last executing test programs: 20m20.910004764s ago: executing program 1 (id=78): prctl$PR_GET_TID_ADDRESS(0x28, 0x0) fsopen(&(0x7f0000000040)='cifs\x00', 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) fcntl$dupfd(r0, 0x0, r0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x58}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) 20m19.718871493s ago: executing program 1 (id=81): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0x10001, [], 0x3, "0482cd68e2ca03"}) r4 = syz_open_dev$sg(0x0, 0x0, 0x401) socket$packet(0x11, 0x2, 0x300) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000000)=@rnullb, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x9, 0x4, 0x4, 0xae, 0x2, 0x3, 0x10000000000001, 0x6, 0x13}) 20m16.412552202s ago: executing program 1 (id=86): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1032}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1268, 0x10f0, 0x700001b, 0x148, 0x0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x10d0, 0x10f0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12c8) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56171, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0xd}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000b0400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4048001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1a3042, 0x20) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) r5 = socket(0x2, 0x5, 0x800003) sendmsg$key(r5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10) r7 = socket$inet(0x2, 0x2, 0x0) r8 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi1\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000000)={'comedi_bond\x00', [0x2, 0x4, 0x2, 0x8, 0x90000, 0x9, 0xed, 0x890, 0x280ffa, 0xfffffffc, 0x4, 0x1, 0x1030, 0x1000008, 0x4c, 0x40000009, 0xfff7ffa6, 0x3ff, 0x912, 0x9ea, 0x3, 0x9, 0xc, 0x101, 0x1, 0x990e, 0x5, 0x18, 0x2, 0x2000006, 0x5]}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) 20m12.269878792s ago: executing program 1 (id=90): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0xffffffffffffffff, 0x4, 0x4002) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x28, &(0x7f0000000040)={0x80000002, 0xfffffffffffffffe, 0x9, 0x4, 0x4, 0x5, 0xffffffffffffff81, 0x9e}, 0xfffffffffffffffe, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000200000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000380)='N', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='htcp', 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffe}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000600)=[@in6={0xa, 0x4e20, 0x625, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e22, 0x471, @loopback, 0x80000000}, @in6={0xa, 0x4e24, 0x65a, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1db7}, @in6={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e23, 0x0, @remote, 0xff}, @in6={0xa, 0x4e24, 0x4, @mcast1}, @in6={0xa, 0x4e20, 0x8, @private1, 0x3f6a}], 0xe4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffffff, 0x7d5a03) r6 = dup3(r5, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r6, 0x641e) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="190000000400000008"], 0x50) 20m10.68553367s ago: executing program 1 (id=93): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x2000000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r4, &(0x7f0000000100), 0x0) 20m9.279296373s ago: executing program 1 (id=94): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0x10001, [], 0x3, "0482cd68e2ca03"}) r4 = syz_open_dev$sg(0x0, 0x0, 0x401) socket$packet(0x11, 0x2, 0x300) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000000)=@rnullb, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x9, 0x4, 0x4, 0xae, 0x2, 0x3, 0x10000000000001, 0x6, 0x13}) 19m53.53408021s ago: executing program 32 (id=94): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0x10001, [], 0x3, "0482cd68e2ca03"}) r4 = syz_open_dev$sg(0x0, 0x0, 0x401) socket$packet(0x11, 0x2, 0x300) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000000)=@rnullb, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x9, 0x4, 0x4, 0xae, 0x2, 0x3, 0x10000000000001, 0x6, 0x13}) 14m59.588735809s ago: executing program 3 (id=438): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e657720757365723a73797a203030303030303030a72cfa0b30303030343039"], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='1', 0x1) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x3f9, 0x0, 0x70bd27, 0x25dfdbfd, {0x1, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 14m56.230343732s ago: executing program 3 (id=440): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r4, &(0x7f0000000180)={0x24, @none={0x0, 0xffff}}, 0x14) sendmmsg(r4, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) openat$tun(0xffffffffffffff9c, 0x0, 0xc58000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @ib={0x1b, 0x5, 0x6, {"78c36cbe7e38dade0099fe4e9d908e9b"}, 0xffff, 0x1ff, 0xfffffffeffffffff}, @in6={0xa, 0x4e22, 0x2, @local, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xf577, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x9, @loopback}}}, 0x118) 14m52.356702026s ago: executing program 3 (id=445): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bcaf}}}, &(0x7f0000000300)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x80000000, 0x8000000000000003, 0x0, 0x0, 0x8001, 0x4, 0xfffffffffffffffd}, 0x0, 0x0) 14m45.033452615s ago: executing program 3 (id=452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) syz_open_dev$tty20(0xc, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000002340)={0x0, 0x7}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x40) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000080)=@echo=0x1ff) socket$nl_xfrm(0x10, 0x3, 0x6) close(r5) close(r4) open_tree(0xffffffffffffffff, 0x0, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="600000000206010400000000000000000000000014000780080011400000000005001500030000000500010006000000050005000200000005000400000000000900020073797a300000000011000300686173683a69702c6d61726b00"], 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x40) 14m39.559397524s ago: executing program 3 (id=461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 14m37.668312635s ago: executing program 3 (id=462): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0}, 0x94) socket(0x8, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents(r1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000000c00)}, 0x40010003) socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000009c0)={0x6, 0x80, 0x100008, 0x1000000, 0x6, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x28, 0x801, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000680)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x800000100000003, 0x3a, 'U\x01\x8e\xa1\xff\xd6\xecF\x8e\x00\x00\x00\x00\x00\x00\x00\xedJIh\x9b\x1a\xde*\xb0d.', 0x3a, '\xda\xb8\xfd\xcd\x9a$\xb6\xc9\x0f\xff}\xcc\x92\xba\xafp\xa3\xbd\xf9\xc7\xb6\x8aG\x845\x95YC\xfc\r-dont_appB\xcf&\xd7*\xab\xb6\xde\xcd8\xcc\xe6\x1eG\xb8D\xcd\xfc~Uv\xfc\xd6\x16\x0e\xc5\xcc\xadab5\xd5\x85\xc0\x9e\x9b\x1a\x85v4\x83\xc6\xcb\x83\xbd\xda\xfe\xe8yP[\t\xdd\xab\xbd\xd9\xd2m\xf9o#\x18\xbf\xb9\xd0\xb8\fR7\x9f\xcb\xc7\xf9=w\"8\x1b\xa0\xado=N\xe7(9\xf2\xa2\r\n{\x01BT\xed!\xac#\x95#Hl\x1cV\b\x852\xe0m\xd0t\xb9)\xd2/\xf9\xb8#0\x14m\x83f\xb2\xab\xe3\xc8$$\v\x17]\x7f\xd5\x84\xf4:y\xcf\xbf\xacN!\n8\xd3\xba4\x8c\x02.F\xdfY\xaf!\xf8\xe1!Q2l*\xeca\\\xc5\xeb\xb5CpT[v\x1f2\x12kq\xf0\xf2\xc7XZ_[\x16\x81\xd1a\xad\x18L#`\x85\xc36\x00\f\xafD\xbc\xd5HPs\x90B#B\xdeQ\xd2\xec\xc1\x80\xf1\xf7\x1d\xe5\x9dE:<\xfd\xf8\xe6\x05\x92\xc9&0\xc5\x82\xa0\xffd\x8d1\xa3\x94h\x8f&\x85\x99QP\xf3u\xb9a\xa6\x90\x01\xe8\xbcJ#\xbf\xe8\xb9\xfcEd_\x7f\x06\x94\x195z\xbf\x1f_\xbd\x90n\xcb\x15\xd2A\xb0\xe8\x92\x9e*\x160\xd2V\xe3\x8a\xa4!\xb4\xba\xa6>\x8d\xcc\xc1\xd5\x9aI\x1f%\xf07\xe7\xd4\x80\xc0\xd6\x13I*\xa4E\xac\xc8\xf9-1\xd0\x92\xc6\xde\x10\xed\v]\x13\xf6\\\xbe\x11\xe0\xfe\x8bJ\x17\x96B\xdf_\xad\t\xd2p\xe0\x9f\x9bOs\xdd\'W\xf62b\x02\xce%)Sv\x9e\r_5x<\x911\xfa\xd3L\xea$\xd6\xf5|?\xe97x\x1e\x7fr\xb9\x99\xbe\x85\x1cX\xfe\xe6\x99\xa9(q\xab\xef]c-}\x0fnU\xfa\xbfb)\xba\nyI\xd0\x0fb\xbe\xa4\xc3\xe8.\x82\xdf\xff^\x84S\xdf\x12\x93A\xe4\x85I\xce\x8b\x9dX\xa8\'\x0e\xcay\xb6\xb2\xd6%\xeeh\xe3O\x06<\x91\xce\xa6o\x8b^\x96\xd4\xfbT\xfd\x1e\xa6\xaf\xc1\xc9a\xdf\x02\xfe\xfa\xdb\x1fm\x10xJ\x00\xf6\x9b\xb2', 0x3a, './file0'}, 0x146) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x84) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000040)={0x98f907, 0x1, @value=0x201}) r4 = openat$cgroup_int(r2, &(0x7f00000006c0)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000440)=ANY=[], 0x27) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000005800)={0x0, 0x1a}, 0x0, &(0x7f0000000a40)="00cf4943cff49b3e1e775fb80ef03e704db57c48ddb9efcaa7be", 0x0) 14m22.170834642s ago: executing program 33 (id=462): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0}, 0x94) socket(0x8, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents(r1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000000c00)}, 0x40010003) socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000009c0)={0x6, 0x80, 0x100008, 0x1000000, 0x6, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x28, 0x801, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000680)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x800000100000003, 0x3a, 'U\x01\x8e\xa1\xff\xd6\xecF\x8e\x00\x00\x00\x00\x00\x00\x00\xedJIh\x9b\x1a\xde*\xb0d.', 0x3a, '\xda\xb8\xfd\xcd\x9a$\xb6\xc9\x0f\xff}\xcc\x92\xba\xafp\xa3\xbd\xf9\xc7\xb6\x8aG\x845\x95YC\xfc\r-dont_appB\xcf&\xd7*\xab\xb6\xde\xcd8\xcc\xe6\x1eG\xb8D\xcd\xfc~Uv\xfc\xd6\x16\x0e\xc5\xcc\xadab5\xd5\x85\xc0\x9e\x9b\x1a\x85v4\x83\xc6\xcb\x83\xbd\xda\xfe\xe8yP[\t\xdd\xab\xbd\xd9\xd2m\xf9o#\x18\xbf\xb9\xd0\xb8\fR7\x9f\xcb\xc7\xf9=w\"8\x1b\xa0\xado=N\xe7(9\xf2\xa2\r\n{\x01BT\xed!\xac#\x95#Hl\x1cV\b\x852\xe0m\xd0t\xb9)\xd2/\xf9\xb8#0\x14m\x83f\xb2\xab\xe3\xc8$$\v\x17]\x7f\xd5\x84\xf4:y\xcf\xbf\xacN!\n8\xd3\xba4\x8c\x02.F\xdfY\xaf!\xf8\xe1!Q2l*\xeca\\\xc5\xeb\xb5CpT[v\x1f2\x12kq\xf0\xf2\xc7XZ_[\x16\x81\xd1a\xad\x18L#`\x85\xc36\x00\f\xafD\xbc\xd5HPs\x90B#B\xdeQ\xd2\xec\xc1\x80\xf1\xf7\x1d\xe5\x9dE:<\xfd\xf8\xe6\x05\x92\xc9&0\xc5\x82\xa0\xffd\x8d1\xa3\x94h\x8f&\x85\x99QP\xf3u\xb9a\xa6\x90\x01\xe8\xbcJ#\xbf\xe8\xb9\xfcEd_\x7f\x06\x94\x195z\xbf\x1f_\xbd\x90n\xcb\x15\xd2A\xb0\xe8\x92\x9e*\x160\xd2V\xe3\x8a\xa4!\xb4\xba\xa6>\x8d\xcc\xc1\xd5\x9aI\x1f%\xf07\xe7\xd4\x80\xc0\xd6\x13I*\xa4E\xac\xc8\xf9-1\xd0\x92\xc6\xde\x10\xed\v]\x13\xf6\\\xbe\x11\xe0\xfe\x8bJ\x17\x96B\xdf_\xad\t\xd2p\xe0\x9f\x9bOs\xdd\'W\xf62b\x02\xce%)Sv\x9e\r_5x<\x911\xfa\xd3L\xea$\xd6\xf5|?\xe97x\x1e\x7fr\xb9\x99\xbe\x85\x1cX\xfe\xe6\x99\xa9(q\xab\xef]c-}\x0fnU\xfa\xbfb)\xba\nyI\xd0\x0fb\xbe\xa4\xc3\xe8.\x82\xdf\xff^\x84S\xdf\x12\x93A\xe4\x85I\xce\x8b\x9dX\xa8\'\x0e\xcay\xb6\xb2\xd6%\xeeh\xe3O\x06<\x91\xce\xa6o\x8b^\x96\xd4\xfbT\xfd\x1e\xa6\xaf\xc1\xc9a\xdf\x02\xfe\xfa\xdb\x1fm\x10xJ\x00\xf6\x9b\xb2', 0x3a, './file0'}, 0x146) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x84) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000040)={0x98f907, 0x1, @value=0x201}) r4 = openat$cgroup_int(r2, &(0x7f00000006c0)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000440)=ANY=[], 0x27) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000005800)={0x0, 0x1a}, 0x0, &(0x7f0000000a40)="00cf4943cff49b3e1e775fb80ef03e704db57c48ddb9efcaa7be", 0x0) 9m21.539061901s ago: executing program 0 (id=803): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_LOCK(r1, 0xb) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x800800, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='1', 0x1) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090495d794b2"], 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x7}, 0x1c) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f00000001c0)=0x4, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r7, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r0) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000300)=0xa, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0085000000d0000000b500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 9m16.122684389s ago: executing program 0 (id=808): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f0000000000)=@filename='./bus\x00', 0x0, &(0x7f0000000040)='binder\x00', 0x320080a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000280)='\x02\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00\xfaC\x93\xc0S\xaf\f\x1a\fEik\x86\x15\xab\x909\xf8i\xc0\xa7\xa9\xb1\xbe\xc7\x1d\xe0\x18\xd2\xbaG|\xd5fC\x8d\t\x00/I\x8b\xbf\x94\xf4\x96[us\x96\x90\x8d\x9d\xfb\xdc\x7f0&\xab\x17@)\xf1\xc3Q\xb2M :\xaa\x99G\xdd\xa9E6A]@>\f\xb1n\x1a\x8c\xc6e7{@\x90\x8fz\xfcf\x88\x15A\x0e\xbf\xb8\xff\xa8\xb9\xab\x83>\xf9I0\xdd\x93#\x1e\x00\xed#\xc9\xd0Uk\xa6b\xa6/\x15\x92\xc6,p\xc9\xce\xe1\xc3\xd5\x89Lw\x17\x16\x18\xddh\xc8\x81w\x1e\x7f\xc7\x16\xe5\x96\x03\t\xc3\x94\xc7\xeb\xd6.\xfa\xb3\xe0\x1f\xa9\x19\xfaS\x1f[T\x1e\xc5nX\x84\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=0\xc3\xbc\xfd\xce~\xe3\xcaO\"\xbb\xd1\x15\xf2y\xb91\x1d\xab\xeaO\x19\rH4\xc2\xe4\x922~K^K`55\xb7\xd1\n\xba\xb7,\xdb\xc2\x86\xc30bnc\x06\x06q\xe9\x97\fHA<\x94`\xf7H?\x86\xb8C9\b\x18vFWRdNee\xf1A\x06\x8f\x97\x99\xa5A\xfa\x94IfB\xa9\xf5\xd8\x83\xc5\b\x0eL\\Z\x80](f6D\x1a\xf7si\xa4l\xa8\x0f\xcc\xa1\xef\x1bCq\x0e\xf87\xfc\xce\x96cm\x83\x05S\x01Zj`dP:d\xba\x02\x14\xaa\x051\xd7\x87\x1b\xcb\xa2.\x89\x16CRx\x9b\x04\x1f\x8fA\t<\x99/\'tk\xcb\xd7|\x0f\xc9m\x95\x9a\n\v&\xca\xcd\x11\xec\xfd\x17a$.\xe9\x14\x8f\n\x15\x8d\rJ\x99\x8a\x87\x81\xc4S\x85L\xe5w\xa1\xbf\x91Q&6\x8e\xd1\x02\x19K\xd3\xab\xe5\xdc\xac\x05\x8dQ\xf4\x1aa\x86\xbc6\\\x06\xdf\x84\x00+F|\xa6\xc4\xab\x00G\xd0\x14N+\xf9\x84i?C\x81\x8eu\xd3\xcbg\xb7\a\xd9\x9a*\x17>\xac\x9d\x9d\xf6\t\xd8b\x19\x8a\x1e&\xde\x87-%\xf3\x8a2L\x1cQ2\f\x94\xf7\xf9\xadI\xedU\xabr\xe2\xe1\xc2{\b\xa8\xc2\n4\x0f\'\xed\xcc\xd7qG\xa7p\x8ct\xe3/l\v\x93\x8a\x95R\xd6\x19L\x85\x80\x18\x15\xcezn\xa8,i\xf1\x91@\xc0\xb1\a\xfd\xec\x95>\b(\xfa~O\xfd\xe2\a6b\x97\xc6$?;\x8eJ/P\x9d\x17\xaaU\xc4\b') pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) socket$inet(0x2, 0x5, 0x0) execveat(r1, &(0x7f0000000080)='./bus\x00', &(0x7f00000009c0), &(0x7f0000000ac0)={[&(0x7f0000000a00)='nfs\x00', &(0x7f0000000a40)='(#\xf9-!+.\x16)@\x00', &(0x7f0000000a80)='v$\\\x00']}, 0x100) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000200)={r3, 0x11, 0x6, @random="bdf19b71a0f9"}, 0x10) close(0x3) 9m12.35097489s ago: executing program 0 (id=810): r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) write(r0, &(0x7f0000001400)='2\n', 0x2) 9m12.168463944s ago: executing program 0 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000000c0)={{@my=0x1, 0x6}, @local, 0x2, 0x100000001, 0x5, 0x1, 0xfc5, 0x96ec, 0xb}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)}, 0x0) socket$kcm(0x10, 0x2, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b40)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) 9m10.327945714s ago: executing program 0 (id=813): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xf577, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x9, @loopback}}}, 0x118) 9m5.804064622s ago: executing program 0 (id=816): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_LOCK(r1, 0xb) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x800800, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='1', 0x1) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090495d794b2"], 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x7}, 0x1c) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f00000001c0)=0x4, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r7, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r0) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000300)=0xa, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0085000000d0000000b500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 8m50.354172328s ago: executing program 34 (id=816): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_LOCK(r1, 0xb) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x800800, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='1', 0x1) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090495d794b2"], 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x7}, 0x1c) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f00000001c0)=0x4, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r7, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r0) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000300)=0xa, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0085000000d0000000b500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3m31.12867864s ago: executing program 4 (id=1323): prctl$PR_GET_TID_ADDRESS(0x28, 0x0) fsopen(&(0x7f0000000040)='cifs\x00', 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) fcntl$dupfd(r0, 0x0, r0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x48}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) 3m30.026280204s ago: executing program 4 (id=1325): socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x10005, 0xff, {}, 0x0, 0x0, 0x4b}) socket$nl_generic(0x10, 0x3, 0x10) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_add_dev(r5, 0x0, r3, 0x0, &(0x7f0000000100)={0x2e, 0x2a, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0xdfb57f1e031ae24e, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0x8c5, 0x0, 0x0, 0x1000, 0x5e87, 0x0, 0x0, 0x24}}}, &(0x7f0000000180)=0x0) syz_ublk_setup_queues(r5, r6, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x2, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x100, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x0, 0x2b7, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 3m25.253208568s ago: executing program 4 (id=1330): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x13, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x800) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x100000}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x35}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='sub:*v', 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x3ff}}}}}}}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x3) 3m19.266986597s ago: executing program 4 (id=1338): prctl$PR_GET_TID_ADDRESS(0x28, 0x0) fsopen(&(0x7f0000000040)='cifs\x00', 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) fcntl$dupfd(r0, 0x0, r0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x48}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) 3m16.84940946s ago: executing program 4 (id=1343): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) unshare(0x1e060c80) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r1, 0x4) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 3m13.053752202s ago: executing program 4 (id=1346): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000380)=ANY=[], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100) 2m55.388149256s ago: executing program 35 (id=1346): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000380)=ANY=[], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100) 21.320997675s ago: executing program 6 (id=1536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x67c, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0) syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x8042) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) 18.351333278s ago: executing program 6 (id=1540): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 18.162785562s ago: executing program 6 (id=1541): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x13, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x100000}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x35}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='sub:*v', 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x3ff}}}}}}}, 0x0) 15.989777056s ago: executing program 7 (id=1358): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @empty, 0x9}, 0x1c) 10.009069334s ago: executing program 6 (id=1546): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040)="a6", 0x1, 0x24000045, 0x0, 0x0) shutdown(r0, 0x1) 9.979477764s ago: executing program 7 (id=1547): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x8800) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0xfffff801, @private2, 0x2}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup2(r0, r6) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000140)={r5}, 0x8) r8 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r9, &(0x7f0000000500)='1\n', 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) write(r10, &(0x7f0000001400)='2\n', 0x2) r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r11, &(0x7f0000000700)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) ioctl$SNDRV_PCM_IOCTL_UNLINK(r8, 0x40044160, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000480)={0x4, &(0x7f0000000440)=[{0x3, 0x94, 0x4, 0x4}, {0x5, 0x0, 0x4, 0x7fffffff}, {0x3, 0xfd, 0x7, 0x8}, {0x1, 0xfa, 0x8, 0x40000000}]}) 9.816544128s ago: executing program 2 (id=1549): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x10005, 0xff, {}, 0x0, 0x0, 0x4b}) socket$nl_generic(0x10, 0x3, 0x10) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(r6, 0x0, r4, 0x0, &(0x7f0000000100)={0x2e, 0x2a, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0xdfb57f1e031ae24e, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0x8c5, 0x0, 0x0, 0x1000, 0x5e87, 0x0, 0x0, 0x24}}}, &(0x7f0000000180)=0x0) syz_ublk_setup_queues(r6, r7, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x2, 0x91, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x100, 0x1, 0x3aa, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x0, 0x2b7, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 9.687149641s ago: executing program 6 (id=1550): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, 0x0, &(0x7f0000000580)=0x1e) add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000940)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b05003034313230300603551f030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b38108c0d6efe71f6c4d329733847c377d7b9c8a340392589e09f2bd7cebff7011cf888b3f45ba0e6e0fafd83b7df1f3360baba35838ce605e07d248ddc142a9b23d4b8adce8732cc94dc1362c6190b2d17f2f8eca83", 0x605, r2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000900)=0x61) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x884) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="5c00000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3100000000100007800c0001800800014000001c0205000500020000000500010006000000bacd41cbe54a6ea70f11967bf34172a3a1cf5d2e70a51a395bd35e739f6f8daca036d232d3291c96adcb80173764421a0444a2ee03f5524a9be20c"], 0x5c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r5], 0x50}}, 0x0) 8.057397502s ago: executing program 6 (id=1551): r0 = syz_usb_connect(0x5, 0x36, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) r2 = syz_ublk_setup_io_uring(0x1780, &(0x7f0000000180)={0x0, 0x4933, 0x20000, 0x1, 0x3b6}, &(0x7f0000000080), 0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(0x0, 0x8, 0x0, 0x20010, r2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0xfdfd, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x2) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd882d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd', @ANYRESOCT=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2043) write$FUSE_INIT(r6, &(0x7f0000000100)={0x50, 0x0, r7, {0x7, 0x2d, 0x4, 0x8}}, 0x50) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000040)={0x34, 0x6, 0x0, {0x1, 0x5, 0xb, 0x0, 'unlock all\x00'}}, 0x34) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x40000) ioctl$EVIOCGMASK(r8, 0x80104592, &(0x7f0000000400)={0x11, 0xb0, &(0x7f0000000340)="20469845d0ea38d0d2350c51eb1b9d497355556838d10c085a736da444558af407b54fb1422a1ee3bedae8494cfb85a1655d89cd90d41631c5998bd8ca95d535317cdc79a50380c18643565f234a9795ee2160e0f23c11815d0a6bbc3f973efdd18d3154d98836f3b098d56b021075cac564e309bd00268827da3eb7f4af7f9f3e06846b044443a9b9d4ac02a02b43d1a0afcf81b222c01212c3d4399c39840133abe55029ca7cf3a887b0135c51215e"}) syz_usb_control_io$hid(r0, 0x0, 0x0) 7.841737647s ago: executing program 7 (id=1553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000040)={0x2, 0x7, 0x1}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x3, 0x0, 0x4, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x80000000010}, 0x60) listen(r5, 0x0) accept(r5, 0x0, 0x0) pread64(r4, &(0x7f0000000080)=""/39, 0x27, 0x8) 7.71610952s ago: executing program 2 (id=1554): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$keyring(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) socket$netlink(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000c00)='cramfs\x00', 0x0, 0x0) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e1f, @local}, 0x72) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x40) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000400)=0x0) lchown(&(0x7f0000000080)='./file0\x00', r5, 0xee00) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r5}, {0x0, 0x0, 0x80000000000000, 0x0, 0x3, 0x4000000000002, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@multicast1, 0xfffffffb, 0x32}, 0x0, @in6=@empty, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) 6.016552032s ago: executing program 5 (id=1556): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.981090832s ago: executing program 7 (id=1557): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x803, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@cswp={0x58, 0x114, 0x7, {{0x3, 0xa87}, &(0x7f00000000c0)=0x14c, 0x0, 0x9, 0x95d, 0xcd, 0x2000003, 0x7d, 0x6}}, @cswp={0x58, 0x114, 0x7, {{0x4f5, 0x9}, 0x0, 0x0, 0x7fe, 0x2, 0xffffffff, 0x200000000400, 0x60, 0x563d}}], 0xb0, 0x29ff1109641b30e0}, 0x40) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x26020480) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$media(&(0x7f00000003c0), 0x4, 0x404541) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 5.176015333s ago: executing program 2 (id=1558): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x803, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@cswp={0x58, 0x114, 0x7, {{0x3, 0xa87}, &(0x7f00000000c0)=0x14c, 0x0, 0x9, 0x95d, 0xcd, 0x2000003, 0x7d, 0x6}}, @cswp={0x58, 0x114, 0x7, {{0x4f5, 0x9}, 0x0, 0x0, 0x7fe, 0x2, 0xffffffff, 0x200000000400, 0x60, 0x563d}}], 0xb0, 0x29ff1109641b30e0}, 0x40) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0) unshare(0x26020480) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 5.164285913s ago: executing program 5 (id=1559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, 0x0, &(0x7f0000000580)=0x1e) add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000940)="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", 0x605, r2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000900)=0x61) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x884) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="5c00000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3100000000100007800c0001800800014000001c0205000500020000000500010006000000bacd41cbe54a6ea70f11967bf34172a3a1cf5d2e70a51a395bd35e739f6f8daca036d232d3291c96adcb80173764421a0444a2ee03f5524a9be20c"], 0x5c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r5], 0x50}}, 0x0) 3.514043074s ago: executing program 5 (id=1560): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x10}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = openat$sequencer2(0xffffff9c, 0x0, 0x20040, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r2, 0xc0045103, 0x0) r3 = gettid() migrate_pages(r3, 0x3, 0x0, 0x0) prlimit64(r3, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x802, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000300), 0xd, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000340)={0x1, @sdr={0x34362947, 0x1}}) connect$unix(0xffffffffffffffff, &(0x7f0000fce000)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='A', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000", @ANYRES32=r7], 0x18, 0x40001}}], 0x1, 0x8000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000000400)=ANY=[@ANYRES8=r9, @ANYRES8=r1, @ANYRESDEC=r3, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYRES64=r2]) 1.520438813s ago: executing program 2 (id=1561): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x10}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = openat$sequencer2(0xffffff9c, 0x0, 0x20040, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r2, 0xc0045103, 0x0) r3 = gettid() migrate_pages(r3, 0x3, 0x0, 0x0) prlimit64(r3, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x802, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000300), 0xd, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000340)={0x1, @sdr={0x34362947, 0x1}}) connect$unix(0xffffffffffffffff, &(0x7f0000fce000)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='A', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000", @ANYRES32=r7], 0x18, 0x40001}}], 0x1, 0x8000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000000400)=ANY=[@ANYRES8=r9, @ANYRES8=r1, @ANYRESDEC=r3, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYRES64=r2]) 1.457199954s ago: executing program 5 (id=1562): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) 1.365793246s ago: executing program 7 (id=1563): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) unshare(0x1e060c80) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r1, 0x4) read$FUSE(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1.303643368s ago: executing program 5 (id=1564): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x13, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x100000}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x35}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='sub:*v', 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x3ff}}}}}}}, 0x0) 744.061912ms ago: executing program 5 (id=1565): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000300)=""/4089, 0xff9, 0x4) 327.113862ms ago: executing program 2 (id=1566): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) unshare(0x1e060c80) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) listen(0xffffffffffffffff, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 200.505965ms ago: executing program 7 (id=1567): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x8080, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1\x00', 0x200) 0s ago: executing program 2 (id=1568): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) kernel console output (not intermixed with test programs): ve_1 [ 865.068533][ T9203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.081158][ T5841] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 865.129678][ T9203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.137208][ T5841] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=9d.9e [ 865.149836][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.157896][ T5841] usb 6-1: Product: syz [ 865.203150][ T5841] usb 6-1: Manufacturer: syz [ 865.207839][ T5841] usb 6-1: SerialNumber: syz [ 865.455263][ T5841] kvaser_usb 6-1:4.0: Cannot get usb endpoint(s) [ 865.483705][ T9203] hsr_slave_0: entered promiscuous mode [ 865.498829][ T5841] usb 6-1: USB disconnect, device number 5 [ 865.507994][ T9203] hsr_slave_1: entered promiscuous mode [ 865.546874][ T9203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 865.566218][ T9203] Cannot create hsr debugfs directory [ 866.156084][ T11] hsr_slave_0: left promiscuous mode [ 866.191396][ T9285] fuse: Unknown parameter 'fd00000000000000000000006' [ 866.215233][ T11] hsr_slave_1: left promiscuous mode [ 866.222713][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 866.268306][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.411651][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 866.522475][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.770688][ T11] bridge_slave_1: left allmulticast mode [ 866.869640][ T11] bridge_slave_1: left promiscuous mode [ 866.990822][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.098391][ T11] bridge_slave_0: left allmulticast mode [ 867.104131][ T11] bridge_slave_0: left promiscuous mode [ 867.110013][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.330827][ T11] veth1_macvtap: left promiscuous mode [ 867.344594][ T11] veth0_macvtap: left promiscuous mode [ 867.356113][ T11] veth1_vlan: left promiscuous mode [ 867.380680][ T11] veth0_vlan: left promiscuous mode [ 870.453006][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.459631][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.563543][ T28] audit: type=1800 audit(1787688099.228:14): pid=9311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.853" name="zoned" dev="configfs" ino=20149 res=0 errno=0 [ 870.618432][ T28] audit: type=1800 audit(1787688099.268:15): pid=9311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.853" name="zone_nr_conv" dev="configfs" ino=20150 res=0 errno=0 [ 870.675975][ T28] audit: type=1800 audit(1787688099.268:16): pid=9311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.853" name="power" dev="configfs" ino=20151 res=0 errno=0 [ 870.884269][ T28] audit: type=1800 audit(1787688099.548:17): pid=9313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.854" name="zoned" dev="configfs" ino=20958 res=0 errno=0 [ 870.924527][ T28] audit: type=1800 audit(1787688099.548:18): pid=9313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.854" name="zone_nr_conv" dev="configfs" ino=20959 res=0 errno=0 [ 870.978628][ T28] audit: type=1800 audit(1787688099.548:19): pid=9313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.854" name="power" dev="configfs" ino=20960 res=0 errno=0 [ 873.937629][ T11] team0 (unregistering): Port device team_slave_1 removed [ 874.070649][ T11] team0 (unregistering): Port device team_slave_0 removed [ 874.495329][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 874.993451][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 875.753651][ T11] bond0 (unregistering): Released all slaves [ 876.168437][ T7294] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 877.648332][ T7294] usb 5-1: unable to get BOS descriptor or descriptor too short [ 877.871204][ T9203] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 878.239814][ T9203] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 878.384177][ T7294] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 878.397908][ T7294] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=9d.9e [ 878.407362][ T7294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.415469][ T7294] usb 5-1: Product: syz [ 878.420014][ T7294] usb 5-1: Manufacturer: syz [ 878.424840][ T7294] usb 5-1: SerialNumber: syz [ 878.472276][ T9203] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 878.527233][ T9203] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 878.648856][ T7294] kvaser_usb 5-1:4.0: Cannot get usb endpoint(s) [ 878.684102][ T7294] usb 5-1: USB disconnect, device number 15 [ 878.794255][ T28] audit: type=1800 audit(1787688107.458:20): pid=9350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.862" name="zoned" dev="configfs" ino=21029 res=0 errno=0 [ 878.861517][ T28] audit: type=1800 audit(1787688107.458:21): pid=9350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.862" name="zone_nr_conv" dev="configfs" ino=21030 res=0 errno=0 [ 878.939595][ T28] audit: type=1800 audit(1787688107.498:22): pid=9350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.862" name="power" dev="configfs" ino=21031 res=0 errno=0 [ 878.986449][ T9203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 880.801667][ T9203] 8021q: adding VLAN 0 to HW filter on device team0 [ 880.927234][ T9203] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 880.969488][ T9203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 881.017077][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.024463][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.069728][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.076957][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 882.356079][ T9203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.292885][ T9203] veth0_vlan: entered promiscuous mode [ 884.336643][ T9203] veth1_vlan: entered promiscuous mode [ 885.840493][ T9203] veth0_macvtap: entered promiscuous mode [ 885.926051][ T9399] CIFS: Attempting to mount //127.0.0.1/share [ 885.943863][ T9399] CIFS: VFS: Error connecting to socket. Aborting operation. [ 885.951814][ T9399] CIFS: VFS: cifs_mount failed w/return code = -111 [ 886.045072][ T9203] veth1_macvtap: entered promiscuous mode [ 886.738901][ T9203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 886.778399][ T9203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.830340][ T9203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 886.873731][ T9203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.916359][ T9203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 886.951721][ T9203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.000306][ T9203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 887.037881][ T9203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.098767][ T9203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.130004][ T9203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.168820][ T9203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.198425][ T9203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.228387][ T9203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.444077][ T9203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 887.511424][ T9203] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.538360][ T9203] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.547150][ T9203] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.036318][ T9203] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.607036][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.648292][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.769558][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.777459][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.019894][ T7294] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 890.870923][ T7294] usb 3-1: unable to get BOS descriptor or descriptor too short [ 891.551082][ T7294] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 891.633178][ T7294] usb 3-1: string descriptor 0 read error: -71 [ 891.652513][ T7294] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=9d.9e [ 891.775821][ T7294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.242644][ T7294] usb 3-1: can't set config #4, error -71 [ 892.279036][ T7294] usb 3-1: USB disconnect, device number 15 [ 893.460261][ T9445] ntfs3: nullb0: Primary boot signature is not NTFS. [ 893.467964][ T9445] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 894.245472][ T9450] netlink: 76 bytes leftover after parsing attributes in process `syz.2.877'. [ 895.824060][ T9469] CIFS: Attempting to mount //127.0.0.1/share [ 895.841534][ T9469] CIFS: VFS: Error connecting to socket. Aborting operation. [ 895.850425][ T9469] CIFS: VFS: cifs_mount failed w/return code = -111 [ 900.078382][ T5765] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 900.405361][ T5765] usb 3-1: unable to get BOS descriptor or descriptor too short [ 900.539444][ T5765] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 900.823873][ T5765] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=9d.9e [ 900.972537][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.035976][ T5765] usb 3-1: Product: syz [ 901.065931][ T5765] usb 3-1: Manufacturer: syz [ 901.088854][ T5765] usb 3-1: SerialNumber: syz [ 901.359136][ T5765] kvaser_usb 3-1:4.0: Cannot get usb endpoint(s) [ 901.402075][ T5765] usb 3-1: USB disconnect, device number 16 [ 902.768397][ T28] audit: type=1800 audit(1787688131.418:23): pid=9510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.887" name="zoned" dev="configfs" ino=22529 res=0 errno=0 [ 902.836214][ T28] audit: type=1800 audit(1787688131.418:24): pid=9510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.887" name="zone_nr_conv" dev="configfs" ino=22530 res=0 errno=0 [ 902.915375][ T28] audit: type=1800 audit(1787688131.428:25): pid=9510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.887" name="power" dev="configfs" ino=22531 res=0 errno=0 [ 902.955767][ T9514] netlink: 40 bytes leftover after parsing attributes in process `syz.6.888'. [ 902.988411][ T9514] netlink: 24 bytes leftover after parsing attributes in process `syz.6.888'. [ 911.500494][ T9558] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 914.659664][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 914.910497][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 914.939739][ T9] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 914.971420][ T9] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=9d.9e [ 914.998648][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.006736][ T9] usb 3-1: Product: syz [ 915.038392][ T9] usb 3-1: Manufacturer: syz [ 915.043095][ T9] usb 3-1: SerialNumber: syz [ 915.290537][ T9] kvaser_usb 3-1:4.0: Cannot get usb endpoint(s) [ 916.128877][ T9] usb 3-1: USB disconnect, device number 17 [ 924.700153][ T28] audit: type=1800 audit(1787688153.368:26): pid=9617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.901" name="zoned" dev="configfs" ino=21786 res=0 errno=0 [ 924.875679][ T28] audit: type=1800 audit(1787688153.378:27): pid=9617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.901" name="zone_nr_conv" dev="configfs" ino=21787 res=0 errno=0 [ 924.972528][ T28] audit: type=1800 audit(1787688153.378:28): pid=9617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.901" name="power" dev="configfs" ino=21788 res=0 errno=0 [ 928.936726][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.917'. [ 928.981635][ T9661] ntfs3: nullb0: Primary boot signature is not NTFS. [ 928.989401][ T9661] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 929.700641][ T9662] fuse: Unknown parameter 'fd01777777777777777777777' [ 932.600809][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.613305][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.706231][ T9706] netlink: 40 bytes leftover after parsing attributes in process `syz.5.925'. [ 937.498589][ T9706] netlink: 24 bytes leftover after parsing attributes in process `syz.5.925'. [ 937.554691][ T9717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.927'. [ 937.619424][ T9720] ntfs3: nullb0: Primary boot signature is not NTFS. [ 937.627978][ T9720] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 939.620738][ T9706] syz.5.925 invoked oom-killer: gfp_mask=0x402dc0(GFP_KERNEL_ACCOUNT|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 939.732341][ T9706] CPU: 0 PID: 9706 Comm: syz.5.925 Not tainted syzkaller #0 [ 939.739733][ T9706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 939.749842][ T9706] Call Trace: [ 939.753164][ T9706] [ 939.756138][ T9706] dump_stack_lvl+0x18c/0x250 [ 939.760885][ T9706] ? show_regs_print_info+0x20/0x20 [ 939.766141][ T9706] ? load_image+0x420/0x420 [ 939.770689][ T9706] ? ___ratelimit+0x478/0x610 [ 939.775436][ T9706] ? radix_tree_cpu_dead+0x160/0x160 [ 939.780786][ T9706] dump_header+0xd8/0x820 [ 939.785182][ T9706] oom_kill_process+0x390/0x580 [ 939.790104][ T9706] out_of_memory+0xe0e/0x1200 [ 939.794857][ T9706] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 939.800555][ T9706] ? print_unlock_imbalance_bug+0x160/0x160 [ 939.806522][ T9706] ? mutex_lock_nested+0x20/0x20 [ 939.811540][ T9706] ? unregister_oom_notifier+0x20/0x20 [ 939.817079][ T9706] mem_cgroup_out_of_memory+0x2c2/0x390 [ 939.822696][ T9706] ? try_charge_memcg+0xc91/0x17c0 [ 939.827871][ T9706] ? drain_local_stock+0x630/0x630 [ 939.833065][ T9706] ? do_raw_spin_unlock+0x121/0x230 [ 939.838336][ T9706] try_charge_memcg+0xca1/0x17c0 [ 939.843333][ T9706] ? __lock_acquire+0x7d80/0x7d80 [ 939.848440][ T9706] ? folio_flags+0x120/0x120 [ 939.853093][ T9706] ? percpu_ref_tryget+0x15/0x180 [ 939.858190][ T9706] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 939.863982][ T9706] ? __memcg_kmem_charge_page+0xeb/0x380 [ 939.869687][ T9706] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 939.875466][ T9706] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 939.881365][ T9706] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 939.887247][ T9706] __memcg_kmem_charge_page+0x224/0x380 [ 939.892856][ T9706] __alloc_pages+0x222/0x460 [ 939.897510][ T9706] ? zone_statistics+0x170/0x170 [ 939.902531][ T9706] ? kvmalloc_node+0x70/0x180 [ 939.907279][ T9706] ? alloc_pages+0x4e1/0x740 [ 939.911932][ T9706] io_pages_map+0x308/0x4e0 [ 939.916511][ T9706] io_allocate_scq_urings+0x12a/0x620 [ 939.921954][ T9706] io_uring_create+0x712/0x1330 [ 939.926871][ T9706] __se_sys_io_uring_setup+0x29f/0x2b0 [ 939.932421][ T9706] ? __x64_sys_io_uring_setup+0x60/0x60 [ 939.938056][ T9706] ? lockdep_hardirqs_on+0x98/0x150 [ 939.943325][ T9706] do_syscall_64+0x55/0xb0 [ 939.947793][ T9706] ? clear_bhb_loop+0x40/0x90 [ 939.952534][ T9706] ? clear_bhb_loop+0x40/0x90 [ 939.957276][ T9706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 939.963237][ T9706] RIP: 0033:0x7f77c9f9e0d9 [ 939.967702][ T9706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.987631][ T9706] RSP: 002b:00007f77c81f5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 939.996152][ T9706] RAX: ffffffffffffffda RBX: 0000200000000400 RCX: 00007f77c9f9e0d9 [ 940.004195][ T9706] RDX: 0000200000000000 RSI: 0000200000000400 RDI: 0000000000000f00 [ 940.012238][ T9706] RBP: 00007f77ca035024 R08: 0000000000000000 R09: 0000000000000000 [ 940.020303][ T9706] R10: 0000200000000080 R11: 0000000000000206 R12: 0000200000000000 [ 940.028329][ T9706] R13: 0000200000000080 R14: 0000200000000100 R15: 00007ffff88e20a8 [ 940.036395][ T9706] [ 940.108554][ T9706] memory: usage 96kB, limit 96kB, failcnt 62 [ 940.190759][ T9706] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 940.277210][ T9706] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 940.385925][ T9706] Memory cgroup stats for /syz5/test: [ 940.416551][ T9706] cache 0 [ 940.547121][ T9706] rss 0 [ 940.592364][ T9706] rss_huge 0 [ 940.666688][ T9706] shmem 0 [ 940.740099][ T9706] mapped_file 0 [ 940.815362][ T9706] dirty 0 [ 940.858318][ T9706] writeback 0 [ 940.861696][ T9706] workingset_refault_anon 0 [ 940.866249][ T9706] workingset_refault_file 0 [ 940.870917][ T9706] swap 0 [ 940.874111][ T9706] pgpgin 0 [ 940.877186][ T9706] pgpgout 0 [ 940.880404][ T9706] pgfault 0 [ 940.883551][ T9706] pgmajfault 0 [ 940.887078][ T9706] inactive_anon 0 [ 940.890822][ T9706] active_anon 0 [ 940.894322][ T9706] inactive_file 0 [ 940.898102][ T9706] active_file 0 [ 940.902818][ T9706] unevictable 0 [ 940.906331][ T9706] hierarchical_memory_limit 98304 [ 940.911744][ T9706] hierarchical_memsw_limit 9223372036854771712 [ 940.917947][ T9706] total_cache 0 [ 940.921531][ T9706] total_rss 0 [ 940.924966][ T9706] total_rss_huge 0 [ 940.928807][ T9706] total_shmem 0 [ 940.932301][ T9706] total_mapped_file 0 [ 940.936546][ T9706] total_dirty 0 [ 940.940333][ T9706] total_writeback 0 [ 940.944183][ T9706] total_workingset_refault_anon 0 [ 940.949368][ T9706] total_workingset_refault_file 0 [ 940.954434][ T9706] total_swap 0 [ 940.957848][ T9706] total_pgpgin 0 [ 940.961563][ T9706] total_pgpgout 0 [ 940.965245][ T9706] total_pgfault 0 [ 940.968967][ T9706] total_pgmajfault 0 [ 940.973032][ T9706] total_inactive_anon 0 [ 940.977231][ T9706] total_active_anon 0 [ 940.992464][ T9706] total_inactive_file 0 [ 940.996717][ T9706] total_active_file 0 [ 941.053662][ T9706] total_unevictable 0 [ 941.057741][ T9706] anon_cost 0 [ 941.088316][ T9706] file_cost 0 [ 941.091695][ T9706] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.925,pid=9704,uid=0 [ 941.142138][ T9706] Memory cgroup out of memory: Killed process 9706 (syz.5.925) total-vm:102376kB, anon-rss:1372kB, file-rss:23168kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 944.712487][ T9766] fuse: Unknown parameter 'fd01777777777777777777777' [ 949.660734][ T9798] netlink: 40 bytes leftover after parsing attributes in process `syz.2.943'. [ 949.744106][ T9798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.943'. [ 949.846808][ T9798] syz.2.943 invoked oom-killer: gfp_mask=0x402dc0(GFP_KERNEL_ACCOUNT|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 949.898698][ T9798] CPU: 0 PID: 9798 Comm: syz.2.943 Not tainted syzkaller #0 [ 949.906096][ T9798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 949.916209][ T9798] Call Trace: [ 949.919661][ T9798] [ 949.922637][ T9798] dump_stack_lvl+0x18c/0x250 [ 949.927379][ T9798] ? show_regs_print_info+0x20/0x20 [ 949.932634][ T9798] ? load_image+0x420/0x420 [ 949.937187][ T9798] ? ___ratelimit+0x478/0x610 [ 949.941916][ T9798] ? radix_tree_cpu_dead+0x160/0x160 [ 949.947251][ T9798] dump_header+0xd8/0x820 [ 949.951621][ T9798] oom_kill_process+0x390/0x580 [ 949.956530][ T9798] out_of_memory+0xe0e/0x1200 [ 949.961258][ T9798] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 949.966927][ T9798] ? print_unlock_imbalance_bug+0x160/0x160 [ 949.972861][ T9798] ? mutex_lock_nested+0x20/0x20 [ 949.977839][ T9798] ? unregister_oom_notifier+0x20/0x20 [ 949.983360][ T9798] mem_cgroup_out_of_memory+0x2c2/0x390 [ 949.988970][ T9798] ? try_charge_memcg+0xc91/0x17c0 [ 949.994127][ T9798] ? drain_local_stock+0x630/0x630 [ 949.999283][ T9798] ? do_raw_spin_unlock+0x121/0x230 [ 950.004527][ T9798] try_charge_memcg+0xca1/0x17c0 [ 950.009497][ T9798] ? __lock_acquire+0x7d80/0x7d80 [ 950.014570][ T9798] ? folio_flags+0x120/0x120 [ 950.019201][ T9798] ? percpu_ref_tryget+0x15/0x180 [ 950.024289][ T9798] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 950.030046][ T9798] ? __memcg_kmem_charge_page+0xeb/0x380 [ 950.035726][ T9798] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 950.041500][ T9798] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 950.047257][ T9798] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 950.053100][ T9798] __memcg_kmem_charge_page+0x224/0x380 [ 950.058705][ T9798] __alloc_pages+0x222/0x460 [ 950.063361][ T9798] ? zone_statistics+0x170/0x170 [ 950.068342][ T9798] ? kvmalloc_node+0x70/0x180 [ 950.073144][ T9798] ? alloc_pages+0x4e1/0x740 [ 950.077766][ T9798] io_pages_map+0x308/0x4e0 [ 950.082327][ T9798] io_allocate_scq_urings+0x12a/0x620 [ 950.087751][ T9798] io_uring_create+0x712/0x1330 [ 950.092676][ T9798] __se_sys_io_uring_setup+0x29f/0x2b0 [ 950.098204][ T9798] ? __x64_sys_io_uring_setup+0x60/0x60 [ 950.103807][ T9798] ? lockdep_hardirqs_on+0x98/0x150 [ 950.109057][ T9798] do_syscall_64+0x55/0xb0 [ 950.113520][ T9798] ? clear_bhb_loop+0x40/0x90 [ 950.118233][ T9798] ? clear_bhb_loop+0x40/0x90 [ 950.122955][ T9798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 950.128889][ T9798] RIP: 0033:0x7f0ceaf9e0d9 [ 950.133344][ T9798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 950.152989][ T9798] RSP: 002b:00007f0cebdd1fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 950.161438][ T9798] RAX: ffffffffffffffda RBX: 0000200000000400 RCX: 00007f0ceaf9e0d9 [ 950.169443][ T9798] RDX: 0000200000000000 RSI: 0000200000000400 RDI: 0000000000000f00 [ 950.177615][ T9798] RBP: 00007f0ceb035024 R08: 0000000000000000 R09: 0000000000000000 [ 950.185734][ T9798] R10: 0000200000000080 R11: 0000000000000206 R12: 0000200000000000 [ 950.193755][ T9798] R13: 0000200000000080 R14: 0000200000000100 R15: 00007fffe83e5618 [ 950.201775][ T9798] [ 950.968905][ T9798] memory: usage 96kB, limit 96kB, failcnt 182 [ 950.975053][ T9798] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 951.048389][ T9798] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 951.055432][ T9798] Memory cgroup stats for /syz2/test: [ 951.055586][ T9798] cache 0 [ 951.118300][ T9798] rss 0 [ 951.126425][ T9798] rss_huge 0 [ 951.141460][ T9798] shmem 0 [ 951.148262][ T9798] mapped_file 0 [ 951.151793][ T9798] dirty 0 [ 951.154771][ T9798] writeback 0 [ 951.159194][ T9798] workingset_refault_anon 0 [ 951.163747][ T9798] workingset_refault_file 0 [ 951.218340][ T9798] swap 0 [ 951.221554][ T9798] pgpgin 0 [ 951.224626][ T9798] pgpgout 0 [ 951.232112][ T9798] pgfault 2 [ 951.236161][ T9798] pgmajfault 0 [ 951.240822][ T9798] inactive_anon 0 [ 951.258299][ T9798] active_anon 0 [ 951.268614][ T9798] inactive_file 0 [ 951.275660][ T9798] active_file 0 [ 951.291567][ T9798] unevictable 0 [ 951.313888][ T9798] hierarchical_memory_limit 98304 [ 951.328425][ T9798] hierarchical_memsw_limit 9223372036854771712 [ 951.345167][ T9798] total_cache 0 [ 951.378237][ T9798] total_rss 0 [ 951.381611][ T9798] total_rss_huge 0 [ 951.385380][ T9798] total_shmem 0 [ 951.404052][ T9798] total_mapped_file 0 [ 951.408136][ T9798] total_dirty 0 [ 951.420336][ T9798] total_writeback 0 [ 951.424227][ T9798] total_workingset_refault_anon 0 [ 951.448407][ T9798] total_workingset_refault_file 0 [ 951.454697][ T9798] total_swap 0 [ 951.458122][ T9798] total_pgpgin 0 [ 951.471021][ T9798] total_pgpgout 0 [ 951.474753][ T9798] total_pgfault 2 [ 951.483120][ T9798] total_pgmajfault 0 [ 951.487086][ T9798] total_inactive_anon 0 [ 951.491964][ T9798] total_active_anon 0 [ 951.496030][ T9798] total_inactive_file 0 [ 951.505007][ T9798] total_active_file 0 [ 951.509195][ T9798] total_unevictable 0 [ 951.513224][ T9798] anon_cost 0 [ 951.516551][ T9798] file_cost 0 [ 951.525444][ T9798] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.943,pid=9796,uid=0 [ 951.553218][ T9798] Memory cgroup out of memory: Killed process 9796 (syz.2.943) total-vm:102508kB, anon-rss:1356kB, file-rss:23168kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 952.008293][ T5821] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 954.478485][ T5821] usb 3-1: Using ep0 maxpacket: 8 [ 954.625924][ T5821] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 954.671884][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.686157][ T5821] usb 3-1: Product: syz [ 954.693782][ T5821] usb 3-1: Manufacturer: syz [ 954.708546][ T5821] usb 3-1: SerialNumber: syz [ 954.734053][ T5821] usb 3-1: config 0 descriptor?? [ 954.890682][ T5821] usb 3-1: can't set config #0, error -71 [ 954.939099][ T5821] usb 3-1: USB disconnect, device number 18 [ 956.891310][ T9849] CIFS: Attempting to mount //127.0.0.1/share [ 956.911579][ T9849] CIFS: VFS: Error connecting to socket. Aborting operation. [ 956.919527][ T9849] CIFS: VFS: cifs_mount failed w/return code = -111 [ 957.028417][ T7294] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 957.893896][ T7294] usb 3-1: unable to get BOS descriptor or descriptor too short [ 957.910930][ T7294] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 957.943735][ T7294] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=9d.9e [ 957.968231][ T7294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.010605][ T7294] usb 3-1: Product: syz [ 958.018295][ T7294] usb 3-1: Manufacturer: syz [ 958.033345][ T7294] usb 3-1: SerialNumber: syz [ 958.121963][ T7294] usb 3-1: can't set config #4, error -71 [ 958.142265][ T7294] usb 3-1: USB disconnect, device number 19 [ 958.170213][ T28] audit: type=1800 audit(1787688186.838:29): pid=9862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.957" name="zoned" dev="configfs" ino=22097 res=0 errno=0 [ 958.269917][ T28] audit: type=1800 audit(1787688186.858:30): pid=9862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.957" name="power" dev="configfs" ino=22098 res=0 errno=0 [ 963.245452][ T9890] ======================================================= [ 963.245452][ T9890] WARNING: The mand mount option has been deprecated and [ 963.245452][ T9890] and is ignored by this kernel. Remove the mand [ 963.245452][ T9890] option from the mount to silence this warning. [ 963.245452][ T9890] ======================================================= [ 966.518351][ T173] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 966.700829][ T173] usb 6-1: unable to get BOS descriptor or descriptor too short [ 966.736451][ T173] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 966.763471][ T173] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=9d.9e [ 966.790524][ T173] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.808400][ T9630] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 966.827235][ T173] usb 6-1: Product: syz [ 966.834893][ T173] usb 6-1: Manufacturer: syz [ 966.848387][ T173] usb 6-1: SerialNumber: syz [ 967.008958][ T9630] usb 3-1: Using ep0 maxpacket: 8 [ 967.024607][ T9630] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 967.044308][ T9630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.068270][ T9630] usb 3-1: Product: syz [ 967.080697][ T173] kvaser_usb 6-1:4.0: Cannot get usb endpoint(s) [ 967.099610][ T9630] usb 3-1: Manufacturer: syz [ 967.104304][ T9630] usb 3-1: SerialNumber: syz [ 