last executing test programs: 2m32.348739169s ago: executing program 1 (id=337): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000440)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000300)="27031c00160014000000002f01ee0b80558ddbba9b3786dd37a518fc9c5be50eaf07c3650596000000000000000000000000003f00", 0x35}], 0x1}, 0x4000004) 2m32.028002291s ago: executing program 1 (id=341): r0 = syz_io_uring_complete(0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) write$binfmt_aout(r0, &(0x7f0000000000)={{0x108, 0x4b, 0x4, 0x3c2, 0x244, 0xfffffffc, 0x3d4}, "9082f6bb70cdf833cd56f0d85fb6f9ec25cc683c376021ebfbb4b53681", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa3d) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000b40)={0x8000, 0x1, &(0x7f0000000a40)=[0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000b80)) clock_gettime(0x0, &(0x7f00000039c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003900)=[{{&(0x7f0000000bc0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000000c40)=""/203, 0xcb}, {&(0x7f0000000d40)=""/235, 0xeb}, {&(0x7f0000000e40)=""/108, 0x6c}, {&(0x7f0000000ec0)=""/236, 0xec}, {&(0x7f0000000fc0)=""/109, 0x6d}, {&(0x7f0000001040)=""/201, 0xc9}, {&(0x7f0000001140)=""/192, 0xc0}, {&(0x7f0000001200)=""/4096, 0x1000}], 0x8, &(0x7f0000002280)}, 0x1}, {{&(0x7f00000022c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002400)=[{&(0x7f0000002340)=""/165, 0xa5}], 0x1, &(0x7f0000002440)=""/253, 0xfd}, 0x8}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002540)=""/204, 0xcc}, {&(0x7f0000002640)=""/138, 0x8a}, {&(0x7f0000002700)=""/255, 0xff}, {&(0x7f0000002800)=""/162, 0xa2}], 0x4, &(0x7f0000002900)=""/4096, 0x1000}, 0x88f}], 0x3, 0x2000, &(0x7f0000003a00)={r2, r3+60000000}) syz_genetlink_get_family_id$mptcp(&(0x7f0000003a40), r0) syz_open_dev$sndpcmc(&(0x7f0000003a80), 0xbf, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000003ac0)={{0x1, 0x1, 0x18, r1, {0x10}}, './file0\x00'}) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000056c0), 0x48000, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000005700), 0x200400, 0x0) close_range(r4, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000005b80)='*\x00', &(0x7f0000005bc0)='\x00', 0x0) 2m31.732212074s ago: executing program 1 (id=342): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000280)="7e03977cedfc1de599c4dffa0526e2af030021aaf8fc2a985e202b39d5f60a5ac0ba86deee0728023bc0ff5926cfd19c089d144213657dc2ba0455e4817a45131fefe330545bcaca24422c3a40ff91f21c750ce26bcfa1c8e4edd91cac70ce815434f640e273d8152c90a943575018204131533d37e600545d5d", 0x7a}, {&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000000300)="79b47909a5afad9b68c40d25e3a232270a459110ddd36de21b0210e3b24c84972f396fa22270e34da6760c772f327547a09de54de6eefb091f70a44382e028d0a021b2f0d3f8d4", 0x47}, {&(0x7f0000000380)="cbd620a0a994f077ef38bff118f8e40f4b61a0ea236b49c6484e926a566901b8d6b8e15719025fed397b2faafb314af65260ea59e4bbf860ea0c51a3a07b07ff98fc6204fafe73bb6a967b5ee44b75504db8bdd96ec31eb7705aa3625df8e2179bb6886f398e464a49b767458adbf0e2739c9d2f9a0645db6df1e7e7d439de442867d1bd02b5a94da9053cfb44c48ecb8944428008843695a6cabc5ccf30cfc12ae688f171e698ce967bd2e498fc8161de2720b02fe81bb64244c513c4649252ccbbedcf9d160870a883c3bfda11fb343c505fad626903e78febbac3", 0xdc}, {&(0x7f0000002b80)="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", 0x1000}, {&(0x7f0000000480)="c160686a575615a19f62e9face4cf16ab3d603f90e0f6a5a91d3ed94ebad6db67161a473832517b84b28f7a306c66fa040eff3ce34022016607f089a125d351a", 0x40}], 0x7) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000940)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r7 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r7, 0xc2604110, &(0x7f0000000600)={0x2, [[0x9, 0x0, 0x2, 0x9], [0x1000], [0x2, 0x10000, 0x32]], '\x00', [{}, {0x4, 0x3}, {}, {}, {0x0, 0x40}, {}, {}, {0x0, 0xfffffffc}, {0x0, 0xfff}], '\x00', 0x0, 0x0, 0x0, 0x2}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x25e8, @dev={0xfe, 0x80, '\x00', 0xb}, 0x3}, 0x1c) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000540)) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000b40)={0x2, 0xce26, @multicast1}, 0xfffffffffffffd2b) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 2m29.022544611s ago: executing program 1 (id=353): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x1) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r1, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000000, 0x0, 0x0, 0x2, 0x0, 0x0, {0x0, 0x100000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xc000, 0x0, 0x0, 0x0, 0x2000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) 2m27.900188707s ago: executing program 1 (id=359): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000b4321f00000000000a00632018000000", @ANYRES32, @ANYBLOB="0000000004000400b7060000140000007b03000000000000850000002f000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000001e40)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m27.505476252s ago: executing program 1 (id=360): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) lstat(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xec}}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x16b5, 0x41) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000180)={0x80, 0x6, 0x102, 0x9, 0x0, 0x6, 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x9d, 0xfe, 0x38c, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8767, 0x7, 0x3, 0x5}}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000000c0)=0x4, 0x7, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086", 0x17, 0x4, &(0x7f0000000140)={0x11, 0x1, r7}, 0x14) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f00000001c0)=0x5, 0x7e, 0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x40010, r4, 0xa17c5000) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f0000000040)=ANY=[@ANYBLOB="51f59a8000000000"]) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) 2m12.357520401s ago: executing program 32 (id=360): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) lstat(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xec}}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x16b5, 0x41) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000180)={0x80, 0x6, 0x102, 0x9, 0x0, 0x6, 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x9d, 0xfe, 0x38c, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8767, 0x7, 0x3, 0x5}}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000000c0)=0x4, 0x7, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086", 0x17, 0x4, &(0x7f0000000140)={0x11, 0x1, r7}, 0x14) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f00000001c0)=0x5, 0x7e, 0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x40010, r4, 0xa17c5000) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f0000000040)=ANY=[@ANYBLOB="51f59a8000000000"]) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) 49.493454975s ago: executing program 0 (id=965): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x12, r0, 0x0) 47.593667261s ago: executing program 0 (id=969): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@empty, @loopback, 0x0, "5db802777b9e80e96feee19559559bb5409f21bca0fac38bef7dd4be85d95d10", 0xe8e, 0x0, 0x1800000, 0x8}, 0x3c) 47.134648187s ago: executing program 0 (id=970): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) write$tun(r0, &(0x7f0000000600)={@void, @val={0x1, 0x3, 0xffff, 0xb, 0xfeff, 0xff0c}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x3, 0x5, 0x2c, 0x68, 0x0, 0x9, 0x11, 0x0, @remote, @multicast2}, {0x4e20, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x7b8dd026, 0x1ff}}}}}, 0x36) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 46.533735766s ago: executing program 3 (id=972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) getsockopt$netlink(r0, 0x10e, 0xe, &(0x7f0000000140)=""/56, &(0x7f0000000180)=0x38) 46.123490781s ago: executing program 3 (id=974): socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) unlink(0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) r5 = socket(0x10, 0x803, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000098, 0x0, 0x1) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) 33.761921486s ago: executing program 3 (id=979): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RENAMEAT={0x23, 0x16, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 33.744228641s ago: executing program 4 (id=980): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 33.228727447s ago: executing program 0 (id=983): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 33.033008364s ago: executing program 3 (id=984): r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x80000) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x6, 0x0, 0x5, 0xac6b, 0x6}) 32.508197666s ago: executing program 3 (id=987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) 27.633776375s ago: executing program 4 (id=998): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000002100), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf2502000000080002000000000008000700", @ANYRES32=r0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x4000010) 27.461236717s ago: executing program 4 (id=999): setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, &(0x7f0000000880), 0x0, 0x1) setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 27.218307154s ago: executing program 4 (id=1000): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c0001800600060008060000d10002"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 26.901516751s ago: executing program 4 (id=1001): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000140)={0x1, 0x0, {0xd, 0xc, 0x201f, 0x8, 0x3, 0x2, 0x6dfd500da6727a8c, 0x6}}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() socket$inet(0x2, 0x3, 0x8d) syz_open_dev$loop(0x0, 0x81, 0x2a82) r1 = fsopen(&(0x7f0000000240)='vfat\x00', 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) timer_settime(0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) inotify_init1(0x0) iopl(0x3) pselect6(0x4b, &(0x7f0000000040), &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x500, 0x0) 24.092402846s ago: executing program 3 (id=1003): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aae", 0xb) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d57136639d68b7577553393a9", 0xf1}, {&(0x7f0000000000)="ef7791000dc777", 0x7}], 0x2, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/247, 0xf7}], 0x1}, 0x7fff}], 0x1, 0x2101, 0x0) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010008000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020000087a32000000000900010073797a3000000000080005400000003d300011800b00010074617267657400002000028005000300c400000008000240000000000a00010041"], 0xb4}}, 0x0) 24.041608809s ago: executing program 0 (id=1004): ioperm(0x83, 0x6, 0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_wakeup_irq', 0x80240, 0x31840384d1ba4a81) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000140)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) read(r1, 0x0, 0x2006) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0x40047459, 0x0) 23.374196535s ago: executing program 0 (id=1006): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x1fa7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x259fdbfc, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x9, 0x5, 0xffffffff}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x2004c000) 23.039848221s ago: executing program 4 (id=1008): r0 = semget$private(0x0, 0x6, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700"/20, @ANYRES32=0x1], 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0182101, &(0x7f00000004c0)={0x0}) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xfff}], 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) r8 = socket(0x10, 0xa, 0x401) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r9 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r9, 0xc02c563a, &(0x7f0000000040)={0x9, {0x5, 0x1, 0x7, 0x101}, {0x3, 0x80000000, 0x9, 0x9}, {0x2, 0xfe}}) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYRESOCT=r3, @ANYRES64=r2, @ANYBLOB="0000000000ff07000008080000000b000000000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001a00010008000000fcdbdf2502000000", @ANYRES32=0x0], 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r10}, 0x10) semctl$IPC_RMID(r0, 0x0, 0x0) 21.619286115s ago: executing program 2 (id=1013): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000380), 0x1, 0x8000) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010100, 0x0, 0xfffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x400000000, 0x8, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0xffffffff}, {0x0, 0x0, 0x1}, 0xffffffff}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3507, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, 0xe8) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2568ae8d55002020207b1af8ff00000000bfa100000022000007010000f8ffffffb702000008000000b703000000000000850000000600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) 20.417948255s ago: executing program 5 (id=1014): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2040, 0x0) 19.710525191s ago: executing program 5 (id=1015): r0 = epoll_create1(0x0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x3) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x30002000}) 19.708101303s ago: executing program 2 (id=1016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_FLAGS={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}}, @NFT_MSG_NEWTABLE={0x84, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x66, 0x6, "70fd870ade68ca4418c87c8407315289cee1603b6cfb5d07cfdfd0b04dd961ecd5bc9c2950a53bca35286d08f2bada5b328c6cd78c8f443531ec0132a888c721a1beee7ce4e1ab020791818d5dcda23e917b67cef7f992e1bca32bcb9754a80151b3"}]}], {0x14}}, 0x110}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0x20000006}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x4}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000000c0)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) r5 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r8 = syz_io_uring_setup(0x38ff, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) io_uring_enter(r8, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r2, &(0x7f0000000280)={r2, r3, 0xfffe}) 18.633461667s ago: executing program 5 (id=1017): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r5) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f00000000c0), 0x0) getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000280), 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read(r1, &(0x7f0000000300)=""/84, 0x54) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum64={0x5}]}, {0x0, [0x0, 0x2e, 0x61]}}, 0x0, 0x29, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28) 8.841361817s ago: executing program 33 (id=1003): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aae", 0xb) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d57136639d68b7577553393a9", 0xf1}, {&(0x7f0000000000)="ef7791000dc777", 0x7}], 0x2, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/247, 0xf7}], 0x1}, 0x7fff}], 0x1, 0x2101, 0x0) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010008000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020000087a32000000000900010073797a3000000000080005400000003d300011800b00010074617267657400002000028005000300c400000008000240000000000a00010041"], 0xb4}}, 0x0) 7.538909404s ago: executing program 34 (id=1006): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x1fa7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x259fdbfc, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x9, 0x5, 0xffffffff}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x2004c000) 7.205585128s ago: executing program 35 (id=1008): r0 = semget$private(0x0, 0x6, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700"/20, @ANYRES32=0x1], 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0182101, &(0x7f00000004c0)={0x0}) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0xfff}], 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) r8 = socket(0x10, 0xa, 0x401) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r9 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r9, 0xc02c563a, &(0x7f0000000040)={0x9, {0x5, 0x1, 0x7, 0x101}, {0x3, 0x80000000, 0x9, 0x9}, {0x2, 0xfe}}) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYRESOCT=r3, @ANYRES64=r2, @ANYBLOB="0000000000ff07000008080000000b000000000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001a00010008000000fcdbdf2502000000", @ANYRES32=0x0], 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r10}, 0x10) semctl$IPC_RMID(r0, 0x0, 0x0) 7.160126284s ago: executing program 5 (id=1021): r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14e7e100158b010000000000000000000001fd00"], 0x14}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r3, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x40001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x13, 0x1, {0x1, '\x00', 0x5, 0x28e3, 0x5, 0x200}}}}]}, 0x48}}, 0x40) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000140)={0x8, {"87412fcf3b7656866352bfc3b2a97409f657f12f35013bff5243e9df7287106d02bcb0d638722ca4b8c03c00d8a7008f57b74d0fb9eda8c8d8a733262574a53c242d4bc2315f2a4330212629510faf60e06a809b44e3e956079f8e15309975eff5624b8e45b4290e4fd8619c8cda5e70e7fb7483bcb2d4dd171510932e4433505aa14c048b20f8bcea3979ac05e8a7f8c69335943f945df35be808e545a8701b5be1992667e07680101ae7c1052ba83cc3bd6351e484cc28c90390cc9a670f8e82994662194133d1416df6adf63f7d4dfa6bd4d6ed755b91231e5ad99cd82cde77441875b7f23566f34ec3ef4c58ca1243a22bdb0f3d0c3c0cf3567d3624b00e0822cc27b0c10cd3ebbfe5cee69113acf809ee9cb63e761d1b8b74c19cd23e3e4701f08d76318d0f11a28ad24f46105b6d53b071cc8e51e0b54609f2757158c24bb01751b963681616d9fe8948f2234a5f53ecb3af48f3896e53c92a4a0035c1a22c08dd13808f8d26772e52c418e2860f4d1c51b77ce73bf7ae4a0023218a4e3af6ac7fb00396b4d5d69996e39638c42c51384bca0d141bc64e27ad1cbccc3d45cec59fd5fc46e312696c47b8d1b029c7cbd0194c675d445e93f7abf8bf2d4765f03e57fde167382ece70993a0cfe964e1a6f75b88af69739f654043da63c32c4101f30de250b052f7eb6da1eecf5dd1d6d29b63620af24d62c31c6566c82763b7ab4293441dd14d369f08cf1189a58047952bf8f973c095ffbdfa9b91bbfa8c3c894d85f08fd311ab1eae103318761b47a93a6cae00204635a8cb57b3204c4b8fbb2dfef3c596f8d4dda918110abd6ebc5bf26311c438898a7f814ae9ff9ab8c8f23282906cf57dc2e167bd3be0a2b19945b3dde4e7fe2d01056a1d9d486e543bf2454c4e4219ffc33ae22a824b0e1058706656c59cc6e5c08fcbe0a88d35cf178136aabf450453dec7878bccc1daca7c6690983be524e83a17f9ce02ec0a58c125916cd7575ac1cc02f8485562f1542da73fa09d2be7f4d3e629fde6e5c58389a1ffb95b146e1d1b2a25aede59f02c5f9a55fc53b1867ee3863fb838e0750beb6939097aca0c03ebded37f2ffa945339fcc99ad006aa71863358bf300a71df24adc6b00c2687e7756a8d5e93668ba13989e824dbb992050748b87b9300ffea6ccf04a990046f5522749d80d45444866e3d7c21dfb786563e3ca11b5311eb3f8b7ed70e73ef02e477d76dea6c14bf1b47a2cda66a024eae350efb34d11fd512d0921d16e6c5e90845be2a5e8ea30f438f331f1e316c5d6e60526249300e6fc921dd8c0c8d470e2485b9145b12ed332b0de2bc3b29f7dbf980617c378f28ebfd8b0a37c89124c79c5b2f344b5c3b5d0f3a8641093b4b06d5a67c152a510a56a0bef5a24fea0869455e7d54535163289a970e6e908aacd0c30f85fbf16b923e5d18a997b5b0b1f2bd15a7f1ccc33b8cf1b8fd0e0f8f4f0ff533669e5f71f460f3672f6ca7a1539997689fd6f97f296f53761bf94f5f75aa274cb5ae67b25682cca33c87da759c0c99e064fa973af0d2d6ccf82266a48241d2284eda04590bc80c31b0c0b04fa104cce536fbb29508a222c4a777c072348502a27272ff9656a0fba49538be263d23e9bce31f3e5d573b1cbc0b0ecb27170c2eb10115dd8ecaee8f0ead3202d3c855223c196a7343fd6d2c152430add0c5d088a406f40e4aad95fc2d30655ca81f65aeeaf81eb82821da75334ed82cb09f41c891c53cd193ca8f99017fd28f5b454ada00989697756f2aaf11254c67dca0ee39d51a6dfcd09732401bdda91de59ef0af9a8711c8b3365caab3a941c3aae59a3cc51f7604b8dd945e174a69d556ea00dbf82baef3c263488eaa96c009c399486d7d828dbddf34acf90575c55463cd92b55162647cb1a282e2670928eb9c0c0af020202d2387bffcbe4006019d20b0963da0fbbdf9fefd6ef1f8fb5ba0c6ea129b004df63bcd06d7d6d09b6783e70a1bfa6d2fc1066621f7ea859cca0467c8322b32655eb23f5d3197ebc0a49ecf867c3e934e91ea31c3415ccc7adf01ca6a2e835eed34cd953f2cf89aec22a48cd3ba586001f15012f9c8edaeead6df6ee6cdaaadd62cffd7fd34bb175065cee2a9a79776cc13bb74930e1edc108e03eba8b3bb2c62d1d695d5284c8cad21d9bedad563e2e96570ea03b23032d818d305c188810116bea0e19f33e7a4eb71e2e86281f55c095ad24005dccee4685395206dbfb7480d55f00e191407844cd6ba022ceea6eac1e5ef1107df340764065ff13480924b4d63c00ee00f9b9bfebee99d9ec920a821fcf06f14a1b5bb4e0590dc30a5c9944f5b2ffe6ff0c62165930cf450718b2ad74775553c6a5de2d9eab709912158b00b87836cf8feab171d774fa0745222902d0c99b312240e900e2759211168947d6d52eaf5f9df731d9d2b1ea2cf2713ca5a9fc9c64761f19012bca4d901e65ccae30197b6c3f57d82d7990d0c82d07a9dcd147a470319f0c6261b8cd5eec858a88ca9a28663220ccc0e2361dc40daffd486e625c403013d70bd4b029f8f63797ae6e7b02e800fdf709824b0e27b6073792fcee6c2cc1477368d0832723a2b13ba98daee9cdf9ede4eb6e7aeea7b37c04fee94db6f28c8252cc0b4b36af066b3b148ceb6765357eb01a071fbeef1d41b296d1627066b9ab344ddb259df37cb9e301e26a5cdf362c8f015236c7aed0cadf533431d9336fe9b5cf17f66964ccdff0db89526b9f2256fc3b82e4e749c5672cb14884935efeb65a44ff9035bbb648242bd508449afd0740491ab5819b75f19802b6741d854fbd87e694df208c55a3751c0865cd09e1e328d079693aef4fc437c9bf977c9aeae7b0a4cebf0c54ebe02efec8f53c7889af5b16ab4eb13422d5ba73a76db75d7cffe779b0ffdcc0ad429dd09448b54f10bac299361d7d649e7d38b7c470ab9f77daeba576783a7b0161e59a61f96d407773bc79c4beadc19c1a1dfde445f819aee6afecccad3579e26542321b53ab0877544c25eaa638e405449ad26c9b8ca38838ab31a8387bd7772e521e80df7c63a534f9eb6c0aacc513d17a78ae076bbaac2472153aa43ca3aa454ab5b334126a74e72e833ab718384e3a8c0e3a7a62e89362cd3da082f83052e91c02ed49739357b77546329969214dc0ca44fbdbf98eb558bb20a328788cf80e358db5b55b1c91b1d3e116642527a40850e9935eb894afc010c67be9034d05dbc5ef41f5660c849c588718c8c6517715e3fec863265fb873b03e8c3d60c7bd69ac8fa156cc5455add9ba2b9b2bcf31eae846cd31ac2b6e29bbed6384ae9bc96a2b68d13fddeaf64f08653547416782ab3eb6e206699fe084d51e32911d994626a3e7970dac2b3a7aa79222ea714228dfaeb1947894db1c4e5f21d5149f2f1b9df2084e6e848da180422e7db75f32deaec04f0cec0c3dab199dca6f932e4f774e7a072798d465a79010e08f284bf01fae43340269269eecc7b43ace70661ea38a4f19faa2df9867437dd55c5e711672057fed655eb02c3e8b05516cd08ce5db30c2adae57bb30bb45590d566bd74956d86269bf8ee9ca064780ead780c8f10795e4d93bfefddaebacfb93ab6333c8b5318c0d73d55364c2dfe057184d837d9a9c41b9070cfe2366f9bdcbf30dd9d5b8566c6204bfdb1c11dd936d9a4b288172a706f0ac9b3b8e0e97fa35579e73fe600134eb004dd9c8d1a7f4d625419c2d48b1a906ac1f7ef34f3c9a816de3c53f6f019a4a554f6a282a21f45891ffaa1e85c5af43f949c8a495dfe7953f53793dac5455b679f90efb678d25b9a7b7326193c34922487a2d83b1689261891d55ca69954c5f4d1fb1824c577cdc8dc4a22d5662e15f87ad729df239ec9ee007556c633d5dbbb4874568d11375250dd836e944c523ffcde1c156613877715c1895a0b755a971b41a1167542d5a94b2930e818fa18d169ed1f95db235cabba2f0b8162c93a31e549ee7903cb8ea9b15a39486b1d1347957e768ab1c372513f0816fd03d64e03c95019bb47b221a60f36c9ad2e4eee321175fdc6dcde5bea9d1bf73cd8ac2919a4f652fea4e1f5e761f5aeb78d925f175e066595e642a2f0c9eeb9313432bb0726ad27e3767007a27bfcdaa83a91b903ca122a3c0d503dc1ff3bdcedb096d0c7c74a67536ce50cc4b1aedef43a8d7bd26f657e3044b6ff25b01e91eb50cd17a2b28b2190e088786c5f3a6b79cf10c7de46cf94aecfdf3e99fc7ff07ca0d051375d81c888eeb525ac2b38036700a5646ab2a3814e7e91441f3dc6c0a149804142fecd91f6d6fff02e6058a670cef325dd009897fb9f7650eeabcfd832e30d2d59080c56fe524666f992c090f5ba17cad9ec034374ed4b98d46fa87b9068b31bf99d80714a736218992e37d674a0100128f93503156f9d53070cbcbb6f1aa4758a2b0012ae3b44ed0952a9ab17a626e9ccd994c401a9749b209d95223a0aa6533654a34cb1b3d4581475a22692daf84e4b87e68f6e53124cb6e3598a363d9157e94fb7d3eb59d6871766a1c3e40820f5eb917b03483cec88524ea8deb4f44dcc2bd73d01fb5ab3f45179c9d176666b6d8264aa7a6694aa208f3a8b9e6269d8b57d233d721750ef14b7b9f711e8c90bd480dbfa0c01d6dd3e899162cbde3c55f0dc0a438347b740fcde9aa0ecd9dd8e1265da91a5dd0d502608c045a54d1a23b91aaf0bb0bcb1174429cae5f2bd99011325d3df263621f110550a181767299fe386125069d08614adf9a1f3070fdcbae318c7b995d75e0ae92e5ab781d1fa0aa71c6a9a5b886835469e204da4c4592375df674a95edc197f097386e2b1de0e068df16c80dd7cd281e5c7ac6ed8d472dfdf8a4cb3dfe753635872c9c9f2a7928fc079b9191c72074b84bfdbcf6a8851bd3796f3d8ea0c9a5b124336dde9c80314aaad1e479a83a32c3ea57fd606c4753551a323cc2e83dfdb4ce40330b05a92172842f9c9df0d69c5cac7c1533c8f422dc7f9f5d697f679ea103f386d4d27fa9d3abdb335d78e6e3a1f0287056f65bb82850317883d80eb676acfd2c9c3da6f530c4f10c32865575bc75432bbf646de1f20fea33ba709befa14099bb52938dea4870a79c6814fb47ad4b8d0d8f180c8dfaa629a39ee861da33dbb0729450802e0dd1e669a07cc74e395986f13850c51fe7b7b4f295fafec913e26df87087c1868c8debbe48f83428819357c953e525abba44d25a3ceb23660c8df4f667463063179b792605a1609dcf63bef3114f4a7a41e54caeb6f164737bb508a91c015cfa960e7971dbb9f5a6bf13cdde7584c37a0e143fa5e6132cd553518f7a277b02aa89a9cd7efe86cc86122a7066c5d60de76cfa6aaf0ae10323534ff6065b715a4c1c2c376338c355fea617b5b77aed0375856516de8b9a556f45f0a907255b4417e3ff9d3363ee9c0317f076cea2f2a90477957f6b72d73085f4f700d18e194d136f253d5c5b1b5fa0a76b37aba42baf527b247aa3ae4ef229d14eae58ebbb7dfd69f4f9bcfb56295ea8ce8cad5c71ee9293d8738c36bdccfd56f99f2c4e42848e3a86b365bf470242e2dec850b61988e4ac505d11e46ae9448d9bab6f208d751921dca54c3ac30fc16fae710bf64401238bef451efd53ac49cc2a1b40d50b59e196ac8fa8272f36ab11abf2ad7d7534c2da0d491f6fad41e63de771f8ec66752c4914dc3d7db34b3b21ce286d077e9900933e650b7d63bd021d3ec71f913efef9ff089c0c762b65bb6f50fcfcaed08d2db57b59b613f269072", 0x1000}}, 0x1006) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0x10, 0x8001, 0x3, 0x0, 0x3, 0xb}}) 7.159587698s ago: executing program 2 (id=1022): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_open_dev$swradio(0x0, 0x1, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x10, &(0x7f0000000440)=ANY=[], 0x0, 0xbfa, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140000003a00010100000000000000000a0052bd"], 0x14}}, 0x0) 2.979291302s ago: executing program 5 (id=1023): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.689684842s ago: executing program 2 (id=1024): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xc0}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="581f9239658ea95ed371ea3dd361", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000033c0149c000000000000000095000000000000001d4c5ddc8953f4a64bf2324800020000000000002cee5c2e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000081}, 0x88c1) 2.323112896s ago: executing program 5 (id=1025): r0 = io_uring_setup(0x2ef1, &(0x7f0000000000)={0x0, 0x5712, 0x80, 0x5, 0x1}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) fcntl$notify(r0, 0x402, 0xe) close_range(r0, 0xffffffffffffffff, 0x0) 662.58352ms ago: executing program 2 (id=1026): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x5, r0, 0x0, 0x0, 0xa, 0x0, 0x4}]) 0s ago: executing program 2 (id=1027): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x2, 0x6, 0x500, 0x1a0, 0x270, 0x1a0, 0x360, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0x0, 0xffffffff], [], 'vlan0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [0x0, 0xffffff00], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x2f}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x401}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) r2 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x122}}, 0x0) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) exit(0x7) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x8}, 0x1) kernel console output (not intermixed with test programs): 0000000000000 R14: 00007fd5393b5fa0 R15: 00007fd5394dfa28 [ 144.223477][ T6873] [ 144.225117][ T5890] usb 5-1: config 0 has an invalid interface number: 59 but max is 0 [ 144.490885][ T5837] Bluetooth: hci1: command tx timeout [ 144.520008][ T5890] usb 5-1: config 0 has an invalid descriptor of length 218, skipping remainder of the config [ 144.531753][ T5890] usb 5-1: config 0 has no interface number 0 [ 144.545795][ T5890] usb 5-1: New USB device found, idVendor=1901, idProduct=0195, bcdDevice=fb.e1 [ 144.571039][ T6882] netlink: 68 bytes leftover after parsing attributes in process `syz.2.290'. [ 144.594897][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.609666][ T6881] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 144.609666][ T6881] program syz.2.290 not setting count and/or reply_len properly [ 144.632040][ T5890] usb 5-1: Product: syz [ 144.644961][ T5890] usb 5-1: Manufacturer: syz [ 144.657600][ T5890] usb 5-1: SerialNumber: syz [ 144.680884][ T5890] usb 5-1: config 0 descriptor?? [ 144.701928][ T5890] cp210x 5-1:0.59: cp210x converter detected [ 144.936796][ T5890] usb 5-1: cp210x converter now attached to ttyUSB0 [ 145.336905][ T49] team0 (unregistering): Port device team_slave_1 removed [ 145.379363][ T49] team0 (unregistering): Port device team_slave_0 removed [ 145.852787][ T6775] chnl_net:caif_netlink_parms(): no params data found [ 146.523222][ T5837] Bluetooth: hci1: command tx timeout [ 146.568991][ T6775] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.592620][ T6775] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.600816][ T6775] bridge_slave_0: entered allmulticast mode [ 146.609165][ T6775] bridge_slave_0: entered promiscuous mode [ 146.645047][ T6775] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.664327][ T6775] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.698767][ T6775] bridge_slave_1: entered allmulticast mode [ 146.723834][ T6775] bridge_slave_1: entered promiscuous mode [ 146.774193][ T5826] usb 5-1: USB disconnect, device number 3 [ 146.806382][ T5826] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 146.831608][ T5826] cp210x 5-1:0.59: device disconnected [ 146.858894][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 147.199473][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 147.295042][ T24] usb 2-1: can't read configurations, error -61 [ 147.309798][ T6924] loop8: detected capacity change from 0 to 7 [ 147.378224][ T6924] Dev loop8: unable to read RDB block 7 [ 147.390040][ T6924] loop8: unable to read partition table [ 147.396847][ T6924] loop8: partition table beyond EOD, truncated [ 147.406371][ T6924] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¬âÐû [ 147.406371][ T6924] ) failed (rc=-5) [ 147.426737][ T6775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.468026][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 147.527605][ T6775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.772047][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 147.804919][ T24] usb 2-1: can't read configurations, error -61 [ 147.820146][ T24] usb usb2-port1: attempt power cycle [ 148.065381][ T30] audit: type=1326 audit(1749030453.197:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2058e969 code=0x7ffc0000 [ 148.091520][ T5826] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 148.152046][ T30] audit: type=1326 audit(1749030453.197:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2058e969 code=0x7ffc0000 [ 148.177784][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 148.285976][ T6775] team0: Port device team_slave_0 added [ 148.332426][ T30] audit: type=1326 audit(1749030453.197:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c2058e969 code=0x7ffc0000 [ 148.413275][ T5826] usb 3-1: config 0 has no interfaces? [ 148.421584][ T5826] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 148.434751][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 148.471489][ T5826] usb 3-1: Product: syz [ 148.485702][ T30] audit: type=1326 audit(1749030453.197:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2058e969 code=0x7ffc0000 [ 148.509468][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 148.511464][ T5826] usb 3-1: Manufacturer: syz [ 148.574811][ T5826] usb 3-1: config 0 descriptor?? [ 148.581253][ T24] usb 2-1: can't read configurations, error -61 [ 148.589448][ T6950] FAULT_INJECTION: forcing a failure. [ 148.589448][ T6950] name failslab, interval 1, probability 0, space 0, times 0 [ 148.595603][ T6775] team0: Port device team_slave_1 added [ 148.625620][ T30] audit: type=1326 audit(1749030453.197:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2058e969 code=0x7ffc0000 [ 148.686941][ T6950] CPU: 0 UID: 0 PID: 6950 Comm: syz.0.310 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 148.686972][ T6950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.686997][ T6950] Call Trace: [ 148.687005][ T6950] [ 148.687013][ T6950] dump_stack_lvl+0x189/0x250 [ 148.687050][ T6950] ? __pfx____ratelimit+0x10/0x10 [ 148.687080][ T6950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.687111][ T6950] ? __pfx__printk+0x10/0x10 [ 148.687139][ T6950] ? __pfx___might_resched+0x10/0x10 [ 148.687157][ T6950] ? fs_reclaim_acquire+0x7d/0x100 [ 148.687186][ T6950] should_fail_ex+0x414/0x560 [ 148.687223][ T6950] should_failslab+0xa8/0x100 [ 148.687246][ T6950] kmem_cache_alloc_noprof+0x73/0x3c0 [ 148.687266][ T6950] ? getname_flags+0xb8/0x540 [ 148.687295][ T6950] getname_flags+0xb8/0x540 [ 148.687324][ T6950] do_sys_openat2+0xbc/0x1c0 [ 148.687354][ T6950] ? __pfx_do_sys_openat2+0x10/0x10 [ 148.687381][ T6950] ? ksys_write+0x22a/0x250 [ 148.687403][ T6950] ? __pfx_ksys_write+0x10/0x10 [ 148.687419][ T6950] ? rcu_is_watching+0x15/0xb0 [ 148.687443][ T6950] __x64_sys_open+0x11e/0x150 [ 148.687475][ T6950] do_syscall_64+0xfa/0x3b0 [ 148.687504][ T6950] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.687532][ T6950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.687552][ T6950] ? clear_bhb_loop+0x60/0xb0 [ 148.687588][ T6950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.687607][ T6950] RIP: 0033:0x7fd53918e969 [ 148.687625][ T6950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.687641][ T6950] RSP: 002b:00007fd53a022038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 148.687680][ T6950] RAX: ffffffffffffffda RBX: 00007fd5393b5fa0 RCX: 00007fd53918e969 [ 148.687695][ T6950] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 148.687708][ T6950] RBP: 00007fd53a022090 R08: 0000000000000000 R09: 0000000000000000 [ 148.687720][ T6950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.687732][ T6950] R13: 0000000000000000 R14: 00007fd5393b5fa0 R15: 00007fd5394dfa28 [ 148.687762][ T6950] [ 148.906273][ T30] audit: type=1326 audit(1749030453.197:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c2058e969 code=0x7ffc0000 [ 148.922407][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 148.929746][ T30] audit: type=1326 audit(1749030453.197:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2058e969 code=0x7ffc0000 [ 148.958599][ T30] audit: type=1326 audit(1749030453.197:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2058e969 code=0x7ffc0000 [ 148.981414][ T30] audit: type=1326 audit(1749030453.197:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6c2058e969 code=0x7ffc0000 [ 149.003621][ T30] audit: type=1326 audit(1749030453.197:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2058e969 code=0x7ffc0000 [ 149.080802][ T6775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.121693][ T6775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.147730][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.380972][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 149.432646][ T24] usb 2-1: can't read configurations, error -71 [ 149.441139][ T5826] usb 3-1: USB disconnect, device number 7 [ 149.475935][ T24] usb usb2-port1: unable to enumerate USB device [ 149.491015][ T6775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.537245][ T6775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.549416][ T6775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.575433][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.882403][ T6775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.148496][ T12] veth0_to_bond: left promiscuous mode [ 150.183582][ T6961] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 150.191643][ T6961] macsec1: entered allmulticast mode [ 150.197628][ T6961] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 150.210949][ T6961] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 150.245278][ T6961] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 150.753930][ T5893] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 151.191039][ T6775] hsr_slave_0: entered promiscuous mode [ 151.198257][ T6775] hsr_slave_1: entered promiscuous mode [ 151.208005][ T6775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.216966][ T6775] Cannot create hsr debugfs directory [ 152.363629][ T6992] loop8: detected capacity change from 0 to 7 [ 152.408123][ T6992] Dev loop8: unable to read RDB block 7 [ 152.446987][ T6992] loop8: unable to read partition table [ 152.477313][ T6992] loop8: partition table beyond EOD, truncated [ 152.502465][ T6992] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¬âÐû [ 152.502465][ T6992] ) failed (rc=-5) [ 152.722563][ T5890] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 152.902475][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 152.925808][ T5890] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 152.942380][ T5890] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 152.964472][ T5890] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 152.990753][ T5890] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 153.009945][ T5890] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 153.024494][ T5890] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 153.032664][ T5890] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 153.044533][ T5890] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 153.056851][ T5890] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 153.069632][ T5890] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 153.084016][ T5890] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 153.092814][ T5890] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 153.104995][ T5890] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 153.112851][ T10] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 153.119311][ T5890] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 153.167025][ T5890] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 153.203286][ T5890] usb 3-1: string descriptor 0 read error: -22 [ 153.210083][ T5890] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 153.223697][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.280973][ T5890] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 153.331047][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 153.359478][ T10] usb 5-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 153.379960][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.416706][ T6775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 153.433024][ T10] usb 5-1: config 0 descriptor?? [ 153.439034][ T6775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 153.463485][ T6775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 153.486056][ T6775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 153.637399][ T6775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.645278][ T5890] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 153.704732][ T6775] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.736950][ T6783] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.744285][ T6783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.784134][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.791526][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.828093][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 153.838738][ T5890] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 153.847609][ T10] hid (null): unknown global tag 0xe [ 153.862299][ T10] hid (null): unknown global tag 0xc [ 153.865163][ T5890] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.888299][ T10] hid (null): invalid report_count 1412933164 [ 153.920467][ T10] hid (null): unknown global tag 0xd [ 153.931111][ T10] elecom 0003:056E:00E6.0001: unknown global tag 0xe [ 153.950529][ T10] elecom 0003:056E:00E6.0001: item 0 0 1 14 parsing failed [ 153.960232][ T10] elecom 0003:056E:00E6.0001: probe with driver elecom failed with error -22 [ 153.995201][ T5890] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 154.014376][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.029648][ T5890] usb 1-1: Product: á  [ 154.047465][ T5890] usb 1-1: Manufacturer: 澃æ‡è–Žì¦˜É¼êŒ¬ì‡¨ì —駺届ë–᥼怗޳਒蓕䄳䖱ëŒä´å¼½îŸç†´åš†äªç