last executing test programs: 17m40.808947631s ago: executing program 0 (id=1): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f00000002c0)=0x80000000000003) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929ade", 0x55}], 0x1}, 0x20008810) 17m37.740552818s ago: executing program 0 (id=6): socket(0x400000000010, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000001080), &(0x7f0000001040)='./file1\x00', 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='utf8,umask=00000000000000000100003,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c696f636861727365743d6575632d6a702c6572726f72733d72656d6f756e742d726f2c757466382c666d61736b3d30303030303030303030303030303030303030303133332c646d61736b3d30303030303030303030303030303030303030303030332c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c00e7f7a64e12768f24588c031e3a7d52e686581692b31c66f5320a14e587a7c28feef0f667bc0421879f8dd03f06fa51770cf06aece55ad1185a9caffc331fae3067bf"], 0x3, 0x152b, &(0x7f0000002f80)="$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") r0 = openat$kvm(0x0, &(0x7f00000025c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xa000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x39b3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYRESHEX=r4], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000001c00)=[{0x0}], 0x1}, 0x81}], 0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) dup(0xffffffffffffffff) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xffffffffffffffa1) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"a2e3ad21ed0d1bf91b29550987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f3b096c060890e0878f0e1ac6e7049b096e959b449a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b075d0d36cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130f91850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f4077fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a81aa1020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b21052010689af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153fae46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c343f7f140f319539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474b0679dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691951264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d984836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a70500be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x8f5}}, 0x1006) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x100000000000600d, 0x1) 17m29.916165463s ago: executing program 0 (id=14): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0c02, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'caif0\x00', 0x1}) ioctl$TUNSETDEBUG(r6, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETFILTER(r6, 0x801054db, 0x0) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000080)={0x1, 0xa7db}, 0x8) close(r7) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) 17m17.849992716s ago: executing program 0 (id=25): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getpgid(0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) setns(0xffffffffffffffff, 0x10000000) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x1, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x8, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x49, 0x6, 0x5f, 0x9, 0x4000012, 0xffff2d35, 0xff7fff01, 0x6, 0x5, 0x4, 0x5, 0x6, 0x20000004, 0x7, 0x3c5b, 0x1, 0x24, 0x12, 0x5, 0xffffffff, 0xffffffff, 0x0, 0x1004, 0x7, 0x20003, 0x4, 0x2, 0x10000, 0x242, 0x3, 0xe, 0x448, 0x80008071, 0xa, 0x13, 0x1, 0x7, 0x5, 0x3f, 0x18e, 0x5031ca81, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x7, 0x80, 0x40000, 0x5, 0xc, 0xa, 0x8004, 0x1, 0x9], [0x0, 0x3, 0x8000012f, 0x8006, 0x5, 0xfffffdf7, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x4, 0xfffffff8, 0x5, 0x1, 0x3, 0x4, 0x31, 0xb, 0x1, 0x7, 0xea6, 0x100, 0x4, 0x7, 0x7fff, 0x8, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0x2, 0x200004e0, 0x381, 0x4, 0xb, 0x4, 0xb, 0x8, 0x6, 0x2, 0x47, 0x42, 0x1, 0xfe000000, 0xa, 0x2, 0x4, 0x9, 0x3, 0x1, 0x4000009, 0xa, 0x0, 0x3, 0xbc45, 0x65, 0x42, 0x3], [0x7, 0x408, 0x4, 0x9, 0xfffffffd, 0x100, 0x5, 0x9, 0x5, 0x7fff, 0x0, 0x80005, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xffffffff, 0x1, 0x2, 0x1, 0x400003, 0x20000008, 0x4, 0x2, 0x3, 0x107, 0x800003, 0x200, 0x2, 0x3, 0x10000, 0x2950bfaf, 0x1000, 0x8005, 0x202, 0x1000, 0x5, 0xb1, 0xec8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x1005, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80aaed, 0xeb4b, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1fb, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x5, 0x2, 0x7fff, 0xffff, 0x5, 0x4, 0x5, 0xffffffff, 0x2000082, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x1, 0x3, 0x7, 0xb0, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x2800000, 0xa1f, 0xf40, 0xa, 0x530d, 0x6c1b, 0x0, 0x4, 0x5, 0x5, 0xd6, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='0x5678\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/f1\x00') vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000010000104feffffff0002000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000004"], 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) write(r3, &(0x7f0000000380), 0x0) nanosleep(&(0x7f00000003c0)={0x0, 0x5f5e100}, 0x0) write(r3, &(0x7f0000000400)='\n\x00', 0x1) ioctl$XFS_IOC_FSBULKSTAT(r3, 0xc0105865, &(0x7f00000007c0)={&(0x7f0000000440)=0x7fffffffffffffff, 0x6, &(0x7f0000000480)=[{}, {}, {}, {}], &(0x7f0000000780)}) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0xb, @pix={0x38305543, 0x2, 0x38414261, 0x4, 0x5, 0x2, 0x8, 0x3, 0x0, 0x3, 0x1, 0x4}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) 17m16.787474623s ago: executing program 0 (id=27): syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) vmsplice(r1, &(0x7f0000002300)=[{&(0x7f0000000180)="18", 0x1}], 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) syz_clone3(0x0, 0x0) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0x0, @private1, 0x1}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3ff}, @in6={0xa, 0x7, 0x7, @remote, 0x8}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e24, 0x10000, @remote, 0x6}, @in6={0xa, 0x4e24, 0xfffff4db, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e20, @broadcast}], 0xdc) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7, {0xe6}}, './file0\x00'}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r14, 0x40089413, &(0x7f00000003c0)=0x2) r15 = dup(r13) syz_ublk_setup_queues(r15, r12, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x2, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x8, 0x2, 0x15e, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2, 0xffffffd, 0x146, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x38b0, 0x200, 0x3, 0x92, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x10, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 17m1.031665097s ago: executing program 32 (id=27): syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) vmsplice(r1, &(0x7f0000002300)=[{&(0x7f0000000180)="18", 0x1}], 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) syz_clone3(0x0, 0x0) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0x0, @private1, 0x1}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3ff}, @in6={0xa, 0x7, 0x7, @remote, 0x8}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e24, 0x10000, @remote, 0x6}, @in6={0xa, 0x4e24, 0xfffff4db, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e20, @broadcast}], 0xdc) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7, {0xe6}}, './file0\x00'}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r14, 0x40089413, &(0x7f00000003c0)=0x2) r15 = dup(r13) syz_ublk_setup_queues(r15, r12, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x2, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x8, 0x2, 0x15e, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2, 0xffffffd, 0x146, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x38b0, 0x200, 0x3, 0x92, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x10, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 3m57.24899404s ago: executing program 3 (id=1089): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x66a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='testdomain / 2147483647\n', 0x18) 3m55.358952257s ago: executing program 3 (id=1090): msgget$private(0x0, 0x230) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000800)=[{&(0x7f0000000540)=""/7, 0x7}, {0x0}], 0x2, &(0x7f0000002d40)=[{0x0}, {0x0}, {&(0x7f0000000a80)=""/4096, 0x1000}, {0x0}, {0x0}], 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 3m53.367949286s ago: executing program 3 (id=1092): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) r0 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='+-,\x00', &(0x7f00000001c0)='\x00', 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc0104d03, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x60) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r0, 0x0, 0x0, 0xffd8) 3m44.100535443s ago: executing program 3 (id=1099): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffbfbbfbe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3m42.896908763s ago: executing program 3 (id=1100): msgget$private(0x0, 0x230) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) process_vm_readv(r2, 0x0, 0x0, &(0x7f0000002d40)=[{0x0}, {0x0}, {&(0x7f0000000a80)=""/4096, 0x1000}, {0x0}, {0x0}], 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 3m40.907784362s ago: executing program 3 (id=1102): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @broadcast}, 0x220, 0x0, 0x0, 0x0, 0xfffe, &(0x7f0000000040)='geneve1\x00', 0x61, 0xb, 0x3ff}) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/zram0/disksize\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000980)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) write(r1, &(0x7f0000000150)='33554432\x00', 0x9) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) sendmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="e00100000000000000000000aa06000032548343f47d9738c9654a818cfbf090a2814af003c9fb6fec13787cf0a0c011dd0bf2182916b01789"], 0x1e0}}], 0x1, 0x4000004) socket$inet6(0xa, 0x3, 0x8000000003c) 3m24.853520237s ago: executing program 33 (id=1102): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @broadcast}, 0x220, 0x0, 0x0, 0x0, 0xfffe, &(0x7f0000000040)='geneve1\x00', 0x61, 0xb, 0x3ff}) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/zram0/disksize\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000980)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) write(r1, &(0x7f0000000150)='33554432\x00', 0x9) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) sendmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="e00100000000000000000000aa06000032548343f47d9738c9654a818cfbf090a2814af003c9fb6fec13787cf0a0c011dd0bf2182916b01789"], 0x1e0}}], 0x1, 0x4000004) socket$inet6(0xa, 0x3, 0x8000000003c) 49.055621097s ago: executing program 2 (id=1271): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @remote, @multicast2}, &(0x7f0000000300)=0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = syz_open_dev$sg(&(0x7f0000000010), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000210)={0x53, 0xfffffffffffffffc, 0x0, 0x20, @buffer={0x0, 0x200, &(0x7f0000000610)=""/512}, &(0x7f0000000310), 0x0, 0x3e8, 0x0, 0x0, 0x0}) 47.168229964s ago: executing program 2 (id=1272): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000200), 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./myproc/interrupts\x00', 0x20) lseek(r4, 0x2000000008, 0x0) 35.9345904s ago: executing program 2 (id=1285): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffbfbbfbe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 31.123575828s ago: executing program 2 (id=1288): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000280)="503bfde51b257f40b339", 0xa}], 0x1) write$UHID_INPUT(r1, &(0x7f0000000900)={0x9, {"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", 0x1000}}, 0x1006) 28.125353341s ago: executing program 1 (id=1291): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0xfd2, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 24.764185454s ago: executing program 2 (id=1297): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffbfbbfbe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 23.081559525s ago: executing program 2 (id=1298): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x9, 0x2, 0x180, 0x4, 0x10, 0x20000000000000f0, 0x7, 0x7fffffffffffe, 0x5, 0x4, 0x9, 0x7f, 0x100000000, 0x7, 0xbdb], 0x26ffc, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_open_procfs(0x0, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x8047) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x17, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000811}, 0x20008000) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, 0x0) 22.993180377s ago: executing program 1 (id=1299): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @remote, @multicast2}, &(0x7f0000000300)=0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = syz_open_dev$sg(&(0x7f0000000010), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000210)={0x53, 0xfffffffffffffffc, 0x3, 0x20, @buffer={0x0, 0x200, &(0x7f0000000610)=""/512}, &(0x7f0000000310)='(\x00\x00', 0x0, 0x3e8, 0x0, 0x0, 0x0}) 21.224665541s ago: executing program 1 (id=1300): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) 19.834370244s ago: executing program 5 (id=1304): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x9, 0x2, 0x180, 0x4, 0x10, 0x20000000000000f0, 0x7, 0x7fffffffffffe, 0x5, 0x4, 0x9, 0x7f, 0x100000000, 0x7, 0xbdb], 0x26ffc, 0x4000}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_open_procfs(0x0, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x8047) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x17, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000811}, 0x20008000) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, 0x0) 18.476159098s ago: executing program 4 (id=1306): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffbfbbfbe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 17.043755393s ago: executing program 5 (id=1307): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0xfd2, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 16.878543528s ago: executing program 5 (id=1308): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @remote, @multicast2}, &(0x7f0000000300)=0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = syz_open_dev$sg(&(0x7f0000000010), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000210)={0x53, 0xfffffffffffffffc, 0x5, 0x20, @buffer={0x0, 0x200, &(0x7f0000000610)=""/512}, &(0x7f0000000310)='(\x00\x00\x00\x00', 0x0, 0x3e8, 0x0, 0x0, 0x0}) 14.098833093s ago: executing program 5 (id=1309): sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x40044) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) r0 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) writev(r1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x60) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x39b3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x84}], 0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xffd8) openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x400, 0x100) 14.004214696s ago: executing program 1 (id=1310): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_getnetconf={0x14, 0x52, 0xe11, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44104}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1f7) r2 = syz_open_dev$usbfs(0x0, 0x80, 0x113201) read$usbfs(r2, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x1) setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_128={{0x304}, "39df7c109c0ae44a", "d7cb70a11af9ee9ba93fc360f839d9ce", "e557333b", "61fd46b7c5548457"}, 0x28) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd9", 0x62) 11.262943324s ago: executing program 4 (id=1311): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) r4 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r4, &(0x7f0000000840)=[{0x0}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') r8 = socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r10, &(0x7f0000000200)=[{&(0x7f0000000280)="503bfde51b257f40b3392d504fe4", 0xe}], 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x3009, 0x4, 0xc, 0x0, 0x5, 0x4}}) read(0xffffffffffffffff, &(0x7f0000000800)=""/217, 0xd9) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) write$UHID_INPUT(r2, &(0x7f0000000900)={0x9, {"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", 0x1000}}, 0x1006) 10.791495825s ago: executing program 1 (id=1312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getrlimit(0x6, &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a3100"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 10.719370637s ago: executing program 4 (id=1313): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @broadcast}, 0x220, 0x0, 0x0, 0x0, 0xfffe, &(0x7f0000000040)='geneve1\x00', 0x61, 0xb, 0x3ff}) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/zram0/disksize\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000980)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) write(r1, &(0x7f0000000150)='33554432\x00', 0x9) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) sendmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="e00100000000000000000000aa06000032548343f47d9738c9654a818cfbf090a2814af003c9fb6fec13787cf0a0c011dd0bf2182916b01789"], 0x1e0}}], 0x1, 0x4000004) socket$inet6(0xa, 0x3, 