last executing test programs: 3m14.960737229s ago: executing program 3 (id=241): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000088"], 0x48) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x2, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xdddd0000, 0x1c6017}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m13.26071495s ago: executing program 3 (id=244): r0 = syz_open_dev$sg(0x0, 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000400)="aa1d484e0a4e000000008133d576983340cb31a5fc977c2e4891f7c08bfcd111fbdf23ea32db0e8f20d5bc27bd806364eea72c0d80f144f1412301748d7b648575deb0ba3c3eb1e7f5dd55230cccd0cdc143c9c016fe5855c95e", 0x5a}], 0x2) 3m10.959160278s ago: executing program 3 (id=246): socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa9\xed\xcf\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m8.811206966s ago: executing program 3 (id=257): io_uring_setup(0x13ea, &(0x7f0000000400)={0x0, 0x4ead, 0x0, 0x20000003, 0xa8d}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x3, 0x2, 0x1}}]}}]}, 0x44}}, 0x4084) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) 3m6.976537353s ago: executing program 3 (id=260): syz_open_dev$loop(0x0, 0xfffffffffffffffe, 0x4000) socket$kcm(0x29, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 3m6.554123066s ago: executing program 3 (id=263): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r4 = openat$pfkey(0xffffff9c, &(0x7f0000000180), 0x900c2, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x200040d0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x11, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) 2m48.865439969s ago: executing program 32 (id=263): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r4 = openat$pfkey(0xffffff9c, &(0x7f0000000180), 0x900c2, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x200040d0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x11, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) 1m20.768908978s ago: executing program 5 (id=521): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, r0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) openat$cgroup_ro(r0, &(0x7f00000000c0)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 1m18.834985324s ago: executing program 5 (id=525): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 1m17.985130129s ago: executing program 5 (id=527): r0 = socket(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1.usb0/p_chmask\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1fe) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, 0x0) write$vga_arbiter(r5, &(0x7f0000000240), 0xf) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x82, 0x9, 0x3, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x7, 0x80, 0x3, 0x1}}) 1m17.05815639s ago: executing program 5 (id=531): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)}, &(0x7f0000000400)=0x10) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x802154}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x39c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1002, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed79, 0x500, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x72}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20, 0x1, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) shutdown(r0, 0x1) 1m15.331129666s ago: executing program 5 (id=540): timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x2) ppoll(&(0x7f0000000080)=[{r0, 0x42c0}], 0x1, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m15.087986883s ago: executing program 5 (id=543): socket$inet6_sctp(0xa, 0x5, 0x84) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x8382, 0x0) socket(0xa, 0x3, 0x3a) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000200)=0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) bpf$ITER_CREATE(0xb, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) 1m0.033510034s ago: executing program 33 (id=543): socket$inet6_sctp(0xa, 0x5, 0x84) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x8382, 0x0) socket(0xa, 0x3, 0x3a) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000200)=0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) bpf$ITER_CREATE(0xb, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) 6.643705647s ago: executing program 1 (id=824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad386dd", 0x4, 0x840, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 6.036610485s ago: executing program 2 (id=829): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000a000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000180)='clear_refs\x00') preadv(r5, &(0x7f00000001c0), 0x0, 0x6, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000003c0)=0x80000000) 5.726656155s ago: executing program 1 (id=832): r0 = gettid() read(0xffffffffffffffff, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x4058534c, &(0x7f00000003c0)={0x80, 0x2, {0x1, 0x3, 0x8b2c, 0x0, 0x2c3}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000300)={0x3ff, 0x0, {0x3, 0x0, 0x10001, 0x2, 0x8}, 0x100}) tkill(r0, 0x7) 5.723491746s ago: executing program 4 (id=833): r0 = socket(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1.usb0/p_chmask\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1fe) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, 0x0) write$vga_arbiter(r4, &(0x7f0000000240), 0xf) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x82, 0x9, 0x3, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x7, 0x80, 0x3, 0x1}}) 4.988334479s ago: executing program 2 (id=834): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 4.959340175s ago: executing program 6 (id=835): ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000300)={0x18, 0xffffffff, 0x0, 'queue1\x00'}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfffffffe}, 0x1c) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r1, 0x40047452, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000080), 0x200000, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r5, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_RESET_DIRTY_RINGS(r5, 0xaec7) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x11e, 0x42, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$l2tp6(0xa, 0x2, 0x73) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r7) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@private2, 0x4e20, 0x800, 0x4e20, 0xffff, 0x2, 0x80, 0x80, 0x0, 0x0, r6}, {0x8, 0x3, 0xe, 0x4, 0x0, 0xfffffffffffff801, 0x0, 0x1}, {0x2000374, 0x378, 0xf}, 0x6d1d, 0x6e6bbc, 0x1, 0x1, 0x1, 0x3}, {{@in=@private=0xa010100, 0x4d2, 0x33}, 0xbc2f9f3528244f5f, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x34ff, 0x4, 0x2, 0x1, 0x3, 0xfffffffa, 0x7fff}}, 0xe4) 4.835125599s ago: executing program 1 (id=836): ioperm(0x3, 0x9, 0x80) pipe(0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r1) wait4(0x0, 0x0, 0x0, 0x0) 4.715620412s ago: executing program 0 (id=837): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x20000227, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x54) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x9000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 4.4696549s ago: executing program 0 (id=838): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000140)='./mnt\x00', 0x0, 0x8410, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40086607, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000001000)) 4.275200338s ago: executing program 1 (id=839): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0x4) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40000005) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)="8021b4f4c49f34fa1aa3b13bb4c68b9c49cdde0fad8bfc9f04deae371f68b5f5c692", 0x22}, {&(0x7f0000000100)="c2becd627a7e0c7297926805fad8c0a5d84d06b0", 0x14}], 0x2) 4.181334276s ago: executing program 6 (id=840): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) r1 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x20000000}) 3.724210885s ago: executing program 2 (id=841): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x38, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) syz_open_dev$sndmidi(&(0x7f0000000bc0), 0x0, 0x1c000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f00000006c0)={0x44, r1, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x800) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) mkdir(&(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r6, &(0x7f0000000140)='prev_comm.function ==', 0x15) r7 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105200809c04e143900000000092401fdff0811004708240a0000097f000904010000010220000904010101010220000905"], 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_usb_control_io$uac2(r7, &(0x7f0000000100)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000304000000"]}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r8, 0x4b72, &(0x7f0000000140)={0x4, 0x80, 0x0, 0x5, 0xb, "0060930000efa489e404000000000100f16208"}) syz_usb_control_io$uac2(r7, 0x0, 0x0) r9 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r10, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8, 0x0, 0x0, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x5a, 0x0, 0x3}, 0x28) write$uinput_user_dev(r9, &(0x7f0000000240)={'syz1\x00', {0x3, 0x6, 0x6, 0x60}, 0x3b, [0x19a, 0x2, 0xfffff9f5, 0x5, 0x5, 0x6, 0x9, 0x1, 0x4, 0x400, 0xfffffffc, 0x2a98, 0x1, 0x7c1, 0xbb, 0x1, 0xc4, 0xe283, 0x8, 0x4, 0xc, 0xb5d7, 0x1862, 0x8, 0x0, 0x7, 0x6, 0x8, 0x7, 0x7, 0x6, 0x3, 0x7fff, 0x4, 0x3e, 0x2, 0x3, 0xa8, 0x941, 0x80d, 0x1c7, 0x2, 0x5, 0x4, 0x448, 0x4, 0x3, 0x8, 0x9, 0x1, 0x10000d, 0x8, 0x1, 0x736, 0x19, 0x8, 0x2, 0x2, 0x40, 0x8, 0x13, 0x8, 0x6, 0x7f], [0xffffb66f, 0x6, 0x6, 0xea, 0x6, 0xfffffffa, 0xfff, 0x6, 0x6, 0x1, 0x100, 0x9, 0x7, 0x9, 0xf37, 0x80000001, 0x4, 0x6, 0x1, 0x2, 0x9, 0x9, 0xd, 0x8, 0x62, 0x10001, 0x8, 0x6, 0x8, 0x3ff, 0x9, 0xd, 0x4, 0xb, 0x0, 0x5, 0x7, 0xfff, 0x8, 0x80000001, 0xc, 0xfff, 0x0, 0x7, 0xc0000, 0x1, 0x71770264, 0xfff, 0x7bd20713, 0x0, 0x8001, 0x80000000, 0x2, 0xfffffffb, 0x0, 0x358e, 0x1, 0xfffffffa, 0x0, 0x4, 0xffffff62, 0x8, 0x0, 0x5], [0x23a, 0x1, 0x1ff, 0x4, 0x1, 0x3, 0x5, 0x401, 0xff, 0x7, 0x4, 0x6, 0x3, 0x7fffffff, 0x6f, 0xeb, 0x2, 0x0, 0x7f, 0x5, 0x7, 0x3, 0x8ff, 0xffffffc0, 0x22, 0x7, 0x3, 0x80000000, 0x1, 0x9, 0x101, 0xaf7, 0x81, 0x3, 0x80, 0x8000, 0xe, 0x3, 0x4, 0x5, 0x26f3, 0x3, 0xfff, 0xf, 0x7, 0x2, 0x4, 0x6, 0x400, 0x10001, 0x719, 0x0, 0x200, 0x8, 0x3ff, 0x800, 0x80000001, 0x0, 0x3, 0x6, 0xfffffffc, 0x6, 0x3, 0x4], [0x401, 0x100, 0x8001, 0x2, 0x7f, 0x8, 0x8, 0x7, 0x71, 0xfffff800, 0x7d, 0x4, 0x2, 0x4, 0x9, 0x5, 0x7fff, 0x32e, 0x6812, 0x10, 0x1, 0xfffffffa, 0x3, 0x0, 0x200, 0x100, 0xffffffff, 0x1, 0x0, 0x5, 0x6, 0x2, 0x5, 0x3, 0x171, 0x5c, 0x2, 0x3, 0x5, 0x0, 0x8a, 0x6, 0x0, 0x7fffffff, 0x5, 0x4, 0x6, 0x1, 0x401, 0xd54, 0x10000, 0x4, 0x1, 0x7, 0x4, 0xfffffe11, 0xe, 0x8, 0x2d6, 0x8000, 0x7, 0x4, 0xd, 0x8000]}, 0x45c) 3.34312068s ago: executing program 1 (id=842): r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x24000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff00000006000200000000000600"], 0xc8}}, 0x0) getsockname$netlink(r5, &(0x7f0000000180), &(0x7f00000001c0)=0xc) close(r4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, 0xffffffffffffffff, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r7, 0xa) 3.311317105s ago: executing program 6 (id=843): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x800, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwrite64(r2, &(0x7f00000001c0), 0x0, 0xb) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, 0x0, 0x25, 0x0, @void}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) socket(0x10, 0x3, 0x0) pipe(&(0x7f0000002680)) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000100), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r7], 0x30}}, 0x0) r8 = socket(0x10, 0x803, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000040)) socket(0x2, 0xa, 0x40300) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) unshare(0x62040200) 3.265925074s ago: executing program 0 (id=844): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) close(0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000a000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000180)='clear_refs\x00') preadv(r4, &(0x7f00000001c0), 0x0, 0x6, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000003c0)=0x80000000) 2.666509991s ago: executing program 4 (id=845): pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 2.149758932s ago: executing program 0 (id=846): syz_open_dev$loop(0x0, 0xfffffffffffffffe, 0x4000) socket$kcm(0x29, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) 2.023113876s ago: executing program 1 (id=847): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x8, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000000)=0x1, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) socket(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='./binderfs/binder0\x00', &(0x7f0000000140)='./binderfs/binder0\x00', 0x0) 2.022945616s ago: executing program 4 (id=848): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0xa) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 1.887883133s ago: executing program 6 (id=849): sched_setscheduler(0x0, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d22208d9c2978808ca8d8b0088a8", 0x0, 0xc000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x24044004}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x7f, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x20c098, &(0x7f0000000080)={[{@nfs_export_on}]}) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000000000/0x2000)=nil, 0x5000) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) shmctl$SHM_LOCK(r2, 0xb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.828601704s ago: executing program 4 (id=850): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0x500) write(r0, &(0x7f0000000500)='z\r\x00', 0x3) 1.780335184s ago: executing program 0 (id=851): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 1.407184496s ago: executing program 4 (id=852): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x3, 0x2, 0x1}}]}}]}, 0x44}}, 0x4084) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 1.398725288s ago: executing program 2 (id=853): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000006c0)={'batadv0\x00', 0x0}) 1.23286829s ago: executing program 2 (id=854): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) r1 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x20000000}) 1.221499452s ago: executing program 6 (id=855): r0 = socket(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1.usb0/p_chmask\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1fe) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, 0x0) write$vga_arbiter(r5, &(0x7f0000000240), 0xf) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x82, 0x9, 0x3, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x7, 0x80, 0x3, 0x1}}) 1.100743526s ago: executing program 4 (id=856): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) close(0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000a000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000180)='clear_refs\x00') preadv(r4, &(0x7f00000001c0), 0x0, 0x6, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000003c0)=0x80000000) 111.680578ms ago: executing program 6 (id=857): ioctl$sock_proto_private(0xffffffffffffffff, 0x891d, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) listen(0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) getxattr(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="6f73322e2e0050917f085c7ba374abb7e55fa5da6a3134ec244923459bff7141bc3c6a87ac28e6c8e60671b62aa01a914ab048d5ebfd"], &(0x7f0000000100)=""/36, 0x24) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVINFO(r3, 0x80b06401, &(0x7f0000000240)) 98.107851ms ago: executing program 0 (id=858): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000100), 0x100) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000380)={0x80000000, 0x0, 'client0\x00', 0x7, "495218d51d8370ee", "27315db9f34dac3d618a687a54bb5de9e391f2f5f18f126cbd0600fc93d96590", 0x0, 0xb}) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003280), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="14000001000095b50ff0987e149248fc356410b38e818e4f447e03b4d850f0ba289daa593b455164110ce23dad40c0313da00c361f1970e8fa93da5f56dc1977059ff17861acdd7f805672caaaa770ddd64608ee4c7cc97124ad3243d476346a82b998a1ff2d0dc3f3158bfa0234f53b900ac53a3cdfa23e00000000000000005d8c233af9ba0f539d32a1ae8f333db53c57f38301ece4b11be1d5716699c66369292673673be901", @ANYRES16=r5, @ANYBLOB="771f2cbd7000ffdbdf250e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000680)={0x0, 0x2, 0x0, &(0x7f0000000140)=[{}, {0x80000000}], 0x3, 0x0, &(0x7f0000000440)=[{}, {}, {}], 0x3, 0x0, &(0x7f00000005c0)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000000640)=[{}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f00000007c0)={0x80000000, &(0x7f0000000700)=[{0x80000000, 0x0}], &(0x7f0000000740)}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000cc0)={0x0, 0x1, 0x0, &(0x7f0000000800)=[{0x80000000}], 0x6, 0x0, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000b40)=[{}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000c00)=[{}, {}, {}, {}]}) r9 = syz_open_dev$media(&(0x7f0000000240), 0x3, 0x200000) ioctl$MEDIA_IOC_G_TOPOLOGY(r9, 0xc0487c04, &(0x7f0000000300)={0x0, 0x6, 0x0, &(0x7f0000000e40)=[{}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000001080)=[{}, {}], 0x8, 0x0, &(0x7f0000001180)=[{}, {}, {}, {}, {}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {}], 0x1, 0x0, &(0x7f00000002c0)=[{}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000001340)={{r6, r7, 0x5, [0xf, 0x8]}, {r8, r10, 0x1}, 0x0, [0x1, 0xe]}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000032c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000003380)={0x0, 0x0, &(0x7f0000003340)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x28, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa030, 0x10003}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtfilter={0x38, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfffd, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x8080) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000d40)={0x1f, @any, 0xa}, 0xa) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write$cgroup_netprio_ifpriomap(r13, 0x0, 0xfffffffb) mount(0x0, &(0x7f0000000080)='./proc/net/rpc/auth.rpcsec.context/channel\x00', &(0x7f0000000040)='cramfs\x00', 0x2, 0x0) r14 = openat(0xffffffffffffffff, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) r15 = socket(0x2d, 0x2, 0x0) connect$netlink(r15, &(0x7f0000000080)=@proc={0x2d, 0x0, 0x25dfdbfe, 0x8000}, 0xc) write(r14, &(0x7f0000000200)='\\x 1', 0x4) 0s ago: executing program 2 (id=859): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f0000000300)="3e0000000b000100030000000000000000", 0x11) kernel console output (not intermixed with test programs): write [ 157.476785][ T5279] gadgetfs: bound to dummy_udc driver [ 157.758548][ T4350] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 157.906190][ C0] gadgetfs: connected [ 157.917091][ T4350] gadgetfs: disconnected [ 158.198645][ C0] gadgetfs: connected [ 158.206123][ T4350] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 158.257470][ T4350] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 158.437636][ T4350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.632470][ T5278] gadgetfs: suspended from state 3 [ 158.701777][ T4350] usb 1-1: can't set config #1, error -71 [ 158.746470][ T5278] gadgetfs: disconnected [ 158.857117][ T4350] usb 1-1: USB disconnect, device number 5 [ 159.761074][ T5296] batman_adv: batadv0: Adding interface: veth0 [ 159.841547][ T5296] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.938496][ T5296] batman_adv: batadv0: Interface activated: veth0 [ 160.025893][ T5288] batman_adv: batadv0: Interface deactivated: veth0 [ 160.041251][ T5305] FAULT_INJECTION: forcing a failure. [ 160.041251][ T5305] name failslab, interval 1, probability 0, space 0, times 0 [ 160.048437][ T5288] batman_adv: batadv0: Removing interface: veth0 [ 160.062393][ T5288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.078571][ T5288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.081186][ T5305] CPU: 1 PID: 5305 Comm: syz.1.287 Not tainted syzkaller #0 [ 160.093123][ T5305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.103209][ T5305] Call Trace: [ 160.106683][ T5305] [ 160.109636][ T5305] dump_stack_lvl+0x188/0x24e [ 160.114346][ T5305] ? show_regs_print_info+0x12/0x12 [ 160.119577][ T5305] ? load_image+0x410/0x410 [ 160.124118][ T5305] ? __lock_acquire+0x7c40/0x7c40 [ 160.129195][ T5305] should_fail_ex+0x390/0x4c0 [ 160.133908][ T5305] should_failslab+0x5/0x20 [ 160.138443][ T5305] slab_pre_alloc_hook+0x59/0x300 [ 160.143500][ T5305] kmem_cache_alloc_lru+0x49/0x2e0 [ 160.148640][ T5305] ? sock_alloc_inode+0x24/0xc0 [ 160.153529][ T5305] sock_alloc_inode+0x24/0xc0 [ 160.158330][ T5305] ? sockfs_init_fs_context+0xa0/0xa0 [ 160.163768][ T5305] new_inode_pseudo+0x5f/0x1c0 [ 160.168655][ T5305] __sock_create+0x129/0x940 [ 160.173285][ T5305] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 160.179316][ T5305] __sys_socket+0xc4/0x190 [ 160.183770][ T5305] __x64_sys_socket+0x76/0x80 [ 160.188484][ T5305] do_syscall_64+0x4c/0xa0 [ 160.192930][ T5305] ? clear_bhb_loop+0x60/0xb0 [ 160.197640][ T5305] ? clear_bhb_loop+0x60/0xb0 [ 160.202352][ T5305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.208286][ T5305] RIP: 0033:0x7f59c959e159 [ 160.212745][ T5305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.232385][ T5305] RSP: 002b:00007f59ca46f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 160.240844][ T5305] RAX: ffffffffffffffda RBX: 00007f59c9825fa0 RCX: 00007f59c959e159 [ 160.245965][ T5312] Zero length message leads to an empty skb [ 160.248827][ T5305] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 160.248847][ T5305] RBP: 00007f59c963506b R08: 0000000000000000 R09: 0000000000000000 [ 160.248858][ T5305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.248869][ T5305] R13: 00007f59c9826038 R14: 00007f59c9825fa0 R15: 00007ffe7ae9be78 [ 160.248893][ T5305] [ 160.292487][ T5288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.301978][ T5288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.379292][ T5305] socket: no more sockets [ 160.766361][ T5318] kvm: pic: non byte write [ 163.546655][ T5329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.294'. [ 166.246092][ T5361] netlink: 20 bytes leftover after parsing attributes in process `syz.4.304'. [ 166.849632][ T5361] syz.4.304 (5361) used greatest stack depth: 17632 bytes left [ 171.194235][ T4288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 171.204768][ T4288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 171.213694][ T4288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 171.222049][ T4288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 171.234071][ T4288] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 171.241671][ T4288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 173.328360][ T4289] Bluetooth: hci5: command 0x0409 tx timeout [ 174.213121][ T5403] gadgetfs: bound to dummy_udc driver [ 174.907330][ T5421] usb usb8: usbfs: process 5421 (syz.0.324) did not claim interface 0 before use [ 175.408363][ T4289] Bluetooth: hci5: command 0x041b tx timeout [ 176.444302][ T5390] chnl_net:caif_netlink_parms(): no params data found [ 177.488405][ T4289] Bluetooth: hci5: command 0x040f tx timeout [ 179.372240][ T5390] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.419116][ T5390] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.568299][ T4289] Bluetooth: hci5: command 0x0419 tx timeout [ 181.074021][ T5390] device bridge_slave_0 entered promiscuous mode [ 182.130114][ T5390] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.137611][ T5390] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.148340][ T5462] gadgetfs: bound to dummy_udc driver [ 182.171547][ T5390] device bridge_slave_1 entered promiscuous mode [ 182.357647][ T5390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.429879][ T5390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.328964][ T5390] team0: Port device team_slave_0 added [ 184.391461][ T5390] team0: Port device team_slave_1 added [ 184.490112][ T5390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.497224][ T5390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.533501][ T5475] usb usb8: usbfs: process 5475 (syz.0.338) did not claim interface 0 before use [ 184.633375][ T5390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.678683][ T5390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.704865][ T5390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.813612][ T5390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.822495][ T4499] usb 4-1: USB disconnect, device number 4 [ 188.079055][ T5390] device hsr_slave_0 entered promiscuous mode [ 188.098724][ T5390] device hsr_slave_1 entered promiscuous mode [ 188.425084][ T5508] FAULT_INJECTION: forcing a failure. [ 188.425084][ T5508] name failslab, interval 1, probability 0, space 0, times 0 [ 188.441039][ T5508] CPU: 1 PID: 5508 Comm: syz.1.347 Not tainted syzkaller #0 [ 188.448531][ T5508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.458791][ T5508] Call Trace: [ 188.462983][ T5508] [ 188.465942][ T5508] dump_stack_lvl+0x188/0x24e [ 188.470828][ T5508] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 188.476531][ T5508] ? show_regs_print_info+0x12/0x12 [ 188.481855][ T5508] ? load_image+0x410/0x410 [ 188.486517][ T5508] should_fail_ex+0x390/0x4c0 [ 188.491330][ T5508] should_failslab+0x5/0x20 [ 188.495855][ T5508] slab_pre_alloc_hook+0x59/0x300 [ 188.502003][ T5508] ? lockdep_softirqs_off+0x430/0x430 [ 188.507866][ T5508] kmem_cache_alloc+0x56/0x2f0 [ 188.512689][ T5508] ? security_inode_alloc+0x30/0x110 [ 188.518289][ T5508] security_inode_alloc+0x30/0x110 [ 188.523460][ T5508] inode_init_always+0x910/0xc90 [ 188.528788][ T5508] new_inode_pseudo+0x91/0x1c0 [ 188.533600][ T5508] sock_create_lite+0x87/0x500 [ 188.538591][ T5508] ? net_generic+0x1e/0x240 [ 188.544994][ T5508] __netlink_kernel_create+0xf7/0x7b0 [ 188.550789][ T5508] ? netlink_set_err+0x3b0/0x3b0 [ 188.555941][ T5508] ? net_generic+0x1e/0x240 [ 188.560579][ T5508] ? net_generic+0x1e/0x240 [ 188.565136][ T5508] audit_net_init+0xc7/0x1f0 [ 188.569821][ T5508] ? kauditd_thread+0x990/0x990 [ 188.574888][ T5508] ? audit_net_exit+0x40/0x40 [ 188.579652][ T5508] ? audit_receive+0x2cc0/0x2cc0 [ 188.584841][ T5508] ? audit_multicast_bind+0x30/0x30 [ 188.590140][ T5508] ? __kmem_cache_alloc_node+0x19d/0x270 [ 188.596084][ T5508] ops_init+0x360/0x5e0 [ 188.600386][ T5508] setup_net+0x4f2/0xbd0 [ 188.604675][ T5508] ? copy_net_ns+0x5b0/0x5b0 [ 188.610361][ T5508] ? copy_net_ns+0x324/0x5b0 [ 188.615993][ T5508] ? down_read_killable+0x1cc/0x340 [ 188.621788][ T5508] copy_net_ns+0x33e/0x5b0 [ 188.626864][ T5508] create_new_namespaces+0x3ce/0x700 [ 188.632774][ T5508] unshare_nsproxy_namespaces+0x116/0x160 [ 188.640072][ T5508] ksys_unshare+0x4f6/0x8e0 [ 188.644860][ T5508] ? sighand_ctor+0x40/0x40 [ 188.650292][ T5508] ? lock_chain_count+0x20/0x20 [ 188.656343][ T5508] ? syscall_enter_from_user_mode+0x21/0x80 [ 188.662976][ T5508] __x64_sys_unshare+0x34/0x40 [ 188.667929][ T5508] do_syscall_64+0x4c/0xa0 [ 188.673197][ T5508] ? clear_bhb_loop+0x60/0xb0 [ 188.677933][ T5508] ? clear_bhb_loop+0x60/0xb0 [ 188.682668][ T5508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.688701][ T5508] RIP: 0033:0x7f59c959e159 [ 188.693145][ T5508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.713140][ T5508] RSP: 002b:00007f59ca44e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 188.721862][ T5508] RAX: ffffffffffffffda RBX: 00007f59c9826090 RCX: 00007f59c959e159 [ 188.730137][ T5508] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 188.738520][ T5508] RBP: 00007f59c963506b R08: 0000000000000000 R09: 0000000000000000 [ 188.748038][ T5508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.756594][ T5508] R13: 00007f59c9826128 R14: 00007f59c9826090 R15: 00007ffe7ae9be78 [ 188.764988][ T5508] [ 188.770058][ T5508] audit: cannot initialize netlink socket in namespace [ 190.629618][ T5390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.681309][ T5390] Cannot create hsr debugfs directory [ 191.321193][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.328313][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 191.331976][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 191.650406][ T5520] gadgetfs: bound to dummy_udc driver [ 191.726911][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.249367][ T41] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 192.280624][ C1] gadgetfs: connected [ 192.292828][ T41] gadgetfs: disconnected [ 192.559162][ C1] gadgetfs: connected [ 192.566006][ T41] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 192.598003][ T41] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 192.714912][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.746021][ T5519] gadgetfs: suspended from state 3 [ 192.875658][ T41] usb 1-1: can't set config #1, error -71 [ 192.891884][ T5519] gadgetfs: disconnected [ 192.983763][ T41] usb 1-1: USB disconnect, device number 7 [ 193.082388][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.305120][ T5532] usb usb8: usbfs: process 5532 (syz.2.353) did not claim interface 0 before use [ 193.561913][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.380708][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.387253][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.408352][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 198.207527][ T5390] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 198.227184][ T5390] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 198.310131][ T5390] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 198.331859][ T5390] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 200.436967][ T5580] gadgetfs: bound to dummy_udc driver [ 200.637389][ T5390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.676316][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.702133][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.721387][ T5390] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.740490][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.767573][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.830656][ T4392] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.837887][ T4392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.853170][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.907548][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.941692][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.969840][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.977218][ T4333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.051574][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.136192][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.152139][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.178289][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.417713][ T5390] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.453301][ T5390] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.494429][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.511511][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.534156][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.555572][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.586682][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.607295][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.637684][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.657399][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.277091][ T50] device hsr_slave_0 left promiscuous mode [ 203.287884][ T50] device hsr_slave_1 left promiscuous mode [ 203.295171][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.303341][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.311823][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.322780][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.331698][ T50] device bridge_slave_1 left promiscuous mode [ 203.339888][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.383033][ T50] device bridge_slave_0 left promiscuous mode [ 203.391071][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.551987][ T50] device veth1_macvtap left promiscuous mode [ 203.583341][ T50] device veth0_macvtap left promiscuous mode [ 203.607875][ T50] device veth1_vlan left promiscuous mode [ 203.637027][ T50] device veth0_vlan left promiscuous mode [ 203.644917][ T5592] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.467141][ T5635] gadgetfs: bound to dummy_udc driver [ 205.590946][ T50] team0 (unregistering): Port device team_slave_1 removed [ 205.753828][ T5657] overlayfs: failed to resolve './file0': -2 [ 205.760474][ T50] team0 (unregistering): Port device team_slave_0 removed [ 206.154200][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.240087][ T50] bond0 (unregistering): Released all slaves [ 210.172649][ T5695] capability: warning: `syz.0.392' uses deprecated v2 capabilities in a way that may be insecure [ 210.266467][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.275370][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.357867][ T5390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.060613][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.146546][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.268641][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.282048][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.341714][ T5760] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.351074][ T5760] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.360203][ T5760] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.369165][ T5760] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.441362][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.470951][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.655153][ T5770] FAULT_INJECTION: forcing a failure. [ 216.655153][ T5770] name failslab, interval 1, probability 0, space 0, times 0 [ 216.683753][ T5390] device veth0_vlan entered promiscuous mode [ 216.725558][ T5770] CPU: 0 PID: 5770 Comm: syz.2.408 Not tainted syzkaller #0 [ 216.732921][ T5770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.743013][ T5770] Call Trace: [ 216.746403][ T5770] [ 216.749363][ T5770] dump_stack_lvl+0x188/0x24e [ 216.754712][ T5770] ? show_regs_print_info+0x12/0x12 [ 216.760126][ T5770] ? load_image+0x410/0x410 [ 216.764664][ T5770] ? __lock_acquire+0x7c40/0x7c40 [ 216.769919][ T5770] should_fail_ex+0x390/0x4c0 [ 216.774625][ T5770] should_failslab+0x5/0x20 [ 216.779171][ T5770] slab_pre_alloc_hook+0x59/0x300 [ 216.784573][ T5770] kmem_cache_alloc_lru+0x49/0x2e0 [ 216.789700][ T5770] ? sock_alloc_inode+0x24/0xc0 [ 216.794574][ T5770] sock_alloc_inode+0x24/0xc0 [ 216.799338][ T5770] ? sockfs_init_fs_context+0xa0/0xa0 [ 216.804722][ T5770] new_inode_pseudo+0x5f/0x1c0 [ 216.809495][ T5770] __sock_create+0x129/0x940 [ 216.814135][ T5770] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 216.820159][ T5770] __sys_socket+0xc4/0x190 [ 216.824592][ T5770] __x64_sys_socket+0x76/0x80 [ 216.829361][ T5770] do_syscall_64+0x4c/0xa0 [ 216.833779][ T5770] ? clear_bhb_loop+0x60/0xb0 [ 216.838662][ T5770] ? clear_bhb_loop+0x60/0xb0 [ 216.843407][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.849517][ T5770] RIP: 0033:0x7f0f6bd9e159 [ 216.853977][ T5770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.875703][ T5770] RSP: 002b:00007f0f6cbad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 216.884140][ T5770] RAX: ffffffffffffffda RBX: 00007f0f6c025fa0 RCX: 00007f0f6bd9e159 [ 216.892130][ T5770] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 216.900106][ T5770] RBP: 00007f0f6be3506b R08: 0000000000000000 R09: 0000000000000000 [ 216.908081][ T5770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.916056][ T5770] R13: 00007f0f6c026038 R14: 00007f0f6c025fa0 R15: 00007fff7a70edd8 [ 216.924045][ T5770] [ 216.947575][ T5390] device veth1_vlan entered promiscuous mode [ 216.958883][ T5770] socket: no more sockets [ 217.032552][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 217.045989][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 217.079392][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 217.099266][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.243487][ T5390] device veth0_macvtap entered promiscuous mode [ 217.333344][ T5390] device veth1_macvtap entered promiscuous mode [ 217.425900][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 217.478346][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 217.933962][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.071679][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.212367][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.344424][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.419535][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.430164][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.443951][ T5390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.454663][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 218.504109][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.540479][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.553597][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.564086][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.584244][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.594997][ T5390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.620724][ T5390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.737431][ T5390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.897335][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.981080][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.184959][ T5390] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.356596][ T5390] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.540685][ T5390] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.720019][ T5390] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.146421][ T5809] gadgetfs: bound to dummy_udc driver [ 220.321860][ T5798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.411010][ T5798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.002779][ T5798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.023763][ T5798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.137400][ T4333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.162962][ T4333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.287719][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 223.692208][ T4609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.840388][ T4609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.003170][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 226.455881][ T5862] gadgetfs: bound to dummy_udc driver [ 229.048329][ T5892] netlink: 20 bytes leftover after parsing attributes in process `syz.5.436'. [ 229.309119][ T5892] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 229.319624][ T5892] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 229.329264][ T5892] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 243.188474][ T4282] Bluetooth: hci4: link tx timeout [ 243.194260][ T4282] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 243.202523][ T4282] Bluetooth: hci4: link tx timeout [ 243.214582][ T4282] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 245.250246][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 249.570051][ T6118] input: syz0 as /devices/virtual/input/input8 [ 252.786128][ T6168] binder: 6167:6168 ioctl c00c6211 0 returned -14 [ 255.810552][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.816933][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.136550][ T6231] binder: 6229:6231 ioctl c00c6211 0 returned -14 [ 257.368417][ T4349] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 258.289407][ T4349] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.947197][ T4349] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 258.962744][ T4349] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.972780][ T4349] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 258.985932][ T4349] usb 5-1: config 0 interface 0 has no altsetting 0 [ 258.992882][ T4349] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 259.002165][ T4349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.023481][ T4349] usb 5-1: config 0 descriptor?? [ 259.867342][ T4349] logitech-djreceiver 0003:046D:C53A.0002: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.4-1/input0 [ 260.124663][ T4349] usb 5-1: USB disconnect, device number 4 [ 260.140095][ T6273] netlink: 32 bytes leftover after parsing attributes in process `syz.1.528'. [ 260.407340][ T6278] binder: 6275:6278 ioctl c00c6211 0 returned -14 [ 261.257188][ T6280] fido_id[6280]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 264.021322][ T6351] binder: 6350:6351 ioctl c00c6211 0 returned -14 [ 267.343240][ T6405] binder: 6403:6405 ioctl c00c6211 0 returned -14 [ 267.618329][ T5097] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 268.367289][ T5097] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.390241][ T5097] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 268.418356][ T5097] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.443218][ T5097] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 268.454291][ T5097] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 268.462665][ T5097] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 268.480474][ T5097] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 268.495741][ T5097] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 268.509732][ T5097] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 268.530991][ T5097] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 268.548355][ T5097] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 268.558860][ T5097] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 270.916059][ T7] usb 5-1: USB disconnect, device number 5 [ 270.929966][ T7] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 270.951579][ T7] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 270.969144][ T7] keyspan 5-1:1.0: device disconnected [ 271.344259][ T6447] binder: 6446:6447 ioctl c00c6211 0 returned -14 [ 272.317902][ T6473] usb usb8: usbfs: process 6473 (syz.1.571) did not claim interface 0 before use [ 272.322783][ T6475] fuse: Bad value for 'fd' [ 273.440964][ T4921] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 273.829466][ T4921] usb 1-1: Using ep0 maxpacket: 8 [ 273.889940][ T4921] usb 1-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 273.971007][ T4921] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.035148][ T4921] usb 1-1: config 1 has no interface number 0 [ 274.076520][ T4921] usb 1-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xBC, skipping [ 274.144560][ T4921] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 274.180918][ T4921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.213269][ T6506] binder: 6505:6506 ioctl c00c6211 0 returned -14 [ 274.242934][ T4921] usb 1-1: Product: syz [ 274.247451][ T4921] usb 1-1: Manufacturer: syz [ 274.265222][ T4921] usb 1-1: SerialNumber: syz [ 274.430035][ T6519] FAULT_INJECTION: forcing a failure. [ 274.430035][ T6519] name failslab, interval 1, probability 0, space 0, times 0 [ 274.444766][ T6519] CPU: 1 PID: 6519 Comm: syz.4.584 Not tainted syzkaller #0 [ 274.452892][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 274.467142][ T6519] Call Trace: [ 274.472382][ T6519] [ 274.475418][ T6519] dump_stack_lvl+0x188/0x24e [ 274.480232][ T6519] ? show_regs_print_info+0x12/0x12 [ 274.485544][ T6519] ? load_image+0x410/0x410 [ 274.490098][ T6519] ? __lock_acquire+0x7c40/0x7c40 [ 274.495207][ T6519] should_fail_ex+0x390/0x4c0 [ 274.499933][ T6519] should_failslab+0x5/0x20 [ 274.504503][ T6519] slab_pre_alloc_hook+0x59/0x300 [ 274.509580][ T6519] ? ep_insert+0x64f/0x1980 [ 274.514200][ T6519] ? wakeup_source_register+0x53/0x230 [ 274.519724][ T6519] __kmem_cache_alloc_node+0x4f/0x270 [ 274.525165][ T6519] ? wakeup_source_register+0x53/0x230 [ 274.530645][ T6519] kmalloc_trace+0x26/0xe0 [ 274.535076][ T6519] wakeup_source_register+0x53/0x230 [ 274.540695][ T6519] ep_insert+0xeab/0x1980 [ 274.548644][ T6519] ? ep_loop_check+0x1b0/0x1b0 [ 274.553665][ T6519] ? mutex_lock_nested+0x10/0x10 [ 274.560057][ T6519] ? apparmor_capable+0x12c/0x190 [ 274.567151][ T6519] ? bpf_lsm_capable+0x5/0x10 [ 274.573224][ T6519] ? security_capable+0x85/0xb0 [ 274.578765][ T6519] do_epoll_ctl+0x8b2/0xf40 [ 274.583815][ T6519] __x64_sys_epoll_ctl+0x162/0x1b0 [ 274.589368][ T6519] ? ep_modify+0xa80/0xa80 [ 274.593875][ T6519] ? lockdep_hardirqs_on+0x94/0x140 [ 274.599244][ T6519] do_syscall_64+0x4c/0xa0 [ 274.603884][ T6519] ? clear_bhb_loop+0x60/0xb0 [ 274.608705][ T6519] ? clear_bhb_loop+0x60/0xb0 [ 274.613798][ T6519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 274.619838][ T6519] RIP: 0033:0x7f058799e159 [ 274.625210][ T6519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.648039][ T6519] RSP: 002b:00007f05887da028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 274.658679][ T6519] RAX: ffffffffffffffda