í”䒬묭໺è—â‹â¢°î‘Ÿé¯¤ä¸éªƒì¥ì¾¶à¨î»¤â…ͱ籎㈉⠟籅쮳ဩ튛쒄稲骎虸ï‹âš ä°“₼୵䭪ʬè¡ê¥¨ã’¯î©Ÿâ¯ âª”ÉQˆ盎컮㨯쒧∋ã±â±¹ã®»å­œà¹¿â °è› [ 154.066611][ T10] usb 5-1: USB disconnect, device number 4 [ 154.108436][ T6775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.123793][ T5890] usb 1-1: SerialNumber: < [ 154.279080][ T6775] veth0_vlan: entered promiscuous mode [ 154.309116][ T6775] veth1_vlan: entered promiscuous mode [ 154.393693][ T6775] veth0_macvtap: entered promiscuous mode [ 154.405540][ T6775] veth1_macvtap: entered promiscuous mode [ 154.438890][ T6775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.481004][ T6775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.504111][ T6775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.515517][ T7036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.329'. [ 154.527269][ T6775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.536677][ T6775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.545862][ T6775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.739038][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.755581][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.816594][ T6783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.842835][ T6783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.070994][ T5890] usb 1-1: 0:2 : does not exist [ 155.158852][ T5890] usb 1-1: USB disconnect, device number 5 [ 155.179407][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.332'. [ 155.396259][ T7055] FAULT_INJECTION: forcing a failure. [ 155.396259][ T7055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.429977][ T7055] CPU: 1 UID: 0 PID: 7055 Comm: syz.3.334 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 155.430007][ T7055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.430019][ T7055] Call Trace: [ 155.430027][ T7055] [ 155.430035][ T7055] dump_stack_lvl+0x189/0x250 [ 155.430073][ T7055] ? __pfx____ratelimit+0x10/0x10 [ 155.430103][ T7055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.430134][ T7055] ? __pfx__printk+0x10/0x10 [ 155.430168][ T7055] should_fail_ex+0x414/0x560 [ 155.430204][ T7055] strncpy_from_user+0x36/0x290 [ 155.430237][ T7055] getname_flags+0xf3/0x540 [ 155.430268][ T7055] do_sys_openat2+0xbc/0x1c0 [ 155.430299][ T7055] ? __pfx_do_sys_openat2+0x10/0x10 [ 155.430329][ T7055] ? ksys_write+0x22a/0x250 [ 155.430351][ T7055] ? __pfx_ksys_write+0x10/0x10 [ 155.430368][ T7055] ? rcu_is_watching+0x15/0xb0 [ 155.430392][ T7055] __x64_sys_open+0x11e/0x150 [ 155.430426][ T7055] do_syscall_64+0xfa/0x3b0 [ 155.430456][ T7055] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.430485][ T7055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.430506][ T7055] ? clear_bhb_loop+0x60/0xb0 [ 155.430531][ T7055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.430551][ T7055] RIP: 0033:0x7f863018e969 [ 155.430570][ T7055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.430587][ T7055] RSP: 002b:00007f8630f66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 155.430609][ T7055] RAX: ffffffffffffffda RBX: 00007f86303b5fa0 RCX: 00007f863018e969 [ 155.430624][ T7055] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 155.430637][ T7055] RBP: 00007f8630f66090 R08: 0000000000000000 R09: 0000000000000000 [ 155.430650][ T7055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.430661][ T7055] R13: 0000000000000000 R14: 00007f86303b5fa0 R15: 00007f86304dfa28 [ 155.430693][ T7055] [ 155.624063][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.732376][ T5891] usb 3-1: USB disconnect, device number 9 [ 155.809703][ T5890] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 155.899829][ T7067] netlink: 'syz.2.338': attribute type 10 has an invalid length. [ 155.984638][ T7067] team0: Device hsr_slave_0 failed to register rx_handler [ 156.025679][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 156.051245][ T5890] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.062322][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 156.076349][ T5890] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.090981][ T5890] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.106040][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.135419][ T5890] usb 1-1: Product: syz [ 156.152350][ T5890] usb 1-1: Manufacturer: syz [ 156.157038][ T5890] usb 1-1: SerialNumber: syz [ 156.213560][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 156.224553][ T10] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 156.256386][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.276017][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.289132][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.298855][ T10] usb 5-1: Product: syz [ 156.304908][ T10] usb 5-1: Manufacturer: syz [ 156.314467][ T10] usb 5-1: SerialNumber: syz [ 156.393740][ T5890] usb 1-1: 0:2 : does not exist [ 156.407481][ T5890] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 156.453340][ T3081] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 156.481630][ T7087] netlink: 'syz.1.342': attribute type 10 has an invalid length. [ 156.483656][ T5890] usb 1-1: USB disconnect, device number 6 [ 156.507579][ T7087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.530190][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.342'. [ 156.550796][ T10] usb 5-1: 0:2 : does not exist [ 156.571701][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 156.618045][ T3081] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 156.629085][ T10] usb 5-1: USB disconnect, device number 5 [ 156.636357][ T3081] usb 3-1: config 0 has no interface number 0 [ 156.645494][ T3081] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 156.686817][ T3081] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.717116][ T3081] usb 3-1: config 0 descriptor?? [ 156.736634][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.784628][ T3081] usb 3-1: selecting invalid altsetting 1 [ 156.788048][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 156.811801][ T3081] dvb_ttusb_budget: ttusb_init_controller: error [ 156.849537][ T3081] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 157.035648][ T5895] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 157.135701][ T3081] DVB: Unable to find symbol cx22700_attach() [ 157.150997][ T7101] FAULT_INJECTION: forcing a failure. [ 157.150997][ T7101] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 157.178582][ T7101] CPU: 1 UID: 0 PID: 7101 Comm: syz.3.343 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 157.178614][ T7101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.178627][ T7101] Call Trace: [ 157.178636][ T7101] [ 157.178645][ T7101] dump_stack_lvl+0x189/0x250 [ 157.178685][ T7101] ? __pfx____ratelimit+0x10/0x10 [ 157.178717][ T7101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.178751][ T7101] ? __pfx__printk+0x10/0x10 [ 157.178776][ T7101] ? fs_reclaim_acquire+0x7d/0x100 [ 157.178811][ T7101] should_fail_ex+0x414/0x560 [ 157.178849][ T7101] prepare_alloc_pages+0x213/0x610 [ 157.178885][ T7101] __alloc_frozen_pages_noprof+0x123/0x370 [ 157.178918][ T7101] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 157.178957][ T7101] ? policy_nodemask+0x27c/0x720 [ 157.178987][ T7101] alloc_pages_mpol+0x232/0x4a0 [ 157.179016][ T7101] alloc_pages_noprof+0xa9/0x190 [ 157.179051][ T7101] __pud_alloc+0x3a/0x260 [ 157.179077][ T7101] __handle_mm_fault+0x3573/0x5620 [ 157.179106][ T7101] ? mt_find+0x46f/0x5f0 [ 157.179141][ T7101] ? mt_find+0x15c/0x5f0 [ 157.179176][ T7101] ? __pfx___handle_mm_fault+0x10/0x10 [ 157.179216][ T7101] ? find_vma+0xe7/0x160 [ 157.179236][ T7101] ? __pfx_find_vma+0x10/0x10 [ 157.179261][ T7101] handle_mm_fault+0x40a/0x8e0 [ 157.179294][ T7101] do_user_addr_fault+0x764/0x1390 [ 157.179341][ T7101] exc_page_fault+0x76/0xf0 [ 157.179384][ T7101] ? __might_fault+0xb0/0x130 [ 157.179407][ T7101] asm_exc_page_fault+0x26/0x30 [ 157.179426][ T7101] RIP: 0010:__put_user_4+0xd/0x20 [ 157.179457][ T7101] Code: 66 89 01 31 c9 0f 01 ca e9 00 32 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 d7 31 03 00 90 90 90 90 90 90 90 90 90 90 [ 157.179475][ T7101] RSP: 0018:ffffc9000f41f860 EFLAGS: 00050202 [ 157.179494][ T7101] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000180 [ 157.179509][ T7101] RDX: 0000000000000000 RSI: ffffffff8db66a62 RDI: ffffffff8be27240 [ 157.179523][ T7101] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff820c4b00 [ 157.179536][ T7101] R10: dffffc0000000000 R11: fffffbfff1f41ebf R12: ffff888030cf80e8 [ 157.179551][ T7101] R13: dffffc0000000000 R14: ffff888030cf80e8 R15: ffff888030cf8100 [ 157.179574][ T7101] ? __might_fault+0xb0/0x130 [ 157.179603][ T7101] packet_ioctl+0x2ff/0x350 [ 157.179633][ T7101] sock_do_ioctl+0xd9/0x300 [ 157.179667][ T7101] ? __pfx_sock_do_ioctl+0x10/0x10 [ 157.179706][ T7101] ? kasan_save_track+0x4f/0x80 [ 157.179736][ T7101] ? kasan_save_track+0x3e/0x80 [ 157.179765][ T7101] ? kasan_save_free_info+0x46/0x50 [ 157.179791][ T7101] ? __kasan_slab_free+0x62/0x70 [ 157.179814][ T7101] sock_ioctl+0x576/0x790 [ 157.179846][ T7101] ? __pfx_sock_ioctl+0x10/0x10 [ 157.179892][ T7101] ? __pfx_sock_ioctl+0x10/0x10 [ 157.179920][ T7101] do_vfs_ioctl+0x1259/0x1990 [ 157.179961][ T7101] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 157.180001][ T7101] ? kasan_quarantine_put+0xdd/0x220 [ 157.180051][ T7101] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 157.180082][ T7101] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 157.180110][ T7101] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 157.180137][ T7101] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 157.180167][ T7101] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 157.180216][ T7101] ? __lock_acquire+0xab9/0xd20 [ 157.180268][ T7101] ? __fget_files+0x2a/0x420 [ 157.180294][ T7101] ? __fget_files+0x2a/0x420 [ 157.180316][ T7101] ? __fget_files+0x3a0/0x420 [ 157.180339][ T7101] ? __fget_files+0x2a/0x420 [ 157.180367][ T7101] ? bpf_lsm_file_ioctl+0x9/0x20 [ 157.180402][ T7101] __se_sys_ioctl+0x82/0x170 [ 157.180436][ T7101] do_syscall_64+0xfa/0x3b0 [ 157.180467][ T7101] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.180496][ T7101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.180516][ T7101] ? clear_bhb_loop+0x60/0xb0 [ 157.180543][ T7101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.180570][ T7101] RIP: 0033:0x7f863018e969 [ 157.180588][ T7101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.180604][ T7101] RSP: 002b:00007f8630f45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.180625][ T7101] RAX: ffffffffffffffda RBX: 00007f86303b6080 RCX: 00007f863018e969 [ 157.180641][ T7101] RDX: 0000200000000180 RSI: 000000000000541b RDI: 0000000000000003 [ 157.180654][ T7101] RBP: 00007f8630f45090 R08: 0000000000000000 R09: 0000000000000000 [ 157.180667][ T7101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.180679][ T7101] R13: 0000000000000001 R14: 00007f86303b6080 R15: 00007f86304dfa28 [ 157.180709][ T7101] [ 157.629074][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.703263][ T3081] DVB: Unable to find symbol tda10046_attach() [ 157.709517][ T3081] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 157.759588][ T5895] usb 2-1: Using ep0 maxpacket: 32 [ 157.777467][ T3081] usb 3-1: USB disconnect, device number 10 [ 157.791354][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.816299][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.032919][ T5895] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 158.042768][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.053937][ T5895] usb 2-1: config 0 descriptor?? [ 158.078934][ T5895] hub 2-1:0.0: USB hub found [ 158.291115][ T5895] hub 2-1:0.0: 1 port detected [ 158.383289][ T7123] dummy0: entered promiscuous mode [ 158.395411][ T7123] macsec1: entered promiscuous mode [ 158.417992][ T7123] macsec1: entered allmulticast mode [ 158.443975][ T7123] dummy0: entered allmulticast mode [ 158.495961][ T5895] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 158.513023][ T7123] dummy0: left allmulticast mode [ 158.541138][ T7123] dummy0: left promiscuous mode [ 158.548546][ T5895] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 158.910552][ T5895] usbhid 2-1:0.0: can't add hid device: -71 [ 158.918272][ T5895] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 159.008066][ T5895] usb 2-1: USB disconnect, device number 22 [ 159.472715][ T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 159.698124][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.719375][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 159.770890][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 159.927932][ T10] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 159.958352][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 160.018146][ T10] usb 1-1: Product: syz [ 160.043809][ T10] usb 1-1: Manufacturer: syz [ 160.081679][ T10] usb 1-1: SerialNumber: syz [ 160.122806][ T43] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 160.133346][ T10] usb 1-1: config 0 descriptor?? [ 160.192142][ T10] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 160.265722][ T10] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 160.302809][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 160.392556][ T7138] delete_channel: no stack [ 160.405549][ T7166] xt_hashlimit: max too large, truncated to 1048576 [ 160.426509][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.358'. [ 160.515986][ T7166] binder: BINDER_SET_CONTEXT_MGR already set [ 160.522180][ T7166] binder: 7165:7166 ioctl 4018620d 200000000040 returned -16 [ 160.530896][ T7166] binder: 7165:7166 ioctl c0306201 2000000003c0 returned -14 [ 161.251773][ T7181] random: crng reseeded on system resumption [ 162.134026][ T7198] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 163.249066][ T5895] usb 1-1: USB disconnect, device number 7 [ 163.255976][ T7135] delete_channel: no stack [ 164.150261][ T7233] FAULT_INJECTION: forcing a failure. [ 164.150261][ T7233] name failslab, interval 1, probability 0, space 0, times 0 [ 164.223163][ T7233] CPU: 0 UID: 0 PID: 7233 Comm: syz.3.374 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 164.223194][ T7233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.223207][ T7233] Call Trace: [ 164.223216][ T7233] [ 164.223225][ T7233] dump_stack_lvl+0x189/0x250 [ 164.223263][ T7233] ? __pfx____ratelimit+0x10/0x10 [ 164.223295][ T7233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.223328][ T7233] ? __pfx__printk+0x10/0x10 [ 164.223362][ T7233] ? __pfx___might_resched+0x10/0x10 [ 164.223381][ T7233] ? fs_reclaim_acquire+0x7d/0x100 [ 164.223413][ T7233] should_fail_ex+0x414/0x560 [ 164.223451][ T7233] should_failslab+0xa8/0x100 [ 164.223478][ T7233] __kmalloc_cache_noprof+0x70/0x3d0 [ 164.223500][ T7233] ? nfnetlink_rcv+0xeff/0x2520 [ 164.223536][ T7233] nfnetlink_rcv+0xeff/0x2520 [ 164.223602][ T7233] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 164.223653][ T7233] ? ref_tracker_free+0x63a/0x7d0 [ 164.223708][ T7233] ? __netlink_deliver_tap+0x807/0x850 [ 164.223744][ T7233] ? netlink_deliver_tap+0x2e/0x1b0 [ 164.223768][ T7233] ? netlink_deliver_tap+0x2e/0x1b0 [ 164.223799][ T7233] netlink_unicast+0x75b/0x8d0 [ 164.223834][ T7233] netlink_sendmsg+0x805/0xb30 [ 164.223870][ T7233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.223899][ T7233] ? aa_sock_msg_perm+0x94/0x160 [ 164.223945][ T7233] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 164.223973][ T7233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.223998][ T7233] __sock_sendmsg+0x219/0x270 [ 164.224034][ T7233] ____sys_sendmsg+0x505/0x830 [ 164.224066][ T7233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.224108][ T7233] ? import_iovec+0x74/0xa0 [ 164.224158][ T7233] ___sys_sendmsg+0x21f/0x2a0 [ 164.224187][ T7233] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.224268][ T7233] ? __fget_files+0x2a/0x420 [ 164.224291][ T7233] ? __fget_files+0x3a0/0x420 [ 164.224327][ T7233] __x64_sys_sendmsg+0x19b/0x260 [ 164.224357][ T7233] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 164.224394][ T7233] ? __pfx_ksys_write+0x10/0x10 [ 164.224411][ T7233] ? rcu_is_watching+0x15/0xb0 [ 164.224437][ T7233] ? do_syscall_64+0xbe/0x3b0 [ 164.224472][ T7233] do_syscall_64+0xfa/0x3b0 [ 164.224502][ T7233] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.224531][ T7233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.224552][ T7233] ? clear_bhb_loop+0x60/0xb0 [ 164.224577][ T7233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.224598][ T7233] RIP: 0033:0x7f863018e969 [ 164.224616][ T7233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.224634][ T7233] RSP: 002b:00007f8630f66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.224656][ T7233] RAX: ffffffffffffffda RBX: 00007f86303b5fa0 RCX: 00007f863018e969 [ 164.224671][ T7233] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 164.224684][ T7233] RBP: 00007f8630f66090 R08: 0000000000000000 R09: 0000000000000000 [ 164.224697][ T7233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 164.224709][ T7233] R13: 0000000000000000 R14: 00007f86303b5fa0 R15: 00007f86304dfa28 [ 164.224742][ T7233] [ 164.606109][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.375'. [ 164.716184][ T7237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.375'. [ 164.790820][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'. [ 164.806927][ T7245] loop8: detected capacity change from 0 to 7 [ 164.821463][ T7245] Dev loop8: unable to read RDB block 7 [ 164.829765][ T7245] loop8: unable to read partition table [ 164.837328][ T7245] loop8: partition table beyond EOD, truncated [ 164.847410][ T7245] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¬âÐû [ 164.847410][ T7245] ) failed (rc=-5) [ 165.153063][ T7251] netlink: 24 bytes leftover after parsing attributes in process `syz.3.378'. [ 165.672327][ T10] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 165.809273][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.381'. [ 165.834025][ T7266] bridge_slave_1: left allmulticast mode [ 165.839764][ T7266] bridge_slave_1: left promiscuous mode [ 165.847018][ T7266] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.862806][ T10] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 165.873791][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.900412][ T7266] bridge_slave_0: left allmulticast mode [ 165.900432][ T7266] bridge_slave_0: left promiscuous mode [ 165.900642][ T7266] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.910643][ T10] usb 1-1: New USB device found, idVendor=0125, idProduct=a4a1, bcdDevice= 0.40 [ 165.910675][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.910697][ T10] usb 1-1: Product: syz [ 165.910714][ T10] usb 1-1: Manufacturer: syz [ 165.910731][ T10] usb 1-1: SerialNumber: syz [ 165.928319][ T10] cdc_ncm 1-1:1.0: skipping garbage [ 165.928350][ T10] usb 1-1: selecting invalid altsetting 1 [ 166.325903][ T10] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 166.332137][ T10] cdc_ncm 1-1:1.0: bind() failure [ 166.378995][ T7260] netlink: 'syz.0.380': attribute type 4 has an invalid length. [ 166.402832][ T7260] netlink: 17 bytes leftover after parsing attributes in process `syz.0.380'. [ 167.355351][ T24] usb 1-1: USB disconnect, device number 8 [ 169.058831][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.394'. [ 169.378029][ T7327] FAULT_INJECTION: forcing a failure. [ 169.378029][ T7327] name failslab, interval 1, probability 0, space 0, times 0 [ 169.420823][ T7327] CPU: 1 UID: 0 PID: 7327 Comm: syz.0.397 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 169.420855][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.420869][ T7327] Call Trace: [ 169.420877][ T7327] [ 169.420886][ T7327] dump_stack_lvl+0x189/0x250 [ 169.420923][ T7327] ? __pfx____ratelimit+0x10/0x10 [ 169.420963][ T7327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.420993][ T7327] ? __pfx__printk+0x10/0x10 [ 169.421023][ T7327] ? __pfx___might_resched+0x10/0x10 [ 169.421041][ T7327] ? fs_reclaim_acquire+0x7d/0x100 [ 169.421072][ T7327] should_fail_ex+0x414/0x560 [ 169.421110][ T7327] should_failslab+0xa8/0x100 [ 169.421136][ T7327] kmem_cache_alloc_noprof+0x73/0x3c0 [ 169.421157][ T7327] ? __pmd_alloc+0xc6/0x3b0 [ 169.421182][ T7327] __pmd_alloc+0xc6/0x3b0 [ 169.421206][ T7327] __handle_mm_fault+0xa63/0x5620 [ 169.421234][ T7327] ? mt_find+0x46f/0x5f0 [ 169.421275][ T7327] ? __pfx___handle_mm_fault+0x10/0x10 [ 169.421314][ T7327] ? find_vma+0xe7/0x160 [ 169.421333][ T7327] ? __pfx_find_vma+0x10/0x10 [ 169.421357][ T7327] handle_mm_fault+0x40a/0x8e0 [ 169.421388][ T7327] do_user_addr_fault+0x764/0x1390 [ 169.421434][ T7327] exc_page_fault+0x76/0xf0 [ 169.421461][ T7327] ? __might_fault+0xb0/0x130 [ 169.421484][ T7327] asm_exc_page_fault+0x26/0x30 [ 169.421504][ T7327] RIP: 0010:__put_user_4+0xd/0x20 [ 169.421535][ T7327] Code: 66 89 01 31 c9 0f 01 ca e9 00 32 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 d7 31 03 00 90 90 90 90 90 90 90 90 90 90 [ 169.421553][ T7327] RSP: 0018:ffffc9000be17860 EFLAGS: 00050202 [ 169.421574][ T7327] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000180 [ 169.421606][ T7327] RDX: 0000000000000000 RSI: ffffffff8db66a62 RDI: ffffffff8be27240 [ 169.421621][ T7327] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff820c4b00 [ 169.421635][ T7327] R10: dffffc0000000000 R11: fffffbfff1f41ebf R12: ffff888077b9a0e8 [ 169.421651][ T7327] R13: dffffc0000000000 R14: ffff888077b9a0e8 R15: ffff888077b9a100 [ 169.421675][ T7327] ? __might_fault+0xb0/0x130 [ 169.421705][ T7327] packet_ioctl+0x2ff/0x350 [ 169.421736][ T7327] sock_do_ioctl+0xd9/0x300 [ 169.421771][ T7327] ? __pfx_sock_do_ioctl+0x10/0x10 [ 169.421812][ T7327] ? kasan_save_track+0x4f/0x80 [ 169.421843][ T7327] ? kasan_save_track+0x3e/0x80 [ 169.421873][ T7327] ? kasan_save_free_info+0x46/0x50 [ 169.421899][ T7327] ? __kasan_slab_free+0x62/0x70 [ 169.421924][ T7327] sock_ioctl+0x576/0x790 [ 169.421969][ T7327] ? __pfx_sock_ioctl+0x10/0x10 [ 169.422016][ T7327] ? __pfx_sock_ioctl+0x10/0x10 [ 169.422044][ T7327] do_vfs_ioctl+0x1259/0x1990 [ 169.422081][ T7327] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 169.422121][ T7327] ? kasan_quarantine_put+0xdd/0x220 [ 169.422166][ T7327] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 169.422198][ T7327] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 169.422227][ T7327] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 169.422255][ T7327] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 169.422286][ T7327] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 169.422336][ T7327] ? __lock_acquire+0xab9/0xd20 [ 169.422390][ T7327] ? __fget_files+0x2a/0x420 [ 169.422419][ T7327] ? __fget_files+0x2a/0x420 [ 169.422443][ T7327] ? __fget_files+0x3a0/0x420 [ 169.422467][ T7327] ? __fget_files+0x2a/0x420 [ 169.422495][ T7327] ? bpf_lsm_file_ioctl+0x9/0x20 [ 169.422532][ T7327] __se_sys_ioctl+0x82/0x170 [ 169.422569][ T7327] do_syscall_64+0xfa/0x3b0 [ 169.422600][ T7327] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.422631][ T7327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.422651][ T7327] ? clear_bhb_loop+0x60/0xb0 [ 169.422677][ T7327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.422698][ T7327] RIP: 0033:0x7fd53918e969 [ 169.422717][ T7327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.422735][ T7327] RSP: 002b:00007fd53a001038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.422757][ T7327] RAX: ffffffffffffffda RBX: 00007fd5393b6080 RCX: 00007fd53918e969 [ 169.422772][ T7327] RDX: 0000200000000180 RSI: 000000000000541b RDI: 0000000000000003 [ 169.422798][ T7327] RBP: 00007fd53a001090 R08: 0000000000000000 R09: 0000000000000000 [ 169.422812][ T7327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.422824][ T7327] R13: 0000000000000001 R14: 00007fd5393b6080 R15: 00007fd5394dfa28 [ 169.422857][ T7327] [ 169.852988][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.969913][ T7331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.400'. [ 169.980429][ T7332] delete_channel: no stack [ 170.079744][ T7336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.399'. [ 170.205866][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.402'. [ 170.229562][ T7340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.402'. [ 170.296255][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.402'. [ 170.402737][ T7343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.403'. [ 170.825995][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'. [ 170.890680][ T7371] random: crng reseeded on system resumption [ 171.646925][ T7394] netlink: 264 bytes leftover after parsing attributes in process `syz.2.420'. [ 171.849471][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 171.849490][ T30] audit: type=1326 audit(1749030477.017:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511538e969 code=0x7ffc0000 [ 171.878039][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.914161][ T7405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.422'. [ 171.959358][ T30] audit: type=1326 audit(1749030477.057:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511538e969 code=0x7ffc0000 [ 172.052368][ T30] audit: type=1326 audit(1749030477.057:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f511538e969 code=0x7ffc0000 [ 172.074514][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.150175][ T30] audit: type=1326 audit(1749030477.057:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511538e969 code=0x7ffc0000 [ 172.245160][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.425'. [ 172.254296][ T7413] netlink: 312 bytes leftover after parsing attributes in process `syz.2.425'. [ 172.274601][ T7413] netlink: 'syz.2.425': attribute type 1 has an invalid length. [ 172.322006][ T30] audit: type=1326 audit(1749030477.057:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f511538e969 code=0x7ffc0000 [ 172.344249][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.415538][ T30] audit: type=1326 audit(1749030477.057:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511538e969 code=0x7ffc0000 [ 172.452084][ T30] audit: type=1326 audit(1749030477.057:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f511538e969 code=0x7ffc0000 [ 172.487579][ T30] audit: type=1326 audit(1749030477.057:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511538e969 code=0x7ffc0000 [ 172.492489][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 172.585377][ T30] audit: type=1326 audit(1749030477.057:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f511538e969 code=0x7ffc0000 [ 172.607526][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.654577][ T30] audit: type=1326 audit(1749030477.057:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7402 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511538e969 code=0x7ffc0000 [ 172.676779][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.721647][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 172.755255][ T24] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 172.807804][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.881244][ T7427] FAULT_INJECTION: forcing a failure. [ 172.881244][ T7427] name failslab, interval 1, probability 0, space 0, times 0 [ 172.893450][ T24] usb 1-1: config 0 descriptor?? [ 172.897996][ T7427] CPU: 0 UID: 0 PID: 7427 Comm: syz.4.431 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 172.898031][ T7427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.898047][ T7427] Call Trace: [ 172.898058][ T7427] [ 172.898071][ T7427] dump_stack_lvl+0x189/0x250 [ 172.898116][ T7427] ? __pfx____ratelimit+0x10/0x10 [ 172.898153][ T7427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.898193][ T7427] ? __pfx__printk+0x10/0x10 [ 172.898238][ T7427] should_fail_ex+0x414/0x560 [ 172.898290][ T7427] should_failslab+0xa8/0x100 [ 172.898321][ T7427] kmem_cache_alloc_noprof+0x73/0x3c0 [ 172.898344][ T7427] ? skb_clone+0x212/0x3a0 [ 172.898384][ T7427] skb_clone+0x212/0x3a0 [ 172.898419][ T7427] __netlink_deliver_tap+0x404/0x850 [ 172.898463][ T7427] ? netlink_deliver_tap+0x2e/0x1b0 [ 172.898492][ T7427] netlink_deliver_tap+0x19c/0x1b0 [ 172.898520][ T7427] netlink_sendskb+0x68/0x140 [ 172.898546][ T7427] netlink_rcv_skb+0x28c/0x470 [ 172.898572][ T7427] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 172.898599][ T7427] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 172.898642][ T7427] ? netlink_deliver_tap+0x2e/0x1b0 [ 172.898668][ T7427] ? netlink_deliver_tap+0x2e/0x1b0 [ 172.898701][ T7427] netlink_unicast+0x75b/0x8d0 [ 172.898738][ T7427] netlink_sendmsg+0x805/0xb30 [ 172.898779][ T7427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.898810][ T7427] ? aa_sock_msg_perm+0x94/0x160 [ 172.898849][ T7427] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 172.898888][ T7427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.898913][ T7427] __sock_sendmsg+0x219/0x270 [ 172.898954][ T7427] ____sys_sendmsg+0x505/0x830 [ 172.898992][ T7427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.899033][ T7427] ? import_iovec+0x74/0xa0 [ 172.899068][ T7427] ___sys_sendmsg+0x21f/0x2a0 [ 172.899099][ T7427] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.899179][ T7427] ? __fget_files+0x2a/0x420 [ 172.899203][ T7427] ? __fget_files+0x3a0/0x420 [ 172.899238][ T7427] __x64_sys_sendmsg+0x19b/0x260 [ 172.899269][ T7427] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.899314][ T7427] ? __pfx_ksys_write+0x10/0x10 [ 172.899333][ T7427] ? rcu_is_watching+0x15/0xb0 [ 172.899378][ T7427] ? do_syscall_64+0xbe/0x3b0 [ 172.899418][ T7427] do_syscall_64+0xfa/0x3b0 [ 172.899452][ T7427] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.899485][ T7427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.899510][ T7427] ? clear_bhb_loop+0x60/0xb0 [ 172.899540][ T7427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.899563][ T7427] RIP: 0033:0x7f6c2058e969 [ 172.899584][ T7427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.899604][ T7427] RSP: 002b:00007f6c21360038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.899630][ T7427] RAX: ffffffffffffffda RBX: 00007f6c207b5fa0 RCX: 00007f6c2058e969 [ 172.899648][ T7427] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 172.899663][ T7427] RBP: 00007f6c21360090 R08: 0000000000000000 R09: 0000000000000000 [ 172.899677][ T7427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.899691][ T7427] R13: 0000000000000000 R14: 00007f6c207b5fa0 R15: 00007f6c208dfa28 [ 172.899726][ T7427] [ 173.064626][ T5891] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 173.238659][ T7429] FAULT_INJECTION: forcing a failure. [ 173.238659][ T7429] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 173.264953][ T7429] CPU: 1 UID: 0 PID: 7429 Comm: syz.4.432 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 173.264976][ T7429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.264986][ T7429] Call Trace: [ 173.264992][ T7429] [ 173.264999][ T7429] dump_stack_lvl+0x189/0x250 [ 173.265027][ T7429] ? __pfx____ratelimit+0x10/0x10 [ 173.265049][ T7429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.265074][ T7429] ? __pfx__printk+0x10/0x10 [ 173.265092][ T7429] ? fs_reclaim_acquire+0x7d/0x100 [ 173.265118][ T7429] should_fail_ex+0x414/0x560 [ 173.265145][ T7429] prepare_alloc_pages+0x213/0x610 [ 173.265170][ T7429] __alloc_frozen_pages_noprof+0x123/0x370 [ 173.265194][ T7429] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 173.265221][ T7429] ? policy_nodemask+0x27c/0x720 [ 173.265238][ T7429] ? do_raw_read_unlock+0x3d/0x80 [ 173.265256][ T7429] ? _raw_read_unlock+0x28/0x50 [ 173.265278][ T7429] alloc_pages_mpol+0x232/0x4a0 [ 173.265299][ T7429] vma_alloc_folio_noprof+0xe4/0x200 [ 173.265319][ T7429] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 173.265346][ T7429] folio_prealloc+0x30/0x180 [ 173.265364][ T7429] __handle_mm_fault+0x183f/0x5620 [ 173.265393][ T7429] ? __pfx___handle_mm_fault+0x10/0x10 [ 173.265423][ T7429] ? find_vma+0xe7/0x160 [ 173.265437][ T7429] ? __pfx_find_vma+0x10/0x10 [ 173.265454][ T7429] handle_mm_fault+0x40a/0x8e0 [ 173.265482][ T7429] do_user_addr_fault+0x764/0x1390 [ 173.265516][ T7429] exc_page_fault+0x76/0xf0 [ 173.265540][ T7429] asm_exc_page_fault+0x26/0x30 [ 173.265554][ T7429] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 173.265571][ T7429] Code: f7 03 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f f7 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 173.265584][ T7429] RSP: 0018:ffffc90004e1f898 EFLAGS: 00050206 [ 173.265598][ T7429] RAX: ffffffff84bd7c01 RBX: ffff88802a1e4000 RCX: 000000000000009f [ 173.265609][ T7429] RDX: 0000000000000000 RSI: ffff88802a1e4000 RDI: 00002000000034c0 [ 173.265619][ T7429] RBP: ffffc90004e1f9f0 R08: ffff88802a1e409e R09: 1ffff1100543c813 [ 173.265630][ T7429] R10: dffffc0000000000 R11: ffffed100543c814 R12: dffffc0000000000 [ 173.265641][ T7429] R13: 0000000000000000 R14: 00007ffffffff000 R15: 000000000000009f [ 173.265657][ T7429] ? _copy_to_iter+0x451/0x16f0 [ 173.265678][ T7429] _copy_to_iter+0x484/0x16f0 [ 173.265703][ T7429] ? __pfx__copy_to_iter+0x10/0x10 [ 173.265724][ T7429] ? stats_show+0x604/0x620 [ 173.265737][ T7429] ? seq_read_iter+0x1fd/0xe10 [ 173.265797][ T7429] seq_read_iter+0xbeb/0xe10 [ 173.265836][ T7429] seq_read+0x2e2/0x3d0 [ 173.265866][ T7429] ? __pfx_seq_read+0x10/0x10 [ 173.265888][ T7429] ? __debugfs_file_get+0x5dd/0x710 [ 173.265908][ T7429] ? __pfx___debugfs_file_get+0x10/0x10 [ 173.265934][ T7429] full_proxy_read+0x153/0x220 [ 173.265951][ T7429] ? __pfx_full_proxy_read+0x10/0x10 [ 173.265970][ T7429] vfs_read+0x1fd/0x980 [ 173.265988][ T7429] ? __pfx___mutex_lock+0x10/0x10 [ 173.266011][ T7429] ? __pfx_vfs_read+0x10/0x10 [ 173.266026][ T7429] ? __fget_files+0x2a/0x420 [ 173.266048][ T7429] ? __fget_files+0x3a0/0x420 [ 173.266063][ T7429] ? __fget_files+0x2a/0x420 [ 173.266087][ T7429] ksys_read+0x145/0x250 [ 173.266103][ T7429] ? __pfx_ksys_read+0x10/0x10 [ 173.266115][ T7429] ? rcu_is_watching+0x15/0xb0 [ 173.266134][ T7429] ? do_syscall_64+0xbe/0x3b0 [ 173.266159][ T7429] do_syscall_64+0xfa/0x3b0 [ 173.266180][ T7429] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.266201][ T7429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.266215][ T7429] ? clear_bhb_loop+0x60/0xb0 [ 173.266234][ T7429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.266248][ T7429] RIP: 0033:0x7f6c2058e969 [ 173.266261][ T7429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.266273][ T7429] RSP: 002b:00007f6c21360038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 173.266287][ T7429] RAX: ffffffffffffffda RBX: 00007f6c207b5fa0 RCX: 00007f6c2058e969 [ 173.266298][ T7429] RDX: 0000000000000cac RSI: 00002000000034c0 RDI: 0000000000000004 [ 173.266307][ T7429] RBP: 00007f6c21360090 R08: 0000000000000000 R09: 0000000000000000 [ 173.266317][ T7429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.266326][ T7429] R13: 0000000000000000 R14: 00007f6c207b5fa0 R15: 00007f6c208dfa28 [ 173.266349][ T7429] [ 173.697364][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.727939][ T24] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 173.878745][ T7431] ptrace attach of "./syz-executor exec"[5850] was attempted by "./syz-executor exec"[7431] [ 173.956677][ T7433] random: crng reseeded on system resumption [ 174.045067][ T7435] netlink: 44 bytes leftover after parsing attributes in process `syz.2.435'. [ 174.164196][ T5891] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.174437][ T5891] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.190143][ T5891] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 174.239234][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.262313][ T5891] usb 4-1: Product: syz [ 174.266619][ T5891] usb 4-1: Manufacturer: syz [ 174.321221][ T5891] usb 4-1: SerialNumber: syz [ 174.569877][ T5891] usb 4-1: 0:2 : does not exist [ 174.599638][ T5891] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 174.703847][ T5891] usb 4-1: USB disconnect, device number 11 [ 174.753140][ T7441] loop8: detected capacity change from 0 to 7 [ 174.785080][ T7441] Dev loop8: unable to read RDB block 7 [ 174.786960][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.791247][ T7441] loop8: unable to read partition table [ 174.826382][ T7441] loop8: partition table beyond EOD, truncated [ 174.846975][ T7441] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¬âÐû [ 174.846975][ T7441] ) failed (rc=-5) [ 174.945815][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'. [ 175.177350][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.437'. [ 175.242807][ T24] gspca_nw80x: reg_w err -110 [ 175.247844][ T24] nw80x 1-1:0.0: probe with driver nw80x failed with error -110 [ 175.405901][ T7447] QAT: Invalid ioctl 21531 [ 175.532159][ T7451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.440'. [ 175.550813][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.440'. [ 175.652377][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 175.828321][ T24] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 175.862363][ T24] usb 4-1: config 0 has no interface number 0 [ 175.875631][ T24] usb 4-1: config 0 interface 83 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 175.884699][ T7460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.445'. [ 175.902998][ T7461] netlink: 52 bytes leftover after parsing attributes in process `syz.4.445'. [ 175.905947][ T24] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 175.956269][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.004542][ T24] usb 4-1: config 0 descriptor?? [ 176.023770][ T24] ttusbir 4-1:0.83: cannot find expected altsetting [ 176.231970][ T24] usb 4-1: USB disconnect, device number 12 [ 176.370907][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 176.380273][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 176.392798][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 176.403631][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 176.411736][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 176.747057][ T7469] chnl_net:caif_netlink_parms(): no params data found [ 176.851870][ T24] usb 1-1: USB disconnect, device number 9 [ 177.077827][ T7469] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.090620][ T7469] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.108028][ T7469] bridge_slave_0: entered allmulticast mode [ 177.144885][ T7469] bridge_slave_0: entered promiscuous mode [ 177.172714][ T7469] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.179983][ T7469] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.203125][ T7469] bridge_slave_1: entered allmulticast mode [ 177.251595][ T7469] bridge_slave_1: entered promiscuous mode [ 177.394139][ T7469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.422109][ T7469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.539049][ T7469] team0: Port device team_slave_0 added [ 177.549722][ T7469] team0: Port device team_slave_1 added [ 177.612782][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 177.701303][ T7469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.710035][ T7469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.736724][ T7469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.763876][ T7469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.772744][ T7469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.800246][ T7469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.803275][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 177.821263][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.835715][ T10] usb 4-1: config 0 has no interfaces? [ 177.844415][ T10] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 177.877874][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.887281][ T10] usb 4-1: Product: syz [ 177.891525][ T10] usb 4-1: Manufacturer: syz [ 177.900460][ T10] usb 4-1: SerialNumber: syz [ 177.909993][ T10] usb 4-1: config 0 descriptor?? [ 177.985764][ T7469] hsr_slave_0: entered promiscuous mode [ 178.012284][ T7469] hsr_slave_1: entered promiscuous mode [ 178.018826][ T7469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.039694][ T7469] Cannot create hsr debugfs directory [ 178.179305][ T7482] team_slave_0: entered