967.120655][ T173] usb 6-1: USB disconnect, device number 6 [ 967.141666][ T9630] usb 3-1: config 0 descriptor?? [ 967.435098][ T9630] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 968.496268][ T9945] binder: 9944:9945 ioctl c0306201 200000000080 returned -14 [ 969.903079][ T9630] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 970.495948][ T9957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.973'. [ 971.672998][ T9630] usb 3-1: USB disconnect, device number 20 [ 974.598331][ T7294] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 974.812576][ T7294] usb 3-1: unable to get BOS descriptor or descriptor too short [ 975.665899][ T7294] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 975.679898][ T7294] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=9d.9e [ 975.689112][ T7294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.697163][ T7294] usb 3-1: Product: syz [ 975.701952][ T7294] usb 3-1: Manufacturer: syz [ 975.706601][ T7294] usb 3-1: SerialNumber: syz [ 975.926631][ T7294] kvaser_usb 3-1:4.0: Cannot get usb endpoint(s) [ 975.958570][ T7294] usb 3-1: USB disconnect, device number 21 [ 978.014182][T10007] netlink: 12 bytes leftover after parsing attributes in process `syz.6.982'. [ 979.617744][T10020] binder: 10019:10020 ioctl c0306201 200000000080 returned -14 [ 979.688578][ T5765] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 980.618845][ T5765] usb 5-1: Using ep0 maxpacket: 8 [ 980.643577][ T5765] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 980.670411][ T5765] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.742537][ T5765] usb 5-1: Product: syz [ 980.746889][ T5765] usb 5-1: Manufacturer: syz [ 980.754030][ T5765] usb 5-1: SerialNumber: syz [ 980.769137][ T5765] usb 5-1: config 0 descriptor?? [ 981.036314][ T5765] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 981.388824][ T5844] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 981.730217][ T5844] usb 6-1: device descriptor read/64, error -71 [ 982.299508][ T5844] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 982.508527][ T5844] usb 6-1: device descriptor read/64, error -71 [ 982.644260][ T5844] usb usb6-port1: attempt power cycle [ 982.664572][ T5765] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 982.687545][ T5765] usb 5-1: USB disconnect, device number 16 [ 984.878412][ T5844] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 984.939456][ T5844] usb 6-1: device descriptor read/8, error -71 [ 985.636578][T10061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.994'. [ 987.821597][T10069] binder: 10068:10069 ioctl c0306201 200000000080 returned -14 [ 987.943465][ T5824] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 988.151555][ T5824] usb 3-1: unable to get BOS descriptor or descriptor too short [ 988.191873][ T5824] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 988.215382][ T5824] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=9d.9e [ 988.225025][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.233758][ T5824] usb 3-1: Product: syz [ 988.278319][ T5824] usb 3-1: Manufacturer: syz [ 988.283528][ T5824] usb 3-1: SerialNumber: syz [ 988.666371][ T5824] kvaser_usb 3-1:4.0: Cannot get usb endpoint(s) [ 988.739331][ T5824] usb 3-1: USB disconnect, device number 22 [ 993.342249][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.348813][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.149044][T10112] binder: 10111:10112 ioctl c0306201 200000000080 returned -14 [ 996.207961][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1009'. [ 996.231881][T10125] ntfs3: nullb0: Primary boot signature is not NTFS. [ 996.239392][T10125] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 999.096479][T10150] binder: 10149:10150 ioctl c0306201 200000000080 returned -14 [ 1001.402235][ T173] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1001.637656][ T173] usb 5-1: Using ep0 maxpacket: 8 [ 1001.818833][ T173] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1001.883241][ T173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.103604][ T173] usb 5-1: Product: syz [ 1002.413247][ T173] usb 5-1: Manufacturer: syz [ 1002.810847][ T173] usb 5-1: SerialNumber: syz [ 1003.082348][ T173] usb 5-1: config 0 descriptor?? [ 1003.999981][ T173] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1004.056181][T10187] binder: 10186:10187 ioctl c0306201 200000000080 returned -14 [ 1006.129725][ T173] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -110 [ 1007.768417][ T173] usb 5-1: USB disconnect, device number 17 [ 1012.509096][T10226] binder: 10225:10226 ioctl c0306201 200000000080 returned -14 [ 1012.517956][T10228] binder: 10227:10228 ioctl c0306201 200000000080 returned -14 [ 1013.865451][T10242] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1013.873154][T10242] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1017.563351][T10253] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1047'. [ 1017.598390][T10253] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1047'. [ 1017.821130][T10261] binder: 10260:10261 ioctl c0306201 200000000080 returned -14 [ 1021.879908][T10299] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1059'. [ 1021.904747][T10299] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1059'. [ 1021.967268][T10299] syz.4.1059 invoked oom-killer: gfp_mask=0x402dc0(GFP_KERNEL_ACCOUNT|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1021.988709][T10299] CPU: 0 PID: 10299 Comm: syz.4.1059 Not tainted syzkaller #0 [ 1021.996281][T10299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1022.006388][T10299] Call Trace: [ 1022.009726][T10299] [ 1022.012704][T10299] dump_stack_lvl+0x18c/0x250 [ 1022.017461][T10299] ? show_regs_print_info+0x20/0x20 [ 1022.022807][T10299] ? load_image+0x420/0x420 [ 1022.027353][T10299] ? ___ratelimit+0x478/0x610 [ 1022.032104][T10299] ? radix_tree_cpu_dead+0x160/0x160 [ 1022.037463][T10299] dump_header+0xd8/0x820 [ 1022.041858][T10299] oom_kill_process+0x390/0x580 [ 1022.046779][T10299] out_of_memory+0xe0e/0x1200 [ 1022.051528][T10299] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1022.057219][T10299] ? print_unlock_imbalance_bug+0x160/0x160 [ 1022.064225][T10299] ? mutex_lock_nested+0x20/0x20 [ 1022.069325][T10299] ? unregister_oom_notifier+0x20/0x20 [ 1022.074864][T10299] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1022.080473][T10299] ? try_charge_memcg+0xc91/0x17c0 [ 1022.085658][T10299] ? drain_local_stock+0x630/0x630 [ 1022.090848][T10299] ? do_raw_spin_unlock+0x121/0x230 [ 1022.096151][T10299] try_charge_memcg+0xca1/0x17c0 [ 1022.101158][T10299] ? __lock_acquire+0x7d80/0x7d80 [ 1022.106287][T10299] ? folio_flags+0x120/0x120 [ 1022.110958][T10299] ? percpu_ref_tryget+0x15/0x180 [ 1022.116045][T10299] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1022.121835][T10299] ? __memcg_kmem_charge_page+0xeb/0x380 [ 1022.127555][T10299] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1022.133341][T10299] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1022.139129][T10299] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1022.144997][T10299] __memcg_kmem_charge_page+0x224/0x380 [ 1022.150610][T10299] __alloc_pages+0x222/0x460 [ 1022.155259][T10299] ? zone_statistics+0x170/0x170 [ 1022.160252][T10299] ? kvmalloc_node+0x70/0x180 [ 1022.164987][T10299] ? alloc_pages+0x4e1/0x740 [ 1022.169632][T10299] io_pages_map+0x308/0x4e0 [ 1022.174227][T10299] io_allocate_scq_urings+0x12a/0x620 [ 1022.179678][T10299] io_uring_create+0x712/0x1330 [ 1022.184603][T10299] __se_sys_io_uring_setup+0x29f/0x2b0 [ 1022.190105][T10299] ? __x64_sys_io_uring_setup+0x60/0x60 [ 1022.195688][T10299] ? lockdep_hardirqs_on+0x98/0x150 [ 1022.200929][T10299] do_syscall_64+0x55/0xb0 [ 1022.205384][T10299] ? clear_bhb_loop+0x40/0x90 [ 1022.210092][T10299] ? clear_bhb_loop+0x40/0x90 [ 1022.214814][T10299] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1022.220743][T10299] RIP: 0033:0x7f628559e0d9 [ 1022.225185][T10299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1022.244808][T10299] RSP: 002b:00007f628645cfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1022.253390][T10299] RAX: ffffffffffffffda RBX: 0000200000000400 RCX: 00007f628559e0d9 [ 1022.261402][T10299] RDX: 0000200000000000 RSI: 0000200000000400 RDI: 0000000000000f00 [ 1022.269410][T10299] RBP: 00007f6285635024 R08: 0000000000000000 R09: 0000000000000000 [ 1022.277396][T10299] R10: 0000200000000080 R11: 0000000000000206 R12: 0000200000000000 [ 1022.285384][T10299] R13: 0000200000000080 R14: 0000200000000100 R15: 00007ffc46eba208 [ 1022.293387][T10299] [ 1022.381267][T10299] memory: usage 96kB, limit 96kB, failcnt 80 [ 1022.397669][T10299] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 1023.235275][T10299] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 1023.271130][T10299] Memory cgroup stats for /syz4/test: [ 1023.271301][T10299] cache 0 [ 1023.285338][T10299] rss 0 [ 1023.289643][T10299] rss_huge 0 [ 1023.293130][T10299] shmem 0 [ 1023.301623][T10299] mapped_file 0 [ 1023.305158][T10299] dirty 0 [ 1023.347120][T10299] writeback 0 [ 1023.352232][T10308] binder: 10307:10308 ioctl c0306201 200000000080 returned -14 [ 1023.363696][T10299] workingset_refault_anon 0 [ 1023.368480][T10299] workingset_refault_file 0 [ 1023.373175][T10299] swap 0 [ 1023.376105][T10299] pgpgin 0 [ 1023.408714][T10299] pgpgout 0 [ 1023.440139][T10299] pgfault 0 [ 1023.520867][T10299] pgmajfault 0 [ 1023.563069][T10299] inactive_anon 0 [ 1023.566862][T10299] active_anon 0 [ 1023.574733][T10299] inactive_file 0 [ 1023.578584][T10299] active_file 0 [ 1023.582207][T10299] unevictable 0 [ 1023.585711][T10299] hierarchical_memory_limit 98304 [ 1023.590855][T10299] hierarchical_memsw_limit 9223372036854771712 [ 1023.597835][T10299] total_cache 0 [ 1023.612680][T10299] total_rss 0 [ 1023.616130][T10299] total_rss_huge 0 [ 1023.648471][T10299] total_shmem 0 [ 1023.653034][T10299] total_mapped_file 0 [ 1023.657107][T10299] total_dirty 0 [ 1023.705479][T10299] total_writeback 0 [ 1023.742736][T10299] total_workingset_refault_anon 0 [ 1023.823037][T10299] total_workingset_refault_file 0 [ 1023.896438][T10299] total_swap 0 [ 1023.960830][T10299] total_pgpgin 0 [ 1023.995649][T10299] total_pgpgout 0 [ 1024.043374][T10299] total_pgfault 0 [ 1024.117152][T10299] total_pgmajfault 0 [ 1024.180906][T10299] total_inactive_anon 0 [ 1024.235240][T10299] total_active_anon 0 [ 1024.299197][T10299] total_inactive_file 0 [ 1024.303443][T10299] total_active_file 0 [ 1024.307469][T10299] total_unevictable 0 [ 1024.336518][T10299] anon_cost 0 [ 1024.344392][T10299] file_cost 0 [ 1024.363157][T10299] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.1059,pid=10297,uid=0 [ 1025.242246][T10299] Memory cgroup out of memory: Killed process 10297 (syz.4.1059) total-vm:102376kB, anon-rss:1344kB, file-rss:23168kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1028.565096][T10340] binder: 10338:10340 ioctl c0306201 200000000080 returned -14 [ 1034.559093][T10368] binder: 10367:10368 ioctl c0306201 200000000080 returned -14 [ 1044.979934][T10411] binder: 10410:10411 ioctl c0306201 200000000080 returned -14 [ 1045.392704][T10417] CIFS: Attempting to mount //127.0.0.1/share [ 1045.411253][T10417] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1045.419245][T10417] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1053.565752][T10457] binder: 10456:10457 ioctl c0306201 200000000080 returned -14 [ 1054.071895][T10465] CIFS: Attempting to mount //127.0.0.1/share [ 1054.094775][T10465] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1054.102813][T10465] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1054.815041][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.818855][ T173] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1054.854149][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.130725][ T173] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1055.778705][ T173] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.833227][ T173] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=9d.9e [ 1055.842750][ T173] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.868840][ T173] usb 6-1: Product: syz [ 1055.873099][ T173] usb 6-1: Manufacturer: syz [ 1055.877745][ T173] usb 6-1: SerialNumber: syz [ 1056.172722][T10480] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1056.181261][T10480] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1056.491996][ T173] kvaser_usb 6-1:4.0: Cannot get usb endpoint(s) [ 1056.882088][ T173] usb 6-1: USB disconnect, device number 12 [ 1062.420092][T10507] binder: 10506:10507 ioctl c0306201 200000000080 returned -14 [ 1065.248949][T10529] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1065.544567][T10529] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1067.199283][T10539] binder: 10538:10539 ioctl c0306201 200000000080 returned -14 [ 1073.833277][T10573] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1073.840905][T10573] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1074.659071][ T5841] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1074.735546][T10577] binder: 10576:10577 ioctl c0306201 200000000080 returned -14 [ 1074.998678][ T5841] usb 3-1: device descriptor read/64, error -71 [ 1075.298219][ T5841] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1076.478404][T10586] CIFS: Attempting to mount //127.0.0.1/share [ 1076.490357][T10586] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1076.499094][T10586] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1076.641313][ T5841] usb 3-1: device descriptor read/64, error -71 [ 1076.859670][ T5841] usb usb3-port1: attempt power cycle [ 1077.024778][ T28] audit: type=1800 audit(1787688305.688:31): pid=10589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1139" name="zoned" dev="configfs" ino=24959 res=0 errno=0 [ 1077.099121][ T28] audit: type=1800 audit(1787688305.688:32): pid=10589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1139" name="zone_nr_conv" dev="configfs" ino=24960 res=0 errno=0 [ 1077.186626][ T28] audit: type=1800 audit(1787688305.698:33): pid=10589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1139" name="power" dev="configfs" ino=24961 res=0 errno=0 [ 1082.973091][T10626] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1082.980807][T10626] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1083.501831][T10616] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1083.833379][T10631] CIFS: Attempting to mount //127.0.0.1/share [ 1083.850508][T10631] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1083.859582][T10631] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1085.318351][ T23] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1085.407908][T10647] fuse: Unknown parameter 'ÿ00000000000000000736' [ 1085.499248][ T9630] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1085.708619][ T9630] usb 3-1: Using ep0 maxpacket: 8 [ 1085.842125][ T9630] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1086.132964][ T9630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.179504][ T9630] usb 3-1: Product: syz [ 1086.183761][ T9630] usb 3-1: Manufacturer: syz [ 1086.217365][ T9630] usb 3-1: SerialNumber: syz [ 1086.232075][ T9630] usb 3-1: config 0 descriptor?? [ 1086.278382][ T23] usb 6-1: device descriptor read/64, error -71 [ 1086.548325][ T23] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1087.290714][ T9630] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1087.887063][ T9630] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 1092.074410][ T5844] usb 3-1: USB disconnect, device number 26 [ 1092.324120][T10675] CIFS: Attempting to mount //127.0.0.1/share [ 1092.349559][T10675] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1092.358323][T10675] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1092.881185][T10677] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1092.889238][T10677] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1095.338662][ T5844] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1095.682118][ T5844] usb 6-1: device descriptor read/64, error -71 [ 1095.831281][T10700] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1096.059186][ T27] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1096.256088][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 1096.267063][ T27] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1096.285834][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.296795][ T27] usb 5-1: Product: syz [ 1096.306971][ T27] usb 5-1: Manufacturer: syz [ 1096.312022][ T27] usb 5-1: SerialNumber: syz [ 1096.325013][ T27] usb 5-1: config 0 descriptor?? [ 1097.543955][ T27] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -110 [ 1097.670300][ T27] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -110 [ 1097.933981][T10712] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1097.941888][T10712] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1102.414034][ T9630] usb 5-1: USB disconnect, device number 18 [ 1104.366748][T10754] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1104.797638][T10758] netlink: 'syz.4.1186': attribute type 10 has an invalid length. [ 1104.834176][T10758] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.842111][T10758] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.919954][T10758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.927429][T10758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1104.936168][T10758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.943464][T10758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1104.988619][T10758] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1108.178524][ T27] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1108.339764][T10774] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1108.347605][T10774] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1108.408261][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 1109.116285][ T27] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1109.125767][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.134451][ T27] usb 5-1: Product: syz [ 1109.138829][ T27] usb 5-1: Manufacturer: syz [ 1109.143475][ T27] usb 5-1: SerialNumber: syz [ 1109.160258][ T27] usb 5-1: config 0 descriptor?? [ 1109.447292][ T27] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1110.264400][ T27] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 1111.536796][ T9634] usb 5-1: USB disconnect, device number 19 [ 1111.828829][T10803] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1111.836269][T10803] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1112.853336][T10806] binder: 10805:10806 ioctl c0306201 200000000080 returned -14 [ 1115.920017][ T5824] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1116.216363][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.222914][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.744189][T10830] libceph: secret too big 