RBX: 00007f0587c25fa0 RCX: 00007f058799e159 [ 274.668140][ T6519] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 274.677056][ T6519] RBP: 00007f0587a3506b R08: 0000000000000000 R09: 0000000000000000 [ 274.685686][ T6519] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 274.694080][ T6519] R13: 00007f0587c26038 R14: 00007f0587c25fa0 R15: 00007fff65ace308 [ 274.702107][ T6519] [ 274.832458][ T4921] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 274.860763][ T4921] usb 1-1: USB disconnect, device number 8 [ 274.922813][ T4670] udevd[4670]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.428342][ T6538] FAULT_INJECTION: forcing a failure. [ 275.428342][ T6538] name failslab, interval 1, probability 0, space 0, times 0 [ 275.441369][ T6538] CPU: 0 PID: 6538 Comm: syz.1.587 Not tainted syzkaller #0 [ 275.448693][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.458838][ T6538] Call Trace: [ 275.462321][ T6538] [ 275.465283][ T6538] dump_stack_lvl+0x188/0x24e [ 275.470021][ T6538] ? show_regs_print_info+0x12/0x12 [ 275.475623][ T6538] ? load_image+0x410/0x410 [ 275.480162][ T6538] ? __might_sleep+0xd0/0xd0 [ 275.485397][ T6538] ? __lock_acquire+0x7c40/0x7c40 [ 275.490571][ T6538] should_fail_ex+0x390/0x4c0 [ 275.495358][ T6538] should_failslab+0x5/0x20 [ 275.500052][ T6538] slab_pre_alloc_hook+0x59/0x300 [ 275.505121][ T6538] ? sk_prot_alloc+0xe7/0x210 [ 275.509841][ T6538] __kmem_cache_alloc_node+0x4f/0x270 [ 275.515262][ T6538] ? sk_prot_alloc+0xe7/0x210 [ 275.520162][ T6538] __kmalloc+0xa3/0x240 [ 275.524465][ T6538] ? __rwlock_init+0x140/0x140 [ 275.529378][ T6538] sk_prot_alloc+0xe7/0x210 [ 275.533937][ T6538] ? sk_alloc+0x20/0x330 [ 275.538223][ T6538] sk_alloc+0x36/0x330 [ 275.542382][ T6538] __netlink_create+0x6b/0x2d0 [ 275.547184][ T6538] __netlink_kernel_create+0x144/0x7b0 [ 275.552719][ T6538] ? netlink_set_err+0x3b0/0x3b0 [ 275.557682][ T6538] ? net_generic+0x1e/0x240 [ 275.562217][ T6538] ? net_generic+0x1e/0x240 [ 275.566757][ T6538] audit_net_init+0xc7/0x1f0 [ 275.571399][ T6538] ? kauditd_thread+0x990/0x990 [ 275.576281][ T6538] ? audit_net_exit+0x40/0x40 [ 275.581006][ T6538] ? audit_receive+0x2cc0/0x2cc0 [ 275.586006][ T6538] ? audit_multicast_bind+0x30/0x30 [ 275.591374][ T6538] ? __kmem_cache_alloc_node+0x19d/0x270 [ 275.597114][ T6538] ops_init+0x360/0x5e0 [ 275.601327][ T6538] setup_net+0x4f2/0xbd0 [ 275.605605][ T6538] ? copy_net_ns+0x5b0/0x5b0 [ 275.610240][ T6538] ? copy_net_ns+0x324/0x5b0 [ 275.614870][ T6538] ? down_read_killable+0x1cc/0x340 [ 275.620468][ T6538] copy_net_ns+0x33e/0x5b0 [ 275.624948][ T6538] create_new_namespaces+0x3ce/0x700 [ 275.630288][ T6538] unshare_nsproxy_namespaces+0x116/0x160 [ 275.636060][ T6538] ksys_unshare+0x4f6/0x8e0 [ 275.640616][ T6538] ? sighand_ctor+0x40/0x40 [ 275.645161][ T6538] ? lock_chain_count+0x20/0x20 [ 275.650682][ T6538] ? syscall_enter_from_user_mode+0x21/0x80 [ 275.656985][ T6538] __x64_sys_unshare+0x34/0x40 [ 275.661793][ T6538] do_syscall_64+0x4c/0xa0 [ 275.666322][ T6538] ? clear_bhb_loop+0x60/0xb0 [ 275.671162][ T6538] ? clear_bhb_loop+0x60/0xb0 [ 275.675877][ T6538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.681837][ T6538] RIP: 0033:0x7f59c959e159 [ 275.686364][ T6538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.706438][ T6538] RSP: 002b:00007f59ca42d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 275.714891][ T6538] RAX: ffffffffffffffda RBX: 00007f59c9826180 RCX: 00007f59c959e159 [ 275.722983][ T6538] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 275.730990][ T6538] RBP: 00007f59c963506b R08: 0000000000000000 R09: 0000000000000000 [ 275.739081][ T6538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.747116][ T6538] R13: 00007f59c9826218 R14: 00007f59c9826180 R15: 00007ffe7ae9be78 [ 275.755315][ T6538] [ 275.760044][ T6538] audit: cannot initialize netlink socket in namespace [ 278.729611][ T4288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.746440][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.776081][ T4288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.786374][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.794191][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.801596][ T4288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.844992][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.853202][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.861543][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.875515][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.884925][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.919654][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.943239][ T4323] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 279.168569][ T4323] usb 2-1: Using ep0 maxpacket: 8 [ 279.942277][ T4323] usb 2-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 279.952997][ T4323] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 279.962420][ T4323] usb 2-1: config 1 has no interface number 0 [ 279.975230][ T4323] usb 2-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xBC, skipping [ 280.002047][ T4323] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 280.030851][ T6603] FAULT_INJECTION: forcing a failure. [ 280.030851][ T6603] name failslab, interval 1, probability 0, space 0, times 0 [ 280.043672][ T6603] CPU: 1 PID: 6603 Comm: syz.0.602 Not tainted syzkaller #0 [ 280.051891][ T6603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 280.062007][ T6603] Call Trace: [ 280.065438][ T6603] [ 280.068503][ T6603] dump_stack_lvl+0x188/0x24e [ 280.073225][ T6603] ? show_regs_print_info+0x12/0x12 [ 280.078503][ T6603] ? load_image+0x410/0x410 [ 280.083061][ T6603] ? __might_sleep+0xd0/0xd0 [ 280.087693][ T6603] ? __lock_acquire+0x7c40/0x7c40 [ 280.092803][ T6603] ? __might_sleep+0xd0/0xd0 [ 280.097472][ T6603] should_fail_ex+0x390/0x4c0 [ 280.102203][ T6603] should_failslab+0x5/0x20 [ 280.106737][ T6603] slab_pre_alloc_hook+0x59/0x300 [ 280.111806][ T6603] kmem_cache_alloc_lru+0x49/0x2e0 [ 280.116970][ T6603] ? sock_alloc_inode+0x24/0xc0 [ 280.121896][ T6603] sock_alloc_inode+0x24/0xc0 [ 280.126633][ T6603] ? sockfs_init_fs_context+0xa0/0xa0 [ 280.132090][ T6603] new_inode_pseudo+0x5f/0x1c0 [ 280.136905][ T6603] sock_create_lite+0x87/0x500 [ 280.141752][ T6603] ? net_generic+0x1e/0x240 [ 280.146314][ T6603] __netlink_kernel_create+0xf7/0x7b0 [ 280.151744][ T6603] ? netlink_set_err+0x3b0/0x3b0 [ 280.157134][ T6603] ? net_generic+0x1e/0x240 [ 280.161726][ T6603] ? net_generic+0x1e/0x240 [ 280.166284][ T6603] audit_net_init+0xc7/0x1f0 [ 280.170926][ T6603] ? kauditd_thread+0x990/0x990 [ 280.175979][ T6603] ? audit_net_exit+0x40/0x40 [ 280.180709][ T6603] ? audit_receive+0x2cc0/0x2cc0 [ 280.185690][ T6603] ? audit_multicast_bind+0x30/0x30 [ 280.191005][ T6603] ? __kmem_cache_alloc_node+0x19d/0x270 [ 280.196776][ T6603] ops_init+0x360/0x5e0 [ 280.200991][ T6603] setup_net+0x4f2/0xbd0 [ 280.205283][ T6603] ? copy_net_ns+0x5b0/0x5b0 [ 280.209963][ T6603] ? copy_net_ns+0x324/0x5b0 [ 280.214601][ T6603] ? down_read_killable+0x1cc/0x340 [ 280.219978][ T6603] copy_net_ns+0x33e/0x5b0 [ 280.224455][ T6603] create_new_namespaces+0x3ce/0x700 [ 280.229793][ T6603] unshare_nsproxy_namespaces+0x116/0x160 [ 280.235553][ T6603] ksys_unshare+0x4f6/0x8e0 [ 280.240189][ T6603] ? sighand_ctor+0x40/0x40 [ 280.244749][ T6603] ? lock_chain_count+0x20/0x20 [ 280.249656][ T6603] ? syscall_enter_from_user_mode+0x21/0x80 [ 280.255729][ T6603] __x64_sys_unshare+0x34/0x40 [ 280.260546][ T6603] do_syscall_64+0x4c/0xa0 [ 280.265085][ T6603] ? clear_bhb_loop+0x60/0xb0 [ 280.269828][ T6603] ? clear_bhb_loop+0x60/0xb0 [ 280.274545][ T6603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.280481][ T6603] RIP: 0033:0x7ff5b5d9e159 [ 280.284969][ T6603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.304616][ T6603] RSP: 002b:00007ff5b6c96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 280.313068][ T6603] RAX: ffffffffffffffda RBX: 00007ff5b6026180 RCX: 00007ff5b5d9e159 [ 280.321076][ T6603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 280.329085][ T6603] RBP: 00007ff5b5e3506b R08: 0000000000000000 R09: 0000000000000000 [ 280.337083][ T6603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.345091][ T6603] R13: 00007ff5b6026218 R14: 00007ff5b6026180 R15: 00007ffc23cfdaf8 [ 280.353116][ T6603] [ 280.357647][ T6603] audit: cannot initialize netlink socket in namespace [ 280.472118][ T4323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.555031][ T4323] usb 2-1: Product: syz [ 280.582740][ T4323] usb 2-1: Manufacturer: syz [ 280.587466][ T4323] usb 2-1: SerialNumber: syz [ 280.863163][ T4323] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 280.917577][ T4323] usb 2-1: USB disconnect, device number 3 [ 280.960580][ T4670] udevd[4670]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.981213][ T6586] chnl_net:caif_netlink_parms(): no params data found [ 281.008421][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 281.081729][ T6619] sg_write: data in/out 19942/20 bytes for SCSI command 0x32-- guessing data in; [ 281.081729][ T6619] program syz.0.606 not setting count and/or reply_len properly [ 282.177683][ T6586] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.185467][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.278050][ T6586] device bridge_slave_0 entered promiscuous mode [ 282.338714][ T6586] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.379821][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.433591][ T6586] device bridge_slave_1 entered promiscuous mode [ 282.795044][ T6586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.088402][ T4288] Bluetooth: hci2: command 0x041b tx timeout [ 283.165151][ T6586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.440265][ T6653] fuse: Invalid rootmode [ 283.481081][ T6586] team0: Port device team_slave_0 added [ 283.497233][ T6586] team0: Port device team_slave_1 added [ 283.554283][ T6586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.582006][ T6586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.689884][ T6586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.726259][ T6586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.747540][ T6663] sg_write: data in/out 19942/20 bytes for SCSI command 0x32-- guessing data in; [ 283.747540][ T6663] program syz.0.618 not setting count and/or reply_len properly [ 283.781537][ T6586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.821337][ T6666] FAULT_INJECTION: forcing a failure. [ 283.821337][ T6666] name failslab, interval 1, probability 0, space 0, times 0 [ 283.834536][ T6666] CPU: 1 PID: 6666 Comm: syz.2.615 Not tainted syzkaller #0 [ 283.841831][ T6666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 283.851912][ T6666] Call Trace: [ 283.855232][ T6666] [ 283.858159][ T6666] dump_stack_lvl+0x188/0x24e [ 283.862859][ T6666] ? show_regs_print_info+0x12/0x12 [ 283.868096][ T6666] ? load_image+0x410/0x410 [ 283.872951][ T6666] ? __might_sleep+0xd0/0xd0 [ 283.877679][ T6666] ? __lock_acquire+0x7c40/0x7c40 [ 283.882749][ T6666] should_fail_ex+0x390/0x4c0 [ 283.887465][ T6666] should_failslab+0x5/0x20 [ 283.891984][ T6666] slab_pre_alloc_hook+0x59/0x300 [ 283.897036][ T6666] ? lockdep_softirqs_off+0x430/0x430 [ 283.902438][ T6666] kmem_cache_alloc+0x56/0x2f0 [ 283.907252][ T6666] ? security_inode_alloc+0x30/0x110 [ 283.912674][ T6666] security_inode_alloc+0x30/0x110 [ 283.917802][ T6666] inode_init_always+0x910/0xc90 [ 283.922755][ T6666] new_inode_pseudo+0x91/0x1c0 [ 283.927631][ T6666] sock_create_lite+0x87/0x500 [ 283.932559][ T6666] ? net_generic+0x1e/0x240 [ 283.937087][ T6666] __netlink_kernel_create+0xf7/0x7b0 [ 283.942495][ T6666] ? netlink_set_err+0x3b0/0x3b0 [ 283.947604][ T6666] ? net_generic+0x1e/0x240 [ 283.952207][ T6666] ? net_generic+0x1e/0x240 [ 283.956745][ T6666] audit_net_init+0xc7/0x1f0 [ 283.961378][ T6666] ? kauditd_thread+0x990/0x990 [ 283.966283][ T6666] ? audit_net_exit+0x40/0x40 [ 283.971605][ T6666] ? audit_receive+0x2cc0/0x2cc0 [ 283.976579][ T6666] ? audit_multicast_bind+0x30/0x30 [ 283.981958][ T6666] ? __kmem_cache_alloc_node+0x19d/0x270 [ 283.987634][ T6666] ops_init+0x360/0x5e0 [ 283.991835][ T6666] setup_net+0x4f2/0xbd0 [ 283.996122][ T6666] ? copy_net_ns+0x5b0/0x5b0 [ 284.000772][ T6666] ? copy_net_ns+0x324/0x5b0 [ 284.005371][ T6666] ? down_read_killable+0x1cc/0x340 [ 284.010588][ T6666] copy_net_ns+0x33e/0x5b0 [ 284.015021][ T6666] create_new_namespaces+0x3ce/0x700 [ 284.020326][ T6666] unshare_nsproxy_namespaces+0x116/0x160 [ 284.026187][ T6666] ksys_unshare+0x4f6/0x8e0 [ 284.030763][ T6666] ? sighand_ctor+0x40/0x40 [ 284.035295][ T6666] ? lock_chain_count+0x20/0x20 [ 284.041923][ T6666] ? syscall_enter_from_user_mode+0x21/0x80 [ 284.047846][ T6666] __x64_sys_unshare+0x34/0x40 [ 284.052664][ T6666] do_syscall_64+0x4c/0xa0 [ 284.057091][ T6666] ? clear_bhb_loop+0x60/0xb0 [ 284.061778][ T6666] ? clear_bhb_loop+0x60/0xb0 [ 284.066470][ T6666] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.072403][ T6666] RIP: 0033:0x7f0f6bd9e159 [ 284.076853][ T6666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.096510][ T6666] RSP: 002b:00007f0f6cb8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 284.105034][ T6666] RAX: ffffffffffffffda RBX: 00007f0f6c026090 RCX: 00007f0f6bd9e159 [ 284.113124][ T6666] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 284.121269][ T6666] RBP: 00007f0f6be3506b R08: 0000000000000000 R09: 0000000000000000 [ 284.129281][ T6666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.137261][ T6666] R13: 00007f0f6c026128 R14: 00007f0f6c026090 R15: 00007fff7a70edd8 [ 284.145557][ T6666] [ 284.148853][ T6666] audit: cannot initialize netlink socket in namespace [ 284.294644][ T6586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.461935][ T6586] device hsr_slave_0 entered promiscuous mode [ 284.477910][ T6586] device hsr_slave_1 entered promiscuous mode [ 285.168290][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 285.262041][ T6586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.291631][ T6586] Cannot create hsr debugfs directory [ 285.398682][ T4349] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 285.578745][ T6586] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 285.598329][ T4349] usb 2-1: Using ep0 maxpacket: 8 [ 285.605640][ T4349] usb 2-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 285.626050][ T6586] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 285.651496][ T4349] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 285.672753][ T4349] usb 2-1: config 1 has no interface number 0 [ 285.692031][ T4349] usb 2-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xBC, skipping [ 285.731032][ T6586] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 285.754189][ T4349] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 285.788111][ T6586] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 285.794500][ T4349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.844275][ T4349] usb 2-1: Product: syz [ 285.856270][ T4349] usb 2-1: Manufacturer: syz [ 285.872100][ T4349] usb 2-1: SerialNumber: syz [ 285.915795][ T6688] FAULT_INJECTION: forcing a failure. [ 285.915795][ T6688] name failslab, interval 1, probability 0, space 0, times 0 [ 285.981121][ T6688] CPU: 0 PID: 6688 Comm: syz.2.624 Not tainted syzkaller #0 [ 285.988481][ T6688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.998538][ T6688] Call Trace: [ 286.002010][ T6688] [ 286.004973][ T6688] dump_stack_lvl+0x188/0x24e [ 286.009676][ T6688] ? show_regs_print_info+0x12/0x12 [ 286.014970][ T6688] ? load_image+0x410/0x410 [ 286.019478][ T6688] ? __might_sleep+0xd0/0xd0 [ 286.024076][ T6688] ? __lock_acquire+0x7c40/0x7c40 [ 286.029104][ T6688] should_fail_ex+0x390/0x4c0 [ 286.033873][ T6688] should_failslab+0x5/0x20 [ 286.038464][ T6688] slab_pre_alloc_hook+0x59/0x300 [ 286.043503][ T6688] ? wakeup_source_sysfs_add+0x53/0x2b0 [ 286.049161][ T6688] __kmem_cache_alloc_node+0x4f/0x270 [ 286.054685][ T6688] ? wakeup_source_sysfs_add+0x53/0x2b0 [ 286.060347][ T6688] kmalloc_trace+0x26/0xe0 [ 286.064863][ T6688] wakeup_source_sysfs_add+0x53/0x2b0 [ 286.070253][ T6688] wakeup_source_register+0x15f/0x230 [ 286.075830][ T6688] ep_insert+0xeab/0x1980 [ 286.080187][ T6688] ? ep_loop_check+0x1b0/0x1b0 [ 286.084960][ T6688] ? mutex_lock_nested+0x10/0x10 [ 286.089939][ T6688] ? apparmor_capable+0x12c/0x190 [ 286.094993][ T6688] ? bpf_lsm_capable+0x5/0x10 [ 286.099681][ T6688] ? security_capable+0x85/0xb0 [ 286.104543][ T6688] do_epoll_ctl+0x8b2/0xf40 [ 286.109060][ T6688] __x64_sys_epoll_ctl+0x162/0x1b0 [ 286.114202][ T6688] ? ep_modify+0xa80/0xa80 [ 286.118640][ T6688] ? lockdep_hardirqs_on+0x94/0x140 [ 286.123854][ T6688] do_syscall_64+0x4c/0xa0 [ 286.128307][ T6688] ? clear_bhb_loop+0x60/0xb0 [ 286.133042][ T6688] ? clear_bhb_loop+0x60/0xb0 [ 286.137756][ T6688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.143686][ T6688] RIP: 0033:0x7f0f6bd9e159 [ 286.148130][ T6688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.167978][ T6688] RSP: 002b:00007f0f6cbad028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 286.177211][ T6688] RAX: ffffffffffffffda RBX: 00007f0f6c025fa0 RCX: 00007f0f6bd9e159 [ 286.185713][ T6688] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 286.193784][ T6688] RBP: 00007f0f6be3506b R08: 0000000000000000 R09: 0000000000000000 [ 286.201767][ T6688] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 286.209784][ T6688] R13: 00007f0f6c026038 R14: 00007f0f6c025fa0 R15: 00007fff7a70edd8 [ 286.217986][ T6688] [ 286.343636][ T4349] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 286.358018][ T6586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.414274][ T4670] udevd[4670]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.430699][ T4349] usb 2-1: USB disconnect, device number 4 [ 286.431157][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 287.248343][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 287.323022][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 287.341894][ T6586] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.380822][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 287.403888][ T6701] fuse: Invalid rootmode [ 287.423714][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 287.490966][ T4463] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.498134][ T4463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.612947][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 287.641403][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 287.643005][ T6708] fuse: Bad value for 'rootmode' [ 287.682005][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 287.719268][ T4463] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.726448][ T4463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.757358][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 287.794887][ T6710] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.929697][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 287.957098][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 287.974156][ T6720] FAULT_INJECTION: forcing a failure. [ 287.974156][ T6720] name failslab, interval 1, probability 0, space 0, times 0 [ 287.987153][ T6720] CPU: 0 PID: 6720 Comm: syz.0.632 Not tainted syzkaller #0 [ 287.994434][ T6720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 288.004499][ T6720] Call Trace: [ 288.007776][ T6720] [ 288.010793][ T6720] dump_stack_lvl+0x188/0x24e [ 288.015495][ T6720] ? show_regs_print_info+0x12/0x12 [ 288.020766][ T6720] ? load_image+0x410/0x410 [ 288.025277][ T6720] ? __might_sleep+0xd0/0xd0 [ 288.029877][ T6720] ? __lock_acquire+0x7c40/0x7c40 [ 288.034964][ T6720] should_fail_ex+0x390/0x4c0 [ 288.039654][ T6720] should_failslab+0x5/0x20 [ 288.044212][ T6720] slab_pre_alloc_hook+0x59/0x300 [ 288.049245][ T6720] ? lockdep_softirqs_off+0x430/0x430 [ 288.054659][ T6720] kmem_cache_alloc+0x56/0x2f0 [ 288.059440][ T6720] ? security_inode_alloc+0x30/0x110 [ 288.064767][ T6720] security_inode_alloc+0x30/0x110 [ 288.069885][ T6720] inode_init_always+0x910/0xc90 [ 288.074868][ T6720] new_inode_pseudo+0x91/0x1c0 [ 288.079688][ T6720] sock_create_lite+0x87/0x500 [ 288.084455][ T6720] ? net_generic+0x1e/0x240 [ 288.088994][ T6720] __netlink_kernel_create+0xf7/0x7b0 [ 288.094392][ T6720] ? netlink_set_err+0x3b0/0x3b0 [ 288.099337][ T6720] ? net_generic+0x1e/0x240 [ 288.103889][ T6720] ? net_generic+0x1e/0x240 [ 288.108442][ T6720] audit_net_init+0xc7/0x1f0 [ 288.113236][ T6720] ? kauditd_thread+0x990/0x990 [ 288.118309][ T6720] ? audit_net_exit+0x40/0x40 [ 288.123008][ T6720] ? audit_receive+0x2cc0/0x2cc0 [ 288.128033][ T6720] ? audit_multicast_bind+0x30/0x30 [ 288.133243][ T6720] ? __kmem_cache_alloc_node+0x19d/0x270 [ 288.138893][ T6720] ops_init+0x360/0x5e0 [ 288.143247][ T6720] setup_net+0x4f2/0xbd0 [ 288.147554][ T6720] ? copy_net_ns+0x5b0/0x5b0 [ 288.152260][ T6720] ? copy_net_ns+0x324/0x5b0 [ 288.156905][ T6720] ? down_read_killable+0x1cc/0x340 [ 288.162254][ T6720] copy_net_ns+0x33e/0x5b0 [ 288.166806][ T6720] create_new_namespaces+0x3ce/0x700 [ 288.172561][ T6720] unshare_nsproxy_namespaces+0x116/0x160 [ 288.178417][ T6720] ksys_unshare+0x4f6/0x8e0 [ 288.183020][ T6720] ? sighand_ctor+0x40/0x40 [ 288.187675][ T6720] ? lock_chain_count+0x20/0x20 [ 288.192544][ T6720] ? syscall_enter_from_user_mode+0x21/0x80 [ 288.198468][ T6720] __x64_sys_unshare+0x34/0x40 [ 288.203264][ T6720] do_syscall_64+0x4c/0xa0 [ 288.207790][ T6720] ? clear_bhb_loop+0x60/0xb0 [ 288.212682][ T6720] ? clear_bhb_loop+0x60/0xb0 [ 288.217483][ T6720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.223441][ T6720] RIP: 0033:0x7ff5b5d9e159 [ 288.227966][ T6720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.247780][ T6720] RSP: 002b:00007ff5b6cb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 288.256731][ T6720] RAX: ffffffffffffffda RBX: 00007ff5b6026090 RCX: 00007ff5b5d9e159 [ 288.265085][ T6720] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 288.273340][ T6720] RBP: 00007ff5b5e3506b R08: 0000000000000000 R09: 0000000000000000 [ 288.281344][ T6720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.289539][ T6720] R13: 00007ff5b6026128 R14: 00007ff5b6026090 R15: 00007ffc23cfdaf8 [ 288.297729][ T6720] [ 288.302359][ T6720] audit: cannot initialize netlink socket in namespace [ 288.379417][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 288.404058][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 288.439155][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 288.470611][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 288.523483][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 