promiscuous mode [ 178.185192][ T7482] team_slave_1: entered promiscuous mode [ 178.206527][ T7482] vlan2: entered promiscuous mode [ 178.211747][ T7482] team0: entered promiscuous mode [ 178.293309][ T43] usb 4-1: USB disconnect, device number 13 [ 178.362735][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 178.512540][ T5835] Bluetooth: hci5: command tx timeout [ 178.518532][ T7469] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 178.541489][ T7469] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 178.623232][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 178.628329][ T7469] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 178.634732][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 178.649585][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 178.657051][ T7469] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 178.670534][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.682385][ T5890] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 178.708202][ T24] usb 5-1: config 0 descriptor?? [ 178.785489][ T24] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 178.853673][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 178.861953][ T5890] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 178.871430][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.942414][ T5890] usb 1-1: config 0 descriptor?? [ 179.057272][ T7493] input: syz0 as /devices/virtual/input/input8 [ 179.109712][ T5890] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 179.139223][ T7469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.222921][ T7504] netlink: 'syz.3.458': attribute type 10 has an invalid length. [ 179.270476][ T7504] team0: Device hsr_slave_0 failed to register rx_handler [ 179.335525][ T7469] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.362128][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.369368][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.410178][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.417498][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.771782][ T7469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.244058][ T7469] veth0_vlan: entered promiscuous mode [ 180.281813][ T7469] veth1_vlan: entered promiscuous mode [ 180.371409][ T7469] veth0_macvtap: entered promiscuous mode [ 180.397261][ T7500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 180.510205][ T7469] veth1_macvtap: entered promiscuous mode [ 180.604110][ T5835] Bluetooth: hci5: command tx timeout [ 180.782416][ T5890] gspca_nw80x: reg_w err -110 [ 180.787858][ T5890] nw80x 1-1:0.0: probe with driver nw80x failed with error -110 [ 180.962859][ T7469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.008901][ T7469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.067874][ T7469] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.116343][ T7469] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.159221][ T5188] bcm5974 5-1:0.0: could not read from device [ 181.224639][ T7469] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.274606][ T7469] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.289521][ T7525] bcm5974 5-1:0.0: could not read from device [ 181.367913][ T5188] bcm5974 5-1:0.0: could not read from device [ 181.389299][ T24] usb 5-1: USB disconnect, device number 6 [ 181.409006][ T5188] bcm5974 5-1:0.0: could not read from device [ 181.563516][ T5890] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 181.623314][ T7530] netlink: 'syz.4.467': attribute type 322 has an invalid length. [ 181.698061][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.716252][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.762607][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 181.772075][ T5890] usb 4-1: config 15 has an invalid interface number: 234 but max is 0 [ 181.785692][ T5890] usb 4-1: config 15 has an invalid interface number: 172 but max is 0 [ 181.796596][ T5890] usb 4-1: config 15 has 2 interfaces, different from the descriptor's value: 1 [ 181.814465][ T5890] usb 4-1: config 15 has no interface number 0 [ 181.821028][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.831229][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.848417][ T5890] usb 4-1: config 15 has no interface number 1 [ 181.860296][ T5890] usb 4-1: config 15 interface 234 altsetting 173 endpoint 0xF has an invalid bInterval 252, changing to 11 [ 181.887128][ T5890] usb 4-1: config 15 interface 234 altsetting 173 endpoint 0xF has invalid wMaxPacketSize 0 [ 181.897624][ T5890] usb 4-1: config 15 interface 234 altsetting 173 has an invalid descriptor for endpoint zero, skipping [ 181.912061][ T5890] usb 4-1: config 15 interface 234 altsetting 173 bulk endpoint 0x4 has invalid maxpacket 16 [ 181.925179][ T5890] usb 4-1: config 15 interface 234 altsetting 173 has a duplicate endpoint with address 0x8, skipping [ 182.001162][ T5890] usb 4-1: config 15 interface 234 altsetting 173 has an invalid descriptor for endpoint zero, skipping [ 182.040139][ T5890] usb 4-1: config 15 interface 234 altsetting 173 has a duplicate endpoint with address 0x8, skipping [ 182.126281][ T5891] usb 1-1: USB disconnect, device number 10 [ 182.185212][ T5890] usb 4-1: config 15 interface 234 altsetting 173 has a duplicate endpoint with address 0xC, skipping [ 182.238507][ T5890] usb 4-1: config 15 interface 234 altsetting 173 has 11 endpoint descriptors, different from the interface descriptor's value: 12 [ 182.279165][ T7535] netlink: 264 bytes leftover after parsing attributes in process `syz.0.469'. [ 182.292465][ T5890] usb 4-1: too many endpoints for config 15 interface 172 altsetting 125: 39, using maximum allowed: 30 [ 182.304079][ T5893] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 182.444901][ T5890] usb 4-1: config 15 interface 172 altsetting 125 has a duplicate endpoint with address 0x1, skipping [ 182.487115][ T5890] usb 4-1: config 15 interface 172 altsetting 125 has 1 endpoint descriptor, different from the interface descriptor's value: 39 [ 182.491986][ T5893] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 182.527903][ T5890] usb 4-1: config 15 interface 234 has no altsetting 0 [ 182.588578][ T5890] usb 4-1: config 15 interface 172 has no altsetting 0 [ 182.598196][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.615979][ T5890] usb 4-1: New USB device found, idVendor=1784, idProduct=0007, bcdDevice=27.03 [ 182.632874][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.650652][ T5893] usb 5-1: Product: syz [ 182.659355][ T5890] usb 4-1: Product: 懥ﳤ苿㕓렼å³å‘½éˆ›ç›ªî¨ä”•ç®‹ã²ŒïŸ˜î ¡ï‰˜ï¦°å’¤ä¨¾ãŒœê¥˜é¿žé±Ÿî©™å¯‘ã’᧋핉疑賵砅燵ᬹí†ç„¶ç»–䂯冴ư墙ç˜é…¢ä¹¹èºžë¥œê¼®ï‡©îº©â“¶è‡˜å–¢ç°žã™¢Å¸è­½á¢™ë¦”ìž’êš¿é¡à§«ã–‚鿂⣷퀤䅜 [ 182.663062][ T5893] usb 5-1: Manufacturer: syz [ 182.697433][ T5835] Bluetooth: hci5: command tx timeout [ 182.738363][ T5890] usb 4-1: Manufacturer: О [ 182.760964][ T5890] usb 4-1: SerialNumber: Д [ 182.765823][ T5893] usb 5-1: SerialNumber: syz [ 182.853557][ T5893] usb 5-1: config 0 descriptor?? [ 182.883640][ T7527] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 182.972851][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 183.056133][ T7547] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.147653][ T5893] usb 5-1: Firmware version (0.0) predates our first public release. [ 183.220762][ T5893] usb 5-1: Please update to version 0.2 or newer [ 183.227611][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 183.233132][ T24] usb 6-1: config 0 has an invalid interface number: 111 but max is 1 [ 183.233161][ T24] usb 6-1: config 0 has no interface number 1 [ 183.241237][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 183.273706][ T5890] usb 4-1: USB disconnect, device number 14 [ 183.342129][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.361432][ T24] usb 6-1: Product: syz [ 183.371345][ T24] usb 6-1: Manufacturer: syz [ 183.371371][ T24] usb 6-1: SerialNumber: syz [ 183.393629][ T24] usb 6-1: config 0 descriptor?? [ 183.498326][ T5893] usb 5-1: USB disconnect, device number 7 [ 183.641539][ T7541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.671120][ T7541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.278813][ T24] snd-usb-6fire 6-1:0.111: unable to receive device firmware state. [ 184.306187][ T24] snd-usb-6fire 6-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 184.340943][ T24] usb 6-1: USB disconnect, device number 2 [ 184.412349][ T5893] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 184.756472][ T5835] Bluetooth: hci5: command tx timeout [ 184.883008][ T5893] usb 5-1: device descriptor read/64, error -71 [ 185.082641][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 185.214402][ T5893] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 185.312457][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 185.403047][ T10] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 185.462281][ T5893] usb 5-1: device descriptor read/64, error -71 [ 185.516380][ T7574] netlink: 'syz.5.481': attribute type 10 has an invalid length. [ 185.564662][ T7574] team0: Device hsr_slave_0 failed to register rx_handler [ 185.585311][ T5893] usb usb5-port1: attempt power cycle [ 185.603584][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.836520][ T10] usb 4-1: config 0 descriptor?? [ 185.861228][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 186.106131][ T7583] FAULT_INJECTION: forcing a failure. [ 186.106131][ T7583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.122803][ T7583] CPU: 1 UID: 0 PID: 7583 Comm: syz.5.485 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 186.122833][ T7583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.122847][ T7583] Call Trace: [ 186.122868][ T7583] [ 186.122877][ T7583] dump_stack_lvl+0x189/0x250 [ 186.122927][ T7583] ? __pfx____ratelimit+0x10/0x10 [ 186.122957][ T7583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.122989][ T7583] ? __pfx__printk+0x10/0x10 [ 186.123035][ T7583] should_fail_ex+0x414/0x560 [ 186.123073][ T7583] _copy_to_user+0x31/0xb0 [ 186.123101][ T7583] simple_read_from_buffer+0xe1/0x170 [ 186.123129][ T7583] proc_fail_nth_read+0x1df/0x250 [ 186.123159][ T7583] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.123189][ T7583] ? rw_verify_area+0x258/0x650 [ 186.123220][ T7583] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.123247][ T7583] vfs_read+0x1fd/0x980 [ 186.123272][ T7583] ? __pfx___mutex_lock+0x10/0x10 [ 186.123306][ T7583] ? __pfx_vfs_read+0x10/0x10 [ 186.123326][ T7583] ? __fget_files+0x2a/0x420 [ 186.123356][ T7583] ? __fget_files+0x3a0/0x420 [ 186.123378][ T7583] ? __fget_files+0x2a/0x420 [ 186.123411][ T7583] ksys_read+0x145/0x250 [ 186.123434][ T7583] ? __pfx_ksys_read+0x10/0x10 [ 186.123451][ T7583] ? rcu_is_watching+0x15/0xb0 [ 186.123477][ T7583] ? do_syscall_64+0xbe/0x3b0 [ 186.123512][ T7583] do_syscall_64+0xfa/0x3b0 [ 186.123541][ T7583] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.123571][ T7583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.123592][ T7583] ? clear_bhb_loop+0x60/0xb0 [ 186.123617][ T7583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.123637][ T7583] RIP: 0033:0x7f5219b8d37c [ 186.123660][ T7583] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 186.123677][ T7583] RSP: 002b:00007f521a973030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.123706][ T7583] RAX: ffffffffffffffda RBX: 00007f5219db5fa0 RCX: 00007f5219b8d37c [ 186.123723][ T7583] RDX: 000000000000000f RSI: 00007f521a9730a0 RDI: 0000000000000005 [ 186.123736][ T7583] RBP: 00007f521a973090 R08: 0000000000000000 R09: 0000000000000000 [ 186.123749][ T7583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.123761][ T7583] R13: 0000000000000000 R14: 00007f5219db5fa0 R15: 00007f5219edfa28 [ 186.123791][ T7583] [ 186.193019][ T5891] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 186.377433][ T5893] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 186.443403][ T5893] usb 5-1: device descriptor read/8, error -71 [ 186.622771][ T5891] usb 1-1: Using ep0 maxpacket: 16 [ 186.635009][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.662580][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 186.676876][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 186.688730][ T5891] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 186.698659][ T5893] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 186.707559][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.724018][ T5893] usb 5-1: device descriptor read/8, error -71 [ 186.730415][ T5891] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 186.740271][ T5891] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 186.748447][ T5891] usb 1-1: Manufacturer: syz [ 186.764566][ T5891] usb 1-1: config 0 descriptor?? [ 186.836988][ T5893] usb usb5-port1: unable to enumerate USB device [ 186.953931][ T7595] dummy0: entered promiscuous mode [ 186.959578][ T7595] macsec1: entered promiscuous mode [ 186.971524][ T7595] macsec1: entered allmulticast mode [ 186.979995][ T7597] netlink: 264 bytes leftover after parsing attributes in process `syz.2.492'. [ 186.991535][ T7595] dummy0: entered allmulticast mode [ 187.014003][ T7595] dummy0: left allmulticast mode [ 187.023509][ T7595] dummy0: left promiscuous mode [ 187.084513][ T5891] rc_core: IR keymap rc-hauppauge not found [ 187.094986][ T5891] Registered IR keymap rc-empty [ 187.105322][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 187.163147][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 187.216925][ T5891] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 187.233996][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.479'. [ 187.291300][ T5891] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 187.347561][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 187.382674][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 187.413359][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 187.442579][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 187.465216][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 187.487740][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 187.532511][ T10] gspca_nw80x: reg_w err -110 [ 187.537456][ T10] nw80x 4-1:0.0: probe with driver nw80x failed with error -110 [ 187.550261][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 187.570521][ T7616] netlink: 12 bytes leftover after parsing attributes in process `syz.5.495'. [ 187.602446][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 187.615410][ T7616] bridge_slave_1: left allmulticast mode [ 187.652968][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 187.667207][ T7616] bridge_slave_1: left promiscuous mode [ 187.683703][ T7616] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.694854][ T5891] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 187.737979][ T7616] bridge_slave_0: left allmulticast mode [ 187.755706][ T7616] bridge_slave_0: left promiscuous mode [ 187.769328][ T5891] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 187.778988][ T5891] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 187.787953][ T7616] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.821891][ T5891] usb 1-1: USB disconnect, device number 11 [ 188.198220][ T7632] netlink: 'syz.2.502': attribute type 10 has an invalid length. [ 188.218378][ T7635] FAULT_INJECTION: forcing a failure. [ 188.218378][ T7635] name failslab, interval 1, probability 0, space 0, times 0 [ 188.244758][ T7635] CPU: 0 UID: 0 PID: 7635 Comm: syz.4.504 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 188.244797][ T7635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.244811][ T7635] Call Trace: [ 188.244820][ T7635] [ 188.244829][ T7635] dump_stack_lvl+0x189/0x250 [ 188.244867][ T7635] ? __pfx____ratelimit+0x10/0x10 [ 188.244899][ T7635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.244932][ T7635] ? __pfx__printk+0x10/0x10 [ 188.244963][ T7635] ? ref_tracker_alloc+0x318/0x460 [ 188.244986][ T7635] should_fail_ex+0x414/0x560 [ 188.245023][ T7635] should_failslab+0xa8/0x100 [ 188.245050][ T7635] kmem_cache_alloc_noprof+0x73/0x3c0 [ 188.245070][ T7635] ? skb_clone+0x212/0x3a0 [ 188.245104][ T7635] skb_clone+0x212/0x3a0 [ 188.245136][ T7635] __netlink_deliver_tap+0x404/0x850 [ 188.245172][ T7635] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.245195][ T7635] netlink_deliver_tap+0x19c/0x1b0 [ 188.245219][ T7635] netlink_unicast+0x72f/0x8d0 [ 188.245253][ T7635] netlink_sendmsg+0x805/0xb30 [ 188.245289][ T7635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.245319][ T7635] ? aa_sock_msg_perm+0x94/0x160 [ 188.245353][ T7635] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 188.245382][ T7635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.245408][ T7635] __sock_sendmsg+0x219/0x270 [ 188.245444][ T7635] ____sys_sendmsg+0x505/0x830 [ 188.245477][ T7635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.245514][ T7635] ? import_iovec+0x74/0xa0 [ 188.245545][ T7635] ___sys_sendmsg+0x21f/0x2a0 [ 188.245573][ T7635] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.245640][ T7635] ? __fget_files+0x2a/0x420 [ 188.245665][ T7635] ? __fget_files+0x3a0/0x420 [ 188.245700][ T7635] __x64_sys_sendmsg+0x19b/0x260 [ 188.245731][ T7635] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 188.245805][ T7635] ? __pfx_ksys_write+0x10/0x10 [ 188.245825][ T7635] ? rcu_is_watching+0x15/0xb0 [ 188.245851][ T7635] ? do_syscall_64+0xbe/0x3b0 [ 188.245887][ T7635] do_syscall_64+0xfa/0x3b0 [ 188.245918][ T7635] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.245948][ T7635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.245968][ T7635] ? clear_bhb_loop+0x60/0xb0 [ 188.245995][ T7635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.246015][ T7635] RIP: 0033:0x7f6c2058e969 [ 188.246034][ T7635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.246053][ T7635] RSP: 002b:00007f6c21360038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.246076][ T7635] RAX: ffffffffffffffda RBX: 00007f6c207b5fa0 RCX: 00007f6c2058e969 [ 188.246092][ T7635] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 188.246105][ T7635] RBP: 00007f6c21360090 R08: 0000000000000000 R09: 0000000000000000 [ 188.246118][ T7635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.246131][ T7635] R13: 0000000000000000 R14: 00007f6c207b5fa0 R15: 00007f6c208dfa28 [ 188.246164][ T7635] [ 188.538495][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.598819][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 188.725466][ T7636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.787524][ T5893] usb 4-1: USB disconnect, device number 15 [ 188.874058][ T7643] loop8: detected capacity change from 0 to 7 [ 188.887156][ T7643] Dev loop8: unable to read RDB block 7 [ 188.900701][ T7643] loop8: unable to read partition table [ 188.936778][ T7643] loop8: partition table beyond EOD, truncated [ 188.961037][ T7643] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¬âÐû [ 188.961037][ T7643] ) failed (rc=-5) [ 189.058266][ T7650] loop8: detected capacity change from 0 to 7 [ 189.079805][ T5838] Dev loop8: unable to read RDB block 7 [ 189.095340][ T5838] loop8: unable to read partition table [ 189.111633][ T5838] loop8: partition table beyond EOD, truncated [ 189.137959][ T7650] Dev loop8: unable to read RDB block 7 [ 189.145896][ T7650] loop8: unable to read partition table [ 189.156887][ T7650] loop8: partition table beyond EOD, truncated [ 189.169598][ T7650] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¬âÐû [ 189.169598][ T7650] ) failed (rc=-5) [ 189.712817][ T5890] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 189.922372][ T5890] usb 1-1: Using ep0 maxpacket: 8 [ 189.930749][ T5890] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.949214][ T5890] usb 1-1: config 0 has no interface number 0 [ 189.966728][ T5890] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 189.980257][ T5890] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 190.005883][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.024792][ T5890] usb 1-1: config 0 descriptor?? [ 190.055917][ T5890] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 