258 [ 1116.887714][ T5824] usb 6-1: Using ep0 maxpacket: 8 [ 1118.376008][ T5824] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1118.408242][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.416349][ T5824] usb 6-1: Product: syz [ 1118.448342][ T5824] usb 6-1: Manufacturer: syz [ 1118.456749][ T5824] usb 6-1: config 0 descriptor?? [ 1118.482497][ T5824] usb 6-1: can't set config #0, error -71 [ 1118.519229][ T5824] usb 6-1: USB disconnect, device number 17 [ 1118.980517][T10840] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1213'. [ 1119.512352][T10842] binder: 10841:10842 ioctl c0306201 200000000080 returned -14 [ 1120.423740][T10846] binder: 10844:10846 ioctl c0306201 0 returned -14 [ 1123.509215][ T28] audit: type=1800 audit(1787688352.178:34): pid=10871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1221" name="zoned" dev="configfs" ino=25641 res=0 errno=0 [ 1123.614137][ T28] audit: type=1800 audit(1787688352.198:35): pid=10871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1221" name="zone_nr_conv" dev="configfs" ino=25642 res=0 errno=0 [ 1123.720331][ T28] audit: type=1800 audit(1787688352.228:36): pid=10871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1221" name="power" dev="configfs" ino=25647 res=0 errno=0 [ 1123.847116][T10881] binder: 10880:10881 ioctl c0306201 200000000080 returned -14 [ 1123.886929][T10883] binder: 10882:10883 ioctl c0306201 0 returned -14 [ 1126.596485][T10892] overlayfs: overlapping lowerdir path [ 1127.012382][ T5841] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1127.265211][T10903] CIFS: Attempting to mount //127.0.0.1/share [ 1127.282386][T10903] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1127.290383][T10903] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1128.400113][ T28] audit: type=1800 audit(1787688357.068:37): pid=10911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1235" name="zoned" dev="configfs" ino=25704 res=0 errno=0 [ 1128.483425][ T28] audit: type=1800 audit(1787688357.088:38): pid=10911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1235" name="zone_nr_conv" dev="configfs" ino=25705 res=0 errno=0 [ 1128.539187][T10917] binder: 10916:10917 ioctl c0306201 200000000080 returned -14 [ 1128.557881][ T28] audit: type=1800 audit(1787688357.108:39): pid=10911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1235" name="power" dev="configfs" ino=25706 res=0 errno=0 [ 1129.609153][T10922] binder: 10921:10922 ioctl c0306201 0 returned -14 [ 1130.586275][T10932] overlayfs: overlapping lowerdir path [ 1132.242928][ T28] audit: type=1800 audit(1787688360.908:40): pid=10940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1243" name="zoned" dev="configfs" ino=25514 res=0 errno=0 [ 1132.342887][ T28] audit: type=1800 audit(1787688360.928:41): pid=10940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1243" name="zone_nr_conv" dev="configfs" ino=25515 res=0 errno=0 [ 1132.368381][ T5841] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1132.407957][ T28] audit: type=1800 audit(1787688360.928:42): pid=10940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1243" name="power" dev="configfs" ino=25516 res=0 errno=0 [ 1132.551499][ T5841] usb 6-1: device descriptor read/64, error -71 [ 1132.627113][ T5824] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1132.828732][ T5841] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1132.836583][ T5824] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1132.919121][ T5824] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.959666][ T5824] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=9d.9e [ 1132.978250][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.981571][T10955] binder: 10954:10955 ioctl c0306201 200000000080 returned -14 [ 1132.996697][ T5824] usb 5-1: Product: syz [ 1133.006840][ T5824] usb 5-1: Manufacturer: syz [ 1133.015617][ T5824] usb 5-1: SerialNumber: syz [ 1133.028301][ T5841] usb 6-1: device descriptor read/64, error -71 [ 1133.377349][ T5824] kvaser_usb 5-1:4.0: Cannot get usb endpoint(s) [ 1133.905829][ T5824] usb 5-1: USB disconnect, device number 20 [ 1134.807134][ T5841] usb usb6-port1: attempt power cycle [ 1135.128927][T10966] overlayfs: overlapping lowerdir path [ 1135.829510][ T28] audit: type=1800 audit(1787688364.488:43): pid=10968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1254" name="zoned" dev="configfs" ino=25843 res=0 errno=0 [ 1135.885101][ T28] audit: type=1800 audit(1787688364.488:44): pid=10968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1254" name="zone_nr_conv" dev="configfs" ino=25844 res=0 errno=0 [ 1135.906751][ T28] audit: type=1800 audit(1787688364.498:45): pid=10968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1254" name="power" dev="configfs" ino=25845 res=0 errno=0 [ 1139.506131][T10991] binder: 10990:10991 ioctl c0306201 200000000080 returned -14 [ 1141.985044][ T28] audit: type=1800 audit(1787688370.648:46): pid=10994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1265" name="zoned" dev="configfs" ino=25599 res=0 errno=0 [ 1142.069022][ T28] audit: type=1800 audit(1787688370.658:47): pid=10994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1265" name="zone_nr_conv" dev="configfs" ino=25600 res=0 errno=0 [ 1142.100060][ T28] audit: type=1800 audit(1787688370.658:48): pid=10994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1265" name="power" dev="configfs" ino=26625 res=0 errno=0 [ 1144.486916][ T28] audit: type=1800 audit(1787688373.148:49): pid=11015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1270" name="zoned" dev="configfs" ino=25928 res=0 errno=0 [ 1144.614477][ T28] audit: type=1800 audit(1787688373.148:50): pid=11015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1270" name="zone_nr_conv" dev="configfs" ino=25929 res=0 errno=0 [ 1144.841006][ T28] audit: type=1800 audit(1787688373.148:51): pid=11015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1270" name="power" dev="configfs" ino=25930 res=0 errno=0 [ 1146.252401][T11027] binder: 11026:11027 ioctl c0306201 200000000080 returned -14 [ 1148.106238][T11042] overlayfs: overlapping lowerdir path [ 1150.682740][ T28] audit: type=1800 audit(1787688379.348:52): pid=11051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1280" name="zoned" dev="configfs" ino=25995 res=0 errno=0 [ 1150.737893][ T28] audit: type=1800 audit(1787688379.368:53): pid=11051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1280" name="zone_nr_conv" dev="configfs" ino=25996 res=0 errno=0 [ 1150.760036][ T28] audit: type=1800 audit(1787688379.378:54): pid=11051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1280" name="power" dev="configfs" ino=25997 res=0 errno=0 [ 1151.772991][T11061] binder: 11059:11061 ioctl c0306201 200000000080 returned -14 [ 1152.248219][ T9630] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1153.223068][ T9630] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1154.489698][ T9630] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.566798][ T9630] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=9d.9e [ 1154.591613][ T9630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.599923][ T9630] usb 5-1: Product: syz [ 1154.604196][ T9630] usb 5-1: Manufacturer: syz [ 1154.609659][ T9630] usb 5-1: SerialNumber: syz [ 1154.678962][ T28] audit: type=1800 audit(1787688383.348:55): pid=11086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1291" name="zoned" dev="configfs" ino=26073 res=0 errno=0 [ 1154.764327][ T28] audit: type=1800 audit(1787688383.368:56): pid=11086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1291" name="zone_nr_conv" dev="configfs" ino=26074 res=0 errno=0 [ 1155.101086][ T28] audit: type=1800 audit(1787688383.368:57): pid=11086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1291" name="power" dev="configfs" ino=26075 res=0 errno=0 [ 1156.171448][ T9630] kvaser_usb 5-1:4.0: Cannot get usb endpoint(s) [ 1157.036608][ T9630] usb 5-1: USB disconnect, device number 22 [ 1158.281437][T11105] binder: 11102:11105 ioctl c0306201 200000000080 returned -14 [ 1159.866586][ T28] audit: type=1800 audit(1787688388.528:58): pid=11115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1300" name="zoned" dev="configfs" ino=26129 res=0 errno=0 [ 1159.906686][ T28] audit: type=1800 audit(1787688388.568:59): pid=11115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1300" name="zone_nr_conv" dev="configfs" ino=26130 res=0 errno=0 [ 1159.934211][ T28] audit: type=1800 audit(1787688388.598:60): pid=11115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1300" name="power" dev="configfs" ino=26131 res=0 errno=0 [ 1161.128029][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1302'. [ 1161.193563][T11128] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1161.201140][T11128] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1161.657493][ T28] audit: type=1800 audit(1787688390.318:61): pid=11131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1304" name="zoned" dev="configfs" ino=26150 res=0 errno=0 [ 1161.746330][ T28] audit: type=1800 audit(1787688390.358:62): pid=11131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1304" name="zone_nr_conv" dev="configfs" ino=26152 res=0 errno=0 [ 1161.769029][ T28] audit: type=1800 audit(1787688390.358:63): pid=11131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1304" name="power" dev="configfs" ino=26153 res=0 errno=0 [ 1162.038210][ T5841] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1162.928517][ T5841] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1162.980330][T11143] binder: 11141:11143 ioctl c0306201 200000000080 returned -14 [ 1163.027551][ T5841] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.152569][ T5841] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=9d.9e [ 1163.676059][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.786672][ T5841] usb 3-1: Product: syz [ 1163.791058][ T5841] usb 3-1: Manufacturer: syz [ 1163.795710][ T5841] usb 3-1: SerialNumber: syz [ 1163.850942][T11145] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1309'. [ 1163.860221][T11145] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1309'. [ 1163.956408][ T5841] usb 3-1: can't set config #4, error -71 [ 1163.990475][ T5841] usb 3-1: USB disconnect, device number 27 [ 1164.046403][T11145] syz.4.1309 invoked oom-killer: gfp_mask=0x402dc0(GFP_KERNEL_ACCOUNT|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1164.185789][ T28] audit: type=1800 audit(1787688392.798:64): pid=11149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1311" name="zoned" dev="configfs" ino=26878 res=0 errno=0 [ 1164.223627][T11145] CPU: 0 PID: 11145 Comm: syz.4.1309 Not tainted syzkaller #0 [ 1164.231177][T11145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1164.241285][T11145] Call Trace: [ 1164.244619][T11145] [ 1164.247595][T11145] dump_stack_lvl+0x18c/0x250 [ 1164.252352][T11145] ? show_regs_print_info+0x20/0x20 [ 1164.257617][T11145] ? load_image+0x420/0x420 [ 1164.262177][T11145] ? ___ratelimit+0x478/0x610 [ 1164.266927][T11145] ? radix_tree_cpu_dead+0x160/0x160 [ 1164.272278][T11145] dump_header+0xd8/0x820 [ 1164.276699][T11145] oom_kill_process+0x390/0x580 [ 1164.281627][T11145] out_of_memory+0xe0e/0x1200 [ 1164.286371][T11145] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1164.292070][T11145] ? print_unlock_imbalance_bug+0x160/0x160 [ 1164.296316][ T28] audit: type=1800 audit(1787688392.808:65): pid=11149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1311" name="zone_nr_conv" dev="configfs" ino=26879 res=0 errno=0 [ 1164.298005][T11145] ? mutex_lock_nested+0x20/0x20 [ 1164.323830][T11145] ? unregister_oom_notifier+0x20/0x20 [ 1164.329370][T11145] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1164.334974][T11145] ? try_charge_memcg+0xc91/0x17c0 [ 1164.340147][T11145] ? drain_local_stock+0x630/0x630 [ 1164.345415][T11145] ? do_raw_spin_unlock+0x121/0x230 [ 1164.350683][T11145] try_charge_memcg+0xca1/0x17c0 [ 1164.355676][T11145] ? __lock_acquire+0x7d80/0x7d80 [ 1164.360783][T11145] ? folio_flags+0x120/0x120 [ 1164.365446][T11145] ? percpu_ref_tryget+0x15/0x180 [ 1164.370564][T11145] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1164.376353][T11145] ? __memcg_kmem_charge_page+0xeb/0x380 [ 1164.382053][T11145] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1164.388107][T11145] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1164.393895][T11145] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1164.399770][T11145] __memcg_kmem_charge_page+0x224/0x380 [ 1164.405379][T11145] __alloc_pages+0x222/0x460 [ 1164.410023][T11145] ? zone_statistics+0x170/0x170 [ 1164.412455][ T28] audit: type=1800 audit(1787688392.808:66): pid=11149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1311" name="power" dev="configfs" ino=26880 res=0 errno=0 [ 1164.415024][T11145] ? kvmalloc_node+0x70/0x180 [ 1164.415062][T11145] ? alloc_pages+0x4e1/0x740 [ 1164.444665][T11145] io_pages_map+0x308/0x4e0 [ 1164.449255][T11145] io_allocate_scq_urings+0x12a/0x620 [ 1164.454708][T11145] io_uring_create+0x712/0x1330 [ 1164.459644][T11145] __se_sys_io_uring_setup+0x29f/0x2b0 [ 1164.465175][T11145] ? __x64_sys_io_uring_setup+0x60/0x60 [ 1164.470805][T11145] ? lockdep_hardirqs_on+0x98/0x150 [ 1164.476069][T11145] do_syscall_64+0x55/0xb0 [ 1164.480566][T11145] ? clear_bhb_loop+0x40/0x90 [ 1164.485310][T11145] ? clear_bhb_loop+0x40/0x90 [ 1164.490053][T11145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1164.496017][T11145] RIP: 0033:0x7f628559e0d9 [ 1164.500484][T11145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1164.520162][T11145] RSP: 002b:00007f628645cfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1164.528760][T11145] RAX: ffffffffffffffda RBX: 0000200000000400 RCX: 00007f628559e0d9 [ 1164.536794][T11145] RDX: 0000200000000000 RSI: 0000200000000400 RDI: 0000000000000f00 [ 1164.544839][T11145] RBP: 00007f6285635024 R08: 0000000000000000 R09: 0000000000000000 [ 1164.552955][T11145] R10: 0000200000000080 R11: 0000000000000206 R12: 0000200000000000 [ 1164.560985][T11145] R13: 0000200000000080 R14: 0000200000000100 R15: 00007ffc46eba208 [ 1164.569038][T11145] [ 1164.589147][T11145] memory: usage 96kB, limit 96kB, failcnt 160 [ 1164.603956][T11145] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 1164.669335][T11145] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 1164.676334][T11145] Memory cgroup stats for /syz4/test: [ 1164.676452][T11145] cache 0 [ 1164.685063][T11145] rss 0 [ 1164.687875][T11145] rss_huge 0 [ 1164.693341][T11145] shmem 0 [ 1164.696316][T11145] mapped_file 0 [ 1164.700400][T11145] dirty 0 [ 1164.703387][T11145] writeback 0 [ 1164.706716][T11145] workingset_refault_anon 0 [ 1164.711377][T11145] workingset_refault_file 0 [ 1164.715955][T11145] swap 0 [ 1164.720190][T11145] pgpgin 0 [ 1164.723290][T11145] pgpgout 0 [ 1164.726432][T11145] pgfault 1 [ 1164.729639][T11145] pgmajfault 0 [ 1164.733051][T11145] inactive_anon 0 [ 1164.736717][T11145] active_anon 0 [ 1164.758391][T11145] inactive_file 0 [ 1164.784966][T11145] active_file 0 [ 1164.791193][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1313'. [ 1164.861223][T11158] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1165.042354][T11145] unevictable 0 [ 1165.070854][T11158] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1165.398258][T11145] hierarchical_memory_limit 98304 [ 1165.403549][T11145] hierarchical_memsw_limit 9223372036854771712 [ 1165.409941][T11145] total_cache 0 [ 1165.413442][T11145] total_rss 0 [ 1165.416801][T11145] total_rss_huge 0 [ 1165.420724][T11145] total_shmem 0 [ 1165.424233][T11145] total_mapped_file 0 [ 1165.428437][T11145] total_dirty 0 [ 1165.432566][T11145] total_writeback 0 [ 1165.436617][T11145] total_workingset_refault_anon 0 [ 1165.441946][T11145] total_workingset_refault_file 0 [ 1165.447220][T11145] total_swap 0 [ 1165.450890][T11145] total_pgpgin 0 [ 1165.454691][T11145] total_pgpgout 0 [ 1165.458809][T11145] total_pgfault 1 [ 1165.462682][T11145] total_pgmajfault 0 [ 1165.467553][T11145] total_inactive_anon 0 [ 1165.472711][T11145] total_active_anon 0 [ 1165.476924][T11145] total_inactive_file 0 [ 1165.481724][T11145] total_active_file 0 [ 1165.486155][T11145] total_unevictable 0 [ 1165.493657][T11145] anon_cost 0 [ 1165.497161][T11145] file_cost 0 [ 1165.500677][T11145] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.1309,pid=11144,uid=0 [ 1165.517344][T11145] Memory cgroup out of memory: Killed process 11144 (syz.4.1309) total-vm:102376kB, anon-rss:1344kB, file-rss:23168kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1166.094025][T11167] binder: 11166:11167 ioctl c0306201 200000000080 returned -14 [ 1168.005257][T11173] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1168.047527][T11176] binder: 11175:11176 ioctl c0306201 200000000080 returned -14 [ 1170.011904][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1324'. [ 1170.074180][T11195] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1170.081876][T11195] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1170.901470][T11199] binder: 11198:11199 ioctl c0306201 200000000080 returned -14 [ 1177.653020][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.659467][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.338456][ T9630] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1178.600943][ T9630] usb 3-1: Using ep0 maxpacket: 8 [ 1178.903211][ T9630] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1179.015911][ T9630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.065295][ T9630] usb 3-1: Product: syz [ 1179.090161][ T9630] usb 3-1: Manufacturer: syz [ 1179.094843][ T9630] usb 3-1: SerialNumber: syz [ 1179.149655][ T9630] usb 3-1: config 0 descriptor?? [ 1179.363930][ T9630] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1179.395611][T11241] binder: 11240:11241 ioctl c0306201 200000000080 returned -14 [ 1179.826421][T11244] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1337'. [ 1180.044397][T11244] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1337'. [ 1180.283991][T11244] syz.5.1337 invoked oom-killer: gfp_mask=0x402dc0(GFP_KERNEL_ACCOUNT|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1180.323372][T11244] CPU: 1 PID: 11244 Comm: syz.5.1337 Not tainted syzkaller #0 [ 1180.330943][T11244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1180.341061][T11244] Call Trace: [ 1180.344457][T11244] [ 1180.347440][T11244] dump_stack_lvl+0x18c/0x250 [ 1180.352196][T11244] ? show_regs_print_info+0x20/0x20 [ 1180.357450][T11244] ? load_image+0x420/0x420 [ 1180.362008][T11244] ? ___ratelimit+0x478/0x610 [ 1180.366761][T11244] ? radix_tree_cpu_dead+0x160/0x160 [ 1180.372128][T11244] dump_header+0xd8/0x820 [ 1180.376522][T11244] oom_kill_process+0x390/0x580 [ 1180.381474][T11244] out_of_memory+0xe0e/0x1200 [ 1180.386216][T11244] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1180.391900][T11244] ? print_unlock_imbalance_bug+0x160/0x160 [ 1180.397923][T11244] ? mutex_lock_nested+0x20/0x20 [ 1180.402949][T11244] ? unregister_oom_notifier+0x20/0x20 [ 1180.408923][T11244] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1180.414522][T11244] ? try_charge_memcg+0xc91/0x17c0 [ 1180.419692][T11244] ? drain_local_stock+0x630/0x630 [ 1180.424873][T11244] ? do_raw_spin_unlock+0x121/0x230 [ 1180.430136][T11244] try_charge_memcg+0xca1/0x17c0 [ 1180.435129][T11244] ? __lock_acquire+0x7d80/0x7d80 [ 1180.440226][T11244] ? folio_flags+0x120/0x120 [ 1180.444863][T11244] ? percpu_ref_tryget+0x15/0x180 [ 1180.449943][T11244] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1180.455721][T11244] ? __memcg_kmem_charge_page+0xeb/0x380 [ 1180.461414][T11244] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1180.467194][T11244] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1180.472963][T11244] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1180.478826][T11244] __memcg_kmem_charge_page+0x224/0x380 [ 1180.484464][T11244] __alloc_pages+0x222/0x460 [ 1180.489113][T11244] ? zone_statistics+0x170/0x170 [ 1180.494103][T11244] ? kvmalloc_node+0x70/0x180 [ 1180.498865][T11244] ? alloc_pages+0x4e1/0x740 [ 1180.503507][T11244] io_pages_map+0x308/0x4e0 [ 1180.508101][T11244] io_allocate_scq_urings+0x12a/0x620 [ 1180.513540][T11244] io_uring_create+0x712/0x1330 [ 1180.518456][T11244] __se_sys_io_uring_setup+0x29f/0x2b0 [ 1180.523989][T11244] ? __x64_sys_io_uring_setup+0x60/0x60 [ 1180.529634][T11244] ? lockdep_hardirqs_on+0x98/0x150 [ 1180.534920][T11244] do_syscall_64+0x55/0xb0 [ 1180.539384][T11244] ? clear_bhb_loop+0x40/0x90 [ 1180.544110][T11244] ? clear_bhb_loop+0x40/0x90 [ 1180.548836][T11244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1180.554781][T11244] RIP: 0033:0x7f77c9f9e0d9 [ 1180.559249][T11244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1180.578986][T11244] RSP: 002b:00007f77c81f5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1180.587474][T11244] RAX: ffffffffffffffda RBX: 0000200000000400 RCX: 00007f77c9f9e0d9 [ 1180.595497][T11244] RDX: 0000200000000000 RSI: 0000200000000400 RDI: 0000000000000f00 [ 1180.603509][T11244] RBP: 00007f77ca035024 R08: 0000000000000000 R09: 0000000000000000 [ 1180.611527][T11244] R10: 0000200000000080 R11: 0000000000000206 R12: 0000200000000000 [ 1180.619539][T11244] R13: 0000200000000080 R14: 0000200000000100 R15: 00007ffff88e20a8 [ 1180.627576][T11244] [ 1180.641036][T11244] memory: usage 100kB, limit 96kB, failcnt 142 [ 1180.647376][T11244] memory+swap: usage 100kB, limit 9007199254740988kB, failcnt 0 [ 1180.655365][T11244] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 1180.662484][T11244] Memory cgroup stats for /syz5/test: [ 1180.662733][T11244] cache 0 [ 1180.674423][ T9630] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 1180.686419][T11244] rss 0 [ 1180.689695][T11244] rss_huge 0 [ 1180.692926][T11244] shmem 0 [ 1180.695866][T11244] mapped_file 0 [ 1180.699856][T11244] dirty 0 [ 1180.702830][T11244] writeback 0 [ 1180.706114][T11244] workingset_refault_anon 0 [ 1180.720088][T11244] workingset_refault_file 0 [ 1180.743666][T11244] swap 0 [ 1180.746609][T11244] pgpgin 0 [ 1180.754839][T11244] pgpgout 0 [ 1180.758028][T11244] pgfault 1 [ 1180.764996][T11244] pgmajfault 0 [ 1180.772861][T11244] inactive_anon 0 [ 1180.776683][T11244] active_anon 0 [ 1180.783012][T11244] inactive_file 0 [ 1180.786714][T11244] active_file 0 [ 1180.794277][T11244] unevictable 0 [ 1180.797933][T11244] hierarchical_memory_limit 98304 [ 1180.811569][T11244] hierarchical_memsw_limit 9223372036854771712 [ 1180.817803][T11244] total_cache 0 [ 1180.847579][T11244] total_rss 0 [ 1180.859745][T11244] total_rss_huge 0 [ 1180.863562][T11244] total_shmem 0 [ 1180.867105][T11244] total_mapped_file 0 [ 1180.876408][T11244] total_dirty 0 [ 1180.881092][T11244] total_writeback 0 [ 1180.884952][T11244] total_workingset_refault_anon 0 [ 1180.890227][T11244] total_workingset_refault_file 0 [ 1180.895560][T11244] total_swap 0 [ 1180.901962][T11244] total_pgpgin 0 [ 1180.905733][T11244] total_pgpgout 0 [ 1180.910441][T11244] total_pgfault 1 [ 1180.914145][T11244] total_pgmajfault 0 [ 1180.923702][T11244] total_inactive_anon 0 [ 1180.933184][T11244] total_active_anon 0 [ 1180.937268][T11244] total_inactive_file 0 [ 1180.943977][T11244] total_active_file 0 [ 1180.948017][T11244] total_unevictable 0 [ 1180.958762][T11244] anon_cost 0 [ 1180.962114][T11244] file_cost 0 [ 1181.176826][T11244] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.1337,pid=11243,uid=0 [ 1182.040332][T11244] Memory cgroup out of memory: Killed process 11244 (syz.5.1337) total-vm:102376kB, anon-rss:1392kB, file-rss:23188kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1182.582939][ T5765] usb 3-1: USB disconnect, device number 28 [ 1186.837335][T11274] binder: 11273:11274 ioctl c0306201 200000000080 returned -14 [ 1188.195560][T11291] binder: 11289:11291 ioctl c0306201 200000000080 returned -14 [ 1189.913342][ T28] audit: type=1800 audit(1787688418.548:67): pid=11295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1349" name="zoned" dev="configfs" ino=26374 res=0 errno=0 [ 1190.024845][ T28] audit: type=1800 audit(1787688418.558:68): pid=11295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1349" name="zone_nr_conv" dev="configfs" ino=26375 res=0 errno=0 [ 1190.077366][ T28] audit: type=1800 audit(1787688418.558:69): pid=11295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1349" name="power" dev="configfs" ino=26376 res=0 errno=0 [ 1195.568412][T11318] binder: 11317:11318 ioctl c0306201 200000000080 returned -14 [ 1201.594228][T11326] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1201.601599][T11326] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1204.622425][T11331] binder: 11330:11331 ioctl c0306201 200000000080 returned -14 [ 1207.608508][ T28] audit: type=1800 audit(1787688436.268:70): pid=11337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1360" name="zoned" dev="configfs" ino=27189 res=0 errno=0 [ 1207.724708][T11339] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1362'. [ 1207.733997][ T28] audit: type=1800 audit(1787688436.298:71): pid=11337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1360" name="zone_nr_conv" dev="configfs" ino=27190 res=0 errno=0 [ 1207.780961][T11339] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1362'. [ 1207.809259][ T28] audit: type=1800 audit(1787688436.298:72): pid=11337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1360" name="power" dev="configfs" ino=27191 res=0 errno=0 [ 1207.866819][T11339] syz.2.1362 invoked oom-killer: gfp_mask=0x402dc0(GFP_KERNEL_ACCOUNT|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1207.880238][T11339] CPU: 0 PID: 11339 Comm: syz.2.1362 Not tainted syzkaller #0 [ 1207.887775][T11339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1207.897904][T11339] Call Trace: [ 1207.901240][T11339] [ 1207.904217][T11339] dump_stack_lvl+0x18c/0x250 [ 1207.908958][T11339] ? show_regs_print_info+0x20/0x20 [ 1207.914212][T11339] ? load_image+0x420/0x420 [ 1207.918774][T11339] ? ___ratelimit+0x478/0x610 [ 1207.923553][T11339] ? radix_tree_cpu_dead+0x160/0x160 [ 1207.928910][T11339] dump_header+0xd8/0x820 [ 1207.933296][T11339] oom_kill_process+0x390/0x580 [ 1207.938236][T11339] out_of_memory+0xe0e/0x1200 [ 1207.942988][T11339] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1207.948696][T11339] ? print_unlock_imbalance_bug+0x160/0x160 [ 1207.954650][T11339] ? mutex_lock_nested+0x20/0x20 [ 1207.959686][T11339] ? unregister_oom_notifier+0x20/0x20 [ 1207.965226][T11339] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1207.970838][T11339] ? try_charge_memcg+0xc91/0x17c0 [ 1207.976004][T11339] ? drain_local_stock+0x630/0x630 [ 1207.981192][T11339] ? do_raw_spin_unlock+0x121/0x230 [ 1207.986461][T11339] try_charge_memcg+0xca1/0x17c0 [ 1207.991469][T11339] ? __lock_acquire+0x7d80/0x7d80 [ 1207.996759][T11339] ? folio_flags+0x120/0x120 [ 1208.001424][T11339] ? percpu_ref_tryget+0x15/0x180 [ 1208.006524][T11339] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1208.012325][T11339] ? __memcg_kmem_charge_page+0xeb/0x380 [ 1208.018027][T11339] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1208.024254][T11339] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1208.030044][T11339] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1208.035940][T11339] __memcg_kmem_charge_page+0x224/0x380 [ 1208.041557][T11339] __alloc_pages+0x222/0x460 [ 1208.046230][T11339] ? zone_statistics+0x170/0x170 [ 1208.051227][T11339] ? kvmalloc_node+0x70/0x180 [ 1208.055975][T11339] ? alloc_pages+0x4e1/0x740 [ 1208.060627][T11339] io_pages_map+0x308/0x4e0 [ 1208.065206][T11339] io_allocate_scq_urings+0x12a/0x620 [ 1208.070671][T11339] io_uring_create+0x712/0x1330 [ 1208.075597][T11339] __se_sys_io_uring_setup+0x29f/0x2b0 [ 1208.081123][T11339] ? __x64_sys_io_uring_setup+0x60/0x60 [ 1208.086756][T11339] ? lockdep_hardirqs_on+0x98/0x150 [ 1208.092024][T11339] do_syscall_64+0x55/0xb0 [ 1208.096516][T11339] ? clear_bhb_loop+0x40/0x90 [ 1208.101257][T11339] ? clear_bhb_loop+0x40/0x90 [ 1208.106011][T11339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1208.111975][T11339] RIP: 0033:0x7f0ceaf9e0d9 [ 1208.116473][T11339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1208.136232][T11339] RSP: 002b:00007f0cebdd1fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1208.144726][T11339] RAX: ffffffffffffffda RBX: 0000200000000400 RCX: 00007f0ceaf9e0d9 [ 1208.152760][T11339] RDX: 0000200000000000 RSI: 0000200000000400 RDI: 0000000000000f00 [ 1208.160793][T11339] RBP: 00007f0ceb035024 R08: 0000000000000000 R09: 0000000000000000 [ 1208.169602][T11339] R10: 0000200000000080 R11: 0000000000000206 R12: 0000200000000000 [ 1208.177624][T11339] R13: 0000200000000080 R14: 0000200000000100 R15: 00007fffe83e5618 [ 1208.185673][T11339] [ 1208.226475][ T9205] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1208.236566][ T9205] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1208.248325][T11339] memory: usage 96kB, limit 96kB, failcnt 290 [ 1208.258373][ T9205] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1208.272105][ T9205] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1208.289961][ T9205] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1208.297480][ T9205] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1208.311882][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1208.345635][T11339] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 1208.356694][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1208.364372][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1208.381769][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1208.393355][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1208.404452][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1209.166399][T11339] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 1209.291374][T11339] Memory cgroup stats for /syz2/test: [ 1209.291910][T11339] cache 0 [ 1209.588359][T11339] rss 0 [ 1210.024611][T11339] rss_huge 0 [ 1210.048528][T11339] shmem 0 [ 1210.085694][T11339] mapped_file 0 [ 1210.170160][T11339] dirty 0 [ 1210.231552][T11339] writeback 0 [ 1210.314102][T11339] workingset_refault_anon 0 [ 1210.449550][ T5787] Bluetooth: hci2: command tx timeout [ 1212.058211][T11339] workingset_refault_file 0 [ 1212.062809][T11339] swap 0 [ 1212.065705][T11339] pgpgin 0 [ 1212.068856][T11339] pgpgout 0 [ 1212.072006][T11339] pgfault 2 [ 1212.075156][T11339] pgmajfault 0 [ 1212.078625][T11339] inactive_anon 0 [ 1212.082310][T11339] active_anon 0 [ 1212.085807][T11339] inactive_file 0 [ 1212.089534][T11339] active_file 0 [ 1212.093034][T11339] unevictable 0 [ 1212.096532][T11339] hierarchical_memory_limit 98304 [ 1212.148131][T11339] hierarchical_memsw_limit 9223372036854771712 [ 1212.168791][T11339] total_cache 0 [ 1212.172345][T11339] total_rss 0 [ 1212.178315][T11339] total_rss_huge 0 [ 1212.182111][T11339] total_shmem 0 [ 1212.185601][T11339] total_mapped_file 0 [ 1212.189828][T11339] total_dirty 0 [ 1212.193333][T11339] total_writeback 0 [ 1212.197174][T11339] total_workingset_refault_anon 0 [ 1212.202381][T11339] total_workingset_refault_file 0 [ 1212.207454][T11339] total_swap 0 [ 1212.211101][T11339] total_pgpgin 0 [ 1212.214804][T11339] total_pgpgout 0 [ 1212.218559][T11339] total_pgfault 2 [ 1212.222232][T11339] total_pgmajfault 0 [ 1212.226259][T11339] total_inactive_anon 0 [ 1212.236467][T11339] total_active_anon 0 [ 1212.241567][T11339] total_inactive_file 0 [ 1212.245784][T11339] total_active_file 0 [ 1212.250202][T11339] total_unevictable 0 [ 1212.255181][T11339] anon_cost 0 [ 1212.259999][T11339] file_cost 0 [ 1212.264362][T11339] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.1362,pid=11338,uid=0 [ 1212.400625][T11339] Memory cgroup out of memory: Killed process 11339 (syz.2.1362) total-vm:102376kB, anon-rss:1296kB, file-rss:23040kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1212.535219][ T5787] Bluetooth: hci2: command tx timeout [ 1212.639223][T11358] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1213.630427][T11365] binder: 11363:11365 ioctl c0306201 200000000080 returned -14 [ 1213.706705][T11340] chnl_net:caif_netlink_parms(): no params data found [ 1214.610756][ T5787] Bluetooth: hci2: command tx timeout [ 1215.859934][T11380] binder: 11379:11380 ioctl c0306201 200000000080 returned -14 [ 1216.688440][ T5787] Bluetooth: hci2: command tx timeout [ 1218.493583][ T28] audit: type=1800 audit(1787688447.138:73): pid=11383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1370" name="zoned" dev="configfs" ino=26536 res=0 errno=0 [ 1218.544740][ T28] audit: type=1800 audit(1787688447.138:74): pid=11383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1370" name="zone_nr_conv" dev="configfs" ino=26537 res=0 errno=0 [ 1218.740533][ T28] audit: type=1800 audit(1787688447.138:75): pid=11383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1370" name="power" dev="configfs" ino=26538 res=0 errno=0 [ 1221.145750][T10729] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.601105][T11393] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1223.457047][T11340] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.497218][T11340] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.572565][T11340] bridge_slave_0: entered allmulticast mode [ 1223.714537][T11340] bridge_slave_0: entered promiscuous mode [ 1224.235570][T10729] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.337784][T11340] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.380277][T11340] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.394570][T11340] bridge_slave_1: entered allmulticast mode [ 1224.430030][T11340] bridge_slave_1: entered promiscuous mode [ 1224.539325][T10729] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.618340][T11340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1224.632909][T11340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1224.674646][T10729] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.794635][T11340] team0: Port device team_slave_0 added [ 1224.839729][T11340] team0: Port device team_slave_1 added [ 1224.941761][T11340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1224.949158][T11340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1224.977719][T11340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1225.017771][T11340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1225.037987][T11340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1225.146833][T11340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1225.465008][T11340] hsr_slave_0: entered promiscuous mode [ 1225.486048][T11340] hsr_slave_1: entered promiscuous mode [ 1225.529119][T11340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1225.536782][T11340] Cannot create hsr debugfs directory [ 1225.625107][T11414] binder: 11413:11414 ioctl c0306201 200000000080 returned -14 [ 1226.522661][ T9205] Bluetooth: hci2: command tx timeout [ 1228.274759][ T28] audit: type=1800 audit(1787688456.938:76): pid=11429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1383" name="zoned" dev="configfs" ino=27800 res=0 errno=0 [ 1230.181279][ T28] audit: type=1800 audit(1787688456.938:77): pid=11429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1383" name="zone_nr_conv" dev="configfs" ino=27801 res=0 errno=0 [ 1230.369592][ T28] audit: type=1800 audit(1787688456.958:78): pid=11429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1383" name="power" dev="configfs" ino=27802 res=0 errno=0 [ 1230.850611][T11450] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1230.859965][T11450] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1232.540616][T11340] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1232.782398][T11340] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1232.827921][T11340] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1232.860452][T11459] binder: 11458:11459 ioctl c0306201 200000000080 returned -14 [ 1238.749597][T11340] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1238.822150][ T28] audit: type=1800 audit(1787688467.478:79): pid=11469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1386" name="zoned" dev="configfs" ino=27956 res=0 errno=0 [ 1238.944634][ T28] audit: type=1800 audit(1787688467.478:80): pid=11469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1386" name="zone_nr_conv" dev="configfs" ino=27957 res=0 errno=0 [ 1239.022729][ T28] audit: type=1800 audit(1787688467.478:81): pid=11469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1386" name="power" dev="configfs" ino=27958 res=0 errno=0 [ 1239.104375][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.128425][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1242.344280][T11340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1242.507582][T11340] 8021q: adding VLAN 0 to HW filter on device team0 [ 1242.790699][T10729] hsr_slave_0: left promiscuous mode [ 1243.609885][T10729] hsr_slave_1: left promiscuous mode [ 1243.616302][T10729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1243.638286][T10729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1243.669565][T10729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1243.677247][T10729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1243.730727][T10729] bridge_slave_1: left allmulticast mode [ 1243.736484][T10729] bridge_slave_1: left promiscuous mode [ 1243.768114][T10729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.805918][T10729] bridge_slave_0: left allmulticast mode [ 1243.824980][T10729] bridge_slave_0: left promiscuous mode [ 1243.846129][T10729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.926076][T10729] veth1_macvtap: left promiscuous mode [ 1243.934662][T10729] veth0_macvtap: left promiscuous mode [ 1243.948361][T10729] veth1_vlan: left promiscuous mode [ 1243.963997][T10729] veth0_vlan: left promiscuous mode [ 1244.127676][ T28] audit: type=1800 audit(1787688472.788:82): pid=11505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1397" name="zoned" dev="configfs" ino=28060 res=0 errno=0 [ 1244.196613][ T28] audit: type=1800 audit(1787688472.828:83): pid=11505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1397" name="zone_nr_conv" dev="configfs" ino=28061 res=0 errno=0 [ 1244.267463][ T28] audit: type=1800 audit(1787688472.828:84): pid=11505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1397" name="power" dev="configfs" ino=27510 res=0 errno=0 [ 1244.526409][T11511] CIFS: Attempting to mount //127.0.0.1/share [ 1244.541393][T11511] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1244.549250][T11511] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1246.674798][ T28] audit: type=1800 audit(1787688475.338:85): pid=11523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1401" name="zoned" dev="configfs" ino=27533 res=0 errno=0 [ 1246.737494][ T28] audit: type=1800 audit(1787688475.368:86): pid=11523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1401" name="zone_nr_conv" dev="configfs" ino=27534 res=0 errno=0 [ 1246.758870][ T28] audit: type=1800 audit(1787688475.368:87): pid=11523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1401" name="power" dev="configfs" ino=27535 res=0 errno=0 [ 1246.857772][ T28] audit: type=1800 audit(1787688475.518:88): pid=11525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1402" name="zoned" dev="configfs" ino=28102 res=0 errno=0 [ 1246.900913][ T28] audit: type=1800 audit(1787688475.548:89): pid=11525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1402" name="zone_nr_conv" dev="configfs" ino=28103 res=0 errno=0 [ 1246.925679][ T28] audit: type=1800 audit(1787688475.548:90): pid=11525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1402" name="power" dev="configfs" ino=28104 res=0 errno=0 [ 1247.293555][T11529] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1250.317382][T10729] team0 (unregistering): Port device team_slave_1 removed [ 1252.204510][T10729] team0 (unregistering): Port device team_slave_0 removed [ 1252.257428][T10729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1252.336703][T10729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1252.933784][T10729] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1252.981760][T10729] bond0 (unregistering): Released all slaves [ 1253.661900][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.669229][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.941028][T11551] CIFS: Attempting to mount //127.0.0.1/share [ 1253.962988][T11551] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1253.970997][T11551] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1254.199460][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.206708][ T3448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1254.878816][ T28] audit: type=1800 audit(1787688483.548:91): pid=11563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1411" name="zoned" dev="configfs" ino=28168 res=0 errno=0 [ 1254.960908][ T28] audit: type=1800 audit(1787688483.568:92): pid=11563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1411" name="zone_nr_conv" dev="configfs" ino=28169 res=0 errno=0 [ 1255.088137][ T28] audit: type=1800 audit(1787688483.568:93): pid=11563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1411" name="power" dev="configfs" ino=28170 res=0 errno=0 [ 1255.147057][ T28] audit: type=1800 audit(1787688483.618:94): pid=11560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1410" name="zoned" dev="configfs" ino=28176 res=0 errno=0 [ 1255.177920][ T28] audit: type=1800 audit(1787688483.628:95): pid=11560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1410" name="zone_nr_conv" dev="configfs" ino=28177 res=0 errno=0 [ 1258.172093][ T28] audit: type=1800 audit(1787688483.628:96): pid=11560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1410" name="power" dev="configfs" ino=28178 res=0 errno=0 [ 1259.544668][ T28] audit: type=1800 audit(1787688488.208:97): pid=11580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1415" name="zoned" dev="configfs" ino=28221 res=0 errno=0 [ 1259.595837][T11340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1259.623781][ T28] audit: type=1800 audit(1787688488.208:98): pid=11580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1415" name="zone_nr_conv" dev="configfs" ino=28222 res=0 errno=0 [ 1260.709241][ T28] audit: type=1800 audit(1787688488.208:99): pid=11580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1415" name="power" dev="configfs" ino=28223 res=0 errno=0 [ 1262.343138][T11611] CIFS: Attempting to mount //127.0.0.1/share [ 1262.359207][T11611] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1262.367226][T11611] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1267.093037][T11648] overlayfs: failed to resolve './file1/file0': -2 [ 1268.411088][T11659] fuse: Unknown parameter 'ÿ00000000000000001373' [ 1269.636353][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1269.691351][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1269.700836][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1269.710800][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1269.720289][ T5787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1269.728763][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1271.721217][T11692] binder: 11690:11692 ioctl c0306201 200000000080 returned -14 [ 1271.828292][ T9205] Bluetooth: hci4: command tx timeout [ 1274.155409][ T5787] Bluetooth: hci4: command tx timeout [ 1274.238908][T11663] chnl_net:caif_netlink_parms(): no params data found [ 1276.208300][ T5787] Bluetooth: hci4: command tx timeout [ 1276.410260][ T28] audit: type=1800 audit(1787688505.078:100): pid=11712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1437" name="zoned" dev="configfs" ino=28854 res=0 errno=0 [ 1276.446543][ T28] audit: type=1800 audit(1787688505.108:101): pid=11712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1437" name="zone_nr_conv" dev="configfs" ino=28507 res=0 errno=0 [ 1276.492019][T11714] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1438'. [ 1276.501200][T11714] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1438'. [ 1276.517225][ T28] audit: type=1800 audit(1787688505.108:102): pid=11712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1437" name="power" dev="configfs" ino=28508 res=0 errno=0 [ 1276.578278][T11714] syz.5.1438 invoked oom-killer: gfp_mask=0x402dc0(GFP_KERNEL_ACCOUNT|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1276.653400][T11714] CPU: 1 PID: 11714 Comm: syz.5.1438 Not tainted syzkaller #0 [ 1276.661004][T11714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1276.671127][T11714] Call Trace: [ 1276.674549][T11714] [ 1276.677534][T11714] dump_stack_lvl+0x18c/0x250 [ 1276.682302][T11714] ? show_regs_print_info+0x20/0x20 [ 1276.687660][T11714] ? load_image+0x420/0x420 [ 1276.692239][T11714] ? ___ratelimit+0x478/0x610 [ 1276.697088][T11714] ? radix_tree_cpu_dead+0x160/0x160 [ 1276.702445][T11714] dump_header+0xd8/0x820 [ 1276.706849][T11714] oom_kill_process+0x390/0x580 [ 1276.711785][T11714] out_of_memory+0xe0e/0x1200 [ 1276.716538][T11714] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1276.722256][T11714] ? print_unlock_imbalance_bug+0x160/0x160 [ 1276.728229][T11714] ? mutex_lock_nested+0x20/0x20 [ 1276.733245][T11714] ? unregister_oom_notifier+0x20/0x20 [ 1276.738865][T11714] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1276.744456][T11714] ? try_charge_memcg+0xc91/0x17c0 [ 1276.749610][T11714] ? drain_local_stock+0x630/0x630 [ 1276.754792][T11714] ? do_raw_spin_unlock+0x121/0x230 [ 1276.760044][T11714] try_charge_memcg+0xca1/0x17c0 [ 1276.765017][T11714] ? __lock_acquire+0x7d80/0x7d80 [ 1276.770093][T11714] ? folio_flags+0x120/0x120 [ 1276.774718][T11714] ? percpu_ref_tryget+0x15/0x180 [ 1276.779781][T11714] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1276.787542][T11714] ? __memcg_kmem_charge_page+0xeb/0x380 [ 1276.793237][T11714] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1276.799011][T11714] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1276.804780][T11714] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1276.810624][T11714] __memcg_kmem_charge_page+0x224/0x380 [ 1276.816209][T11714] __alloc_pages+0x222/0x460 [ 1276.820835][T11714] ? zone_statistics+0x170/0x170 [ 1276.825810][T11714] ? kvmalloc_node+0x70/0x180 [ 1276.830525][T11714] ? alloc_pages+0x4e1/0x740 [ 1276.835160][T11714] io_pages_map+0x308/0x4e0 [ 1276.839708][T11714] io_allocate_scq_urings+0x12a/0x620 [ 1276.845125][T11714] io_uring_create+0x712/0x1330 [ 1276.850026][T11714] __se_sys_io_uring_setup+0x29f/0x2b0 [ 1276.855527][T11714] ? __x64_sys_io_uring_setup+0x60/0x60 [ 1276.861122][T11714] ? lockdep_hardirqs_on+0x98/0x150 [ 1276.866368][T11714] do_syscall_64+0x55/0xb0 [ 1276.870830][T11714] ? clear_bhb_loop+0x40/0x90 [ 1276.875540][T11714] ? clear_bhb_loop+0x40/0x90 [ 1276.880262][T11714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1276.886203][T11714] RIP: 0033:0x7f77c9f9e0d9 [ 1276.890646][T11714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1276.910382][T11714] RSP: 002b:00007f77c81f5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1276.918930][T11714] RAX: ffffffffffffffda RBX: 0000200000000400 RCX: 00007f77c9f9e0d9 [ 1276.926970][T11714] RDX: 0000200000000000 RSI: 0000200000000400 RDI: 0000000000000f00 [ 1276.934981][T11714] RBP: 00007f77ca035024 R08: 0000000000000000 R09: 0000000000000000 [ 1276.942997][T11714] R10: 0000200000000080 R11: 0000000000000206 R12: 0000200000000000 [ 1276.951002][T11714] R13: 0000200000000080 R14: 0000200000000100 R15: 00007ffff88e20a8 [ 1276.959020][T11714] [ 1276.993533][T11714] memory: usage 96kB, limit 96kB, failcnt 239 [ 1277.031163][T11714] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 1277.094000][T11663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1277.121993][T11718] overlayfs: failed to resolve './file1/file0': -2 [ 1277.181620][T11714] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 1277.253471][T11663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.349162][T11714] Memory cgroup stats for /syz5/test: [ 1277.350355][T11714] cache 0 [ 1277.443785][T11663] bridge_slave_0: entered allmulticast mode [ 1277.503954][T11714] rss 0 [ 1277.536880][T11714] rss_huge 0 [ 1277.554891][T11663] bridge_slave_0: entered promiscuous mode [ 1277.574329][T11714] shmem 0 [ 1277.597097][T11714] mapped_file 0 [ 1277.636798][T11714] dirty 0 [ 1277.682515][T11714] writeback 0 [ 1277.719544][T11714] workingset_refault_anon 0 [ 1277.772137][T11714] workingset_refault_file 0 [ 1277.822467][T11714] swap 0 [ 1277.858650][T11714] pgpgin 0 [ 1277.883864][T11714] pgpgout 0 [ 1277.887073][T11714] pgfault 2 [ 1277.890441][T11714] pgmajfault 0 [ 1277.893868][T11714] inactive_anon 0 [ 1277.897542][T11714] active_anon 0 [ 1277.902111][T11714] inactive_file 0 [ 1277.905807][T11714] active_file 0 [ 1277.909582][T11714] unevictable 0 [ 1277.913212][T11714] hierarchical_memory_limit 98304 [ 1277.918376][T11714] hierarchical_memsw_limit 9223372036854771712 [ 1277.924717][T11714] total_cache 0 [ 1277.928347][T11714] total_rss 0 [ 1277.931682][T11714] total_rss_huge 0 [ 1277.935578][T11714] total_shmem 0 [ 1277.939156][T11714] total_mapped_file 0 [ 1277.943175][T11714] total_dirty 0 [ 1277.946910][T11714] total_writeback 0 [ 1277.950829][T11714] total_workingset_refault_anon 0 [ 1277.955924][T11714] total_workingset_refault_file 0 [ 1277.961269][T11714] total_swap 0 [ 1277.964713][T11714] total_pgpgin 0 [ 1277.968411][T11714] total_pgpgout 0 [ 1277.972189][T11714] total_pgfault 2 [ 1277.975863][T11714] total_pgmajfault 0 [ 1277.980023][T11714] total_inactive_anon 0 [ 1277.984685][T11714] total_active_anon 0 [ 1277.988833][T11714] total_inactive_file 0 [ 1277.993016][T11714] total_active_file 0 [ 1277.998750][T11714] total_unevictable 0 [ 1278.003407][T11714] anon_cost 0 [ 1278.006722][T11714] file_cost 0 [ 1278.010169][T11714] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.1438,pid=11713,uid=0 [ 1278.041614][T11714] Memory cgroup out of memory: Killed process 11713 (syz.5.1438) total-vm:102376kB, anon-rss:1344kB, file-rss:23168kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1278.141643][T11722] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1278.149608][T11722] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1278.288378][ T5787] Bluetooth: hci4: command tx timeout [ 1278.807170][T11663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.825306][T11663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.879383][T11663] bridge_slave_1: entered allmulticast mode [ 1278.888001][T11663] bridge_slave_1: entered promiscuous mode [ 1278.980389][T11729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1441'. [ 1279.050461][T11730] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1279.058539][T11730] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1279.782529][T11733] binder: 11732:11733 ioctl c0306201 200000000080 returned -14 [ 1282.255946][ T5787] Bluetooth: hci4: command tx timeout [ 1282.344982][T11738] binder: 11737:11738 ioctl c0306201 200000000080 returned -14 [ 1285.783717][T11663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1285.963862][T11663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1286.373573][T11663] team0: Port device team_slave_0 added [ 1286.529596][T11663] team0: Port device team_slave_1 added [ 1287.133148][T11663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1287.193253][T11663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1287.371028][T11663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1287.865572][T11663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1287.977637][T11663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.114338][T11663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1291.652282][T11768] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1451'. [ 1291.676187][T11768] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1291.683725][T11768] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1292.475013][T11772] binder: 11771:11772 ioctl c0306201 200000000080 returned -14 [ 1292.546452][T11663] hsr_slave_0: entered promiscuous mode [ 1292.569384][T11663] hsr_slave_1: entered promiscuous mode [ 1298.007520][T11663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1298.015861][T11663] Cannot create hsr debugfs directory [ 1298.121364][T11778] binder: 11777:11778 ioctl c0306201 200000000080 returned -14 [ 1300.023104][ T3448] hsr_slave_0: left promiscuous mode [ 1300.354455][ T3448] hsr_slave_1: left promiscuous mode [ 1300.506853][T11798] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1300.514626][T11798] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1300.960912][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.967388][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.004103][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1301.106785][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1301.178882][ T3448] bridge_slave_1: left allmulticast mode [ 1301.188267][ T3448] bridge_slave_1: left promiscuous mode [ 1301.194136][ T3448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.269092][ T3448] bridge_slave_0: left allmulticast mode [ 1301.274788][ T3448] bridge_slave_0: left promiscuous mode [ 1301.520915][ T3448] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.388366][T11815] binder: 11814:11815 ioctl c0306201 200000000080 returned -14 [ 1303.504709][T11812] raw_sendmsg: syz.6.1461 forgot to set AF_INET. Fix it! [ 1304.154664][T11823] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1465'. [ 1306.037920][T11834] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1306.045771][T11834] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1306.844583][ T3448] team0 (unregistering): Port device team_slave_1 removed [ 1307.075053][ T3448] team0 (unregistering): Port device team_slave_0 removed [ 1307.148215][ T3448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1307.163816][T11839] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1307.266865][ T3448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1307.758148][ T7294] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1308.197794][ T3448] bond0 (unregistering): Released all slaves [ 1308.774012][ T7294] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1308.808943][ T7294] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1308.863196][ T7294] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1308.908371][ T7294] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1308.968810][ T7294] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1308.991987][ T7294] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.014825][ T7294] usb 6-1: Product: syz [ 1309.028184][ T7294] usb 6-1: Manufacturer: syz [ 1309.046870][ T7294] usb 6-1: SerialNumber: syz [ 1309.080528][ T7294] usb 6-1: config 0 descriptor?? [ 1309.336631][ T7294] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1309.606635][T11838] usb 6-1: Couldn't submit interrupt_out_urb -90 [ 1309.633176][ T9630] usb 6-1: USB disconnect, device number 22 [ 1309.745280][T11861] fuse: Unknown parameter 'ÿ00000000000000000516' [ 1312.059858][ T9634] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1312.458610][ T9634] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1312.609780][ T9634] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.883634][ T9634] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=9d.9e [ 1313.003041][ T9634] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.115185][ T9634] usb 6-1: Product: syz [ 1313.176002][ T9634] usb 6-1: Manufacturer: syz [ 1313.245312][ T9634] usb 6-1: SerialNumber: syz [ 1313.586603][T11663] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1313.717723][T11663] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1313.767977][ T9634] usb 6-1: can't set config #4, error -71 [ 1313.794005][ T9634] usb 6-1: USB disconnect, device number 23 [ 1313.840424][T11663] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1313.930933][T11663] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1315.094541][T11663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1315.172224][T11663] 8021q: adding VLAN 0 to HW filter on device team0 [ 1315.373963][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.381314][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1316.184061][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.191356][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1316.427587][T11663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1318.448970][ T9205] Bluetooth: hci4: command tx timeout [ 1322.400582][T11915] fuse: Unknown parameter 'ÿ00000000000000000529' [ 