID: 22379 Comm: syz.1.4966 Tainted: G L syzkaller #0 PREEMPT(full) [ 1233.572911][ C0] Tainted: [L]=SOFTLOCKUP [ 1233.572918][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1233.572930][ C0] RIP: 0010:unwind_next_frame+0xe64/0x23d0 [ 1233.572963][ C0] Code: 4c 39 e0 0f 96 c0 20 c8 3c 01 0f 85 d1 0b 00 00 48 89 df e8 ae 21 00 00 48 89 c3 48 bd 00 00 00 00 00 fc ff df 48 8b 44 24 30 <80> 3c 28 00 4c 8b 7c 24 10 74 08 4c 89 ff e8 a9 0d b3 00 49 89 1f [ 1233.572979][ C0] RSP: 0018:ffffc9000dc26bf8 EFLAGS: 00000202 [ 1233.572997][ C0] RAX: 1ffff92001b84da2 RBX: ffffffff8230e4a1 RCX: 1ffff92001b84d01 [ 1233.573012][ C0] RDX: ffffffff90246c64 RSI: 0000000000000002 RDI: ffffc9000dc26f40 [ 1233.573026][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: ffffffff8df41aa0 [ 1233.573040][ C0] R10: ffffc9000dc26d18 R11: ffffffff81acf3d0 R12: ffffc9000dc28000 [ 1233.573055][ C0] R13: 1ffff92001b84d9b R14: ffffc9000dc26cc8 R15: ffffc9000dc20000 [ 1233.573070][ C0] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 1233.573086][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1233.573101][ C0] CR2: 0000000035007ffc CR3: 0000000078944000 CR4: 00000000003526f0 [ 1233.573117][ C0] Call Trace: [ 1233.573125][ C0] [ 1233.573137][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 1233.573160][ C0] ? save_stack+0xf5/0x1f0 [ 1233.573180][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1233.573209][ C0] arch_stack_walk+0x11c/0x150 [ 1233.573234][ C0] ? save_stack+0xf5/0x1f0 [ 1233.573253][ C0] stack_trace_save+0x9c/0xe0 [ 1233.573281][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1233.573309][ C0] ? stack_depot_save_flags+0x33/0x810 [ 1233.573343][ C0] save_stack+0xf5/0x1f0 [ 1233.573361][ C0] ? __pfx_save_stack+0x10/0x10 [ 1233.573377][ C0] ? page_ext_get+0x22/0x2f0 [ 1233.573400][ C0] ? page_ext_put+0x97/0xc0 [ 1233.573419][ C0] __reset_page_owner+0x71/0x1f0 [ 1233.573438][ C0] free_unref_folios+0xdb3/0x14f0 [ 1233.573475][ C0] folios_put_refs+0x584/0x670 [ 1233.573502][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 1233.573526][ C0] ? free_swap_cache+0x109/0x300 [ 1233.573553][ C0] free_pages_and_swap_cache+0x277/0x520 [ 1233.573582][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 1233.573636][ C0] tlb_flush_mmu+0x3a0/0x680 [ 1233.573659][ C0] unmap_page_range+0x3962/0x4170 [ 1233.573696][ C0] ? mas_next_slot+0xc20/0xcf0 [ 1233.573719][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 1233.573744][ C0] ? mas_find+0xb0e/0xd30 [ 1233.573762][ C0] ? __hugetlb_zap_end+0x390/0x430 [ 1233.573785][ C0] unmap_vmas+0x399/0x580 [ 1233.573810][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1233.573843][ C0] exit_mmap+0x239/0xb10 [ 1233.573874][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1233.573908][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1233.573939][ C0] ? uprobe_clear_state+0x27c/0x290 [ 1233.573961][ C0] __mmput+0x118/0x430 [ 1233.573980][ C0] exit_mm+0x169/0x230 [ 1233.574006][ C0] do_exit+0x627/0x22f0 [ 1233.574035][ C0] ? __pfx_do_exit+0x10/0x10 [ 1233.574067][ C0] do_group_exit+0x21c/0x2d0 [ 1233.574091][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1233.574122][ C0] get_signal+0x1285/0x1340 [ 1233.574150][ C0] arch_do_signal_or_restart+0x9a/0x7a0 [ 1233.574179][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1233.574211][ C0] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 1233.574238][ C0] exit_to_user_mode_loop+0x87/0x4e0 [ 1233.574257][ C0] ? rcu_is_watching+0x15/0xb0 [ 1233.574281][ C0] __do_fast_syscall_32+0x398/0x570 [ 1233.574302][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1233.574320][ C0] ? do_fast_syscall_32+0x34/0x80 [ 1233.574340][ C0] ? irqentry_exit+0x10f/0x670 [ 1233.574361][ C0] do_fast_syscall_32+0x34/0x80 [ 1233.574381][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1233.574404][ C0] RIP: 0023:0xf700d539 [ 1233.574419][ C0] Code: Unable to access opcode bytes at 0xf700d50f. [ 1233.574428][ C0] RSP: 002b:00000000f53fd60c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 1233.574446][ C0] RAX: fffffffffffffe00 RBX: 00000000f73d4f88 RCX: 0000000000000080 [ 1233.574459][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73d4f8c [ 1233.574477][ C0] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 1233.574489][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1233.574501][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1233.574522][ C0] [ 1234.020178][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1234.027090][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1234.037816][ T31] Tainted: [L]=SOFTLOCKUP [ 1234.042156][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1234.052233][ T31] Call Trace: [ 1234.055533][ T31] [ 1234.058538][ T31] vpanic+0x1e0/0x670 [ 1234.062541][ T31] panic+0xb9/0xc0 [ 1234.066303][ T31] ? __pfx_panic+0x10/0x10 [ 1234.070766][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1234.076158][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1234.082371][ T31] watchdog+0xfdf/0xfe0 [ 1234.086577][ T31] ? watchdog+0x20a/0xfe0 [ 1234.090942][ T31] kthread+0x711/0x8a0 [ 1234.095046][ T31] ? __pfx_watchdog+0x10/0x10 [ 1234.099753][ T31] ? __pfx_kthread+0x10/0x10 [ 1234.104374][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1234.109610][ T31] ? __pfx_kthread+0x10/0x10 [ 1234.114235][ T31] ret_from_fork+0x510/0xa50 [ 1234.118849][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1234.123981][ T31] ? __switch_to+0xc9e/0x1480 [ 1234.128692][ T31] ? __pfx_kthread+0x10/0x10 [ 1234.133318][ T31] ret_from_fork_asm+0x1a/0x30 [ 1234.138127][ T31] [ 1234.141761][ T31] Kernel Offset: disabled [ 1234.146099][ T31] Rebooting in 86400 seconds..