190.115741][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 190.115761][ T30] audit: type=1326 audit(1749030495.287:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.3.516" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f863018e969 code=0x0 [ 190.682397][ T5890] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 190.845886][ T5890] usb 6-1: Using ep0 maxpacket: 32 [ 190.855175][ T5890] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 190.865699][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.919288][ T5890] usb 6-1: config 0 descriptor?? [ 191.028316][ T5890] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 192.264507][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.517'. [ 192.467003][ T5893] usb 1-1: USB disconnect, device number 12 [ 192.562645][ T5890] gspca_nw80x: reg_w err -110 [ 192.575820][ T5890] nw80x 6-1:0.0: probe with driver nw80x failed with error -110 [ 192.973069][ T7713] netlink: 'syz.2.530': attribute type 10 has an invalid length. [ 193.138257][ T7716] loop8: detected capacity change from 0 to 7 [ 193.276574][ T7716] Dev loop8: unable to read RDB block 7 [ 193.282602][ T7716] loop8: unable to read partition table [ 193.300075][ T7716] loop8: partition table beyond EOD, truncated [ 193.378715][ T7716] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¬âÐû [ 193.378715][ T7716] ) failed (rc=-5) [ 193.409397][ T5826] usb 6-1: USB disconnect, device number 3 [ 193.621085][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.534'. [ 193.677355][ T7724] netlink: 12 bytes leftover after parsing attributes in process `syz.5.534'. [ 193.698147][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.5.534'. [ 193.789828][ T7733] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 194.215944][ T7747] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 194.229802][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.239553][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.582386][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 194.742531][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 194.767027][ T24] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 194.776758][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.796545][ T24] usb 5-1: config 0 descriptor?? [ 194.827278][ T24] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 194.862859][ T7759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.547'. [ 194.959223][ T7759] bridge_slave_1: left allmulticast mode [ 194.991619][ T7759] bridge_slave_1: left promiscuous mode [ 195.006760][ T7759] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.055661][ T7759] bridge_slave_0: left allmulticast mode [ 195.086507][ T7759] bridge_slave_0: left promiscuous mode [ 195.094235][ T7759] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.041251][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.544'. [ 196.362536][ T24] gspca_nw80x: reg_w err -110 [ 196.440249][ T24] nw80x 5-1:0.0: probe with driver nw80x failed with error -110 [ 196.925440][ T7789] veth0_to_batadv: entered promiscuous mode [ 196.948343][ T7789] veth0_to_batadv: left promiscuous mode [ 197.524274][ T7800] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 197.546968][ T7800] netlink: 40 bytes leftover after parsing attributes in process `syz.3.563'. [ 197.572330][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 197.665941][ T7801] netlink: 12 bytes leftover after parsing attributes in process `syz.5.562'. [ 197.792403][ T43] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 197.822287][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 197.839042][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.868053][ T24] usb 1-1: config 0 has no interfaces? [ 197.885814][ T24] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 197.895278][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.908908][ T24] usb 1-1: Product: syz [ 197.922461][ T24] usb 1-1: Manufacturer: syz [ 197.932621][ T24] usb 1-1: SerialNumber: syz [ 197.942310][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 197.963414][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 197.984302][ T5826] usb 5-1: USB disconnect, device number 12 [ 198.006432][ T24] usb 1-1: config 0 descriptor?? [ 198.016249][ T43] usb 4-1: config 9 has an invalid interface number: 111 but max is 0 [ 198.061940][ T43] usb 4-1: config 9 has no interface number 0 [ 198.129089][ T43] usb 4-1: config 9 interface 111 altsetting 20 endpoint 0x9 has an invalid bInterval 44, changing to 9 [ 198.209559][ T43] usb 4-1: config 9 interface 111 altsetting 20 endpoint 0x7 has invalid wMaxPacketSize 0 [ 198.295918][ T7795] team_slave_0: entered promiscuous mode [ 198.301663][ T7795] team_slave_1: entered promiscuous mode [ 198.317966][ T43] usb 4-1: config 9 interface 111 altsetting 20 has an endpoint descriptor with address 0xB9, changing to 0x89 [ 198.330128][ T7795] vlan4: entered promiscuous mode [ 198.356854][ T7795] team0: entered promiscuous mode [ 198.400705][ T43] usb 4-1: config 9 interface 111 altsetting 20 has a duplicate endpoint with address 0x89, skipping [ 198.445406][ T7809] FAULT_INJECTION: forcing a failure. [ 198.445406][ T7809] name failslab, interval 1, probability 0, space 0, times 0 [ 198.469728][ T7809] CPU: 0 UID: 0 PID: 7809 Comm: syz.4.566 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 198.469757][ T7809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.469769][ T7809] Call Trace: [ 198.469777][ T7809] [ 198.469785][ T7809] dump_stack_lvl+0x189/0x250 [ 198.469819][ T7809] ? __pfx____ratelimit+0x10/0x10 [ 198.469847][ T7809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.469895][ T7809] ? __pfx__printk+0x10/0x10 [ 198.469922][ T7809] ? __pfx___might_resched+0x10/0x10 [ 198.469947][ T7809] should_fail_ex+0x414/0x560 [ 198.469982][ T7809] should_failslab+0xa8/0x100 [ 198.470007][ T7809] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 198.470030][ T7809] ? ethnl_default_set_doit+0x524/0xa20 [ 198.470062][ T7809] kmemdup_noprof+0x2b/0x70 [ 198.470098][ T7809] ethnl_default_set_doit+0x524/0xa20 [ 198.470133][ T7809] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 198.470164][ T7809] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 198.470203][ T7809] genl_family_rcv_msg_doit+0x215/0x300 [ 198.470240][ T7809] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 198.470285][ T7809] ? bpf_lsm_capable+0x9/0x20 [ 198.470304][ T7809] ? security_capable+0x7e/0x2e0 [ 198.470342][ T7809] genl_rcv_msg+0x60e/0x790 [ 198.470377][ T7809] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.470404][ T7809] ? ref_tracker_free+0x63a/0x7d0 [ 198.470432][ T7809] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 198.470456][ T7809] ? __pfx_ref_tracker_free+0x10/0x10 [ 198.470485][ T7809] netlink_rcv_skb+0x208/0x470 [ 198.470509][ T7809] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.470537][ T7809] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 198.470577][ T7809] ? down_read+0x1ad/0x2e0 [ 198.470598][ T7809] genl_rcv+0x28/0x40 [ 198.470623][ T7809] netlink_unicast+0x75b/0x8d0 [ 198.470652][ T7809] netlink_sendmsg+0x805/0xb30 [ 198.470688][ T7809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.470715][ T7809] ? aa_sock_msg_perm+0x94/0x160 [ 198.470746][ T7809] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 198.470771][ T7809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.470793][ T7809] __sock_sendmsg+0x219/0x270 [ 198.470827][ T7809] ____sys_sendmsg+0x505/0x830 [ 198.470856][ T7809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.470888][ T7809] ? import_iovec+0x74/0xa0 [ 198.470916][ T7809] ___sys_sendmsg+0x21f/0x2a0 [ 198.470943][ T7809] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.471004][ T7809] ? __fget_files+0x2a/0x420 [ 198.471026][ T7809] ? __fget_files+0x3a0/0x420 [ 198.471059][ T7809] __x64_sys_sendmsg+0x19b/0x260 [ 198.471094][ T7809] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.471128][ T7809] ? __pfx_ksys_write+0x10/0x10 [ 198.471145][ T7809] ? rcu_is_watching+0x15/0xb0 [ 198.471169][ T7809] ? do_syscall_64+0xbe/0x3b0 [ 198.471203][ T7809] do_syscall_64+0xfa/0x3b0 [ 198.471231][ T7809] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.471258][ T7809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.471278][ T7809] ? clear_bhb_loop+0x60/0xb0 [ 198.471302][ T7809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.471320][ T7809] RIP: 0033:0x7f6c2058e969 [ 198.471338][ T7809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.471355][ T7809] RSP: 002b:00007f6c21360038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.471375][ T7809] RAX: ffffffffffffffda RBX: 00007f6c207b5fa0 RCX: 00007f6c2058e969 [ 198.471389][ T7809] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 198.471402][ T7809] RBP: 00007f6c21360090 R08: 0000000000000000 R09: 0000000000000000 [ 198.471413][ T7809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.471425][ T7809] R13: 0000000000000000 R14: 00007f6c207b5fa0 R15: 00007f6c208dfa28 [ 198.471455][ T7809] [ 198.544214][ T43] usb 4-1: config 9 interface 111 has no altsetting 0 [ 198.855891][ T5893] usb 1-1: USB disconnect, device number 13 [ 199.114685][ T43] usb 4-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=4f.a4 [ 199.124021][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.132023][ T43] usb 4-1: Product: syz [ 199.148607][ T43] usb 4-1: Manufacturer: syz [ 199.169591][ T43] usb 4-1: SerialNumber: syz [ 199.430303][ T43] rtl8150 4-1:9.111: couldn't find required endpoints [ 199.447827][ T43] rtl8150 4-1:9.111: probe with driver rtl8150 failed with error -5 [ 199.483639][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 199.503831][ T43] usb 4-1: USB disconnect, device number 16 [ 199.662834][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 199.678478][ T24] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 199.700236][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.724017][ T24] usb 6-1: Product: syz [ 199.728263][ T24] usb 6-1: Manufacturer: syz [ 199.745967][ T24] usb 6-1: SerialNumber: syz [ 199.774675][ T24] usb 6-1: config 0 descriptor?? [ 200.222290][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 200.253177][ T7852] pim6reg1: entered promiscuous mode [ 200.258552][ T7852] pim6reg1: entered allmulticast mode [ 200.271611][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 200.289309][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 200.301227][ T24] usb 6-1: media controller created [ 200.341612][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.437966][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 200.462891][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 200.470892][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 200.502657][ T24] usb 6-1: USB disconnect, device number 4 [ 200.641224][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 201.203672][ T7889] pim6reg1: entered promiscuous mode [ 201.223503][ T7889] pim6reg1: entered allmulticast mode [ 201.643043][ T7909] veth0_vlan: entered allmulticast mode [ 201.703410][ T7909] ªªªªªª: renamed from vlan0 [ 202.643009][ T7950] ÿÿÿÿÿÿ: renamed from vlan1 [ 203.718710][ T7978] pim6reg1: entered promiscuous mode [ 203.742506][ T7978] pim6reg1: entered allmulticast mode [ 204.334267][ T8003] wg2: entered promiscuous mode [ 204.339210][ T8003] wg2: entered allmulticast mode [ 204.436731][ T8006] bridge_slave_0: entered promiscuous mode [ 204.462432][ T8006] bridge_slave_0: entered allmulticast mode [ 204.720109][ T8017] pim6reg1: entered promiscuous mode [ 204.731397][ T8017] pim6reg1: entered allmulticast mode [ 204.962155][ T8023] pim6reg1: entered promiscuous mode [ 204.968460][ T8023] pim6reg1: entered allmulticast mode [ 208.555070][ T8141] pim6reg1: entered promiscuous mode [ 208.571671][ T8141] pim6reg1: entered allmulticast mode [ 209.757527][ T8183] @0ÿ: renamed from bond_slave_0 (while UP) [ 210.696467][ T8208] pim6reg1: entered promiscuous mode [ 210.704064][ T8208] pim6reg1: entered allmulticast mode [ 211.634510][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 211.640651][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 211.646863][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 211.653005][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 214.722379][ T43] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 214.862503][ T5889] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 214.910272][ T43] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 214.923957][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.932141][ T43] usb 5-1: Product: syz [ 214.944602][ T43] usb 5-1: Manufacturer: syz [ 214.949414][ T43] usb 5-1: SerialNumber: syz [ 214.968998][ T43] usb 5-1: config 0 descriptor?? [ 215.042528][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 215.056754][ T5889] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 215.091929][ T5889] usb 4-1: config 0 has no interface number 0 [ 215.115029][ T5889] usb 4-1: config 0 interface 184 has no altsetting 0 [ 215.129975][ T5889] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 215.145913][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.154739][ T5889] usb 4-1: Product: syz [ 215.159119][ T5889] usb 4-1: Manufacturer: syz [ 215.164410][ T5889] usb 4-1: SerialNumber: syz [ 215.180050][ T5889] usb 4-1: config 0 descriptor?? [ 215.196338][ T43] usb 5-1: USB disconnect, device number 13 [ 215.219405][ T5889] smsc75xx v1.0.0 [ 216.332394][ T5889] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 216.489066][ T5889] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 216.513018][ T5889] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 216.542371][ T5889] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 216.620660][ T5889] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 216.641943][ T5889] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 216.718700][ T5889] usb 4-1: USB disconnect, device number 17 [ 218.340310][ T8401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.827'. [ 219.422050][ T8416] syzkaller0: entered promiscuous mode [ 219.428301][ T8416] syzkaller0: entered allmulticast mode [ 219.440974][ T8421] netlink: 20 bytes leftover after parsing attributes in process `syz.0.831'. [ 219.461175][ T8423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.834'. [ 219.712722][ T5891] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 219.904093][ T5891] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 219.913269][ T5891] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 219.942359][ T5891] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 219.972049][ T5891] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12408, setting to 64 [ 220.014259][ T5891] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 220.032344][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 220.062009][ T5891] usb 4-1: Product: syz [ 220.076610][ T5891] usb 4-1: Manufacturer: syz [ 220.103457][ T5891] cdc_wdm 4-1:1.0: skipping garbage [ 220.122319][ T5891] cdc_wdm 4-1:1.0: skipping garbage [ 220.139652][ T5891] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 220.309699][ T5826] usb 4-1: USB disconnect, device number 18 [ 221.135854][ T5891] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 221.422296][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 221.436510][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.448244][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.465834][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 221.602412][ T5891] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 221.611528][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.623201][ T5891] usb 5-1: config 0 descriptor?? [ 222.116957][ T5891] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0002/input/input11 [ 222.342053][ T5891] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0002/input/input12 [ 222.509120][ T5891] kye 0003:0458:5011.0002: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 222.565886][ T5891] usb 5-1: USB disconnect, device number 14 [ 222.706666][ T8448] fido_id[8448]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 222.884407][ T8450] netlink: 64 bytes leftover after parsing attributes in process `syz.4.845'. [ 223.130241][ T30] audit: type=1804 audit(1749030528.297:197): pid=8454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.847" name="/newroot/187/file0" dev="tmpfs" ino=977 res=1 errno=0 [ 224.203062][ T5889] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 224.385381][ T5889] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 224.422473][ T5889] usb 4-1: config 0 has no interface number 0 [ 224.428761][ T5889] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 224.572450][ T5889] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 224.626947][ T5889] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 224.858170][ T5889] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 224.882611][ T8481] xt_CT: No such helper "snmp_trap" [ 224.924694][ T5889] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 224.954082][ T5889] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 225.010801][ T5889] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 225.090367][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.116268][ T5889] usb 4-1: config 0 descriptor?? [ 225.122364][ T8468] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 225.129713][ T8468] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 225.157428][ T5889] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 225.492628][ T5889] usb 4-1: USB disconnect, device number 19 [ 225.541650][ T5889] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 225.742382][ T30] audit: type=1326 audit(1749030530.767:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8469 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2058e969 code=0x7fc00000 [ 225.800645][ T30] audit: type=1326 audit(1749030530.887:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8469 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6c2058e969 code=0x7fc00000 [ 225.854949][ T30] audit: type=1326 audit(1749030530.887:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8469 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2058e969 code=0x7fc00000 [ 225.952462][ T30] audit: type=1326 audit(1749030530.887:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8469 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2058e969 code=0x7fc00000 [ 226.052341][ T30] audit: type=1326 audit(1749030530.887:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8469 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2058e969 code=0x7fc00000 [ 226.153187][ T30] audit: type=1326 audit(1749030530.887:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8469 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2058e969 code=0x7fc00000 [ 226.259053][ T30] audit: type=1326 audit(1749030530.887:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8469 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2058e969 code=0x7fc00000 [ 226.314660][ T30] audit: type=1326 audit(1749030530.887:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8469 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2058e969 code=0x7fc00000 [ 226.451883][ T30] audit: type=1326 audit(1749030530.887:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8469 comm="syz.4.