1322.980767][T11663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1323.416068][T11930] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1323.768486][T11930] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1323.798773][T11930] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.846371][T11930] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=9d.9e [ 1323.883403][T11930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.915770][T11930] usb 3-1: Product: syz [ 1323.948242][T11930] usb 3-1: Manufacturer: syz [ 1323.952935][T11930] usb 3-1: SerialNumber: syz [ 1324.104143][T11941] binder: 11940:11941 ioctl c0306201 200000000080 returned -14 [ 1324.218687][T11930] kvaser_usb 3-1:4.0: Cannot get usb endpoint(s) [ 1324.572379][T11930] usb 3-1: USB disconnect, device number 29 [ 1326.458672][T11958] netlink: 'syz.6.1491': attribute type 10 has an invalid length. [ 1326.662810][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1493'. [ 1326.933038][T11966] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1326.945833][T11966] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1327.473225][T11958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.480811][T11958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.670239][T11958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.677490][T11958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1327.686268][T11958] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.693594][T11958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1327.711771][T11958] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1331.016107][T11976] binder: 11975:11976 ioctl c0306201 200000000080 returned -14 [ 1332.470481][T11990] binder: 11989:11990 ioctl c0306201 200000000080 returned -14 [ 1332.519883][T11992] Bluetooth: MGMT ver 1.22 [ 1333.758980][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1333.796453][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1333.836958][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1333.861368][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1333.870199][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1333.883953][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1334.534635][T12003] dlm: closing connection to node -1 [ 1334.555378][T12003] dlm: io handling for node: -1 stopped [ 1334.565071][T12003] dlm: closing connection to node -1 done [ 1334.650470][T12008] netlink: 'syz.2.1506': attribute type 10 has an invalid length. [ 1334.694532][T12008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.701917][T12008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.843474][T12008] bridge0: port 2(bridge_slave_1) entered blocking state [ 1334.850821][T12008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1334.858519][T12008] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.865745][T12008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1335.822217][T12008] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1336.048220][ T5787] Bluetooth: hci2: command tx timeout [ 1338.128109][ T5787] Bluetooth: hci2: command tx timeout [ 1339.454186][T12036] binder: 12033:12036 ioctl c0306201 200000000080 returned -14 [ 1339.596528][T12043] libceph: secret too big 258 [ 1340.714980][ T5787] Bluetooth: hci2: command tx timeout [ 1341.154950][T11996] chnl_net:caif_netlink_parms(): no params data found [ 1342.769411][ T5787] Bluetooth: hci2: command tx timeout [ 1342.806759][T11996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.814582][T11996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.822884][T11996] bridge_slave_0: entered allmulticast mode [ 1342.830623][T11996] bridge_slave_0: entered promiscuous mode [ 1342.852871][T11996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.872674][T11996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.896020][T11996] bridge_slave_1: entered allmulticast mode [ 1342.932637][T11996] bridge_slave_1: entered promiscuous mode [ 1342.966992][T12070] binder: 12069:12070 ioctl c0306201 200000000080 returned -14 [ 1343.165357][T11996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1343.200463][T11996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1343.793550][T11996] team0: Port device team_slave_0 added [ 1343.896240][T11996] team0: Port device team_slave_1 added [ 1344.015703][ T6359] hsr_slave_0: left promiscuous mode [ 1344.026909][ T6359] hsr_slave_1: left promiscuous mode [ 1344.162416][ T6359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1344.177881][ T6359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1344.200450][ T6359] bridge_slave_1: left allmulticast mode [ 1344.206174][ T6359] bridge_slave_1: left promiscuous mode [ 1344.228383][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.267873][ T6359] bridge_slave_0: left allmulticast mode [ 1344.278344][ T6359] bridge_slave_0: left promiscuous mode [ 1344.284260][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.352249][ T28] audit: type=1800 audit(1787688573.018:103): pid=12086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1519" name="zoned" dev="configfs" ino=29566 res=0 errno=0 [ 1344.422983][ T28] audit: type=1800 audit(1787688573.018:104): pid=12086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1519" name="zone_nr_conv" dev="configfs" ino=29567 res=0 errno=0 [ 1344.454504][ T28] audit: type=1800 audit(1787688573.038:105): pid=12086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1519" name="power" dev="configfs" ino=29568 res=0 errno=0 [ 1345.784469][T12104] binder: 12103:12104 ioctl c0306201 200000000080 returned -14 [ 1346.600251][ T6359] team0 (unregistering): Port device team_slave_1 removed [ 1346.764026][ T6359] team0 (unregistering): Port device team_slave_0 removed [ 1348.746926][ T6359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1348.833777][ T6359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1349.347339][ T6359] bond0 (unregistering): Released all slaves [ 1350.276351][T11996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1350.356237][T11996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1350.464756][T11996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1350.575146][T11996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1350.630909][T12119] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1350.639299][T12119] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1350.691815][T11996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1351.066333][T11996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1351.691019][T11996] hsr_slave_0: entered promiscuous mode [ 1351.701821][T11996] hsr_slave_1: entered promiscuous mode [ 1351.718600][T11996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1351.726461][T11996] Cannot create hsr debugfs directory [ 1351.843746][T12128] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1353.019887][T12145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1528'. [ 1353.399748][T12149] binder: 12148:12149 ioctl c0306201 200000000080 returned -14 [ 1356.137405][T11996] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1356.155944][T12158] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1356.190286][T11996] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1356.360454][T11996] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1356.676941][T11996] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1357.510204][T12177] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1357.517767][T12177] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1358.250647][T11996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1358.271002][T11996] 8021q: adding VLAN 0 to HW filter on device team0 [ 1358.311505][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.318798][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1358.561171][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.568463][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1359.246400][T12182] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1535'. [ 1361.528082][T11932] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1361.605806][T11996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1361.761162][T11932] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.793245][T11932] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1361.849055][T11932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.892936][T11932] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 1361.975582][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.982128][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.141827][T11932] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 1362.149801][T11932] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 1362.161621][T11932] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 1362.171186][T11932] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 1362.198401][T11932] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1362.223703][T11932] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 1362.232555][T11932] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 1362.244957][T11932] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1362.338852][T12216] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1362.756978][ T9630] usb 6-1: USB disconnect, device number 24 [ 1362.792416][T11996] veth0_vlan: entered promiscuous mode [ 1362.819884][ T9630] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1362.831763][T11996] veth1_vlan: entered promiscuous mode [ 1362.875643][ T9630] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1362.921498][ T9630] keyspan 6-1:1.0: device disconnected [ 1362.950542][T11996] veth0_macvtap: entered promiscuous mode [ 1362.996501][T11996] veth1_macvtap: entered promiscuous mode [ 1363.045020][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.066273][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.093312][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.117504][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.127877][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.152988][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.175769][T11996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1363.211533][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.230543][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.240873][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.257530][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.275418][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.286374][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.306036][T11996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1363.326442][T11996] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.356430][T11996] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.382819][T11996] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.396224][T11996] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.626187][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.668312][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.797442][T10210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.817430][T10210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.328755][ T28] audit: type=1800 audit(1787688598.978:106): pid=12270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1547" name="zoned" dev="configfs" ino=31767 res=0 errno=0 [ 1370.889500][T12275] fuse: Unknown parameter 'ÿ00000000000000000786' [ 1370.993040][T12280] libceph: secret too big 258 [ 1371.899876][ T28] audit: type=1800 audit(1787688598.978:107): pid=12270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1547" name="zone_nr_conv" dev="configfs" ino=31768 res=0 errno=0 [ 1372.076564][ T28] audit: type=1800 audit(1787688599.118:108): pid=12274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1547" name="power" dev="configfs" ino=31769 res=0 errno=0 [ 1373.578064][T12293] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1374.907056][T12309] libceph: secret too big 258 [ 1376.357899][T12303] CIFS: Attempting to mount //127.0.0.1/share [ 1376.384390][T12303] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1376.392403][T12303] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1377.139086][T12319] fuse: Unknown parameter 'ÿ00000000000000000801' [ 1378.930176][T12331] fuse: Unknown parameter 'ÿ00000000000000001515' [ 1379.061257][T12330] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1379.976671][T12349] dlm: closing connection to node -1 [ 1380.013150][T12349] ------------[ cut here ]------------ [ 1380.019212][T12349] WARNING: CPU: 0 PID: 12349 at fs/dlm/lowcomms.c:1450 dlm_lowcomms_close+0x129/0x430 [ 1380.029280][T12349] Modules linked in: [ 1380.033244][T12349] CPU: 0 PID: 12349 Comm: syz.7.1567 Not tainted syzkaller #0 [ 1380.040872][T12349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1380.051354][T12349] RIP: 0010:dlm_lowcomms_close+0x129/0x430 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1380.057255][T12349] Code: e8 cc e2 02 f7 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 15 60 5b f7 eb a2 e8 ae e2 02 f7 eb 05 e8 a7 e2 02 f7 <0f> 0b 44 89 f7 e8 0d 51 98 f7 b8 fe ff ff ff 48 83 c4 20 5b 41 5c [ 1380.077148][T12349] RSP: 0018:ffffc900032e7c88 EFLAGS: 00010283 [ 1380.083703][T12349] RAX: ffffffff8a848fc2 RBX: 00000000ffffffff RCX: 0000000000080000 [ 1380.092213][T12349] RDX: ffffc90010461000 RSI: 0000000000004829 RDI: 000000000000482a [ 1380.101266][T12349] RBP: dffffc0000000000 R08: dffffc0000000000 R09: 1ffffffff2751d4d [ 1380.109519][T12349] R10: dffffc0000000000 R11: fffffbfff2751d4e R12: dffffc0000000000 [ 1380.117579][T12349] R13: ffffffff8a848ef5 R14: 0000000000000001 R15: 0000000000000000 [ 1380.125726][T12349] FS: 00007f5026a956c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1380.135155][T12349] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1380.141872][T12349] CR2: 0000561a6fa74250 CR3: 000000001ebc3000 CR4: 00000000003506f0 [ 1380.149979][T12349] Call Trace: [ 1380.153309][T12349] [ 1380.156379][T12349] ? dlm_midcomms_close+0x39d/0x4a0 [ 1380.161730][T12349] ? dlm_midcomms_close+0x48/0x4a0 [ 1380.166947][T12349] drop_comm+0x61/0x190 [ 1380.171241][T12349] ? configfs_rmdir+0x88a/0x980 [ 1380.176159][T12349] ? make_comm+0x230/0x230 [ 1380.180715][T12349] configfs_rmdir+0x892/0x980 [ 1380.185472][T12349] vfs_rmdir+0x352/0x4b0 [ 1380.189878][T12349] do_rmdir+0x29f/0x590 [ 1380.194099][T12349] ? __check_object_size+0x4fc/0xa40 [ 1380.200059][T12349] ? d_delete_notify+0x150/0x150 [ 1380.205097][T12349] ? getname_flags+0x20a/0x500 [ 1380.210242][T12349] __x64_sys_unlinkat+0xc4/0xe0 [ 1380.215250][T12349] do_syscall_64+0x55/0xb0 [ 1380.219802][T12349] ? clear_bhb_loop+0x40/0x90 [ 1380.224548][T12349] ? clear_bhb_loop+0x40/0x90 [ 1380.229382][T12349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1380.235346][T12349] RIP: 0033:0x7f5025b9e0d9 [ 1380.239899][T12349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1380.259672][T12349] RSP: 002b:00007f5026a95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 1380.268234][T12349] RAX: ffffffffffffffda RBX: 00007f5025e25fa0 RCX: 00007f5025b9e0d9 [ 1380.276271][T12349] RDX: 0000000000000200 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1380.284374][T12349] RBP: 00007f5025c35024 R08: 0000000000000000 R09: 0000000000000000 [ 1380.292529][T12349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1380.301195][T12349] R13: 00007f5025e26038 R14: 00007f5025e25fa0 R15: 00007ffde4955fc8 [ 1380.309563][T12349] [ 1380.312639][T12349] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1380.320042][T12349] CPU: 0 PID: 12349 Comm: syz.7.1567 Not tainted syzkaller #0 [ 1380.327547][T12349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1380.337647][T12349] Call Trace: [ 1380.340965][T12349] [ 1380.343922][T12349] dump_stack_lvl+0x18c/0x250 [ 1380.348663][T12349] ? show_regs_print_info+0x20/0x20 [ 1380.353906][T12349] ? load_image+0x420/0x420 [ 1380.358524][T12349] panic+0x2ca/0x720 [ 1380.362475][T12349] ? bpf_jit_dump+0xd0/0xd0 [ 1380.367041][T12349] __warn+0x2e0/0x470 [ 1380.371161][T12349] ? dlm_lowcomms_close+0x129/0x430 [ 1380.376404][T12349] ? dlm_lowcomms_close+0x129/0x430 [ 1380.381629][T12349] report_bug+0x2be/0x4f0 [ 1380.386038][T12349] ? dlm_lowcomms_close+0x129/0x430 [ 1380.391276][T12349] ? dlm_lowcomms_close+0x129/0x430 [ 1380.396505][T12349] ? dlm_lowcomms_close+0x12b/0x430 [ 1380.401736][T12349] handle_bug+0xcf/0x120 [ 1380.406015][T12349] exc_invalid_op+0x1a/0x50 [ 1380.410558][T12349] asm_exc_invalid_op+0x1a/0x20 [ 1380.415443][T12349] RIP: 0010:dlm_lowcomms_close+0x129/0x430 [ 1380.421340][T12349] Code: e8 cc e2 02 f7 eb a6 44 89 e1 80 e1 07 80 c1 03 38 c1 7c ac 4c 89 e7 e8 15 60 5b f7 eb a2 e8 ae e2 02 f7 eb 05 e8 a7 e2 02 f7 <0f> 0b 44 89 f7 e8 0d 51 98 f7 b8 fe ff ff ff 48 83 c4 20 5b 41 5c [ 1380.441072][T12349] RSP: 0018:ffffc900032e7c88 EFLAGS: 00010283 [ 1380.447180][T12349] RAX: ffffffff8a848fc2 RBX: 00000000ffffffff RCX: 0000000000080000 [ 1380.455181][T12349] RDX: ffffc90010461000 RSI: 0000000000004829 RDI: 000000000000482a [ 1380.463176][T12349] RBP: dffffc0000000000 R08: dffffc0000000000 R09: 1ffffffff2751d4d [ 1380.471271][T12349] R10: dffffc0000000000 R11: fffffbfff2751d4e R12: dffffc0000000000 [ 1380.479274][T12349] R13: ffffffff8a848ef5 R14: 0000000000000001 R15: 0000000000000000 [ 1380.487276][T12349] ? dlm_lowcomms_close+0x55/0x430 [ 1380.492425][T12349] ? dlm_lowcomms_close+0x122/0x430 [ 1380.497664][T12349] ? dlm_lowcomms_close+0x122/0x430 [ 1380.502888][T12349] ? dlm_midcomms_close+0x39d/0x4a0 [ 1380.508133][T12349] ? dlm_midcomms_close+0x48/0x4a0 [ 1380.513304][T12349] drop_comm+0x61/0x190 [ 1380.517498][T12349] ? configfs_rmdir+0x88a/0x980 [ 1380.522377][T12349] ? make_comm+0x230/0x230 [ 1380.526834][T12349] configfs_rmdir+0x892/0x980 [ 1380.531578][T12349] vfs_rmdir+0x352/0x4b0 [ 1380.535855][T12349] do_rmdir+0x29f/0x590 [ 1380.540042][T12349] ? __check_object_size+0x4fc/0xa40 [ 1380.545369][T12349] ? d_delete_notify+0x150/0x150 [ 1380.550340][T12349] ? getname_flags+0x20a/0x500 [ 1380.555169][T12349] __x64_sys_unlinkat+0xc4/0xe0 [ 1380.560050][T12349] do_syscall_64+0x55/0xb0 [ 1380.564498][T12349] ? clear_bhb_loop+0x40/0x90 [ 1380.569210][T12349] ? clear_bhb_loop+0x40/0x90 [ 1380.573930][T12349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1380.579872][T12349] RIP: 0033:0x7f5025b9e0d9 [ 1380.584316][T12349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1380.603953][T12349] RSP: 002b:00007f5026a95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 1380.612401][T12349] RAX: ffffffffffffffda RBX: 00007f5025e25fa0 RCX: 00007f5025b9e0d9 [ 1380.620402][T12349] RDX: 0000000000000200 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1380.628406][T12349] RBP: 00007f5025c35024 R08: 0000000000000000 R09: 0000000000000000 [ 1380.636539][T12349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1380.644974][T12349] R13: 00007f5025e26038 R14: 00007f5025e25fa0 R15: 00007ffde4955fc8 [ 1380.653018][T12349] [ 1380.656961][T12349] Kernel Offset: disabled [ 1380.661373][T12349] Rebooting in 86400 seconds..