0x8000000003c) 8.921739702s ago: executing program 1 (id=1314): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x101000) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x6, &(0x7f00000000c0)={0x5, "810556c721100f00"}}) close_range(r0, 0xffffffffffffffff, 0x0) 4.177404728s ago: executing program 34 (id=1298): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x9, 0x2, 0x180, 0x4, 0x10, 0x20000000000000f0, 0x7, 0x7fffffffffffe, 0x5, 0x4, 0x9, 0x7f, 0x100000000, 0x7, 0xbdb], 0x26ffc, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_open_procfs(0x0, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x8047) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x17, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000811}, 0x20008000) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, 0x0) 4.131620209s ago: executing program 4 (id=1316): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0x2020) r4 = socket(0x2d, 0x2, 0x0) setsockopt(r4, 0x11d, 0x1, &(0x7f0000000200)="01000000", 0x4) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000340)="483848a6457356bbfd6222189818cd21bdfa91543b01e6c7e2e5934d0997ca2e406682563b88ad73730fc711ffb58cbc0766161097e1c1236f2b7ad075eaff6313f68916bb1686d491a5b39513ac600149c264623187f78ce57e8717796ec4d0fd72ab1e8040bd3ae92c4734192f617c0302bddd01b294fb9f241d114c287882d7da1dba1b17da8b61d208afe0ea9d12b8c815343d9d1eee00df4ed4b9758028ea4d71ff8c5b3695eb23ab1e31b846135002ee394dd9383f1bc6474bbcce", 0xbe, r5) r6 = dup3(0xffffffffffffffff, r1, 0x80000) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000100)={r6, r1, 0x4}) setgroups(0x1, &(0x7f0000000180)=[0x0]) getgroups(0x1, &(0x7f0000000200)=[0x0]) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x19}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x54}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}], {{}, {}, {0x85, 0x0, 0x0, 0x10000000}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) fcntl$addseals(r9, 0x409, 0x3) 3.845947466s ago: executing program 4 (id=1317): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @remote, @multicast2}, &(0x7f0000000300)=0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = syz_open_dev$sg(&(0x7f0000000010), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000210)={0x53, 0xfffffffffffffffc, 0x5, 0x20, @buffer={0x0, 0x200, &(0x7f0000000610)=""/512}, &(0x7f0000000310)='(\x00\x00\x00\x00', 0x0, 0x3e8, 0x0, 0x0, 0x0}) 2.003742331s ago: executing program 4 (id=1318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x22008500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.931511773s ago: executing program 5 (id=1319): openat$userfaultfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, 0x0, 0x0, 0xc040) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x8, 0x6, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) 0s ago: executing program 5 (id=1320): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f0000003e40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x4001c90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) userfaultfd(0x80001) socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xb0}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): de=0x7ffc0000 [ 184.979511][ T28] audit: type=1326 audit(1791141614.885:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.3.101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb74979e159 code=0x7ffc0000 [ 185.051830][ T28] audit: type=1326 audit(1791141614.885:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.3.101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74979e159 code=0x7ffc0000 [ 185.228809][ T28] audit: type=1326 audit(1791141614.885:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.3.101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74979e159 code=0x7ffc0000 [ 185.301679][ T28] audit: type=1326 audit(1791141614.885:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.3.101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fb74979e159 code=0x7ffc0000 [ 187.804922][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 187.804937][ T28] audit: type=1326 audit(1791141619.865:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.2.110" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fc2eb39e159 code=0x7ffc0000 [ 187.900418][ T28] audit: type=1326 audit(1791141619.865:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.2.110" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eb39e159 code=0x7ffc0000 [ 188.011815][ T28] audit: type=1326 audit(1791141619.865:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.2.110" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eb39e159 code=0x7ffc0000 [ 190.413356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 194.529783][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.542361][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.434403][ T6417] netlink: 596 bytes leftover after parsing attributes in process `syz.1.115'. [ 196.467524][ T6417] netlink: 288 bytes leftover after parsing attributes in process `syz.1.115'. [ 197.683785][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 198.093376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 199.887836][ T6439] netlink: 596 bytes leftover after parsing attributes in process `syz.1.129'. [ 199.934261][ T6439] netlink: 288 bytes leftover after parsing attributes in process `syz.1.129'. [ 202.448969][ T6456] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 202.455572][ T6456] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 202.463950][ T6456] vhci_hcd vhci_hcd.0: Device attached [ 202.472248][ T6457] vhci_hcd: connection closed [ 202.493344][ T6225] vhci_hcd: stop threads [ 202.534773][ T6225] vhci_hcd: release socket [ 202.539301][ T6225] vhci_hcd: disconnect device [ 206.492931][ T6478] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6479] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6478] [ 209.174153][ T6499] overlay: ./file0 is not a directory [ 212.103326][ T6513] netlink: 596 bytes leftover after parsing attributes in process `syz.3.140'. [ 214.003306][ T5087] Bluetooth: hci3: command 0x0406 tx timeout [ 214.003558][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 214.009639][ T5087] Bluetooth: hci0: command 0x0406 tx timeout [ 214.293319][ T6525] comedi comedi3: board detection failed [ 214.369525][ T6528] bridge0: port 3(netdevsim0) entered blocking state [ 214.377947][ T6528] bridge0: port 3(netdevsim0) entered disabled state [ 214.386312][ T6528] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 214.400319][ T6528] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 214.409417][ T6528] bridge0: port 3(netdevsim0) entered blocking state [ 214.416288][ T6528] bridge0: port 3(netdevsim0) entered forwarding state [ 219.082365][ T6555] netlink: 596 bytes leftover after parsing attributes in process `syz.3.165'. [ 219.130841][ T6557] overlay: ./file0 is not a directory [ 219.139892][ T6555] netlink: 288 bytes leftover after parsing attributes in process `syz.3.165'. [ 224.875557][ T6589] comedi comedi3: board detection failed [ 225.784952][ T6592] netlink: 596 bytes leftover after parsing attributes in process `syz.4.177'. [ 225.798665][ T6592] netlink: 288 bytes leftover after parsing attributes in process `syz.4.177'. [ 226.240488][ T6594] comedi comedi3: board detection failed [ 226.451550][ T6600] netlink: 'syz.3.176': attribute type 10 has an invalid length. [ 226.725594][ T6600] bridge0: port 3(netdevsim0) entered disabled state [ 226.732552][ T6600] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.739879][ T6600] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.391893][ T6607] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6608] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6607] [ 230.230206][ T5785] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 230.237562][ T28] audit: type=1800 audit(1791141662.295:113): pid=6614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.182" name="idProduct" dev="configfs" ino=10494 res=0 errno=0 [ 230.284042][ T28] audit: type=1800 audit(1791141662.335:114): pid=6614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.182" name="UDC" dev="configfs" ino=10495 res=0 errno=0 [ 230.904246][ T6623] netlink: 596 bytes leftover after parsing attributes in process `syz.1.187'. [ 230.957923][ T6623] netlink: 288 bytes leftover after parsing attributes in process `syz.1.187'. [ 233.533665][ T6640] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6643] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6640] [ 234.177895][ T6639] comedi comedi3: board detection failed [ 234.243047][ T5785] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 234.251865][ T5785] Bluetooth: hci0: Injecting HCI hardware error event [ 234.261176][ T51] Bluetooth: hci0: hardware error 0x00 [ 234.500229][ T6645] comedi comedi3: board detection failed [ 234.565169][ T6650] bridge0: port 3(netdevsim0) entered blocking state [ 234.572445][ T6650] bridge0: port 3(netdevsim0) entered disabled state [ 234.580071][ T6650] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 234.593629][ T6650] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 234.602502][ T6650] bridge0: port 3(netdevsim0) entered blocking state [ 234.609397][ T6650] bridge0: port 3(netdevsim0) entered forwarding state [ 234.641865][ T6650] netlink: 'syz.1.190': attribute type 10 has an invalid length. [ 234.662217][ T6650] bridge0: port 3(netdevsim0) entered disabled state [ 234.669242][ T6650] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.677073][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.698210][ T6650] bridge0: port 3(netdevsim0) entered blocking state [ 234.705188][ T6650] bridge0: port 3(netdevsim0) entered forwarding state [ 234.712451][ T6650] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.719780][ T6650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.727385][ T6650] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.734664][ T6650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.754689][ T6650] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 236.577663][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 241.579584][ T6684] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6685] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6684] [ 242.860988][ T6688] comedi comedi3: board detection failed [ 242.925650][ T6690] bridge0: port 3(netdevsim0) entered blocking state [ 242.933077][ T6690] bridge0: port 3(netdevsim0) entered disabled state [ 242.941356][ T6690] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 242.955360][ T6690] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 242.964210][ T6690] bridge0: port 3(netdevsim0) entered blocking state [ 242.971036][ T6690] bridge0: port 3(netdevsim0) entered forwarding state [ 243.017152][ T6691] netlink: 'syz.2.206': attribute type 10 has an invalid length. [ 243.065361][ T6691] bridge0: port 3(netdevsim0) entered disabled state [ 243.072390][ T6691] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.081036][ T6691] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.099805][ T6691] bridge0: port 3(netdevsim0) entered blocking state [ 243.106702][ T6691] bridge0: port 3(netdevsim0) entered forwarding state [ 243.113939][ T6691] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.121145][ T6691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.128733][ T6691] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.135992][ T6691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.156718][ T6691] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 245.425395][ T6710] netlink: 596 bytes leftover after parsing attributes in process `syz.3.199'. [ 247.515434][ T6710] netlink: 288 bytes leftover after parsing attributes in process `syz.3.199'. [ 248.276957][ T28] audit: type=1800 audit(1791141680.335:115): pid=6726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.215" name="idProduct" dev="configfs" ino=10642 res=0 errno=0 [ 248.383157][ T28] audit: type=1800 audit(1791141680.385:116): pid=6726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.215" name="UDC" dev="configfs" ino=10643 res=0 errno=0 [ 252.374190][ T6754] fuse: Bad value for 'fd' [ 253.083107][ T6757] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6758] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6757] [ 255.936534][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.943049][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.785890][ T6771] netlink: 596 bytes leftover after parsing attributes in process `syz.3.223'. [ 256.964241][ T6771] netlink: 288 bytes leftover after parsing attributes in process `syz.3.223'. [ 259.444951][ T28] audit: type=1800 audit(1791141691.505:117): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.226" name="idProduct" dev="configfs" ino=10729 res=0 errno=0 [ 259.509522][ T28] audit: type=1800 audit(1791141691.505:118): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.226" name="UDC" dev="configfs" ino=10730 res=0 errno=0 [ 261.468632][ T6791] fuse: Bad value for 'fd' [ 262.171805][ T6796] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6797] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6796] [ 263.213071][ T5785] Bluetooth: hci4: command 0x0406 tx timeout [ 263.251951][ T6795] overlay: ./file0 is not a directory [ 268.303286][ T5826] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 268.563463][ T5826] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 268.571570][ T5826] usb 5-1: config 0 has no interface number 0 [ 268.582138][ T5826] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 268.594024][ T5826] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.604341][ T5826] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.618132][ T5826] usb 5-1: config 0 interface 1 has no altsetting 0 [ 268.628088][ T5826] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 268.662464][ T5826] usb 5-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 268.688530][ T5826] usb 5-1: Manufacturer: syz [ 268.696216][ T5826] usb 5-1: config 0 descriptor?? [ 269.123541][ T51] Bluetooth: hci4: adv larger than maximum supported [ 269.846575][ T6835] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6836] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6835] [ 271.290346][ T6833] fuse: Bad value for 'fd' [ 271.429869][ T5826] uclogic 0003:145F:0212.0002: failed retrieving string descriptor #100: -71 [ 271.514122][ T5826] uclogic 0003:145F:0212.0002: failed retrieving pen parameters: -71 [ 271.522290][ T5826] uclogic 0003:145F:0212.0002: pen probing failed: -71 [ 271.583789][ T5826] uclogic 0003:145F:0212.0002: failed probing parameters: -71 [ 271.591443][ T5826] uclogic: probe of 0003:145F:0212.0002 failed with error -71 [ 271.636805][ T6838] overlay: ./file0 is not a directory [ 271.653231][ T5826] usb 5-1: USB disconnect, device number 2 [ 276.817761][ T6862] comedi comedi3: board detection failed [ 278.270080][ T6872] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6873] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6872] [ 281.090267][ T6880] comedi comedi3: board detection failed [ 281.171320][ T6881] netlink: 'syz.1.257': attribute type 10 has an invalid length. [ 281.180089][ T6881] bridge0: port 3(netdevsim0) entered disabled state [ 281.187103][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.194428][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.510202][ T6911] FAULT_INJECTION: forcing a failure. [ 285.510202][ T6911] name fail_futex, interval 1, probability 0, space 0, times 0 [ 285.528379][ T6911] CPU: 0 PID: 6911 Comm: syz.4.263 Not tainted syzkaller #0 [ 285.528406][ T6911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 285.528425][ T6911] Call Trace: [ 285.528440][ T6911] [ 285.552120][ T6911] dump_stack_lvl+0x18c/0x250 [ 285.556864][ T6911] ? show_regs_print_info+0x20/0x20 [ 285.562106][ T6911] ? load_image+0x420/0x420 [ 285.566655][ T6911] should_fail_ex+0x394/0x4c0 [ 285.571376][ T6911] get_futex_key+0x136/0x1030 [ 285.576097][ T6911] ? kasan_save_stack+0x3e/0x60 [ 285.581001][ T6911] ? __se_sys_close+0x15c/0x1e0 [ 285.585888][ T6911] ? futex_setup_timer+0xc0/0xc0 [ 285.590866][ T6911] futex_wake+0x127/0x4f0 [ 285.595224][ T6911] ? futex_wake_mark+0x150/0x150 [ 285.600194][ T6911] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 285.606216][ T6911] do_futex+0x35d/0x3e0 [ 285.610424][ T6911] ? __ia32_sys_get_robust_list+0x110/0x110 [ 285.616357][ T6911] ? slab_free_freelist_hook+0x130/0x1a0 [ 285.622032][ T6911] __se_sys_futex+0x3a9/0x440 [ 285.626753][ T6911] ? __x64_sys_futex+0xf0/0xf0 [ 285.631549][ T6911] ? __x64_sys_futex+0x21/0xf0 [ 285.636349][ T6911] do_syscall_64+0x55/0xb0 [ 285.640801][ T6911] ? clear_bhb_loop+0x40/0x90 [ 285.645501][ T6911] ? clear_bhb_loop+0x40/0x90 [ 285.650211][ T6911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.656149][ T6911] RIP: 0033:0x7f5e6419e159 [ 285.660618][ T6911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.680284][ T6911] RSP: 002b:00007f5e650610e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 285.688752][ T6911] RAX: ffffffffffffffda RBX: 00007f5e64425fa8 RCX: 00007f5e6419e159 [ 285.696789][ T6911] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5e64425fac [ 285.704803][ T6911] RBP: 00007f5e64425fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 285.712797][ T6911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.720809][ T6911] R13: 00007f5e64426038 R14: 00007ffe1c399620 R15: 00007ffe1c399708 [ 285.728838][ T6911] [ 285.749299][ T28] audit: type=1800 