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2058e969 code=0x7fc00000 [ 227.542034][ T8539] mmap: syz.2.864 (8539) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 228.103233][ T8552] netlink: 277 bytes leftover after parsing attributes in process `syz.0.862'. [ 229.652961][ T8572] Lens B: ================= START STATUS ================= [ 229.660641][ T8572] Lens B: Focus, Absolute: 0 [ 229.665616][ T8572] Lens B: ================== END STATUS ================== [ 230.609297][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 230.609318][ T30] audit: type=1326 audit(1749030535.777:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.2.882" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f511538e969 code=0x0 [ 231.075129][ T8600] netlink: 892 bytes leftover after parsing attributes in process `syz.4.885'. [ 231.144084][ T8602] netlink: 892 bytes leftover after parsing attributes in process `syz.4.885'. [ 231.749510][ T8612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.771505][ T8616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.882'. [ 232.032978][ T5826] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 232.222901][ T5826] usb 4-1: Using ep0 maxpacket: 8 [ 232.243578][ T5826] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 232.262156][ T5826] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.282337][ T5826] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 232.292147][ T5826] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 232.322298][ T5826] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.342262][ T5826] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 232.362772][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.607845][ T5826] usb 4-1: usb_control_msg returned -32 [ 232.614546][ T5826] usbtmc 4-1:16.0: can't read capabilities [ 234.132940][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.902'. [ 234.149854][ T8648] netlink: 20 bytes leftover after parsing attributes in process `syz.2.902'. [ 234.205953][ T43] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 234.402329][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 234.409244][ T43] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.419355][ T43] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 234.429353][ T43] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 234.439561][ T43] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.453920][ T43] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 234.482402][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.721535][ T43] usb 1-1: GET_CAPABILITIES returned 0 [ 234.728145][ T43] usbtmc 1-1:16.0: can't read capabilities [ 234.772650][ T5893] usb 4-1: USB disconnect, device number 20 [ 235.206645][ T5893] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 235.362811][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 235.393514][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.464179][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.499022][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 235.529075][ T5893] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 235.538838][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.636101][ T5893] usb 4-1: config 0 descriptor?? [ 236.230495][ T5893] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 236.287008][ T5893] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0003/input/input13 [ 236.364792][ T5893] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 237.072033][ T5889] usb 1-1: USB disconnect, device number 14 [ 237.544276][ T5891] usb 4-1: reset high-speed USB device number 21 using dummy_hcd [ 237.754768][ T8699] warning: `syz.4.918' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 237.918590][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.918'. [ 237.941817][ T8701] bond0: (slave 3@0ÿ): Releasing backup interface [ 238.008118][ T8701] bond0: (slave bond_slave_1): Releasing backup interface [ 238.121979][ T8701] team0: Port device team_slave_0 removed [ 238.260786][ T8701] team0: Port device team_slave_1 removed [ 238.306078][ T8701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.334984][ T8701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.375865][ T8701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.410231][ T8701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.452313][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 238.725356][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.744848][ T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 238.774188][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.810299][ T24] usb 6-1: config 0 descriptor?? [ 238.888808][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 239.323126][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 239.553698][ T24] pwc: recv_control_msg error -71 req 02 val 2c00 [ 239.572567][ T24] pwc: recv_control_msg error -71 req 04 val 1000 [ 239.582665][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 239.602664][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 239.609607][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 239.619591][ T5893] usb 4-1: USB disconnect, device number 21 [ 239.641770][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 239.649061][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 239.673119][ T8713] netlink: 20 bytes leftover after parsing attributes in process `syz.3.920'. [ 239.684823][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 239.705989][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 239.721522][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 239.746209][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 239.762736][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 239.776167][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 239.791354][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 239.848665][ T24] pwc: Registered as video103. [ 239.889680][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input14 [ 239.978443][ T24] usb 6-1: USB disconnect, device number 5 [ 240.732659][ T5889] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 240.913166][ T5889] usb 6-1: Using ep0 maxpacket: 8 [ 240.934821][ T5889] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 240.963742][ T5889] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 241.014884][ T5889] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 241.057082][ T5889] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 241.095463][ T5889] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.159073][ T5889] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 241.192225][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.541583][ T5889] usb 6-1: GET_CAPABILITIES returned 0 [ 241.591213][ T5889] usbtmc 6-1:16.0: can't read capabilities [ 241.739446][ T5889] usb 6-1: USB disconnect, device number 6 [ 241.890535][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.929'. [ 242.932389][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.929'. [ 245.613457][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.941'. [ 248.083393][ T5889] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 248.270810][ T8779] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 248.292400][ T5889] usb 6-1: Using ep0 maxpacket: 16 [ 248.369857][ T5889] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 248.434892][ T5889] usb 6-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 248.529069][ T5889] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 248.603824][ T5889] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 248.727695][ T5889] usb 6-1: New USB device found, idVendor=04c6, idProduct=00dd, bcdDevice= 0.00 [ 248.787317][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.853430][ T5889] usb 6-1: config 0 descriptor?? [ 248.916187][ T5889] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 249.327850][ T5889] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 249.522418][ T5889] usb 1-1: Using ep0 maxpacket: 8 [ 249.543897][ T5889] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 249.575561][ T5889] usb 1-1: config 179 has no interface number 0 [ 249.592843][ T5889] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 249.628842][ T5889] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 249.660430][ T5889] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 249.683111][ T43] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 249.704935][ T5889] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 249.736188][ T5889] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 249.776936][ T5889] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 249.806819][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.838351][ T8787] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 249.886923][ T43] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 249.947003][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.000237][ T43] usb 5-1: Product: syz [ 250.022782][ T43] usb 5-1: Manufacturer: syz [ 250.038436][ T43] usb 5-1: SerialNumber: syz [ 250.121625][ T5894] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input15 [ 250.176389][ T43] r8152-cfgselector 5-1: Unknown version 0x0000 [ 250.215011][ T43] r8152-cfgselector 5-1: config 0 descriptor?? [ 250.331208][ T24] usb 1-1: USB disconnect, device number 15 [ 250.331286][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 250.345609][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 250.420710][ T24] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 250.800870][ T5890] r8152-cfgselector 5-1: USB disconnect, device number 15 [ 251.134497][ T5894] usb 6-1: USB disconnect, device number 7 [ 251.602746][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 251.784314][ T5894] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 251.822366][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 251.833997][ T24] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 251.862687][ T24] usb 1-1: config 0 has no interface number 0 [ 251.902330][ T24] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 251.973676][ T24] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 252.002332][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 252.031426][ T5894] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 252.042639][ T24] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 252.070207][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.958'. [ 252.089431][ T5894] usb 6-1: config 0 has no interface number 0 [ 252.106137][ T24] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 252.120020][ T5894] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 252.174302][ T5894] usb 6-1: config 0 interface 85 has no altsetting 0 [ 252.181282][ T24] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 252.246632][ T24] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 252.269598][ T5894] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 252.310929][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.327603][ T24] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 252.386869][ T5894] usb 6-1: Product: syz [ 252.401616][ T24] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 252.449644][ T5894] usb 6-1: Manufacturer: syz [ 252.462526][ T5894] usb 6-1: SerialNumber: syz [ 252.488226][ T24] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.522901][ T5894] usb 6-1: config 0 descriptor?? [ 252.542338][ T8808] hsr_slave_1 (unregistering): left promiscuous mode [ 252.591876][ T24] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 252.611066][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.676191][ T24] usb 1-1: Product: syz [ 252.704727][ T24] usb 1-1: Manufacturer: syz [ 252.750948][ T24] usb 1-1: SerialNumber: syz [ 252.809666][ T24] usb 1-1: config 0 descriptor?? [ 252.843295][ T8800] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 252.887653][ T24] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 252.935263][ T24] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 253.111010][ T24] usb 1-1: USB disconnect, device number 16 [ 253.151623][ T5894] appletouch 6-1:0.85: Geyser mode initialized. [ 253.187219][ T5894] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input16 [ 253.367777][ T24] usb 6-1: USB disconnect, device number 8 [ 253.532546][ T8814] netlink: 52 bytes leftover after parsing attributes in process `syz.3.959'. [ 253.923720][ T24] appletouch 6-1:0.85: input: appletouch disconnected [ 255.033443][ T8818] loop7: detected capacity change from 0 to 16384 [ 255.652994][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.659387][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.864515][ T8821] loop7: detected capacity change from 16384 to 0 [ 256.345589][ C1] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 256.578125][ C1] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 259.772203][ C0] sched: DL replenish lagged too much [ 260.649724][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.5.966'. [ 261.606110][ T8844] bond1: (slave veth0_to_bond): Releasing active interface [ 261.825933][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'. [ 261.850858][ T8844] bond1: (slave vlan2): making interface the new active one [ 261.930669][ T8844] veth1: entered promiscuous mode [ 261.970870][ T8844] vlan2: entered promiscuous mode [ 262.051122][ T8844] bond0: (slave bond_slave_0): Releasing backup interface [ 262.312925][ T8844] bond0: (slave bond_slave_1): Releasing backup interface [ 262.847222][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 263.575790][ T8844] team_slave_0: left promiscuous mode [ 264.152400][ T8844] team0: Port device team_slave_0 removed [ 264.202517][ T8844] team_slave_1: left promiscuous mode [ 264.787663][ T8844] team0: Port device team_slave_1 removed [ 264.859993][ T8844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.923379][ T8844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.411330][ T8844] bond1: (slave veth3): Releasing active interface [ 265.912527][ T8844] bond1: (slave veth3): the permanent HWaddr of slave - 9a:2e:6c:5f:c5:c3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 269.601908][ T8844] bond1: (slave vlan2): Releasing active interface [ 269.734367][ T8844] vlan2: left promiscuous mode [ 274.486052][ T8844] veth1: left promiscuous mode [ 276.180340][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.988'. [ 276.232262][ T8891] --map-set only usable from mangle table [ 277.327023][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.989'. [ 277.575351][ T8898] bridge_slave_0: left allmulticast mode [ 277.588793][ T8898] bridge_slave_0: left promiscuous mode [ 277.596156][ T8898] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.658832][ T8898] bridge_slave_1: left allmulticast mode [ 277.676257][ T8898] bridge_slave_1: left promiscuous mode [ 277.688663][ T8898] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.745854][ T8898] bond0: (slave bond_slave_0): Releasing backup interface [ 277.805366][ T8898] bond0: (slave bond_slave_1): Releasing backup interface [ 277.911827][ T8898] team0: Port device team_slave_0 removed [ 278.014205][ T8898] team0: Port device team_slave_1 removed [ 278.040716][ T8898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.058964][ T8898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.094412][ T8898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.110637][ T8898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.076988][ T8923] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 285.391045][ T30] audit: type=1326 audit(1749030590.557:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8942 comm="syz.4.1008" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c2058e969 code=0x0 [ 288.109953][ T8961] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1008'. [ 299.232330][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 306.517557][ T5894] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 306.652092][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 306.663475][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 306.714868][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 306.748288][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 306.755501][ T5894] usb 6-1: Using ep0 maxpacket: 16 [ 306.766241][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 306.898705][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.934336][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 306.962995][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 306.982468][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 306.990959][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 307.001112][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 307.073010][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.171484][ T5894] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 307.289599][ T5835] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 307.300297][ T5835] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 307.312434][ T5835] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 307.321046][ T5835] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 307.334470][ T5835] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 307.390307][ T5894] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 307.510853][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.631007][ T5894] usb 6-1: config 0 descriptor?? [ 308.125424][ T5894] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 308.148527][ T5894] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 308.168819][ T5894] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 308.552229][ T5894] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 308.559268][ T5894] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 311.372377][ T31] INFO: task kworker/1:2:3081 blocked for more than 145 seconds. [ 311.380165][ T31] Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 [ 311.572367][ T5835] Bluetooth: hci6: command tx timeout [ 311.582683][ T5835] Bluetooth: hci7: command tx timeout [ 311.588915][ T5841] Bluetooth: hci8: command tx timeout [ 314.171518][ T5841] Bluetooth: hci8: command tx timeout [ 314.177278][ T5841] Bluetooth: hci7: command tx timeout [ 314.192336][ T5841] Bluetooth: hci6: command tx timeout [ 314.242302][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.251092][ T31] task:kworker/1:2 state:D stack:21240 pid:3081 tgid:3081 ppid:2 task_flags:0x4288060 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 315.832319][ T8990] random: crng reseeded on system resumption [ 315.860897][ T5894] input: HID 0955:7214 Haptics as /devices/virtual/input/input17 [ 315.868773][ T31] Workqueue: usb_hub_wq hub_event [ 315.921008][ T31] Call Trace: [ 316.008855][ T31] [ 316.011900][ T31] __schedule+0x16f5/0x4d00 [ 316.022589][ T8990] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 316.101579][ T31] ? do_raw_spin_lock+0x121/0x290 [ 317.083264][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.089635][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.157396][ T5841] Bluetooth: hci7: command tx timeout [ 317.162989][ T5835] Bluetooth: hci6: command tx timeout [ 317.168430][ T5835] Bluetooth: hci8: command tx timeout [ 317.178259][ T8990] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 317.242630][ T31] ? schedule+0x165/0x360 [ 317.247056][ T31] ? __pfx___schedule+0x10/0x10 [ 317.251962][ T31] ? schedule+0x91/0x360 [ 317.332117][ T5894] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 317.390271][ T31] schedule+0x165/0x360 [ 317.412836][ T5894] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 317.450003][ T8990] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 317.494798][ T31] schedule_timeout+0x9a/0x270 [ 317.499646][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 317.535524][ T8990] PM: hibernation: Basic memory bitmaps created [ 317.569825][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 317.612327][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.617668][ T31] ? wait_for_completion+0x267/0x5d0 [ 317.693250][ T31] wait_for_completion+0x2bf/0x5d0 [ 317.698523][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 317.750694][ T31] i2c_del_adapter+0x581/0x6e0 [ 317.766385][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 317.771810][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 317.797800][ T31] ? kfree+0x18e/0x440 [ 317.802010][ T31] ttusb_disconnect+0x204/0x340 [ 317.812205][ T31] usb_unbind_interface+0x26b/0x8f0 [ 317.817515][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 317.831655][ T31] device_release_driver_internal+0x4d9/0x7c0 [ 317.838175][ T31] bus_remove_device+0x34d/0x410 [ 317.848381][ T31] device_del+0x511/0x8e0 [ 317.856999][ T31] ? __pm_runtime_barrier+0x212/0x460 [ 317.867728][ T31] ? __pfx_device_del+0x10/0x10 [ 317.874018][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 317.879155][ T31] usb_disable_device+0x3e9/0x8a0 [ 317.894538][ T31] usb_disconnect+0x330/0x910 [ 317.899354][ T31] hub_event+0x1cdb/0x4a00 [ 317.911997][ T31] ? do_raw_spin_lock+0x121/0x290 [ 317.921349][ T31] ? register_lock_class+0x51/0x320 [ 317.929281][ T31] ? __pfx_hub_event+0x10/0x10 [ 317.938830][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 317.946969][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 317.959371][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 317.967574][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 317.976530][ T31] process_scheduled_works+0xade/0x17b0 [ 317.985406][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 317.991805][ T31] worker_thread+0x8a0/0xda0 [ 318.003891][ T31] kthread+0x711/0x8a0 [ 318.008042][ T31] ? __pfx_worker_thread+0x10/0x10 [ 318.023570][ T31] ? __pfx_kthread+0x10/0x10 [ 318.028252][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.038477][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.045423][ T31] ? __pfx_kthread+0x10/0x10 [ 318.050101][ T31] ret_from_fork+0x3f9/0x770 [ 318.062198][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 318.067425][ T31] ? __switch_to_asm+0x39/0x70 [ 318.076800][ T31] ? __switch_to_asm+0x33/0x70 [ 318.081643][ T31] ? __pfx_kthread+0x10/0x10 [ 318.086352][ T31] ret_from_fork_asm+0x1a/0x30 [ 318.091213][ T31] [ 318.249826][ T31] INFO: task syz.1.360:7178 blocked for more than 152 seconds. [ 318.297172][ T31] Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 [ 318.304932][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 318.318146][ T31] task:syz.1.360 state:D stack:27576 pid:7178 tgid:7171 ppid:5852 task_flags:0x400040 flags:0x00004004 [ 318.370109][ T31] Call Trace: [ 318.375891][ T31] [ 318.378894][ T31] __schedule+0x16f5/0x4d00 [ 318.417167][ T31] ? schedule+0x165/0x360 [ 318.421637][ T31] ? __pfx___schedule+0x10/0x10 [ 318.459932][ T31] ? schedule+0x91/0x360 [ 318.483419][ T31] schedule+0x165/0x360 [ 318.487673][ T31] schedule_preempt_disabled+0x13/0x30 [ 318.542244][ T31] __mutex_lock+0x724/0xe80 [ 318.546903][ T31] ? __mutex_lock+0x51b/0xe80 [ 318.551655][ T31] ? usbdev_open+0x16e/0x760 [ 318.606121][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 318.611292][ T31] ? bus_find_device+0x273/0x2b0 [ 318.624433][ T5894] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 318.662235][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 318.667601][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 318.706312][ T5894] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 318.733375][ T31] ? usbdev_open+0xa7/0x760 [ 318.737980][ T31] usbdev_open+0x16e/0x760 [ 318.787552][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 318.802431][ T5889] usb 6-1: reset high-speed USB device number 9 using dummy_hcd [ 318.818226][ T5894] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 318.832499][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 318.837778][ T31] chrdev_open+0x4cc/0x5e0 [ 318.882345][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 318.887389][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 318.903368][ T5894] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 318.946636][ T31] do_dentry_open+0xdf3/0x1970 [ 318.951498][ T31] vfs_open+0x3b/0x340 [ 319.002312][ T5889] usb 6-1: device descriptor read/64, error -32 [ 319.020853][ T31] ? path_openat+0x2ecd/0x3830 [ 319.047904][ T31] path_openat+0x2ee5/0x3830 [ 319.090093][ T31] ? arch_stack_walk+0xfc/0x150 [ 319.100241][ T31] ? __pfx_path_openat+0x10/0x10 [ 319.116608][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.137010][ T31] do_filp_open+0x1fa/0x410 [ 319.141610][ T31] ? __lock_acquire+0xab9/0xd20 [ 319.159072][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 319.176313][ T31] ? _raw_spin_unlock+0x28/0x50 [ 319.196961][ T31] ? alloc_fd+0x64c/0x6c0 [ 319.201381][ T31] do_sys_openat2+0x121/0x1c0 [ 319.221102][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 319.232462][ T5841] Bluetooth: hci7: command tx timeout [ 319.238023][ T5841] Bluetooth: hci6: command tx timeout [ 319.247884][ T5835] Bluetooth: hci8: command tx timeout [ 319.253453][ T5889] usb 6-1: reset high-speed USB device number 9 using dummy_hcd [ 319.265604][ T31] ? exc_page_fault+0x76/0xf0 [ 319.270357][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 319.291117][ T31] __x64_sys_openat+0x138/0x170 [ 319.297230][ T31] do_syscall_64+0xfa/0x3b0 [ 319.301799][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.307585][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.314511][ T31] ? clear_bhb_loop+0x60/0xb0 [ 319.319266][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.325705][ T31] RIP: 0033:0x7f3bbbd8d2d0 [ 319.330162][ T31] RSP: 002b:00007f3bbcc01b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 319.339113][ T31] RAX: ffffffffffffffda RBX: 0000000000000041 RCX: 00007f3bbbd8d2d0 [ 319.356805][ T31] RDX: 0000000000000041 RSI: 00007f3bbcc01c10 RDI: 00000000ffffff9c [ 319.366019][ T31] RBP: 00007f3bbcc01c10 R08: 0000000000000000 R09: 0000000000000000 [ 319.377610][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 319.389973][ T31] R13: 0000000000000000 R14: 00007f3bbbfb6240 R15: 00007f3bbc0dfa28 [ 319.407902][ T31] [ 319.412520][ T5889] usb 6-1: device descriptor read/64, error -32 [ 319.526007][ T31] [ 319.526007][ T31] Showing all locks held in the system: [ 319.545066][ T31] 4 locks held by kworker/0:0/9: [ 319.550124][ T31] 1 lock held by khungtaskd/31: [ 319.585578][ T31] #0: ffffffff8e13f060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 319.607188][ T31] 4 locks held by kworker/1:1/43: [ 319.618473][ T31] #0: ffff888021ea8548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 319.634789][ T31] #1: ffffc90000b37bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 319.647978][ T31] #2: ffff888028826198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 319.660272][ T31] #3: ffff888028865510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x628/0x4a00 [ 319.670358][ T5889] usb 6-1: reset high-speed USB device number 9 using dummy_hcd [ 319.682346][ T31] 5 locks held by kworker/1:2/3081: [ 319.688540][ T31] #0: ffff888021ea8548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 319.711167][ T5889] usb 6-1: device descriptor read/8, error -32 [ 319.717898][ T31] #1: ffffc9000bd37bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 319.730414][ T31] #2: ffff888028664198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 319.745342][ T31] #3: ffff888058f69198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x910 [ 319.754968][ T31] #4: ffff888023d09160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 319.765984][ T31] 3 locks held by acpid/5188: [ 319.770706][ T31] #0: ffff888020e83118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_release+0x706/0x800 [ 319.783876][ T31] #1: ffff888027e062c0 (&dev->mutex#2){+.+.}-{4:4}, at: input_close_device+0x4c/0x230 [ 319.805684][ T31] #2: ffffffff8e144b78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 319.822438][ T31] 2 locks held by getty/5600: [ 319.827167][ T31] #0: ffff88814be690a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 319.848275][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 319.862638][ T31] 6 locks held by kworker/1:3/5889: [ 319.867888][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 319.882651][ T31] #1: ffffc90004ff7bc0 ((work_completion)(&intf->reset_ws)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 319.901757][ T31] #2: ffff88805887e198 (&dev->mutex){....}-{4:4}, at: usb_lock_device_for_reset+0x123/0x340 [ 319.916803][ T31] #3: ffff888028865510 (&port_dev->status_lock){+.+.}-{4:4}, at: usb_reset_device+0x549/0xae0 [ 319.931706][ T31] #4: ffff888143bfad68 (hcd->address0_mutex){+.+.}-{4:4}, at: usb_reset_and_verify_device+0x373/0x1910 [ 319.948097][ T31] #5: ffffffff8eddb730 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x163/0x1750 [ 319.968904][ T31] 1 lock held by syz.1.360/7178: [ 319.974138][ T5889] usb 6-1: reset high-speed USB device number 9 using dummy_hcd [ 319.986679][ T31] #0: ffff888028664198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 319.996169][ T31] 1 lock held by syz.2.417/7382: [ 320.008584][ T31] #0: ffffffff8f50ec88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 320.019130][ T5889] usb 6-1: device descriptor read/8, error -32 [ 320.030307][ T31] 1 lock held by syz.4.848/8458: [ 320.039054][ T31] #0: ffffffff8f50ec88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 320.049101][ T31] 1 lock held by syz.3.1003/8947: [ 320.061667][ T31] #0: ffffffff8e144a40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 320.077962][ T31] 1 lock held by syz.0.1006/8939: [ 320.083352][ T31] #0: ffffffff8f50ec88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 320.096603][ T31] 5 locks held by syz.5.1025/8990: [ 320.105276][ T31] #0: ffff88805a378d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 320.119487][ T31] #1: ffff88805a378078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 320.132451][ T31] #2: ffffffff8f676ca8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 320.148054][ T5889] raw-gadget.0 gadget.5: failed to queue suspend event [ 320.155280][ T31] #3: ffff888033b23b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 320.178155][ T43] usb 6-1: USB disconnect, device number 9 [ 320.195489][ T31] #4: ffffffff8e144b78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 320.239276][ T31] 2 locks held by syz-executor/8993: [ 320.245239][ T31] #0: ffffffff8f502090 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 320.259576][ T31] #1: ffffffff8f50ec88 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 320.269451][ T31] 2 locks held by syz-executor/8995: [ 320.300566][ T31] #0: ffffffff8f502090 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 320.323342][ T31] #1: ffffffff8f50ec88 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 320.337268][ T31] 2 locks held by syz-executor/8998: [ 320.344529][ T31] #0: ffffffff8f502090 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 320.358488][ T31] #1: ffffffff8f50ec88 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x80/0x210 [ 320.414210][ T31] [ 320.424861][ T31] ============================================= [ 320.424861][ T31] [ 320.452436][ T31] NMI backtrace for cpu 1 [ 320.452464][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 320.452490][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 320.452503][ T31] Call Trace: [ 320.452512][ T31] [ 320.452520][ T31] dump_stack_lvl+0x189/0x250 [ 320.452557][ T31] ? __wake_up_klogd+0xd9/0x110 [ 320.452586][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.452619][ T31] ? __pfx__printk+0x10/0x10 [ 320.452656][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 320.452687][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 320.452711][ T31] ? _printk+0xcf/0x120 [ 320.452738][ T31] ? __pfx__printk+0x10/0x10 [ 320.452764][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 320.452797][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 320.452827][ T31] watchdog+0xfee/0x1030 [ 320.452859][ T31] ? watchdog+0x1de/0x1030 [ 320.452897][ T31] kthread+0x711/0x8a0 [ 320.452925][ T31] ? __pfx_watchdog+0x10/0x10 [ 320.452953][ T31] ? __pfx_kthread+0x10/0x10 [ 320.452980][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 320.453008][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.453037][ T31] ? __pfx_kthread+0x10/0x10 [ 320.453063][ T31] ret_from_fork+0x3f9/0x770 [ 320.453096][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 320.453152][ T31] ? __switch_to_asm+0x39/0x70 [ 320.453173][ T31] ? __switch_to_asm+0x33/0x70 [ 320.453194][ T31] ? __pfx_kthread+0x10/0x10 [ 320.453221][ T31] ret_from_fork_asm+0x1a/0x30 [ 320.453260][ T31] [ 320.453268][ T31] Sending NMI from CPU 1 to CPUs 0: [ 320.616825][ C0] NMI backtrace for cpu 0 [ 320.616843][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 320.616863][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 320.616876][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 320.616916][ C0] RIP: 0010:check_preemption_disabled+0x17/0x120 [ 320.616934][ C0] Code: 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 48 83 ec 10 65 48 8b 05 fe 6d 37 07 48 89 44 24 08 <65> 8b 05 06 6e 37 07 65 8b 0d fb 6d 37 07 f7 c1 ff ff ff 7f 74 23 [ 320.616949][ C0] RSP: 0018:ffffc90000006540 EFLAGS: 00000082 [ 320.616962][ C0] RAX: f7909b0d12f25d00 RBX: 0000000000000000 RCX: f7909b0d12f25d00 [ 320.616974][ C0] RDX: 0000000000000000 RSI: ffffffff8d98da67 RDI: ffffffff8be27240 [ 320.617003][ C0] RBP: ffffffff81729e15 R08: 0000000000000000 R09: 0000000000000000 [ 320.617014][ C0] R10: ffffc90000006738 R11: ffffffff81acf710 R12: 0000000000000002 [ 320.617026][ C0] R13: ffffffff8e13f060 R14: 0000000000000000 R15: 0000000000000246 [ 320.617038][ C0] FS: 0000000000000000(0000) GS:ffff888125c5c000(0000) knlGS:0000000000000000 [ 320.617052][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.617064][ C0] CR2: 00002000000c3000 CR3: 0000000033818000 CR4: 00000000003526f0 [ 320.617080][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 320.617090][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 320.617100][ C0] Call Trace: [ 320.617106][ C0] [ 320.617115][ C0] ? unwind_next_frame+0xa5/0x2390 [ 320.617143][ C0] lock_acquire+0xe7/0x360 [ 320.617177][ C0] ? unwind_next_frame+0xa5/0x2390 [ 320.617202][ C0] ? dst_alloc+0x12a/0x170 [ 320.617229][ C0] ? unwind_next_frame+0xa5/0x2390 [ 320.617254][ C0] unwind_next_frame+0xc2/0x2390 [ 320.617279][ C0] ? unwind_next_frame+0xa5/0x2390 [ 320.617308][ C0] ? unwind_next_frame+0xa5/0x2390 [ 320.617333][ C0] ? dst_init+0xd9/0x450 [ 320.617357][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 320.617377][ C0] arch_stack_walk+0x11c/0x150 [ 320.617396][ C0] ? dst_alloc+0x12a/0x170 [ 320.617422][ C0] stack_trace_save+0x9c/0xe0 [ 320.617439][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 320.617463][ C0] kasan_save_track+0x3e/0x80 [ 320.617489][ C0] ? kasan_save_track+0x3e/0x80 [ 320.617513][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 320.617528][ C0] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 320.617544][ C0] ? ref_tracker_alloc+0x133/0x460 [ 320.617559][ C0] ? dst_init+0xd9/0x450 [ 320.617579][ C0] ? dst_alloc+0x12a/0x170 [ 320.617622][ C0] ? nft_do_chain+0x409/0x1920 [ 320.617646][ C0] __kasan_kmalloc+0x93/0xb0 [ 320.617662][ C0] __kmalloc_cache_noprof+0x230/0x3d0 [ 320.617679][ C0] ? ref_tracker_alloc+0x133/0x460 [ 320.617701][ C0] ref_tracker_alloc+0x133/0x460 [ 320.617718][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 320.617743][ C0] ? rcu_is_watching+0x15/0xb0 [ 320.617759][ C0] dst_init+0xd9/0x450 [ 320.617783][ C0] dst_alloc+0x12a/0x170 [ 320.617824][ C0] ip_route_output_key_hash_rcu+0x1482/0x23a0 [ 320.617856][ C0] ? ip_route_output_key_hash+0xde/0x2e0 [ 320.617882][ C0] ip_route_output_key_hash+0x1b9/0x2e0 [ 320.617907][ C0] ? __lock_acquire+0xab9/0xd20 [ 320.617932][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 320.617961][ C0] ? ip_route_me_harder+0x494/0xfe0 [ 320.617991][ C0] ip_route_output_flow+0x2a/0x150 [ 320.618013][ C0] ? ip_route_me_harder+0x6a7/0xfe0 [ 320.618040][ C0] ip_route_me_harder+0x6b9/0xfe0 [ 320.618071][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 320.618113][ C0] synproxy_send_tcp+0x359/0x6c0 [ 320.618136][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 320.618192][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 320.618213][ C0] ? nft_tproxy_eval+0x1848/0x1c00 [ 320.618235][ C0] ? synproxy_pernet+0x45/0x270 [ 320.618261][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 320.618289][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 320.618314][ C0] ? nf_ip_checksum+0x13c/0x510 [ 320.618339][ C0] nft_synproxy_do_eval+0x345/0x570 [ 320.618366][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 320.618390][ C0] ? queue_work_on+0x115/0x270 [ 320.618408][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.618432][ C0] ? queue_work_on+0x1ed/0x270 [ 320.618453][ C0] nft_do_chain+0x409/0x1920 [ 320.618474][ C0] ? __lock_acquire+0xab9/0xd20 [ 320.618505][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 320.618544][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 320.618571][ C0] nft_do_chain_inet+0x25d/0x340 [ 320.618594][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 320.618617][ C0] ? ipt_do_table+0x2a3/0x1640 [ 320.618637][ C0] ? nf_nat_ipv4_local_in+0x223/0x720 [ 320.618667][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 320.618691][ C0] nf_hook_slow+0xc2/0x220 [ 320.618712][ C0] NF_HOOK+0x206/0x3a0 [ 320.618730][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 320.618750][ C0] ? NF_HOOK+0x9a/0x3a0 [ 320.618767][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 320.618783][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 320.618804][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 320.618825][ C0] ? skb_dst+0x4f/0xd0 [ 320.618842][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 320.618863][ C0] NF_HOOK+0x309/0x3a0 [ 320.618881][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 320.618899][ C0] ? NF_HOOK+0x9a/0x3a0 [ 320.618916][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 320.618932][ C0] ? ip_rcv_core+0x7f7/0xd00 [ 320.618952][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 320.618988][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 320.619005][ C0] __netif_receive_skb+0x143/0x380 [ 320.619033][ C0] ? process_backlog+0x2d5/0x14f0 [ 320.619050][ C0] process_backlog+0x60e/0x14f0 [ 320.619066][ C0] ? __lock_acquire+0xab9/0xd20 [ 320.619096][ C0] ? __pfx_process_backlog+0x10/0x10 [ 320.619118][ C0] __napi_poll+0xc7/0x480 [ 320.619141][ C0] ? net_rx_action+0x46d/0xe30 [ 320.619165][ C0] net_rx_action+0x707/0xe30 [ 320.619181][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 320.619212][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 320.619246][ C0] handle_softirqs+0x283/0x870 [ 320.619274][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 320.619302][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 320.619333][ C0] __irq_exit_rcu+0xca/0x1f0 [ 320.619358][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 320.619388][ C0] irq_exit_rcu+0x9/0x30 [ 320.619413][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 320.619437][ C0] [ 320.619442][ C0] [ 320.619449][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 320.619467][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x2a/0x40 [ 320.619492][ C0] Code: f3 0f 1e fa 31 c0 83 3d 27 37 3c 04 00 74 1e 83 3d 4a 67 3c 04 00 74 15 65 48 8b 0c 25 08 40 9c 92 31 c0 83 b9 ec 0a 00 00 00 <0f> 94 c0 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc [ 320.619507][ C0] RSP: 0018:ffffc900000e78f8 EFLAGS: 00000246 [ 320.619520][ C0] RAX: 0000000000000000 RBX: 1ffff9200001cf28 RCX: ffff88801d2c0000 [ 320.619545][ C0] RDX: 0000000000000000 RSI: 000000000000004e RDI: ffffffff8c1aca20 [ 320.619555][ C0] RBP: ffffc900000e7a18 R08: ffffffff8ec7e3c3 R09: 1ffffffff1d8fc78 [ 320.619567][ C0] R10: dffffc0000000000 R11: fffffbfff1d8fc79 R12: ffff88805ab7e668 [ 320.619579][ C0] R13: dffffc0000000000 R14: 0000000000001ccd R15: ffffffffffffffa0 [ 320.619598][ C0] __might_resched+0x91/0x610 [ 320.619616][ C0] ? __pfx___might_resched+0x10/0x10 [ 320.619629][ C0] ? do_raw_spin_lock+0x121/0x290 [ 320.619652][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 320.619672][ C0] wg_ratelimiter_gc_entries+0x3a6/0x450 [ 320.619693][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 320.619718][ C0] process_scheduled_works+0xade/0x17b0 [ 320.619774][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 320.619808][ C0] worker_thread+0x8a0/0xda0 [ 320.619846][ C0] kthread+0x711/0x8a0 [ 320.619865][ C0] ? __pfx_worker_thread+0x10/0x10 [ 320.619878][ C0] ? __pfx_kthread+0x10/0x10 [ 320.619897][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 320.619917][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.619939][ C0] ? __pfx_kthread+0x10/0x10 [ 320.619956][ C0] ret_from_fork+0x3f9/0x770 [ 320.619980][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 320.620005][ C0] ? __switch_to_asm+0x39/0x70