audit(1791141717.805:119): pid=6917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.264" name="idProduct" dev="configfs" ino=10141 res=0 errno=0 [ 285.783432][ T6915] comedi comedi3: board detection failed [ 286.146111][ T28] audit: type=1800 audit(1791141717.805:120): pid=6917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.264" name="UDC" dev="configfs" ino=10142 res=0 errno=0 [ 286.943901][ T6921] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6922] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6921] [ 291.351181][ T6926] comedi comedi3: board detection failed [ 291.473936][ T6926] netlink: 'syz.4.268': attribute type 10 has an invalid length. [ 291.588134][ T6926] bridge0: port 3(netdevsim0) entered disabled state [ 291.588390][ T6926] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.589949][ T6926] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.617091][ T6926] bridge0: port 3(netdevsim0) entered blocking state [ 291.623974][ T6926] bridge0: port 3(netdevsim0) entered forwarding state [ 291.631085][ T6926] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.638283][ T6926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.645846][ T6926] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.653074][ T6926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.662683][ T6926] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 293.220660][ T6952] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 293.227295][ T6952] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 293.235981][ T6952] vhci_hcd vhci_hcd.0: Device attached [ 293.263233][ T6953] vhci_hcd: cannot find the pending unlink 65057 [ 293.563047][ T27] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 293.626017][ T6953] vhci_hcd: connection reset by peer [ 293.666320][ T12] vhci_hcd: stop threads [ 293.670677][ T12] vhci_hcd: release socket [ 293.697867][ T12] vhci_hcd: disconnect device [ 294.122216][ T6963] FAULT_INJECTION: forcing a failure. [ 294.122216][ T6963] name fail_futex, interval 1, probability 0, space 0, times 0 [ 294.150867][ T6963] CPU: 1 PID: 6963 Comm: syz.1.276 Not tainted syzkaller #0 [ 294.158252][ T6963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 294.168382][ T6963] Call Trace: [ 294.171709][ T6963] [ 294.174681][ T6963] dump_stack_lvl+0x18c/0x250 [ 294.179473][ T6963] ? show_regs_print_info+0x20/0x20 [ 294.184747][ T6963] ? load_image+0x420/0x420 [ 294.189348][ T6963] should_fail_ex+0x394/0x4c0 [ 294.194162][ T6963] get_futex_key+0x136/0x1030 [ 294.198907][ T6963] ? kasan_save_stack+0x3e/0x60 [ 294.203813][ T6963] ? __se_sys_close+0x15c/0x1e0 [ 294.208751][ T6963] ? futex_setup_timer+0xc0/0xc0 [ 294.213762][ T6963] futex_wake+0x127/0x4f0 [ 294.218162][ T6963] ? futex_wake_mark+0x150/0x150 [ 294.223164][ T6963] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 294.229212][ T6963] do_futex+0x35d/0x3e0 [ 294.233433][ T6963] ? __ia32_sys_get_robust_list+0x110/0x110 [ 294.239431][ T6963] ? slab_free_freelist_hook+0x130/0x1a0 [ 294.245135][ T6963] __se_sys_futex+0x3a9/0x440 [ 294.249883][ T6963] ? __x64_sys_futex+0xf0/0xf0 [ 294.254723][ T6963] ? __x64_sys_futex+0x21/0xf0 [ 294.259600][ T6963] do_syscall_64+0x55/0xb0 [ 294.264113][ T6963] ? clear_bhb_loop+0x40/0x90 [ 294.268882][ T6963] ? clear_bhb_loop+0x40/0x90 [ 294.273620][ T6963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.279607][ T6963] RIP: 0033:0x7f44d779e159 [ 294.284071][ T6963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.303737][ T6963] RSP: 002b:00007f44d869a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 294.312304][ T6963] RAX: ffffffffffffffda RBX: 00007f44d7a25fa8 RCX: 00007f44d779e159 [ 294.320340][ T6963] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f44d7a25fac [ 294.328393][ T6963] RBP: 00007f44d7a25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 294.336450][ T6963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.344469][ T6963] R13: 00007f44d7a26038 R14: 00007fffddd34150 R15: 00007fffddd34238 [ 294.352522][ T6963] [ 295.550042][ T6968] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6969] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6968] [ 296.647305][ T6966] comedi comedi3: board detection failed [ 298.723261][ T27] vhci_hcd: vhci_device speed not set [ 298.949497][ T28] audit: type=1800 audit(1791141730.965:121): pid=6983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.281" name="idProduct" dev="configfs" ino=11158 res=0 errno=0 [ 299.237522][ T28] audit: type=1800 audit(1791141731.175:122): pid=6983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.281" name="UDC" dev="configfs" ino=11160 res=0 errno=0 [ 299.780448][ T6989] FAULT_INJECTION: forcing a failure. [ 299.780448][ T6989] name failslab, interval 1, probability 0, space 0, times 0 [ 299.793450][ T6989] CPU: 1 PID: 6989 Comm: syz.4.286 Not tainted syzkaller #0 [ 299.800803][ T6989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 299.811005][ T6989] Call Trace: [ 299.814333][ T6989] [ 299.817309][ T6989] dump_stack_lvl+0x18c/0x250 [ 299.822048][ T6989] ? verify_lock_unused+0x140/0x140 [ 299.827303][ T6989] ? show_regs_print_info+0x20/0x20 [ 299.832563][ T6989] ? load_image+0x420/0x420 [ 299.837126][ T6989] ? mark_lock+0x94/0x320 [ 299.841536][ T6989] should_fail_ex+0x394/0x4c0 [ 299.846299][ T6989] should_failslab+0x9/0x20 [ 299.850862][ T6989] slab_pre_alloc_hook+0x59/0x300 [ 299.855966][ T6989] ? nfc_genl_rcv_nl_event+0xa8/0x2a0 [ 299.861390][ T6989] __kmem_cache_alloc_node+0x53/0x250 [ 299.866810][ T6989] ? nfc_genl_rcv_nl_event+0xa8/0x2a0 [ 299.872214][ T6989] kmalloc_trace+0x2a/0xe0 [ 299.876678][ T6989] nfc_genl_rcv_nl_event+0xa8/0x2a0 [ 299.881938][ T6989] notifier_call_chain+0x18f/0x380 [ 299.887107][ T6989] blocking_notifier_call_chain+0x6a/0x90 [ 299.892897][ T6989] netlink_release+0x1233/0x1a70 [ 299.897908][ T6989] ? netlink_release+0x10d/0x1a70 [ 299.902976][ T6989] ? netlink_sock_destruct+0x190/0x190 [ 299.908498][ T6989] ? down_write+0x16e/0x200 [ 299.913048][ T6989] ? down_read_killable+0x340/0x340 [ 299.918287][ T6989] sock_close+0xa7/0x210 [ 299.922601][ T6989] ? sock_mmap+0xa0/0xa0 [ 299.926886][ T6989] __fput+0x221/0x940 [ 299.930922][ T6989] __se_sys_close+0x15c/0x1e0 [ 299.935642][ T6989] do_syscall_64+0x55/0xb0 [ 299.940124][ T6989] ? clear_bhb_loop+0x40/0x90 [ 299.944838][ T6989] ? clear_bhb_loop+0x40/0x90 [ 299.949546][ T6989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.955477][ T6989] RIP: 0033:0x7f5e6419e159 [ 299.959926][ T6989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.979567][ T6989] RSP: 002b:00007f5e65061028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 299.988020][ T6989] RAX: ffffffffffffffda RBX: 00007f5e64425fa0 RCX: 00007f5e6419e159 [ 299.996024][ T6989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 300.004037][ T6989] RBP: 00007f5e6423506b R08: 0000000000000000 R09: 0000000000000000 [ 300.012039][ T6989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.020036][ T6989] R13: 00007f5e64426038 R14: 00007f5e64425fa0 R15: 00007ffe1c399708 [ 300.028054][ T6989] [ 300.762719][ T6996] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6997] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6996] [ 304.189437][ T7008] comedi comedi3: board detection failed [ 307.633768][ T28] audit: type=1800 audit(1791141739.695:123): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.295" name="idProduct" dev="configfs" ino=11409 res=0 errno=0 [ 307.698367][ T28] audit: type=1800 audit(1791141739.715:124): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.295" name="UDC" dev="configfs" ino=11410 res=0 errno=0 [ 308.450104][ T7031] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7032] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7031] [ 317.396143][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.412532][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.042871][ T7071] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7072] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7071] [ 327.739933][ T7104] warn_alloc: 1 callbacks suppressed [ 327.739952][ T7104] syz.3.318: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 327.765176][ T7104] CPU: 0 PID: 7104 Comm: syz.3.318 Not tainted syzkaller #0 [ 327.772485][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 327.782564][ T7104] Call Trace: [ 327.785868][ T7104] [ 327.788845][ T7104] dump_stack_lvl+0x18c/0x250 [ 327.793556][ T7104] ? show_regs_print_info+0x20/0x20 [ 327.798789][ T7104] ? load_image+0x420/0x420 [ 327.803330][ T7104] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 327.809772][ T7104] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 327.816324][ T7104] warn_alloc+0x246/0x340 [ 327.820688][ T7104] ? zone_watermark_ok_safe+0x230/0x230 [ 327.826291][ T7104] ? _raw_spin_unlock+0x28/0x40 [ 327.831173][ T7104] ? netlink_rcv_skb+0x235/0x4c0 [ 327.836165][ T7104] __vmalloc_node_range+0x661/0x1320 [ 327.841477][ T7104] ? __asan_memset+0x22/0x40 [ 327.846111][ T7104] ? free_vm_area+0x50/0x50 [ 327.850633][ T7104] ? kvmalloc_node+0x70/0x180 [ 327.855332][ T7104] ? rcu_is_watching+0x15/0xb0 [ 327.860120][ T7104] ? kvmalloc_node+0x70/0x180 [ 327.864820][ T7104] ? trace_kmalloc+0x1f/0xa0 [ 327.869450][ T7104] kvmalloc_node+0x13f/0x180 [ 327.874068][ T7104] ? hash_ipportnet4_resize+0x253/0x1a40 [ 327.879728][ T7104] hash_ipportnet4_resize+0x253/0x1a40 [ 327.885215][ T7104] ? hash_ipportnet4_uadt+0x13b0/0x13b0 [ 327.890778][ T7104] ? hash_ipportnet4_kadt+0x620/0x620 [ 327.896190][ T7104] call_ad+0x42a/0xb30 [ 327.900294][ T7104] ? ip_set_ad+0x9c0/0x9c0 [ 327.904740][ T7104] ? __nla_parse+0x40/0x50 [ 327.909180][ T7104] ip_set_ad+0x81a/0x9c0 [ 327.913471][ T7104] ? ip_set_dump_done+0x320/0x320 [ 327.918531][ T7104] ? rcu_is_watching+0x15/0xb0 [ 327.923360][ T7104] nfnetlink_rcv_msg+0xcaf/0x1290 [ 327.928399][ T7104] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 327.934485][ T7104] ? nfnetlink_rcv_msg+0x228/0x1290 [ 327.939715][ T7104] ? nfnetlink_unbind+0x160/0x160 [ 327.944782][ T7104] ? __dev_queue_xmit+0x1be8/0x37e0 [ 327.949996][ T7104] ? __netlink_deliver_tap+0x579/0x7f0 [ 327.955492][ T7104] ? netlink_deliver_tap+0x19c/0x1b0 [ 327.960811][ T7104] ? netlink_unicast+0x77b/0x930 [ 327.965763][ T7104] ? netlink_sendmsg+0x8d0/0xbf0 [ 327.970732][ T7104] ? ____sys_sendmsg+0x61b/0x980 [ 327.975696][ T7104] ? ___sys_sendmsg+0x2a6/0x360 [ 327.980569][ T7104] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 327.985607][ T7104] ? do_syscall_64+0x55/0xb0 [ 327.990231][ T7104] netlink_rcv_skb+0x235/0x4c0 [ 327.995024][ T7104] ? nfnetlink_unbind+0x160/0x160 [ 328.000087][ T7104] ? netlink_ack+0x1160/0x1160 [ 328.004878][ T7104] ? apparmor_capable+0x137/0x1a0 [ 328.009914][ T7104] ? bpf_lsm_capable+0x9/0x10 [ 328.014619][ T7104] ? security_capable+0x89/0xb0 [ 328.019499][ T7104] nfnetlink_rcv+0x2c9/0x2490 [ 328.024201][ T7104] ? __local_bh_enable_ip+0x13a/0x1c0 [ 328.029590][ T7104] ? lockdep_hardirqs_on+0x98/0x150 [ 328.034802][ T7104] ? __local_bh_enable_ip+0x13a/0x1c0 [ 328.040215][ T7104] ? _local_bh_enable+0xa0/0xa0 [ 328.045088][ T7104] ? __dev_queue_xmit+0x272/0x37e0 [ 328.050213][ T7104] ? __dev_queue_xmit+0x1329/0x37e0 [ 328.055441][ T7104] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 328.061038][ T7104] ? __dev_queue_xmit+0x272/0x37e0 [ 328.066204][ T7104] ? ref_tracker_free+0x686/0x830 [ 328.071271][ T7104] ? refcount_inc+0x70/0x70 [ 328.075811][ T7104] ? __asan_memcpy+0x40/0x70 [ 328.080430][ T7104] ? __skb_clone+0x5c/0x6c0 [ 328.084963][ T7104] ? __skb_clone+0x446/0x6c0 [ 328.089585][ T7104] ? netlink_deliver_tap+0x2e/0x1b0 [ 328.094805][ T7104] ? __lock_acquire+0x7eb0/0x7eb0 [ 328.099851][ T7104] ? netlink_deliver_tap+0x2e/0x1b0 [ 328.105070][ T7104] netlink_unicast+0x7b1/0x930 [ 328.109857][ T7104] netlink_sendmsg+0x8d0/0xbf0 [ 328.114647][ T7104] ? netlink_getsockopt+0x590/0x590 [ 328.119867][ T7104] ? apparmor_socket_sendmsg+0x170/0x330 [ 328.125517][ T7104] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 328.130830][ T7104] ? security_socket_sendmsg+0x80/0xa0 [ 328.136328][ T7104] ? netlink_getsockopt+0x590/0x590 [ 328.141555][ T7104] ____sys_sendmsg+0x61b/0x980 [ 328.147859][ T7104] ? __asan_memset+0x22/0x40 [ 328.152559][ T7104] ? __sys_sendmsg_sock+0x30/0x30 [ 328.157604][ T7104] ? __import_iovec+0x5f2/0x850 [ 328.162486][ T7104] ? import_iovec+0x73/0xa0 [ 328.167040][ T7104] ___sys_sendmsg+0x2a6/0x360 [ 328.171751][ T7104] ? __sys_sendmsg+0x2b0/0x2b0 [ 328.176573][ T7104] __se_sys_sendmsg+0x1d0/0x2c0 [ 328.181447][ T7104] ? __x64_sys_sendmsg+0x80/0x80 [ 328.186443][ T7104] do_syscall_64+0x55/0xb0 [ 328.190879][ T7104] ? clear_bhb_loop+0x40/0x90 [ 328.195565][ T7104] ? clear_bhb_loop+0x40/0x90 [ 328.200252][ T7104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 328.206179][ T7104] RIP: 0033:0x7fb74979e159 [ 328.210606][ T7104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.230314][ T7104] RSP: 002b:00007fb74a5b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.238745][ T7104] RAX: ffffffffffffffda RBX: 00007fb749a26090 RCX: 00007fb74979e159 [ 328.246728][ T7104] RDX: 0000000020004000 RSI: 0000200000000100 RDI: 0000000000000004 [ 328.254733][ T7104] RBP: 00007fb74983506b R08: 0000000000000000 R09: 0000000000000000 [ 328.262713][ T7104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.270693][ T7104] R13: 00007fb749a26128 R14: 00007fb749a26090 R15: 00007ffdd4287b98 [ 328.278688][ T7104] [ 328.282852][ T7104] Mem-Info: [ 328.285994][ T7104] active_anon:40576 inactive_anon:0 isolated_anon:0 [ 328.285994][ T7104] active_file:18492 inactive_file:40040 isolated_file:0 [ 328.285994][ T7104] unevictable:768 dirty:45 writeback:0 [ 328.285994][ T7104] slab_reclaimable:11756 slab_unreclaimable:95422 [ 328.285994][ T7104] mapped:32558 shmem:36591 pagetables:492 [ 328.285994][ T7104] sec_pagetables:0 bounce:0 [ 328.285994][ T7104] kernel_misc_reclaimable:0 [ 328.285994][ T7104] free:1294242 free_pcp:6270 free_cma:0 [ 328.332252][ T7104] Node 0 active_anon:162304kB inactive_anon:0kB active_file:73968kB inactive_file:159960kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130232kB dirty:180kB writeback:0kB shmem:144828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10708kB pagetables:1968kB sec_pagetables:0kB all_unreclaimable? no [ 328.365947][ T7104] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 328.396287][ T7104] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 328.423530][ T7104] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 328.429306][ T7104] Node 0 DMA32 free:1268072kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:162268kB inactive_anon:0kB active_file:73968kB inactive_file:159132kB unevictable:1536kB writepending:180kB present:3129332kB managed:2586780kB mlocked:0kB bounce:0kB free_pcp:6260kB local_pcp:460kB free_cma:0kB [ 328.460657][ T7104] lowmem_reserve[]: 0 0 0 0 0 [ 328.465451][ T7104] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 328.492204][ T7104] lowmem_reserve[]: 0 0 0 0 0 [ 328.496954][ T7104] Node 1 Normal free:3893288kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19040kB local_pcp:10560kB free_cma:0kB [ 328.526489][ T7104] lowmem_reserve[]: 0 0 0 0 0 [ 328.531224][ T7104] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 328.543922][ T7104] Node 0 DMA32: 12*4kB (UME) 5*8kB (ME) 285*16kB (M) 156*32kB (UME) 213*64kB (UME) 23*128kB (UME) 3*256kB (UE) 4*512kB (UME) 10*1024kB (UME) 10*2048kB (M) 295*4096kB (UM) = 1268072kB [ 328.563166][ T7104] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 328.575179][ T7104] Node 1 Normal: 264*4kB (UM) 49*8kB (UME) 38*16kB (UME) 89*32kB (UME) 28*64kB (UME) 2*128kB (UE) 1*256kB (U) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 947*4096kB (M) = 3893288kB [ 328.593028][ T7104] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 328.602577][ T7104] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 328.611919][ T7104] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 328.621523][ T7104] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 328.630848][ T7104] 95123 total pagecache pages [ 328.635560][ T7104] 0 pages in swap cache [ 328.639714][ T7104] Free swap = 124684kB [ 328.643908][ T7104] Total swap = 124996kB [ 328.648069][ T7104] 2097051 pages RAM [ 328.651876][ T7104] 0 pages HighMem/MovableOnly [ 328.657553][ T7104] 416970 pages reserved [ 328.661719][ T7104] 0 pages cma reserved [ 329.920083][ T7113] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7114] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7113] [ 331.247673][ T7118] comedi comedi3: board detection failed [ 331.328578][ T7119] netlink: 'syz.2.322': attribute type 10 has an invalid length. [ 332.190985][ T7119] bridge0: port 3(netdevsim0) entered disabled state [ 332.197931][ T7119] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.205162][ T7119] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.393041][ T7129] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 334.399656][ T7129] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 334.407834][ T7129] vhci_hcd vhci_hcd.0: Device attached [ 334.413697][ T7130] vhci_hcd: connection closed [ 334.415531][ T49] vhci_hcd: stop threads [ 334.464152][ T49] vhci_hcd: release socket [ 334.472404][ T49] vhci_hcd: disconnect device [ 335.697781][ T7140] comedi comedi3: board detection failed [ 337.083492][ T7144] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7145] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7144] [ 338.729839][ T7150] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7151] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7150] [ 342.443979][ T28] audit: type=1800 audit(1791141774.485:125): pid=7155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.332" name="idProduct" dev="configfs" ino=11565 res=0 errno=0 [ 344.125077][ T7168] comedi comedi3: board detection failed [ 344.218388][ T7169] netlink: 'syz.3.333': attribute type 10 has an invalid length. [ 344.262939][ T27] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 344.776099][ T27] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 344.793004][ T27] usb 2-1: config 0 has no interface number 0 [ 344.812886][ T27] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 344.842935][ T27] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.871548][ T7171] netlink: 596 bytes leftover after parsing attributes in process `syz.3.335'. [ 344.880811][ T27] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.910367][ T27] usb 2-1: config 0 interface 1 has no altsetting 0 [ 344.924719][ T27] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 344.946226][ T27] usb 2-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 344.964173][ T7171] netlink: 288 bytes leftover after parsing attributes in process `syz.3.335'. [ 345.633021][ T27] usb 2-1: Manufacturer: syz [ 345.693845][ T27] usb 2-1: config 0 descriptor?? [ 345.756520][ T27] usb 2-1: can't set config #0, error -71 [ 345.772897][ T27] usb 2-1: USB disconnect, device number 5 [ 346.444205][ T7183] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7184] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7183] [ 347.547091][ T7182] comedi comedi3: board detection failed [ 349.910288][ T7189] comedi comedi3: board detection failed [ 349.971627][ T7190] netlink: 'syz.4.343': attribute type 10 has an invalid length. [ 349.989474][ T7190] bridge0: port 3(netdevsim0) entered disabled state [ 349.996764][ T7190] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.004072][ T7190] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.840222][ T7195] warn_alloc: 1 callbacks suppressed [ 352.840311][ T7195] syz.4.344: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 352.864424][ T7195] CPU: 0 PID: 7195 Comm: syz.4.344 Not tainted syzkaller #0 [ 352.871720][ T7195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 352.881794][ T7195] Call Trace: [ 352.885145][ T7195] [ 352.888128][ T7195] dump_stack_lvl+0x18c/0x250 [ 352.892946][ T7195] ? show_regs_print_info+0x20/0x20 [ 352.898203][ T7195] ? load_image+0x420/0x420 [ 352.902739][ T7195] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 352.909253][ T7195] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 352.915767][ T7195] warn_alloc+0x246/0x340 [ 352.920129][ T7195] ? zone_watermark_ok_safe+0x230/0x230 [ 352.925719][ T7195] ? _raw_spin_unlock+0x28/0x40 [ 352.930671][ T7195] ? netlink_rcv_skb+0x235/0x4c0 [ 352.935686][ T7195] __vmalloc_node_range+0x661/0x1320 [ 352.940994][ T7195] ? __asan_memset+0x22/0x40 [ 352.945653][ T7195] ? free_vm_area+0x50/0x50 [ 352.950172][ T7195] ? kvmalloc_node+0x70/0x180 [ 352.954863][ T7195] ? rcu_is_watching+0x15/0xb0 [ 352.959670][ T7195] ? kvmalloc_node+0x70/0x180 [ 352.964376][ T7195] ? trace_kmalloc+0x1f/0xa0 [ 352.968984][ T7195] kvmalloc_node+0x13f/0x180 [ 352.973593][ T7195] ? hash_ipportnet4_resize+0x253/0x1a40 [ 352.979319][ T7195] hash_ipportnet4_resize+0x253/0x1a40 [ 352.984800][ T7195] ? hash_ipportnet4_uadt+0x13b0/0x13b0 [ 352.990359][ T7195] ? hash_ipportnet4_kadt+0x620/0x620 [ 352.995769][ T7195] call_ad+0x42a/0xb30 [ 352.999910][ T7195] ? ip_set_ad+0x9c0/0x9c0 [ 353.004355][ T7195] ? __nla_parse+0x40/0x50 [ 353.008817][ T7195] ip_set_ad+0x81a/0x9c0 [ 353.013083][ T7195] ? ip_set_dump_done+0x320/0x320 [ 353.018157][ T7195] nfnetlink_rcv_msg+0xcaf/0x1290 [ 353.023256][ T7195] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.029445][ T7195] ? nfnetlink_rcv_msg+0x228/0x1290 [ 353.034677][ T7195] ? nfnetlink_unbind+0x160/0x160 [ 353.039731][ T7195] ? __dev_queue_xmit+0x1be8/0x37e0 [ 353.045002][ T7195] ? __netlink_deliver_tap+0x579/0x7f0 [ 353.050478][ T7195] ? netlink_deliver_tap+0x19c/0x1b0 [ 353.055774][ T7195] ? netlink_unicast+0x77b/0x930 [ 353.060726][ T7195] ? netlink_sendmsg+0x8d0/0xbf0 [ 353.065678][ T7195] ? ____sys_sendmsg+0x61b/0x980 [ 353.070711][ T7195] ? ___sys_sendmsg+0x2a6/0x360 [ 353.075583][ T7195] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 353.081588][ T7195] netlink_rcv_skb+0x235/0x4c0 [ 353.086373][ T7195] ? nfnetlink_unbind+0x160/0x160 [ 353.091410][ T7195] ? netlink_ack+0x1160/0x1160 [ 353.096197][ T7195] ? apparmor_capable+0x137/0x1a0 [ 353.101262][ T7195] ? bpf_lsm_capable+0x9/0x10 [ 353.105951][ T7195] ? security_capable+0x89/0xb0 [ 353.110828][ T7195] nfnetlink_rcv+0x2c9/0x2490 [ 353.115524][ T7195] ? __local_bh_enable_ip+0x13a/0x1c0 [ 353.120940][ T7195] ? lockdep_hardirqs_on+0x98/0x150 [ 353.126188][ T7195] ? __local_bh_enable_ip+0x13a/0x1c0 [ 353.131600][ T7195] ? _local_bh_enable+0xa0/0xa0 [ 353.136477][ T7195] ? __dev_queue_xmit+0x272/0x37e0 [ 353.141604][ T7195] ? __dev_queue_xmit+0x1329/0x37e0 [ 353.146814][ T7195] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 353.152371][ T7195] ? __dev_queue_xmit+0x272/0x37e0 [ 353.157510][ T7195] ? ref_tracker_free+0x686/0x830 [ 353.162550][ T7195] ? refcount_inc+0x70/0x70 [ 353.167067][ T7195] ? __asan_memcpy+0x40/0x70 [ 353.171687][ T7195] ? __skb_clone+0x5c/0x6c0 [ 353.176252][ T7195] ? __skb_clone+0x446/0x6c0 [ 353.180868][ T7195] ? netlink_deliver_tap+0x2e/0x1b0 [ 353.186092][ T7195] ? __lock_acquire+0x7eb0/0x7eb0 [ 353.191152][ T7195] ? netlink_deliver_tap+0x2e/0x1b0 [ 353.196383][ T7195] netlink_unicast+0x7b1/0x930 [ 353.201176][ T7195] netlink_sendmsg+0x8d0/0xbf0 [ 353.205966][ T7195] ? netlink_getsockopt+0x590/0x590 [ 353.211181][ T7195] ? apparmor_socket_sendmsg+0x170/0x330 [ 353.216829][ T7195] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 353.222149][ T7195] ? security_socket_sendmsg+0x80/0xa0 [ 353.227636][ T7195] ? netlink_getsockopt+0x590/0x590 [ 353.232896][ T7195] ____sys_sendmsg+0x61b/0x980 [ 353.237764][ T7195] ? __asan_memset+0x22/0x40 [ 353.242402][ T7195] ? __sys_sendmsg_sock+0x30/0x30 [ 353.247456][ T7195] ? __import_iovec+0x5f2/0x850 [ 353.252339][ T7195] ? import_iovec+0x73/0xa0 [ 353.256863][ T7195] ___sys_sendmsg+0x2a6/0x360 [ 353.261579][ T7195] ? __sys_sendmsg+0x2b0/0x2b0 [ 353.266394][ T7195] __se_sys_sendmsg+0x1d0/0x2c0 [ 353.271266][ T7195] ? __x64_sys_sendmsg+0x80/0x80 [ 353.276260][ T7195] ? lockdep_hardirqs_on+0x98/0x150 [ 353.281480][ T7195] do_syscall_64+0x55/0xb0 [ 353.285914][ T7195] ? clear_bhb_loop+0x40/0x90 [ 353.290599][ T7195] ? clear_bhb_loop+0x40/0x90 [ 353.295286][ T7195] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.301195][ T7195] RIP: 0033:0x7f5e6419e159 [ 353.305697][ T7195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.325361][ T7195] RSP: 002b:00007f5e65040028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.333831][ T7195] RAX: ffffffffffffffda RBX: 00007f5e64426090 RCX: 00007f5e6419e159 [ 353.341825][ T7195] RDX: 0000000020004000 RSI: 0000200000000100 RDI: 0000000000000004 [ 353.349824][ T7195] RBP: 00007f5e6423506b R08: 0000000000000000 R09: 0000000000000000 [ 353.357817][ T7195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.365800][ T7195] R13: 00007f5e64426128 R14: 00007f5e64426090 R15: 00007ffe1c399708 [ 353.373819][ T7195] [ 353.381871][ T7195] Mem-Info: [ 353.385064][ T7195] active_anon:52622 inactive_anon:0 isolated_anon:0 [ 353.385064][ T7195] active_file:18492 inactive_file:40048 isolated_file:0 [ 353.385064][ T7195] unevictable:768 dirty:45 writeback:0 [ 353.385064][ T7195] slab_reclaimable:11737 slab_unreclaimable:96158 [ 353.385064][ T7195] mapped:32558 shmem:48574 pagetables:513 [ 353.385064][ T7195] sec_pagetables:0 bounce:0 [ 353.385064][ T7195] kernel_misc_reclaimable:0 [ 353.385064][ T7195] free:1274608 free_pcp:10976 free_cma:0 [ 353.430409][ T7195] Node 0 active_anon:210488kB inactive_anon:0kB active_file:73968kB inactive_file:159992kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130232kB dirty:180kB writeback:0kB shmem:192760kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10828kB pagetables:2052kB sec_pagetables:0kB all_unreclaimable? no [ 353.464011][ T7195] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 353.494267][ T7195] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 353.521373][ T7195] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 353.527482][ T7195] Node 0 DMA32 free:1189776kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:210452kB inactive_anon:0kB active_file:73968kB inactive_file:159164kB unevictable:1536kB writepending:180kB present:3129332kB managed:2586780kB mlocked:0kB bounce:0kB free_pcp:24832kB local_pcp:13652kB free_cma:0kB [ 353.559232][ T7195] lowmem_reserve[]: 0 0 0 0 0 [ 353.564009][ T7195] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 353.601627][ T7195] lowmem_reserve[]: 0 0 0 0 0 [ 353.606703][ T7195] Node 1 Normal free:3893288kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19040kB local_pcp:10560kB free_cma:0kB [ 353.636300][ T7195] lowmem_reserve[]: 0 0 0 0 0 [ 353.642020][ T7195] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 353.654735][ T7195] Node 0 DMA32: 2*4kB (UE) 1*8kB (E) 22*16kB (UME) 3*32kB (UME) 15*64kB (UM) 42*128kB (UME) 81*256kB (UME) 38*512kB (UME) 12*1024kB (UME) 10*2048kB (UM) 271*4096kB (M) = 1189776kB [ 353.672714][ T7195] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 353.684703][ T7195] Node 1 Normal: 264*4kB (UM) 49*8kB (UME) 38*16kB (UME) 89*32kB (UME) 28*64kB (UME) 2*128kB (UE) 1*256kB (U) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 947*4096kB (M) = 3893288kB [ 353.702644][ T7195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 353.712257][ T7195] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 353.721599][ T7195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 353.731188][ T7195] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 353.741637][ T7195] 107115 total pagecache pages [ 353.746456][ T7195] 0 pages in swap cache [ 353.750635][ T7195] Free swap = 124684kB [ 353.754865][ T7195] Total swap = 124996kB [ 353.759024][ T7195] 2097051 pages RAM [ 353.762881][ T7195] 0 pages HighMem/MovableOnly [ 353.767581][ T7195] 416970 pages reserved [ 353.771737][ T7195] 0 pages cma reserved [ 356.675515][ T7214] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7215] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7214] [ 357.837502][ T7216] netlink: 596 bytes leftover after parsing attributes in process `syz.3.348'. [ 357.880050][ T7216] netlink: 288 bytes leftover after parsing attributes in process `syz.3.348'. [ 358.882322][ T7219] comedi comedi3: board detection failed [ 361.053618][ T1193] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 362.981030][ T1193] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 362.992895][ T1193] usb 2-1: config 0 has no interface number 0 [ 362.999225][ T1193] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 363.023321][ T1193] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.042901][ T1193] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 363.077506][ T1193] usb 2-1: config 0 interface 1 has no altsetting 0 [ 363.113108][ T1193] usb 2-1: string descriptor 0 read error: -71 [ 363.119443][ T1193] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 363.148468][ T1193] usb 2-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 363.192205][ T1193] usb 2-1: config 0 descriptor?? [ 363.198150][ T1193] usb 2-1: can't set config #0, error -71 [ 363.225512][ T1193] usb 2-1: USB disconnect, device number 6 [ 363.243684][ T7245] netlink: 596 bytes leftover after parsing attributes in process `syz.2.359'. [ 363.281328][ T7245] netlink: 288 bytes leftover after parsing attributes in process `syz.2.359'. [ 364.610028][ T7250] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7251] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7250] [ 369.089060][ T7264] zram: Cannot change disksize for initialized device [ 370.064581][ T7270] overlay: ./file0 is not a directory [ 372.647765][ T7286] netlink: 596 bytes leftover after parsing attributes in process `syz.4.371'. [ 372.671125][ T7286] netlink: 288 bytes leftover after parsing attributes in process `syz.4.371'. [ 372.822623][ T28] audit: type=1800 audit(1791141804.875:126): pid=7287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.372" name="idProduct" dev="configfs" ino=12610 res=0 errno=0 [ 373.031203][ T28] audit: type=1800 audit(1791141804.935:127): pid=7287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.372" name="UDC" dev="configfs" ino=12611 res=0 errno=0 [ 376.843764][ T7307] comedi comedi3: board detection failed [ 376.908574][ T7309] netlink: 'syz.4.378': attribute type 10 has an invalid length. [ 377.067607][ T7310] overlay: ./file0 is not a directory [ 378.834316][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.840870][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.974583][ T7319] netlink: 596 bytes leftover after parsing attributes in process `syz.3.370'. [ 379.096691][ T7319] netlink: 288 bytes leftover after parsing attributes in process `syz.3.370'. [ 379.931273][ T7327] netlink: 596 bytes leftover after parsing attributes in process `syz.1.383'. [ 379.945521][ T7327] netlink: 288 bytes leftover after parsing attributes in process `syz.1.383'. [ 380.417877][ T28] audit: type=1800 audit(1791141812.455:128): pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.385" name="idProduct" dev="configfs" ino=11856 res=0 errno=0 [ 380.611418][ T28] audit: type=1800 audit(1791141812.515:129): pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.385" name="UDC" dev="configfs" ino=11857 res=0 errno=0 [ 384.109530][ T7352] zram: Cannot change disksize for initialized device [ 386.003216][ T7364] netlink: 596 bytes leftover after parsing attributes in process `syz.1.396'. [ 386.096916][ T7364] netlink: 288 bytes leftover after parsing attributes in process `syz.1.396'. [ 387.340087][ T7377] overlay: ./file0 is not a directory [ 388.488740][ T7387] zram: Cannot change disksize for initialized device [ 389.523632][ T7393] netlink: 596 bytes leftover after parsing attributes in process `syz.2.404'. [ 389.611955][ T7393] netlink: 288 bytes leftover after parsing attributes in process `syz.2.404'. [ 391.441538][ T7404] netlink: 596 bytes leftover after parsing attributes in process `syz.2.409'. [ 391.480287][ T7404] netlink: 288 bytes leftover after parsing attributes in process `syz.2.409'. [ 392.771630][ T7417] netlink: 596 bytes leftover after parsing attributes in process `syz.2.415'. [ 392.807190][ T7417] netlink: 288 bytes leftover after parsing attributes in process `syz.2.415'. [ 393.711111][ T7421] zram: Cannot change disksize for initialized device [ 394.565304][ T7431] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7432] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7431] [ 396.829678][ T7441] netlink: 596 bytes leftover after parsing attributes in process `syz.2.423'. [ 396.869971][ T7441] netlink: 288 bytes leftover after parsing attributes in process `syz.2.423'. [ 398.136627][ T7449] zram: Cannot change disksize for initialized device [ 399.043226][ T7451] netlink: 596 bytes leftover after parsing attributes in process `syz.1.426'. [ 399.059277][ T7451] netlink: 288 bytes leftover after parsing attributes in process `syz.1.426'. [ 403.295547][ T7471] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7472] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7471] [ 404.560659][ T7476] overlay: ./file0 is not a directory [ 404.566798][ T7475] comedi comedi3: board detection failed [ 405.718966][ T7484] netlink: 596 bytes leftover after parsing attributes in process `syz.2.437'. [ 406.673242][ T7488] comedi comedi3: board detection failed [ 408.283135][ T7500] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7502] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7500] [ 412.714007][ T28] audit: type=1800 audit(1791141844.105:130): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.443" name="idProduct" dev="configfs" ino=12890 res=0 errno=0 [ 413.213241][ T7508] netlink: 596 bytes leftover after parsing attributes in process `syz.1.433'. [ 413.227402][ T7510] comedi comedi3: board detection failed [ 414.141720][ T7508] netlink: 288 bytes leftover after parsing attributes in process `syz.1.433'. [ 414.452730][ T7516] overlay: ./file0 is not a directory [ 414.567969][ T7522] netlink: 596 bytes leftover after parsing attributes in process `syz.1.447'. [ 417.133153][ T7527] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7531] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7527] [ 420.946106][ T7546] comedi comedi3: board detection failed [ 421.293341][ T7562] comedi comedi3: board detection failed [ 423.873730][ T7570] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 423.880342][ T7570] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 423.888680][ T7570] vhci_hcd vhci_hcd.0: Device attached [ 423.894918][ T7572] vhci_hcd: connection closed [ 424.001070][ T6222] vhci_hcd: stop threads [ 424.016437][ T6222] vhci_hcd: release socket [ 424.020935][ T6222] vhci_hcd: disconnect device [ 424.027355][ T7575] overlay: ./file0 is not a directory [ 424.763142][ T7581] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7585] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7581] [ 430.263118][ T7623] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7625] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7623] [ 431.015323][ T7628] overlay: ./file0 is not a directory [ 431.047340][ T28] audit: type=1800 audit(1791141863.105:131): pid=7629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.474" name="idProduct" dev="configfs" ino=13166 res=0 errno=0 [ 431.120341][ T28] audit: type=1800 audit(1791141863.135:132): pid=7629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.474" name="UDC" dev="configfs" ino=13167 res=0 errno=0 [ 433.973254][ T7653] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 433.979892][ T7653] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 433.987678][ T7653] vhci_hcd vhci_hcd.0: Device attached [ 433.987704][ T7656] vhci_hcd: connection closed [ 434.018024][ T6222] vhci_hcd: stop threads [ 434.038753][ T6222] vhci_hcd: release socket [ 434.048313][ T6222] vhci_hcd: disconnect device [ 434.713074][ T7661] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7664] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7661] [ 435.624824][ T7671] overlay: ./file0 is not a directory [ 437.726016][ T7687] comedi comedi3: board detection failed [ 438.633209][ T7693] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7695] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7693] [ 440.256903][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.263427][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.415006][ T7703] zram: Cannot change disksize for initialized device [ 446.833408][ T7730] comedi comedi3: board detection failed [ 447.663798][ T7733] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7734] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7733] [ 449.466496][ T7742] overlay: ./file0 is not a directory [ 450.256237][ T7747] zram: Cannot change disksize for initialized device [ 456.193447][ T7768] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7769] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7768] [ 457.165454][ T28] audit: type=1800 audit(1791141889.225:133): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.512" name="idProduct" dev="configfs" ino=13987 res=0 errno=0 [ 457.351450][ T28] audit: type=1800 audit(1791141889.255:134): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.512" name="UDC" dev="configfs" ino=13990 res=0 errno=0 [ 458.862725][ T7798] overlay: ./file0 is not a directory [ 460.494031][ T7807] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7808] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7807] [ 462.520232][ T7815] zram: Cannot change disksize for initialized device [ 465.185845][ T28] audit: type=1800 audit(1791141897.245:135): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.522" name="idProduct" dev="configfs" ino=14519 res=0 errno=0 [ 465.250727][ T28] audit: type=1800 audit(1791141897.265:136): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.522" name="UDC" dev="configfs" ino=14522 res=0 errno=0 [ 465.327837][ T7840] zram: Cannot change disksize for initialized device [ 466.713241][ T7848] comedi comedi3: board detection failed [ 466.785041][ T7850] netlink: 'syz.2.532': attribute type 10 has an invalid length. [ 474.563643][ T7887] zram: Cannot change disksize for initialized device [ 477.693659][ T7893] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7894] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7893] [ 478.652810][ T28] audit: type=1800 audit(1791141910.695:137): pid=7895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.543" name="idProduct" dev="configfs" ino=15400 res=0 errno=0 [ 478.719614][ T28] audit: type=1800 audit(1791141910.705:138): pid=7895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.543" name="UDC" dev="configfs" ino=15401 res=0 errno=0 [ 481.076337][ T7923] zram: Cannot change disksize for initialized device [ 483.633777][ T7924] zram: Cannot change disksize for initialized device [ 484.263822][ T7929] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7930] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7929] [ 486.019026][ T28] audit: type=1800 audit(1791141918.075:139): pid=7939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.557" name="idProduct" dev="configfs" ino=14649 res=0 errno=0 [ 486.116772][ T28] audit: type=1800 audit(1791141918.105:140): pid=7939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.557" name="UDC" dev="configfs" ino=14650 res=0 errno=0 [ 487.603252][ T59] kworker/dying (59) used greatest stack depth: 20376 bytes left [ 490.754277][ T7963] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7964] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7963] [ 491.802503][ T7965] zram: Cannot change disksize for initialized device [ 493.339035][ T28] audit: type=1800 audit(1791141925.395:141): pid=7969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.566" name="idProduct" dev="configfs" ino=15596 res=0 errno=0 [ 493.399138][ T28] audit: type=1800 audit(1791141925.415:142): pid=7969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.566" name="UDC" dev="configfs" ino=15597 res=0 errno=0 [ 494.144339][ T7975] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 494.150992][ T7975] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 494.391580][ T7975] vhci_hcd vhci_hcd.0: Device attached [ 494.426402][ T7979] vhci_hcd: connection closed [ 494.450317][ T6225] vhci_hcd: stop threads [ 494.477366][ T6225] vhci_hcd: release socket [ 494.481874][ T6225] vhci_hcd: disconnect device [ 497.561842][ T7996] zram: Cannot change disksize for initialized device [ 499.362616][ T8003] netlink: 596 bytes leftover after parsing attributes in process `syz.1.574'. [ 499.428190][ T8003] netlink: 288 bytes leftover after parsing attributes in process `syz.1.574'. [ 501.704463][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.717581][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.253121][ T8037] zram: Cannot change disksize for initialized device [ 507.280923][ T8041] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8042] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8041] [ 507.793517][ T8044] netlink: 596 bytes leftover after parsing attributes in process `syz.4.585'. [ 507.874865][ T8044] netlink: 288 bytes leftover after parsing attributes in process `syz.4.585'. [ 508.386296][ T28] audit: type=1800 audit(1791141940.445:143): pid=8053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.586" name="idProduct" dev="configfs" ino=14785 res=0 errno=0 [ 508.460910][ T28] audit: type=1800 audit(1791141940.465:144): pid=8053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.586" name="UDC" dev="configfs" ino=14786 res=0 errno=0 [ 508.604433][ T8058] overlay: ./file0 is not a directory [ 509.170235][ T8073] zram: Cannot change disksize for initialized device [ 514.270123][ T8089] netlink: 596 bytes leftover after parsing attributes in process `syz.4.597'. [ 514.341279][ T8089] netlink: 288 bytes leftover after parsing attributes in process `syz.4.597'. [ 514.983364][ T5783] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 515.214224][ T5783] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 515.222298][ T5783] usb 2-1: config 0 has no interface number 0 [ 515.237481][ T5783] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 515.282791][ T5783] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.324256][ T5783] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 515.356370][ T5783] usb 2-1: config 0 interface 1 has no altsetting 0 [ 515.373003][ T5783] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 515.385440][ T5783] usb 2-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 515.403943][ T5783] usb 2-1: Manufacturer: syz [ 515.436327][ T5783] usb 2-1: config 0 descriptor?? [ 516.342152][ T5783] uclogic 0003:145F:0212.0003: pen parameters not found [ 516.473639][ T5783] uclogic 0003:145F:0212.0003: interface is invalid, ignoring [ 516.579433][ T5783] usb 2-1: USB disconnect, device number 7 [ 516.641088][ T28] audit: type=1800 audit(1791141948.695:145): pid=8106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.601" name="idProduct" dev="configfs" ino=14867 res=0 errno=0 [ 516.790076][ T8110] zram: Cannot change disksize for initialized device [ 519.164167][ T28] audit: type=1800 audit(1791141948.725:146): pid=8106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.601" name="UDC" dev="configfs" ino=14868 res=0 errno=0 [ 521.434070][ T8126] overlay: ./file0 is not a directory [ 526.108395][ T8147] zram: Cannot change disksize for initialized device [ 527.170186][ T28] audit: type=1800 audit(1791141958.975:147): pid=8143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.612" name="idProduct" dev="configfs" ino=14994 res=0 errno=0 [ 530.163000][ T8160] netlink: 596 bytes leftover after parsing attributes in process `syz.1.619'. [ 532.082952][ T5787] Bluetooth: hci4: command 0x0406 tx timeout [ 535.633032][ T8184] zram: Cannot change disksize for initialized device [ 535.772897][ T1193] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 537.604616][ T1193] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.902820][ T1193] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 537.924555][ T1193] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 537.933735][ T1193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.943575][ T1193] usb 3-1: Product: syz [ 537.947811][ T1193] usb 3-1: Manufacturer: syz [ 537.961098][ T1193] usb 3-1: SerialNumber: syz [ 540.445172][ T1193] usb 3-1: USB disconnect, device number 5 [ 540.572586][ T28] audit: type=1800 audit(1791141972.625:148): pid=8193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.626" name="idProduct" dev="configfs" ino=16005 res=0 errno=0 [ 540.644290][ T8201] overlay: ./file0 is not a directory [ 540.656070][ T8177] udevd[8177]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.508584][ T8225] netlink: 596 bytes leftover after parsing attributes in process `syz.3.628'. [ 547.896280][ T28] audit: type=1800 audit(1791141979.955:149): pid=8237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.639" name="idProduct" dev="configfs" ino=16066 res=0 errno=0 [ 549.094613][ T8248] zram: Cannot change disksize for initialized device [ 552.953147][ T8260] netlink: 596 bytes leftover after parsing attributes in process `syz.1.646'. [ 553.162990][ T8264] overlay: ./file0 is not a directory [ 553.682673][ T8278] zram: Cannot change disksize for initialized device [ 556.242577][ T28] audit: type=1800 audit(1791141988.295:150): pid=8280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.651" name="idProduct" dev="configfs" ino=16130 res=0 errno=0 [ 557.883659][ T28] audit: type=1800 audit(1791141988.295:151): pid=8280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.651" name="UDC" dev="configfs" ino=16131 res=0 errno=0 [ 558.501813][ T8294] zram: Cannot change disksize for initialized device [ 559.438820][ T8299] netlink: 596 bytes leftover after parsing attributes in process `syz.4.656'. [ 562.673072][ T8309] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8312] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8309] [ 563.152068][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.163058][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.054194][ T8326] zram: Cannot change disksize for initialized device [ 567.182219][ T8332] netlink: 596 bytes leftover after parsing attributes in process `syz.1.666'. [ 567.197586][ T8334] netlink: 596 bytes leftover after parsing attributes in process `syz.2.667'. [ 568.747092][ T8338] netlink: 288 bytes leftover after parsing attributes in process `syz.1.666'. [ 569.101821][ T28] audit: type=1800 audit(1791142001.155:152): pid=8335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.662" name="idProduct" dev="configfs" ino=16476 res=0 errno=0 [ 569.152899][ T28] audit: type=1800 audit(1791142001.205:153): pid=8335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.662" name="UDC" dev="configfs" ino=16477 res=0 errno=0 [ 571.952557][ T8360] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8362] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8360] [ 576.252991][ T8388] zram: Cannot change disksize for initialized device [ 577.172786][ T8392] zram: Cannot change disksize for initialized device [ 578.289656][ T28] audit: type=1800 audit(1791142010.345:154): pid=8394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.682" name="idProduct" dev="configfs" ino=16567 res=0 errno=0 [ 578.322988][ T28] audit: type=1800 audit(1791142010.375:155): pid=8394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.682" name="UDC" dev="configfs" ino=16570 res=0 errno=0 [ 580.257696][ T8403] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8404] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8403] [ 584.342435][ T8413] netlink: 596 bytes leftover after parsing attributes in process `syz.2.679'. [ 585.456212][ T8416] Bluetooth: MGMT ver 1.22 [ 586.275177][ T8423] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 586.281842][ T8423] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 586.289779][ T8423] vhci_hcd vhci_hcd.0: Device attached [ 586.301005][ T8424] vhci_hcd: connection closed [ 586.322819][ T3461] vhci_hcd: stop threads [ 586.342318][ T3461] vhci_hcd: release socket [ 586.358395][ T3461] vhci_hcd: disconnect device [ 587.396819][ T8429] zram: Cannot change disksize for initialized device [ 588.684460][ T8440] ip_tables: iptables: counters copy to user failed while replacing table [ 590.770489][ T8444] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8446] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8444] [ 594.818514][ T8462] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 594.825146][ T8462] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 594.833926][ T8462] vhci_hcd vhci_hcd.0: Device attached [ 594.841408][ T8463] vhci_hcd: cannot find the pending unlink 65057 [ 595.024627][ T8467] zram: Cannot change disksize for initialized device [ 595.439905][ T5862] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 595.478736][ T8463] vhci_hcd: connection closed [ 595.488909][ T1096] vhci_hcd: stop threads [ 595.605767][ T1096] vhci_hcd: release socket [ 595.679081][ T1096] vhci_hcd: disconnect device [ 597.151085][ T5862] usb 35-1: enqueue for inactive port 0 [ 597.259504][ T5862] vhci_hcd: vhci_device speed not set [ 598.435268][ T8477] overlay: ./file0 is not a directory [ 599.052262][ T8481] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8483] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8481] [ 600.260532][ T8485] netlink: 596 bytes leftover after parsing attributes in process `syz.4.697'. [ 603.962805][ T8500] comedi comedi3: board detection failed [ 604.031420][ T8501] netlink: 'syz.4.710': attribute type 10 has an invalid length. [ 606.601100][ T8511] overlayfs: failed to resolve './bus': -2 [ 607.100570][ T8516] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 607.107215][ T8516] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 607.115091][ T8516] vhci_hcd vhci_hcd.0: Device attached [ 607.122342][ T8518] vhci_hcd: cannot find the pending unlink 65057 [ 607.413179][ T5862] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 607.820052][ T8518] vhci_hcd: connection reset by peer [ 607.983535][ T49] vhci_hcd: stop threads [ 607.987870][ T49] vhci_hcd: release socket [ 608.040367][ T49] vhci_hcd: disconnect device [ 609.692561][ T8534] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8536] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8534] [ 610.743795][ T177] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 610.913958][ T8538] comedi comedi3: board detection failed [ 610.942839][ T177] usb 3-1: Using ep0 maxpacket: 32 [ 610.955884][ T177] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 610.966322][ T177] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 610.992883][ T177] usb 3-1: config 0 interface 0 has no altsetting 0 [ 611.016618][ T177] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 611.026079][ T177] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.091890][ T177] usb 3-1: Product: syz [ 611.096356][ T177] usb 3-1: Manufacturer: syz [ 611.101197][ T177] usb 3-1: SerialNumber: syz [ 611.123571][ T177] usb 3-1: config 0 descriptor?? [ 612.085615][ T8539] netlink: 'syz.4.721': attribute type 10 has an invalid length. [ 612.163101][ T177] gs_usb 3-1:0.0: Couldn't send data format (err=-110) [ 612.170269][ T177] gs_usb: probe of 3-1:0.0 failed with error -110 [ 613.642845][ T5862] vhci_hcd: vhci_device speed not set [ 613.648485][ T177] usb 3-1: USB disconnect, device number 6 [ 613.999356][ T28] audit: type=1800 audit(1791142046.055:156): pid=8554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.726" name="idProduct" dev="configfs" ino=17555 res=0 errno=0 [ 614.135782][ T8557] ip_tables: iptables: counters copy to user failed while replacing table [ 614.371091][ T28] audit: type=1800 audit(1791142046.425:157): pid=8554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.726" name="UDC" dev="configfs" ino=16802 res=0 errno=0 [ 615.124221][ T8564] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8566] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8564] [ 616.184377][ T8562] fuse: Bad value for 'group_id' [ 616.468624][ T8569] overlayfs: failed to resolve './bus': -2 [ 616.647815][ T8574] comedi comedi3: board detection failed [ 616.712174][ T8575] netlink: 'syz.4.732': attribute type 10 has an invalid length. [ 616.832843][ T5862] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 618.618360][ T5862] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 618.657776][ T5862] usb 4-1: config 0 has no interface number 0 [ 618.679794][ T5862] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 618.713866][ T5862] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.759149][ T5862] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 618.822786][ T5862] usb 4-1: config 0 interface 1 has no altsetting 0 [ 618.851503][ T5862] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 618.871579][ T5862] usb 4-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 618.900307][ T5862] usb 4-1: Manufacturer: syz [ 618.921871][ T5862] usb 4-1: config 0 descriptor?? [ 620.682009][ T8588] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 620.688609][ T8588] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 620.696429][ T8588] vhci_hcd vhci_hcd.0: Device attached [ 620.712623][ T8589] vhci_hcd: connection closed [ 620.713171][ T1087] vhci_hcd: stop threads [ 620.762137][ T5862] usbhid 4-1:0.1: can't add hid device: -71 [ 620.762916][ T1087] vhci_hcd: release socket [ 620.772590][ T1087] vhci_hcd: disconnect device [ 620.792885][ T5862] usbhid: probe of 4-1:0.1 failed with error -71 [ 620.850014][ T5862] usb 4-1: USB disconnect, device number 3 [ 621.585353][ T8599] fuse: Bad value for 'group_id' [ 622.422970][ T8600] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8601] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8600] [ 623.099691][ T8606] ip_tables: iptables: counters copy to user failed while replacing table [ 624.159611][ T8610] comedi comedi3: board detection failed [ 624.334320][ T8613] netlink: 'syz.2.741': attribute type 10 has an invalid length. [ 624.573484][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.579947][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.795521][ T28] audit: type=1800 audit(1791142056.825:158): pid=8616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.736" name="idProduct" dev="configfs" ino=17666 res=0 errno=0 [ 624.882556][ T28] audit: type=1800 audit(1791142056.845:159): pid=8616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.736" name="UDC" dev="configfs" ino=17667 res=0 errno=0 [ 626.012794][ T5833] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 626.215106][ T5833] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 626.223516][ T5833] usb 5-1: config 0 has no interface number 0 [ 626.259879][ T5833] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 626.341611][ T5833] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.396391][ T5833] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 626.458359][ T5833] usb 5-1: config 0 interface 1 has no altsetting 0 [ 626.505647][ T5833] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 626.518045][ T5833] usb 5-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 626.572195][ T5833] usb 5-1: Manufacturer: syz [ 626.600151][ T5833] usb 5-1: config 0 descriptor?? [ 629.117823][ T5833] usbhid 5-1:0.1: can't add hid device: -71 [ 629.133031][ T5833] usbhid: probe of 5-1:0.1 failed with error -71 [ 629.214636][ T5833] usb 5-1: USB disconnect, device number 3 [ 629.604123][ T8642] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 629.610759][ T8642] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 629.973168][ T8642] vhci_hcd vhci_hcd.0: Device attached [ 630.923007][ T7641] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 630.958278][ T8644] vhci_hcd: connection reset by peer [ 630.994838][ T6226] vhci_hcd: stop threads [ 630.999259][ T6226] vhci_hcd: release socket [ 631.003886][ T6226] vhci_hcd: disconnect device [ 631.692964][ T8650] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8651] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8650] [ 632.698344][ T8653] comedi comedi3: board detection failed [ 632.783557][ T8654] netlink: 'syz.3.752': attribute type 10 has an invalid length. [ 634.792919][ T28] audit: type=1800 audit(1791142066.835:160): pid=8661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.751" name="idProduct" dev="configfs" ino=16909 res=0 errno=0 [ 634.877317][ T28] audit: type=1800 audit(1791142066.865:161): pid=8661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.751" name="UDC" dev="configfs" ino=16910 res=0 errno=0 [ 635.178452][ T8665] overlay: ./file0 is not a directory [ 636.102858][ T7641] vhci_hcd: vhci_device speed not set [ 637.513112][ T8692] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 637.519697][ T8692] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 637.622996][ T8692] vhci_hcd vhci_hcd.0: Device attached [ 637.902789][ T177] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 638.122845][ T8693] vhci_hcd: connection reset by peer [ 638.135362][ T6225] vhci_hcd: stop threads [ 638.152846][ T6225] vhci_hcd: release socket [ 638.169391][ T6225] vhci_hcd: disconnect device [ 638.912959][ T8700] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8701] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8700] [ 643.048611][ T177] vhci_hcd: vhci_device speed not set [ 643.798396][ T28] audit: type=1800 audit(1791142075.855:162): pid=8718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.762" name="idProduct" dev="configfs" ino=17008 res=0 errno=0 [ 643.907053][ T28] audit: type=1800 audit(1791142075.855:163): pid=8718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.762" name="UDC" dev="configfs" ino=17009 res=0 errno=0 [ 644.033347][ T8724] zram: Cannot change disksize for initialized device [ 645.516561][ T8730] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8733] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8730] [ 648.972888][ T177] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 650.914297][ T177] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 650.922376][ T177] usb 3-1: config 0 has no interface number 0 [ 651.037940][ T177] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 651.037991][ T177] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.038051][ T177] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 651.038129][ T177] usb 3-1: config 0 interface 1 has no altsetting 0 [ 651.149071][ T177] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 651.236237][ T177] usb 3-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 651.338582][ T177] usb 3-1: Manufacturer: syz [ 651.420981][ T177] usb 3-1: config 0 descriptor?? [ 651.892088][ T177] usbhid 3-1:0.1: can't add hid device: -71 [ 651.912819][ T177] usbhid: probe of 3-1:0.1 failed with error -71 [ 651.974507][ T177] usb 3-1: USB disconnect, device number 7 [ 654.245560][ T8759] zram: Cannot change disksize for initialized device [ 654.984590][ T8771] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 654.991201][ T8771] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 656.342915][ T8771] vhci_hcd vhci_hcd.0: Device attached [ 656.494780][ T8773] vhci_hcd: cannot find the pending unlink 65057 [ 656.621750][ T8773] vhci_hcd: connection closed [ 656.628722][ T31] vhci_hcd: stop threads [ 656.645880][ T27] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 656.683368][ T31] vhci_hcd: release socket [ 656.693449][ T31] vhci_hcd: disconnect device [ 657.688315][ T8779] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8780] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8779] [ 662.212875][ T27] vhci_hcd: vhci_device speed not set [ 662.484966][ T8804] zram: Cannot change disksize for initialized device [ 662.896608][ T8807] ip_tables: iptables: counters copy to user failed while replacing table [ 665.872988][ T8809] syz.1.790 uses obsolete (PF_INET,SOCK_PACKET) [ 683.414582][ T8859] zram: Cannot change disksize for initialized device [ 684.400406][ T8862] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8863] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8862] [ 686.533285][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.539695][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 700.965399][ T8920] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8921] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8920] [ 702.422328][ T8925] zram: Cannot change disksize for initialized device [ 705.289123][ T8944] comedi comedi3: board detection failed [ 705.357537][ T8947] netlink: 'syz.2.825': attribute type 10 has an invalid length. [ 714.849543][ T8976] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8977] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8976] [ 716.496166][ T8982] zram: Cannot change disksize for initialized device [ 722.707305][ T9004] comedi comedi3: board detection failed [ 722.793776][ T9005] netlink: 'syz.2.844': attribute type 10 has an invalid length. [ 725.653994][ T9021] netlink: 596 bytes leftover after parsing attributes in process `syz.2.846'. [ 727.659309][ T9021] netlink: 288 bytes leftover after parsing attributes in process `syz.2.846'. [ 730.861651][ T9044] comedi comedi3: board detection failed [ 730.939037][ T9046] netlink: 'syz.2.854': attribute type 10 has an invalid length. [ 733.343617][ T9058] ip_tables: iptables: counters copy to user failed while replacing table [ 736.430399][ T9082] fuse: Bad value for 'user_id' [ 736.499180][ T9084] netlink: 596 bytes leftover after parsing attributes in process `syz.4.857'. [ 736.527820][ T9084] netlink: 288 bytes leftover after parsing attributes in process `syz.4.857'. [ 739.200930][ T9096] ip_tables: iptables: counters copy to user failed while replacing table [ 744.314913][ T9118] netlink: 288 bytes leftover after parsing attributes in process `syz.4.876'. [ 747.446427][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.453263][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.327983][ T9156] comedi comedi3: board detection failed [ 754.335236][ T9159] netlink: 'syz.3.886': attribute type 10 has an invalid length. [ 756.742845][ T5783] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 756.902788][ T5783] usb 5-1: device descriptor read/64, error -71 [ 758.704272][ T5783] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 758.872905][ T5783] usb 5-1: device descriptor read/64, error -71 [ 758.896846][ T9183] netlink: 288 bytes leftover after parsing attributes in process `syz.1.887'. [ 758.994031][ T5783] usb usb5-port1: attempt power cycle [ 760.042741][ T28] audit: type=1326 audit(1791142192.095:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9188 comm="syz.4.897" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e6419e159 code=0x0 [ 762.343520][ T9199] ip_tables: iptables: counters copy to user failed while replacing table [ 767.953534][ T5783] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 768.142791][ T5783] usb 5-1: device descriptor read/64, error -71 [ 771.508207][ T9235] overlay: ./file0 is not a directory [ 771.713737][ T9239] netlink: 288 bytes leftover after parsing attributes in process `syz.3.906'. [ 772.864510][ T9245] ip_tables: iptables: counters copy to user failed while replacing table [ 773.067426][ T9249] zram: Cannot change disksize for initialized device [ 778.554415][ T9265] overlay: ./file0 is not a directory [ 780.737292][ T9280] process 'syz.4.923' launched './file0' with NULL argv: empty string added [ 782.104453][ T9289] zram: Cannot change disksize for initialized device [ 782.129459][ T28] audit: type=1326 audit(1791142214.185:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.1.919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44d779e159 code=0x0 [ 788.779673][ T9304] ip_tables: iptables: counters copy to user failed while replacing table [ 792.375874][ T9317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'. [ 792.698278][ T9327] zram: Cannot change disksize for initialized device [ 792.782815][ T5783] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 795.265055][ T5783] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.291551][ T5783] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 795.323910][ T5783] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 795.352838][ T5783] usb 3-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 795.381360][ T5783] usb 3-1: Manufacturer: syz [ 795.415028][ T5783] usb 3-1: config 0 descriptor?? [ 795.477327][ T5783] usb 3-1: can't set config #0, error -71 [ 795.501133][ T5783] usb 3-1: USB disconnect, device number 8 [ 797.331927][ T28] audit: type=1800 audit(1791142229.385:166): pid=9342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.941" name="idProduct" dev="configfs" ino=20140 res=0 errno=0 [ 797.398990][ T28] audit: type=1800 audit(1791142229.385:167): pid=9342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.941" name="UDC" dev="configfs" ino=20141 res=0 errno=0 [ 797.862961][ T9352] comedi comedi3: board detection failed [ 797.925755][ T9353] netlink: 'syz.4.946': attribute type 10 has an invalid length. [ 805.692870][ T1193] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 806.512839][ T28] audit: type=1800 audit(1791142238.565:168): pid=9390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.952" name="idProduct" dev="configfs" ino=19282 res=0 errno=0 [ 806.564277][ T28] audit: type=1800 audit(1791142238.615:169): pid=9389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.952" name="UDC" dev="configfs" ino=20195 res=0 errno=0 [ 806.605804][ T1193] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 806.618623][ T9393] netlink: 288 bytes leftover after parsing attributes in process `syz.1.957'. [ 806.628124][ T1193] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.638343][ T1193] usb 4-1: config 0 has no interface number 0 [ 806.644584][ T1193] usb 4-1: config 0 interface 1 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 806.660452][ T1193] usb 4-1: config 0 interface 1 has no altsetting 0 [ 807.328630][ T1193] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 807.434428][ T1193] usb 4-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 807.463404][ T1193] usb 4-1: Manufacturer: syz [ 807.483556][ T1193] usb 4-1: config 0 descriptor?? [ 807.544851][ T1193] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 809.142361][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.153417][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.655013][ T7870] usb 4-1: USB disconnect, device number 4 [ 812.918730][ T9422] ip_tables: iptables: counters copy to user failed while replacing table [ 814.457726][ T28] audit: type=1800 audit(1791142246.515:170): pid=9435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.967" name="idProduct" dev="configfs" ino=19346 res=0 errno=0 [ 814.512767][ T28] audit: type=1800 audit(1791142246.545:171): pid=9435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.967" name="UDC" dev="configfs" ino=19347 res=0 errno=0 [ 816.436237][ T9440] netlink: 288 bytes leftover after parsing attributes in process `syz.2.968'. [ 817.303045][ T9450] comedi comedi3: board detection failed [ 817.650073][ T9450] netlink: 'syz.4.972': attribute type 10 has an invalid length. [ 820.558109][ T28] audit: type=1800 audit(1791142252.595:172): pid=9465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.978" name="idProduct" dev="configfs" ino=19398 res=0 errno=0 [ 820.632853][ T28] audit: type=1800 audit(1791142252.635:173): pid=9465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.978" name="UDC" dev="configfs" ino=19399 res=0 errno=0 [ 823.969449][ T9482] netlink: 288 bytes leftover after parsing attributes in process `syz.3.981'. [ 824.929370][ T9488] overlay: ./file0 is not a directory [ 826.133046][ T9498] comedi comedi3: board detection failed [ 826.195605][ T9500] netlink: 'syz.2.985': attribute type 10 has an invalid length. [ 830.664117][ T9524] netlink: 288 bytes leftover after parsing attributes in process `syz.3.991'. [ 832.328297][ T9536] ip_tables: iptables: counters copy to user failed while replacing table [ 835.433339][ T9544] fuse: Unknown parameter 'use00000000000000000000' [ 840.779449][ T9558] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1000'. [ 848.240378][ T9583] fuse: Unknown parameter 'use00000000000000000000' [ 850.594178][ T9600] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1010'. [ 852.136852][ T9605] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 852.143455][ T9605] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 852.151207][ T9605] vhci_hcd vhci_hcd.0: Device attached [ 852.156957][ T9610] vhci_hcd: connection closed [ 852.194253][ T3461] vhci_hcd: stop threads [ 852.247406][ T3461] vhci_hcd: release socket [ 852.262947][ T3461] vhci_hcd: disconnect device [ 860.648875][ T9644] comedi comedi3: board detection failed [ 860.756864][ T9645] netlink: 'syz.2.1016': attribute type 10 has an invalid length. [ 861.581451][ T9647] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1022'. [ 865.526911][ T9669] comedi comedi3: board detection failed [ 865.610939][ T9670] netlink: 'syz.3.1030': attribute type 10 has an invalid length. [ 867.713535][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1031'. [ 870.328868][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.335323][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.522917][ T9701] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[9703] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9701] [ 878.873984][ T9715] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 878.880610][ T9715] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 878.888420][ T9715] vhci_hcd vhci_hcd.0: Device attached [ 878.899132][ T9717] vhci_hcd: cannot find the pending unlink 65057 [ 878.915650][ T9717] vhci_hcd: connection closed [ 878.916087][ T8011] vhci_hcd: stop threads [ 878.962675][ T8011] vhci_hcd: release socket [ 878.982787][ T8011] vhci_hcd: disconnect device [ 881.813275][ T9724] fuse: Unknown parameter 'user_id00000000000000000000' [ 888.507350][ T9744] ip_tables: iptables: counters copy to user failed while replacing table [ 890.113540][ T28] audit: type=1800 audit(1791142322.175:174): pid=9753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1052" name="idProduct" dev="configfs" ino=20969 res=0 errno=0 [ 890.202844][ T28] audit: type=1800 audit(1791142322.225:175): pid=9753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1052" name="UDC" dev="configfs" ino=20970 res=0 errno=0 [ 891.372927][ T9766] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[9769] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9766] [ 892.497157][ T9775] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 892.503773][ T9775] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 892.511626][ T9775] vhci_hcd vhci_hcd.0: Device attached [ 892.519273][ T9776] vhci_hcd: connection closed [ 892.519765][ T8011] vhci_hcd: stop threads [ 892.822673][ T8011] vhci_hcd: release socket [ 893.210427][ T8011] vhci_hcd: disconnect device [ 894.924997][ T28] audit: type=1800 audit(1791142326.985:176): pid=9791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1062" name="idProduct" dev="configfs" ino=21944 res=0 errno=0 [ 894.958947][ T28] audit: type=1800 audit(1791142327.005:177): pid=9791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1062" name="UDC" dev="configfs" ino=21945 res=0 errno=0 [ 900.867816][ T9824] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 900.874428][ T9824] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 900.882205][ T9824] vhci_hcd vhci_hcd.0: Device attached [ 900.888480][ T9826] vhci_hcd: connection closed [ 900.892360][ T3461] vhci_hcd: stop threads [ 900.913676][ T3461] vhci_hcd: release socket [ 900.918932][ T3461] vhci_hcd: disconnect device [ 902.264137][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1070'. [ 902.796822][ T9835] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[9836] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9835] [ 904.062965][ T9838] FAULT_INJECTION: forcing a failure. [ 904.062965][ T9838] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 904.112759][ T9838] CPU: 1 PID: 9838 Comm: syz.1.1071 Not tainted syzkaller #0 [ 904.120242][ T9838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 904.130360][ T9838] Call Trace: [ 904.133688][ T9838] [ 904.136665][ T9838] dump_stack_lvl+0x18c/0x250 [ 904.141425][ T9838] ? show_regs_print_info+0x20/0x20 [ 904.146698][ T9838] ? load_image+0x420/0x420 [ 904.151267][ T9838] ? __might_fault+0xaa/0x120 [ 904.156036][ T9838] ? __lock_acquire+0x7eb0/0x7eb0 [ 904.161102][ T9838] ? __virt_addr_valid+0x10c/0x380 [ 904.166312][ T9838] should_fail_ex+0x394/0x4c0 [ 904.171038][ T9838] _copy_to_user+0x2f/0xa0 [ 904.175494][ T9838] bpf_verifier_vlog+0x432/0x840 [ 904.180480][ T9838] __btf_verifier_log+0xe3/0x140 [ 904.185458][ T9838] ? btf_check_sec_info+0x350/0x350 [ 904.190700][ T9838] __btf_verifier_log_type+0x3c9/0x690 [ 904.196204][ T9838] ? btf_int_show+0x2810/0x2810 [ 904.201093][ T9838] ? btf_resolve+0xec5/0x14a0 [ 904.205805][ T9838] btf_parse_type_sec+0x189d/0x1960 [ 904.211068][ T9838] ? btf_verifier_log+0x1a0/0x1a0 [ 904.216134][ T9838] ? btf_parse_str_sec+0x20d/0x2a0 [ 904.221277][ T9838] btf_new_fd+0x440/0x9e0 [ 904.225650][ T9838] ? bpf_btf_show_fdinfo+0x80/0x80 [ 904.230799][ T9838] ? capable+0x88/0xe0 [ 904.234913][ T9838] __sys_bpf+0x670/0x890 [ 904.239184][ T9838] ? bpf_link_show_fdinfo+0x560/0x560 [ 904.244607][ T9838] ? lock_chain_count+0x20/0x20 [ 904.249597][ T9838] __x64_sys_bpf+0x7c/0x90 [ 904.254067][ T9838] do_syscall_64+0x55/0xb0 [ 904.258525][ T9838] ? clear_bhb_loop+0x40/0x90 [ 904.263233][ T9838] ? clear_bhb_loop+0x40/0x90 [ 904.267937][ T9838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 904.273866][ T9838] RIP: 0033:0x7f44d779e159 [ 904.278309][ T9838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.297943][ T9838] RSP: 002b:00007f44d869a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 904.306391][ T9838] RAX: ffffffffffffffda RBX: 00007f44d7a25fa0 RCX: 00007f44d779e159 [ 904.314387][ T9838] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012 [ 904.322385][ T9838] RBP: 00007f44d783506b R08: 0000000000000000 R09: 0000000000000000 [ 904.330379][ T9838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 904.338372][ T9838] R13: 00007f44d7a26038 R14: 00007f44d7a25fa0 R15: 00007fffddd34238 [ 904.346394][ T9838] [ 908.443913][ T9856] ip_tables: iptables: counters copy to user failed while replacing table [ 912.494870][ T9874] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[9875] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9874] [ 918.340803][ T9893] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 921.577001][ T9904] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[9905] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9904] [ 922.878256][ T9910] overlayfs: missing 'lowerdir' [ 925.484301][ T28] audit: type=1800 audit(1791142357.545:178): pid=9919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1093" name="idProduct" dev="configfs" ino=22280 res=0 errno=0 [ 925.549771][ T28] audit: type=1800 audit(1791142357.575:179): pid=9919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1093" name="UDC" dev="configfs" ino=22281 res=0 errno=0 [ 931.777335][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.813611][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.129043][ T28] audit: type=1800 audit(1791142369.185:180): pid=9952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1103" name="idProduct" dev="configfs" ino=22320 res=0 errno=0 [ 937.222652][ T28] audit: type=1800 audit(1791142369.225:181): pid=9952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1103" name="UDC" dev="configfs" ino=22321 res=0 errno=0 [ 948.956711][ T9996] zram: Cannot change disksize for initialized device [ 949.675791][ T9998] overlayfs: missing 'lowerdir' [ 953.999050][T10013] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 954.022799][T10013] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 954.038975][T10013] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 954.053428][T10013] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 954.072847][T10013] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 954.081304][T10013] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 956.162768][ T5787] Bluetooth: hci2: command tx timeout [ 956.552321][ T6225] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.850512][ T6225] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.368656][ T5787] Bluetooth: hci2: command tx timeout [ 959.683114][T10035] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1113'. [ 960.447806][ T5787] Bluetooth: hci2: command tx timeout [ 960.566738][ T6225] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.282125][ T5787] Bluetooth: hci2: command tx timeout [ 963.365120][ T6225] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 963.392740][ T6225] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 963.584247][ T6225] bridge0: port 3(netdevsim0) entered disabled state [ 963.710138][ T6225] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.098675][T10011] chnl_net:caif_netlink_parms(): no params data found [ 968.784475][T10011] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.986545][T10011] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.026817][T10011] bridge_slave_0: entered allmulticast mode [ 969.219275][T10011] bridge_slave_0: entered promiscuous mode [ 970.666180][T10106] overlayfs: missing 'lowerdir' [ 970.814896][T10011] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.849160][T10011] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.881356][T10011] bridge_slave_1: entered allmulticast mode [ 970.915899][T10011] bridge_slave_1: entered promiscuous mode [ 971.310327][T10114] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10116] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10114] [ 973.035199][T10011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 973.423906][T10011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 976.136825][T10011] team0: Port device team_slave_0 added [ 976.186178][T10011] team0: Port device team_slave_1 added [ 976.886946][T10139] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 976.893585][T10139] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 976.901604][T10139] vhci_hcd vhci_hcd.0: Device attached [ 977.692641][T10140] vhci_hcd: connection closed [ 977.733016][T10011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.742663][ T31] vhci_hcd: stop threads [ 977.755668][ T31] vhci_hcd: release socket [ 977.762621][ T31] vhci_hcd: disconnect device [ 977.806821][T10011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.843089][ T5862] vhci_hcd: vhci_device speed not set [ 977.953030][T10011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.143474][T10011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.150467][T10011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.089252][T10011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.110794][T10154] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1134'. [ 981.886806][T10011] hsr_slave_0: entered promiscuous mode [ 981.994379][T10011] hsr_slave_1: entered promiscuous mode [ 982.041173][T10011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 982.049307][T10011] Cannot create hsr debugfs directory [ 982.986189][T10183] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10185] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10183] [ 983.795939][T10178] overlayfs: missing 'lowerdir' [ 988.003117][ T6225] hsr_slave_0: left promiscuous mode [ 988.252183][ T6225] hsr_slave_1: left promiscuous mode [ 988.336021][ T6225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 988.366218][ T6225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 988.432062][ T6225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 988.462652][ T6225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 988.520149][ T6225] bridge_slave_1: left allmulticast mode [ 988.592754][ T6225] bridge_slave_1: left promiscuous mode [ 988.599559][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.709441][ T6225] bridge_slave_0: left allmulticast mode [ 988.742714][ T6225] bridge_slave_0: left promiscuous mode [ 988.749849][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.821216][ T6225] veth1_macvtap: left promiscuous mode [ 990.841410][ T6225] veth0_macvtap: left promiscuous mode [ 990.878425][ T6225] veth1_vlan: left promiscuous mode [ 990.915863][ T6225] veth0_vlan: left promiscuous mode [ 993.706599][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.713087][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.921135][T10239] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10240] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10239] [ 996.142192][ T6225] team0 (unregistering): Port device team_slave_1 removed [ 996.216159][ T6225] team0 (unregistering): Port device team_slave_0 removed [ 996.271811][ T6225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.368180][ T6225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.956238][ T6225] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 996.968967][ T6225] bond0 (unregistering): Released all slaves [ 997.052349][T10231] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1146'. [ 998.552437][T10011] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 998.918646][T10011] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 999.323342][T10011] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 999.425668][T10011] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 999.514709][ T6225] IPVS: stop unused estimator thread 0... [ 1002.001690][T10011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1002.044539][T10269] overlayfs: missing 'lowerdir' [ 1002.084523][T10011] 8021q: adding VLAN 0 to HW filter on device team0 [ 1003.774374][T10174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.781627][T10174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1003.844727][T10174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.851950][T10174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.030052][T10011] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1004.066319][T10011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1005.793408][T10304] ip_tables: iptables: counters copy to user failed while replacing table [ 1005.871170][T10011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1010.296071][T10011] veth0_vlan: entered promiscuous mode [ 1010.405846][T10011] veth1_vlan: entered promiscuous mode [ 1010.588227][T10011] veth0_macvtap: entered promiscuous mode [ 1010.644454][T10011] veth1_macvtap: entered promiscuous mode [ 1010.718373][T10011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1010.752556][T10011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.772550][T10011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1010.792600][T10011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.812689][T10011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1010.842641][T10011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.889053][T10011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1010.902750][T10011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.927729][T10011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1010.969332][T10011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1010.992702][T10011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.012965][T10011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.032981][T10011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.061651][T10011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.217134][T10011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.228510][T10011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.239366][T10011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.252974][T10011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1011.308511][T10011] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.351972][T10011] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.398132][T10011] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.452555][T10011] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.081294][T10013] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1018.091749][T10013] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1018.103694][T10013] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1018.187949][T10013] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1018.201418][T10013] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1018.203495][T10385] overlayfs: missing 'lowerdir' [ 1018.218347][T10013] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1018.625066][ T1087] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.936551][ T1087] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.180611][ T1087] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.957200][ T1087] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.322808][T10013] Bluetooth: hci2: command tx timeout [ 1021.951785][T10382] chnl_net:caif_netlink_parms(): no params data found [ 1022.687813][T10013] Bluetooth: hci2: command tx timeout [ 1026.250632][T10013] Bluetooth: hci2: command tx timeout [ 1026.439845][T10382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.472710][T10382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.488598][T10382] bridge_slave_0: entered allmulticast mode [ 1026.519041][T10382] bridge_slave_0: entered promiscuous mode [ 1026.685161][T10382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.808164][T10382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.944001][T10382] bridge_slave_1: entered allmulticast mode [ 1027.106994][T10382] bridge_slave_1: entered promiscuous mode [ 1027.629671][T10382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1027.682206][T10382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1028.323008][T10013] Bluetooth: hci2: command tx timeout [ 1028.842070][T10382] team0: Port device team_slave_0 added [ 1028.886089][T10382] team0: Port device team_slave_1 added [ 1029.019646][T10382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.052774][T10382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.282903][T10382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.347607][T10382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.376189][T10382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.435628][T10382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.315726][T10471] overlayfs: missing 'lowerdir' [ 1033.364513][T10382] hsr_slave_0: entered promiscuous mode [ 1033.372174][T10382] hsr_slave_1: entered promiscuous mode [ 1033.700285][T10487] XFS (loop0): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 1036.790525][ T1087] hsr_slave_0: left promiscuous mode [ 1036.804407][ T1087] hsr_slave_1: left promiscuous mode [ 1037.859663][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1038.419505][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.784207][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1038.849568][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1039.291243][ T1087] bridge_slave_1: left allmulticast mode [ 1039.321022][ T1087] bridge_slave_1: left promiscuous mode [ 1039.339876][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.018847][ T1087] bridge_slave_0: left allmulticast mode [ 1040.050334][ T1087] bridge_slave_0: left promiscuous mode [ 1040.079299][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.390964][ T1087] veth1_macvtap: left promiscuous mode [ 1042.423509][ T1087] veth0_macvtap: left promiscuous mode [ 1042.429255][ T1087] veth1_vlan: left promiscuous mode [ 1042.435120][ T1087] veth0_vlan: left promiscuous mode [ 1047.203887][ T1087] team0 (unregistering): Port device team_slave_1 removed [ 1047.769658][ T1087] team0 (unregistering): Port device team_slave_0 removed [ 1048.056214][ T1087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1050.079576][ T1087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1052.063356][ T1087] bond0 (unregistering): Released all slaves [ 1052.144452][T10557] overlayfs: missing 'lowerdir' [ 1055.319013][T10332] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1055.324248][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.352648][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.503105][T10332] usb 2-1: Using ep0 maxpacket: 8 [ 1055.553010][T10332] usb 2-1: device descriptor read/all, error -71 [ 1056.895034][T10382] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1056.964767][T10382] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1057.033303][T10382] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1057.061435][T10382] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1057.398455][T10382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1057.478696][T10382] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.520315][ T8011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.527601][ T8011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.579451][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.586728][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.506394][T10382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1063.451487][T10629] overlayfs: missing 'lowerdir' [ 1065.071200][T10382] veth0_vlan: entered promiscuous mode [ 1065.090721][T10382] veth1_vlan: entered promiscuous mode [ 1065.242024][T10382] veth0_macvtap: entered promiscuous mode [ 1065.283178][T10382] veth1_macvtap: entered promiscuous mode [ 1065.340993][T10382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.367537][T10382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.426977][T10382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.438575][T10382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.455459][T10382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.466144][T10382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.476179][T10382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.486815][T10382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.499666][T10382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1065.632726][T10382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1065.657206][T10382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.832665][T10382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.892626][T10382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.931172][T10382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.972734][T10382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.002740][T10382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1067.032702][T10382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.061282][T10382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1067.091086][T10382] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.123060][T10382] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.152757][T10382] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.162313][T10382] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.502847][ T5767] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1069.195037][T10174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.234163][T10174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.262552][ T5767] usb 3-1: Using ep0 maxpacket: 16 [ 1069.302882][ T5767] usb 3-1: device descriptor read/all, error -71 [ 1069.418600][ T3490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.440316][ T3490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.828824][ T28] audit: type=1800 audit(1791142501.885:182): pid=10671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1112" name="idProduct" dev="configfs" ino=25161 res=0 errno=0 [ 1069.918726][ T28] audit: type=1800 audit(1791142501.915:183): pid=10671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1112" name="UDC" dev="configfs" ino=25163 res=0 errno=0 [ 1071.555478][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1226'. [ 1074.828315][T10702] zram: Cannot change disksize for initialized device [ 1075.513001][ T28] audit: type=1800 audit(1791142507.565:184): pid=10710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1234" name="idProduct" dev="configfs" ino=25887 res=0 errno=0 [ 1075.583061][ T28] audit: type=1800 audit(1791142507.595:185): pid=10710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1234" name="UDC" dev="configfs" ino=25888 res=0 errno=0 [ 1075.823014][T10715] comedi comedi3: board detection failed [ 1075.841742][T10715] netlink: 'syz.1.1224': attribute type 10 has an invalid length. [ 1076.113575][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1236'. [ 1079.317758][T10737] zram: Cannot change disksize for initialized device [ 1083.454169][ T28] audit: type=1800 audit(1791142515.515:186): pid=10763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1243" name="idProduct" dev="configfs" ino=25938 res=0 errno=0 [ 1083.474726][ C0] vkms_vblank_simulate: vblank timer overrun [ 1083.532630][ T28] audit: type=1800 audit(1791142515.515:187): pid=10763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1243" name="UDC" dev="configfs" ino=25939 res=0 errno=0 [ 1083.740526][T10769] batman_adv: batadv0: Adding interface: veth0 [ 1083.757501][T10769] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.790952][T10769] batman_adv: batadv0: Interface activated: veth0 [ 1083.862794][T10769] batman_adv: batadv0: Interface deactivated: veth0 [ 1083.884971][T10769] batman_adv: batadv0: Removing interface: veth0 [ 1083.903869][T10769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1083.912222][T10769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1083.921322][T10769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1083.942616][T10769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.143656][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1246'. [ 1089.812743][ T28] audit: type=1800 audit(1791142521.865:188): pid=10812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1252" name="idProduct" dev="configfs" ino=25997 res=0 errno=0 [ 1089.899056][ T28] audit: type=1800 audit(1791142521.865:189): pid=10812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1252" name="UDC" dev="configfs" ino=25998 res=0 errno=0 [ 1093.138397][T10835] zram: Cannot change disksize for initialized device [ 1093.793137][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1255'. [ 1097.021607][T10864] overlayfs: missing 'lowerdir' [ 1101.758282][T10886] input: syz0 as /devices/virtual/input/input6 [ 1102.188268][T10900] zram: Cannot change disksize for initialized device [ 1103.351601][ T28] audit: type=1800 audit(1791142535.405:190): pid=10905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1261" name="idProduct" dev="configfs" ino=26087 res=0 errno=0 [ 1103.386504][ T28] audit: type=1800 audit(1791142535.405:191): pid=10905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1261" name="UDC" dev="configfs" ino=26088 res=0 errno=0 [ 1103.430837][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'. [ 1105.525423][T10929] overlayfs: missing 'lowerdir' [ 1109.166922][T10955] zram: Cannot change disksize for initialized device [ 1111.702810][ T28] audit: type=1800 audit(1791142543.745:192): pid=10965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1276" name="idProduct" dev="configfs" ino=26146 res=0 errno=0 [ 1111.765558][ T28] audit: type=1800 audit(1791142543.745:193): pid=10965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1276" name="UDC" dev="configfs" ino=26147 res=0 errno=0 [ 1116.086884][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.093394][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.737621][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'. [ 1119.156087][T11017] zram: Cannot change disksize for initialized device [ 1129.238352][T11081] zram: Cannot change disksize for initialized device [ 1132.948653][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1291'. [ 1132.968912][T11096] comedi comedi3: board detection failed [ 1132.976619][T11096] bridge0: port 3(netdevsim0) entered blocking state [ 1132.983451][T11096] bridge0: port 3(netdevsim0) entered disabled state [ 1132.990305][T11096] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1132.998695][T11096] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1133.007078][T11096] bridge0: port 3(netdevsim0) entered blocking state [ 1133.013876][T11096] bridge0: port 3(netdevsim0) entered forwarding state [ 1133.054530][T11096] netlink: 'syz.5.1296': attribute type 10 has an invalid length. [ 1133.073176][T11096] bridge0: port 3(netdevsim0) entered disabled state [ 1133.080103][T11096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.087655][T11096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.098817][T11096] bridge0: port 3(netdevsim0) entered blocking state [ 1133.105719][T11096] bridge0: port 3(netdevsim0) entered forwarding state [ 1133.112986][T11096] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.120254][T11096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.120974][T11096] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.134875][T11096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1133.144216][T11096] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1135.223537][T11107] zram: Cannot change disksize for initialized device [ 1136.375693][T11115] overlayfs: conflicting options: userxattr,redirect_dir=on [ 1136.542849][T11118] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1305'. [ 1136.600570][T11118] gadgetfs: bound to dummy_udc driver [ 1139.110557][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1307'. [ 1144.338825][T10013] Bluetooth: hci2: command 0x0406 tx timeout [ 1144.384789][T11141] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1145.072305][T11148] comedi comedi3: board detection failed [ 1145.133304][T11148] netlink: 'syz.4.1311': attribute type 10 has an invalid length. [ 1148.447975][T11162] zram: Cannot change disksize for initialized device [ 1152.000958][T11170] overlayfs: missing 'lowerdir' [ 1156.221883][T10366] ------------[ cut here ]------------ [ 1156.228066][T10366] sysfs group 'byte_queue_limits' not found for kobject 'tx-0' [ 1156.237697][T10366] WARNING: CPU: 1 PID: 10366 at fs/sysfs/group.c:284 sysfs_remove_group+0x17b/0x290 [ 1156.247795][T10366] Modules linked in: [ 1156.252537][T10366] CPU: 1 PID: 10366 Comm: kworker/1:4 Not tainted syzkaller #0 [ 1156.258370][T11144] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1156.260122][T10366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1156.277735][T10366] Workqueue: events delete_netdev [ 1156.282949][T10366] RIP: 0010:sysfs_remove_group+0x17b/0x290 [ 1156.288813][T10366] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 f7 19 c9 ff 49 8b 17 48 c7 c7 00 c1 da 8a 48 89 de e8 d5 30 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 1f 72 70 ff [ 1156.308654][T10366] RSP: 0018:ffffc90003bf7840 EFLAGS: 00010246 [ 1156.315157][T10366] RAX: ffa264f23e336e00 RBX: ffffffff8bc5b940 RCX: ffff888031bcda00 [ 1156.323251][T10366] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1156.331275][T10366] RBP: 000000000000006d R08: ffffc90003bf7447 R09: 1ffff9200077ee88 [ 1156.339377][T10366] R10: dffffc0000000000 R11: fffff5200077ee89 R12: 1ffffffff178b624 [ 1156.347488][T10366] R13: dffffc0000000000 R14: ffff88802509f3e0 R15: ffff88802f853820 [ 1156.356175][T10366] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1156.365301][T10366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1156.371938][T10366] CR2: 00007fabdc255610 CR3: 0000000077bfa000 CR4: 00000000003506e0 [ 1156.380163][T10366] Call Trace: [ 1156.383523][T10366] [ 1156.386501][T10366] ? netdev_queue_update_kobjects+0x3a6/0x480 [ 1156.392793][T10366] netdev_queue_update_kobjects+0x3e1/0x480 [ 1156.392841][T11144] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1156.398760][T10366] netdev_unregister_kobject+0x108/0x250 [ 1156.412608][T10366] unregister_netdevice_many_notify+0x1449/0x1910 [ 1156.419144][T10366] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1156.425402][T10366] ? unregister_netdevice_many+0x20/0x20 [ 1156.431112][T10366] ? rcu_is_watching+0x15/0xb0 [ 1156.436028][T10366] ? trace_contention_end+0x39/0xe0 [ 1156.441287][T10366] ? __mutex_lock+0x30d/0xc80 [ 1156.446078][T10366] unregister_netdevice_queue+0x2e9/0x330 [ 1156.451870][T10366] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1156.458608][T10366] ? list_netdevice+0x730/0x730 [ 1156.464397][T10366] ? read_lock_is_recursive+0x20/0x20 [ 1156.469886][T10366] lowpan_unregister_netdev+0x1c/0x30 [ 1156.475524][T10366] unregister_dev+0x70/0x1a0 [ 1156.480236][T10366] ? process_scheduled_works+0x975/0x1600 [ 1156.486072][T10366] process_scheduled_works+0xa60/0x1600 [ 1156.491720][T10366] ? worker_attach_to_pool+0x370/0x370 [ 1156.497389][T10366] ? assign_work+0x3cc/0x5d0 [ 1156.502057][T10366] worker_thread+0xa5e/0xfe0 [ 1156.506783][T10366] ? _raw_spin_unlock+0x40/0x40 [ 1156.511690][T10366] ? __kthread_parkme+0x71/0x1c0 [ 1156.516734][T10366] kthread+0x2fa/0x390 [ 1156.520868][T10366] ? pr_cont_work+0x550/0x550 [ 1156.525673][T10366] ? kthread_blkcg+0xd0/0xd0 [ 1156.530311][T10366] ret_from_fork+0x48/0x80 [ 1156.534826][T10366] ? kthread_blkcg+0xd0/0xd0 [ 1156.539473][T10366] ret_from_fork_asm+0x11/0x20 [ 1156.544439][T10366] [ 1156.548591][T10366] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1156.555913][T10366] CPU: 1 PID: 10366 Comm: kworker/1:4 Not tainted syzkaller #0 [ 1156.563496][T10366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1156.573590][T10366] Workqueue: events delete_netdev [ 1156.578666][T10366] Call Trace: [ 1156.581976][T10366] [ 1156.584947][T10366] dump_stack_lvl+0x18c/0x250 [ 1156.589684][T10366] ? show_regs_print_info+0x20/0x20 [ 1156.594928][T10366] ? load_image+0x420/0x420 [ 1156.599495][T10366] panic+0x2ca/0x720 [ 1156.603449][T10366] ? bpf_jit_dump+0xd0/0xd0 [ 1156.608000][T10366] ? ret_from_fork_asm+0x11/0x20 [ 1156.612982][T10366] __warn+0x2e0/0x470 [ 1156.617003][T10366] ? sysfs_remove_group+0x17b/0x290 [ 1156.622263][T10366] ? sysfs_remove_group+0x17b/0x290 [ 1156.627488][T10366] report_bug+0x2be/0x4f0 [ 1156.631915][T10366] ? sysfs_remove_group+0x17b/0x290 [ 1156.637142][T10366] ? sysfs_remove_group+0x17b/0x290 [ 1156.642373][T10366] ? sysfs_remove_group+0x17d/0x290 [ 1156.647623][T10366] handle_bug+0xcf/0x120 [ 1156.651888][T10366] exc_invalid_op+0x1a/0x50 [ 1156.656419][T10366] asm_exc_invalid_op+0x1a/0x20 [ 1156.661325][T10366] RIP: 0010:sysfs_remove_group+0x17b/0x290 [ 1156.667176][T10366] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 f7 19 c9 ff 49 8b 17 48 c7 c7 00 c1 da 8a 48 89 de e8 d5 30 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 1f 72 70 ff [ 1156.686811][T10366] RSP: 0018:ffffc90003bf7840 EFLAGS: 00010246 [ 1156.692904][T10366] RAX: ffa264f23e336e00 RBX: ffffffff8bc5b940 RCX: ffff888031bcda00 [ 1156.700920][T10366] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1156.708916][T10366] RBP: 000000000000006d R08: ffffc90003bf7447 R09: 1ffff9200077ee88 [ 1156.716907][T10366] R10: dffffc0000000000 R11: fffff5200077ee89 R12: 1ffffffff178b624 [ 1156.724918][T10366] R13: dffffc0000000000 R14: ffff88802509f3e0 R15: ffff88802f853820 [ 1156.732950][T10366] ? netdev_queue_update_kobjects+0x3a6/0x480 [ 1156.739056][T10366] netdev_queue_update_kobjects+0x3e1/0x480 [ 1156.744999][T10366] netdev_unregister_kobject+0x108/0x250 [ 1156.750687][T10366] unregister_netdevice_many_notify+0x1449/0x1910 [ 1156.757202][T10366] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1156.763579][T10366] ? unregister_netdevice_many+0x20/0x20 [ 1156.769267][T10366] ? rcu_is_watching+0x15/0xb0 [ 1156.774074][T10366] ? trace_contention_end+0x39/0xe0 [ 1156.779306][T10366] ? __mutex_lock+0x30d/0xc80 [ 1156.784027][T10366] unregister_netdevice_queue+0x2e9/0x330 [ 1156.789791][T10366] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1156.795822][T10366] ? list_netdevice+0x730/0x730 [ 1156.800733][T10366] ? read_lock_is_recursive+0x20/0x20 [ 1156.806181][T10366] lowpan_unregister_netdev+0x1c/0x30 [ 1156.811694][T10366] unregister_dev+0x70/0x1a0 [ 1156.816331][T10366] ? process_scheduled_works+0x975/0x1600 [ 1156.822105][T10366] process_scheduled_works+0xa60/0x1600 [ 1156.827716][T10366] ? worker_attach_to_pool+0x370/0x370 [ 1156.833213][T10366] ? assign_work+0x3cc/0x5d0 [ 1156.837857][T10366] worker_thread+0xa5e/0xfe0 [ 1156.842491][T10366] ? _raw_spin_unlock+0x40/0x40 [ 1156.847393][T10366] ? __kthread_parkme+0x71/0x1c0 [ 1156.852381][T10366] kthread+0x2fa/0x390 [ 1156.856472][T10366] ? pr_cont_work+0x550/0x550 [ 1156.861193][T10366] ? kthread_blkcg+0xd0/0xd0 [ 1156.865843][T10366] ret_from_fork+0x48/0x80 [ 1156.870356][T10366] ? kthread_blkcg+0xd0/0xd0 [ 1156.874984][T10366] ret_from_fork_asm+0x11/0x20 [ 1156.879802][T10366] [ 1156.883439][T10366] Kernel Offset: disabled [ 1156.887883][T10366] Rebooting in 86400 seconds..