288.568130][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 288.623076][ T6586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.722888][ T6586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 288.756333][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 288.779847][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 289.358529][ T4349] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 289.568392][ T4349] usb 1-1: Using ep0 maxpacket: 8 [ 289.580927][ T4349] usb 1-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 289.622165][ T4349] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.659397][ T4349] usb 1-1: config 1 has no interface number 0 [ 289.665620][ T4349] usb 1-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xBC, skipping [ 289.731592][ T4349] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 289.780260][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 289.787898][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 289.798373][ T4349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.812668][ T4349] usb 1-1: Product: syz [ 289.822776][ T6586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.828212][ T4349] usb 1-1: Manufacturer: syz [ 289.834210][ T4349] usb 1-1: SerialNumber: syz [ 290.036388][ T6761] fuse: Bad value for 'rootmode' [ 290.142530][ T4349] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 290.192570][ T4349] usb 1-1: USB disconnect, device number 9 [ 290.203214][ T4670] udevd[4670]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 292.464144][ T6788] FAULT_INJECTION: forcing a failure. [ 292.464144][ T6788] name failslab, interval 1, probability 0, space 0, times 0 [ 292.550064][ T6788] CPU: 1 PID: 6788 Comm: syz.1.648 Not tainted syzkaller #0 [ 292.557461][ T6788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 292.567525][ T6788] Call Trace: [ 292.570838][ T6788] [ 292.573769][ T6788] dump_stack_lvl+0x188/0x24e [ 292.578450][ T6788] ? show_regs_print_info+0x12/0x12 [ 292.583645][ T6788] ? load_image+0x410/0x410 [ 292.588157][ T6788] ? __might_sleep+0xd0/0xd0 [ 292.592951][ T6788] ? __lock_acquire+0x7c40/0x7c40 [ 292.597979][ T6788] should_fail_ex+0x390/0x4c0 [ 292.602679][ T6788] should_failslab+0x5/0x20 [ 292.607184][ T6788] slab_pre_alloc_hook+0x59/0x300 [ 292.612422][ T6788] ? sk_prot_alloc+0xe7/0x210 [ 292.617119][ T6788] __kmem_cache_alloc_node+0x4f/0x270 [ 292.622509][ T6788] ? sk_prot_alloc+0xe7/0x210 [ 292.627201][ T6788] __kmalloc+0xa3/0x240 [ 292.631415][ T6788] ? __rwlock_init+0x140/0x140 [ 292.636229][ T6788] sk_prot_alloc+0xe7/0x210 [ 292.640764][ T6788] ? sk_alloc+0x20/0x330 [ 292.645027][ T6788] sk_alloc+0x36/0x330 [ 292.649127][ T6788] __netlink_create+0x6b/0x2d0 [ 292.653945][ T6788] __netlink_kernel_create+0x144/0x7b0 [ 292.659423][ T6788] ? netlink_set_err+0x3b0/0x3b0 [ 292.664372][ T6788] ? net_generic+0x1e/0x240 [ 292.668903][ T6788] ? net_generic+0x1e/0x240 [ 292.673455][ T6788] audit_net_init+0xc7/0x1f0 [ 292.678065][ T6788] ? kauditd_thread+0x990/0x990 [ 292.682941][ T6788] ? audit_net_exit+0x40/0x40 [ 292.687635][ T6788] ? audit_receive+0x2cc0/0x2cc0 [ 292.692601][ T6788] ? audit_multicast_bind+0x30/0x30 [ 292.697814][ T6788] ? __kmem_cache_alloc_node+0x19d/0x270 [ 292.703477][ T6788] ops_init+0x360/0x5e0 [ 292.708118][ T6788] setup_net+0x4f2/0xbd0 [ 292.712521][ T6788] ? copy_net_ns+0x5b0/0x5b0 [ 292.717849][ T6788] ? copy_net_ns+0x324/0x5b0 [ 292.722458][ T6788] ? down_read_killable+0x1cc/0x340 [ 292.727764][ T6788] copy_net_ns+0x33e/0x5b0 [ 292.732215][ T6788] create_new_namespaces+0x3ce/0x700 [ 292.737544][ T6788] unshare_nsproxy_namespaces+0x116/0x160 [ 292.743293][ T6788] ksys_unshare+0x4f6/0x8e0 [ 292.747824][ T6788] ? sighand_ctor+0x40/0x40 [ 292.752978][ T6788] ? lock_chain_count+0x20/0x20 [ 292.757854][ T6788] ? syscall_enter_from_user_mode+0x21/0x80 [ 292.763858][ T6788] __x64_sys_unshare+0x34/0x40 [ 292.768934][ T6788] do_syscall_64+0x4c/0xa0 [ 292.773395][ T6788] ? clear_bhb_loop+0x60/0xb0 [ 292.778439][ T6788] ? clear_bhb_loop+0x60/0xb0 [ 292.783221][ T6788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.789134][ T6788] RIP: 0033:0x7f59c959e159 [ 292.793562][ T6788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.813621][ T6788] RSP: 002b:00007f59ca46f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 292.822060][ T6788] RAX: ffffffffffffffda RBX: 00007f59c9825fa0 RCX: 00007f59c959e159 [ 292.830074][ T6788] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 292.838081][ T6788] RBP: 00007f59c963506b R08: 0000000000000000 R09: 0000000000000000 [ 292.846213][ T6788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.854625][ T6788] R13: 00007f59c9826038 R14: 00007f59c9825fa0 R15: 00007ffe7ae9be78 [ 292.862649][ T6788] [ 292.889376][ T6788] audit: cannot initialize netlink socket in namespace [ 292.986892][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 293.003938][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 293.105081][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 293.135407][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 293.161683][ T6586] device veth0_vlan entered promiscuous mode [ 293.176389][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 293.204462][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 293.241690][ T6586] device veth1_vlan entered promiscuous mode [ 293.343326][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 293.363365][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 293.383106][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 293.460615][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 293.499407][ T6586] device veth0_macvtap entered promiscuous mode [ 293.544300][ T6586] device veth1_macvtap entered promiscuous mode [ 293.595000][ T6815] fuse: Bad value for 'rootmode' [ 293.611391][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.653701][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.671364][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.687690][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.727712][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.768654][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.802953][ T6586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.955015][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 293.965259][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 293.987728][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 294.013529][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 294.031195][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.045854][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.056535][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.072702][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.085864][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.116968][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.149206][ T6586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.157089][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 294.168273][ T4499] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 294.199462][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 294.232186][ T6586] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.254929][ T6586] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.293333][ T6833] usb usb8: usbfs: process 6833 (syz.1.656) did not claim interface 0 before use [ 294.313867][ T6586] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.338314][ T6586] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.348262][ T4499] usb 1-1: Using ep0 maxpacket: 8 [ 294.359753][ T4499] usb 1-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 294.382532][ T4499] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.396501][ T4499] usb 1-1: config 1 has no interface number 0 [ 294.407814][ T4499] usb 1-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xBC, skipping [ 294.444055][ T4499] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 294.481747][ T4499] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.494063][ T4609] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.496544][ T4499] usb 1-1: Product: syz [ 294.532385][ T4499] usb 1-1: Manufacturer: syz [ 294.537055][ T4499] usb 1-1: SerialNumber: syz [ 294.709668][ T4609] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.804999][ T4499] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 294.908518][ T4499] usb 1-1: USB disconnect, device number 10 [ 295.137546][ T4609] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.198551][ T4412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.253169][ T4412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.262844][ T4670] udevd[4670]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.296754][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 295.392082][ T4609] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.446636][ T4412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.468869][ T4412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.480197][ T6858] fuse: Unknown parameter 'use00000000000000000000' [ 295.516235][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 295.837169][ T6872] FAULT_INJECTION: forcing a failure. [ 295.837169][ T6872] name failslab, interval 1, probability 0, space 0, times 0 [ 295.850148][ T6872] CPU: 1 PID: 6872 Comm: syz.0.665 Not tainted syzkaller #0 [ 295.857459][ T6872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.867536][ T6872] Call Trace: [ 295.870809][ T6872] [ 295.873756][ T6872] dump_stack_lvl+0x188/0x24e [ 295.883415][ T6872] ? show_regs_print_info+0x12/0x12 [ 295.888639][ T6872] ? load_image+0x410/0x410 [ 295.893226][ T6872] ? __might_sleep+0xd0/0xd0 [ 295.897849][ T6872] ? __lock_acquire+0x7c40/0x7c40 [ 295.902924][ T6872] should_fail_ex+0x390/0x4c0 [ 295.907619][ T6872] should_failslab+0x5/0x20 [ 295.912123][ T6872] slab_pre_alloc_hook+0x59/0x300 [ 295.917179][ T6872] ? lockdep_softirqs_off+0x430/0x430 [ 295.922560][ T6872] kmem_cache_alloc+0x56/0x2f0 [ 295.927357][ T6872] ? security_inode_alloc+0x30/0x110 [ 295.932703][ T6872] security_inode_alloc+0x30/0x110 [ 295.937839][ T6872] inode_init_always+0x910/0xc90 [ 295.942805][ T6872] new_inode_pseudo+0x91/0x1c0 [ 295.947594][ T6872] sock_create_lite+0x87/0x500 [ 295.952414][ T6872] ? net_generic+0x1e/0x240 [ 295.957123][ T6872] __netlink_kernel_create+0xf7/0x7b0 [ 295.962530][ T6872] ? netlink_set_err+0x3b0/0x3b0 [ 295.967590][ T6872] ? net_generic+0x1e/0x240 [ 295.972115][ T6872] ? net_generic+0x1e/0x240 [ 295.976646][ T6872] audit_net_init+0xc7/0x1f0 [ 295.981288][ T6872] ? kauditd_thread+0x990/0x990 [ 295.986147][ T6872] ? audit_net_exit+0x40/0x40 [ 295.990832][ T6872] ? audit_receive+0x2cc0/0x2cc0 [ 295.995787][ T6872] ? audit_multicast_bind+0x30/0x30 [ 296.001008][ T6872] ? __kmem_cache_alloc_node+0x19d/0x270 [ 296.006768][ T6872] ops_init+0x360/0x5e0 [ 296.010996][ T6872] setup_net+0x4f2/0xbd0 [ 296.015500][ T6872] ? copy_net_ns+0x5b0/0x5b0 [ 296.020131][ T6872] ? copy_net_ns+0x324/0x5b0 [ 296.024765][ T6872] ? down_read_killable+0x1cc/0x340 [ 296.030005][ T6872] copy_net_ns+0x33e/0x5b0 [ 296.034439][ T6872] create_new_namespaces+0x3ce/0x700 [ 296.039765][ T6872] unshare_nsproxy_namespaces+0x116/0x160 [ 296.045543][ T6872] ksys_unshare+0x4f6/0x8e0 [ 296.050060][ T6872] ? sighand_ctor+0x40/0x40 [ 296.054590][ T6872] ? lock_chain_count+0x20/0x20 [ 296.059571][ T6872] ? syscall_enter_from_user_mode+0x21/0x80 [ 296.065491][ T6872] __x64_sys_unshare+0x34/0x40 [ 296.070276][ T6872] do_syscall_64+0x4c/0xa0 [ 296.074717][ T6872] ? clear_bhb_loop+0x60/0xb0 [ 296.079429][ T6872] ? clear_bhb_loop+0x60/0xb0 [ 296.084142][ T6872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.090060][ T6872] RIP: 0033:0x7ff5b5d9e159 [ 296.094481][ T6872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.114274][ T6872] RSP: 002b:00007ff5b6cb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 296.122720][ T6872] RAX: ffffffffffffffda RBX: 00007ff5b6026090 RCX: 00007ff5b5d9e159 [ 296.130696][ T6872] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 296.138685][ T6872] RBP: 00007ff5b5e3506b R08: 0000000000000000 R09: 0000000000000000 [ 296.146662][ T6872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.154639][ T6872] R13: 00007ff5b6026128 R14: 00007ff5b6026090 R15: 00007ffc23cfdaf8 [ 296.162641][ T6872] [ 296.166293][ T6872] audit: cannot initialize netlink socket in namespace [ 296.299011][ T6871] binder: 6869:6871 ioctl c00c6211 0 returned -14 [ 296.542217][ T6881] usb usb8: usbfs: process 6881 (syz.0.668) did not claim interface 0 before use [ 297.238534][ T4350] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 297.478335][ T4350] usb 7-1: Using ep0 maxpacket: 8 [ 297.489599][ T4350] usb 7-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 297.651287][ T4350] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.720502][ T6897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 297.742466][ T4350] usb 7-1: config 1 has no interface number 0 [ 297.763888][ T4350] usb 7-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xBC, skipping [ 297.842407][ T4350] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 297.896247][ T4350] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.917829][ T6903] fuse: Unknown parameter 'use00000000000000000000' [ 297.936948][ T4350] usb 7-1: Product: syz [ 297.951394][ T4350] usb 7-1: Manufacturer: syz [ 297.969286][ T4350] usb 7-1: SerialNumber: syz [ 298.945615][ T4350] snd-usb-audio: probe of 7-1:1.1 failed with error -22 [ 299.008411][ T4350] usb 7-1: USB disconnect, device number 2 [ 299.026220][ T6912] FAULT_INJECTION: forcing a failure. [ 299.026220][ T6912] name failslab, interval 1, probability 0, space 0, times 0 [ 299.039162][ T6912] CPU: 0 PID: 6912 Comm: syz.0.678 Not tainted syzkaller #0 [ 299.046470][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.056538][ T6912] Call Trace: [ 299.059885][ T6912] [ 299.062981][ T6912] dump_stack_lvl+0x188/0x24e [ 299.067714][ T6912] ? show_regs_print_info+0x12/0x12 [ 299.072927][ T6912] ? load_image+0x410/0x410 [ 299.077445][ T6912] ? __might_sleep+0xd0/0xd0 [ 299.082043][ T6912] ? __lock_acquire+0x7c40/0x7c40 [ 299.087087][ T6912] should_fail_ex+0x390/0x4c0 [ 299.091904][ T6912] should_failslab+0x5/0x20 [ 299.096411][ T6912] slab_pre_alloc_hook+0x59/0x300 [ 299.101441][ T6912] ? lockdep_softirqs_off+0x430/0x430 [ 299.106828][ T6912] kmem_cache_alloc+0x56/0x2f0 [ 299.111736][ T6912] ? security_inode_alloc+0x30/0x110 [ 299.117066][ T6912] security_inode_alloc+0x30/0x110 [ 299.122225][ T6912] inode_init_always+0x910/0xc90 [ 299.127172][ T6912] new_inode_pseudo+0x91/0x1c0 [ 299.132040][ T6912] sock_create_lite+0x87/0x500 [ 299.136945][ T6912] ? net_generic+0x1e/0x240 [ 299.141575][ T6912] __netlink_kernel_create+0xf7/0x7b0 [ 299.147008][ T6912] ? netlink_set_err+0x3b0/0x3b0 [ 299.152065][ T6912] ? net_generic+0x1e/0x240 [ 299.156600][ T6912] ? net_generic+0x1e/0x240 [ 299.161133][ T6912] audit_net_init+0xc7/0x1f0 [ 299.165759][ T6912] ? kauditd_thread+0x990/0x990 [ 299.170834][ T6912] ? audit_net_exit+0x40/0x40 [ 299.175529][ T6912] ? audit_receive+0x2cc0/0x2cc0 [ 299.180515][ T6912] ? audit_multicast_bind+0x30/0x30 [ 299.185727][ T6912] ? __kmem_cache_alloc_node+0x19d/0x270 [ 299.191810][ T6912] ops_init+0x360/0x5e0 [ 299.196003][ T6912] setup_net+0x4f2/0xbd0 [ 299.200535][ T6912] ? copy_net_ns+0x5b0/0x5b0 [ 299.205141][ T6912] ? copy_net_ns+0x324/0x5b0 [ 299.209794][ T6912] ? down_read_killable+0x1cc/0x340 [ 299.215025][ T6912] copy_net_ns+0x33e/0x5b0 [ 299.219545][ T6912] create_new_namespaces+0x3ce/0x700 [ 299.224998][ T6912] unshare_nsproxy_namespaces+0x116/0x160 [ 299.230758][ T6912] ksys_unshare+0x4f6/0x8e0 [ 299.235444][ T6912] ? sighand_ctor+0x40/0x40 [ 299.239964][ T6912] ? lock_chain_count+0x20/0x20 [ 299.244832][ T6912] ? syscall_enter_from_user_mode+0x21/0x80 [ 299.250753][ T6912] __x64_sys_unshare+0x34/0x40 [ 299.255544][ T6912] do_syscall_64+0x4c/0xa0 [ 299.259969][ T6912] ? clear_bhb_loop+0x60/0xb0 [ 299.264655][ T6912] ? clear_bhb_loop+0x60/0xb0 [ 299.269779][ T6912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.275691][ T6912] RIP: 0033:0x7ff5b5d9e159 [ 299.280147][ T6912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.299771][ T6912] RSP: 002b:00007ff5b6cd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 299.308191][ T6912] RAX: ffffffffffffffda RBX: 00007ff5b6025fa0 RCX: 00007ff5b5d9e159 [ 299.317262][ T6912] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 299.325268][ T6912] RBP: 00007ff5b5e3506b R08: 0000000000000000 R09: 0000000000000000 [ 299.333255][ T6912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.341957][ T6912] R13: 00007ff5b6026038 R14: 00007ff5b6025fa0 R15: 00007ffc23cfdaf8 [ 299.350153][ T6912] [ 299.354038][ T6912] audit: cannot initialize netlink socket in namespace [ 299.413701][ T4670] udevd[4670]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.804874][ T6933] binder: 6932:6933 ioctl c00c6211 0 returned -14 [ 299.825201][ T4609] device hsr_slave_0 left promiscuous mode [ 299.855729][ T4609] device hsr_slave_1 left promiscuous mode [ 299.887237][ T4609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.963204][ T4609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.061180][ T4609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.094757][ T4609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.143630][ T4609] device bridge_slave_1 left promiscuous mode [ 300.186703][ T4609] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.214632][ T6949] usb usb8: usbfs: process 6949 (syz.1.685) did not claim interface 0 before use [ 300.244023][ T4609] device bridge_slave_0 left promiscuous mode [ 300.272155][ T4609] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.440259][ T4609] device veth1_macvtap left promiscuous mode [ 300.470317][ T4609] device veth0_macvtap left promiscuous mode [ 300.495430][ T4609] device veth1_vlan left promiscuous mode [ 300.514451][ T4609] device veth0_vlan left promiscuous mode [ 300.975639][ T6962] fuse: Unknown parameter 'use00000000000000000000' [ 302.240687][ T6971] FAULT_INJECTION: forcing a failure. [ 302.240687][ T6971] name failslab, interval 1, probability 0, space 0, times 0 [ 302.253406][ T6971] CPU: 1 PID: 6971 Comm: syz.4.692 Not tainted syzkaller #0 [ 302.260688][ T6971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 302.270744][ T6971] Call Trace: [ 302.274019][ T6971] [ 302.276945][ T6971] dump_stack_lvl+0x188/0x24e [ 302.281637][ T6971] ? show_regs_print_info+0x12/0x12 [ 302.286932][ T6971] ? load_image+0x410/0x410 [ 302.291444][ T6971] ? __might_sleep+0xd0/0xd0 [ 302.296058][ T6971] ? __lock_acquire+0x7c40/0x7c40 [ 302.301094][ T6971] should_fail_ex+0x390/0x4c0 [ 302.305785][ T6971] should_failslab+0x5/0x20 [ 302.310295][ T6971] slab_pre_alloc_hook+0x59/0x300 [ 302.315343][ T6971] ? lockdep_softirqs_off+0x430/0x430 [ 302.320722][ T6971] kmem_cache_alloc+0x56/0x2f0 [ 302.325487][ T6971] ? security_inode_alloc+0x30/0x110 [ 302.330772][ T6971] security_inode_alloc+0x30/0x110 [ 302.335886][ T6971] inode_init_always+0x910/0xc90 [ 302.340836][ T6971] new_inode_pseudo+0x91/0x1c0 [ 302.345622][ T6971] sock_create_lite+0x87/0x500 [ 302.350392][ T6971] ? net_generic+0x1e/0x240 [ 302.354898][ T6971] __netlink_kernel_create+0xf7/0x7b0 [ 302.360301][ T6971] ? netlink_set_err+0x3b0/0x3b0 [ 302.365246][ T6971] ? net_generic+0x1e/0x240 [ 302.369750][ T6971] ? net_generic+0x1e/0x240 [ 302.374268][ T6971] audit_net_init+0xc7/0x1f0 [ 302.378860][ T6971] ? kauditd_thread+0x990/0x990 [ 302.383715][ T6971] ? audit_net_exit+0x40/0x40 [ 302.388401][ T6971] ? audit_receive+0x2cc0/0x2cc0 [ 302.393383][ T6971] ? audit_multicast_bind+0x30/0x30 [ 302.398599][ T6971] ? __kmem_cache_alloc_node+0x19d/0x270 [ 302.404269][ T6971] ops_init+0x360/0x5e0 [ 302.408451][ T6971] setup_net+0x4f2/0xbd0 [ 302.412703][ T6971] ? copy_net_ns+0x5b0/0x5b0 [ 302.417334][ T6971] ? copy_net_ns+0x324/0x5b0 [ 302.421966][ T6971] ? down_read_killable+0x1cc/0x340 [ 302.427169][ T6971] copy_net_ns+0x33e/0x5b0 [ 302.431606][ T6971] create_new_namespaces+0x3ce/0x700 [ 302.436938][ T6971] unshare_nsproxy_namespaces+0x116/0x160 [ 302.442671][ T6971] ksys_unshare+0x4f6/0x8e0 [ 302.447208][ T6971] ? sighand_ctor+0x40/0x40 [ 302.451755][ T6971] ? lock_chain_count+0x20/0x20 [ 302.456650][ T6971] ? syscall_enter_from_user_mode+0x21/0x80 [ 302.462559][ T6971] __x64_sys_unshare+0x34/0x40 [ 302.467331][ T6971] do_syscall_64+0x4c/0xa0 [ 302.471775][ T6971] ? clear_bhb_loop+0x60/0xb0 [ 302.476465][ T6971] ? clear_bhb_loop+0x60/0xb0 [ 302.481181][ T6971] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.487108][ T6971] RIP: 0033:0x7f058799e159 [ 302.491575][ T6971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.511213][ T6971] RSP: 002b:00007f05887da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 302.519664][ T6971] RAX: ffffffffffffffda RBX: 00007f0587c25fa0 RCX: 00007f058799e159 [ 302.527647][ T6971] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 302.535623][ T6971] RBP: 00007f0587a3506b R08: 0000000000000000 R09: 0000000000000000 [ 302.543600][ T6971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.551575][ T6971] R13: 00007f0587c26038 R14: 00007f0587c25fa0 R15: 00007fff65ace308 [ 302.559554][ T6971] [ 302.563930][ T6971] audit: cannot initialize netlink socket in namespace [ 303.048362][ T7] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 303.956075][ T4609] team0 (unregistering): Port device team_slave_1 removed [ 303.965089][ T7] usb 7-1: Using ep0 maxpacket: 8 [ 303.991363][ T7] usb 7-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 304.002077][ T7] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.014460][ T7] usb 7-1: config 1 has no interface number 0 [ 304.020816][ T7] usb 7-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xBC, skipping [ 304.035001][ T7] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 304.044892][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.046120][ T4609] team0 (unregistering): Port device team_slave_0 removed [ 304.053056][ T7] usb 7-1: Product: syz [ 304.053074][ T7] usb 7-1: Manufacturer: syz [ 304.053088][ T7] usb 7-1: SerialNumber: syz [ 304.114274][ T4609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.164470][ T4609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.316928][ T7] snd-usb-audio: probe of 7-1:1.1 failed with error -22 [ 304.335705][ T7] usb 7-1: USB disconnect, device number 3 [ 304.362275][ T4670] udevd[4670]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.599222][ T4609] bond0 (unregistering): Released all slaves [ 304.995217][ T6999] fuse: Unknown parameter 'user_i00000000000000000000' [ 305.412825][ T7020] Config c/1 of g1 needs at least one function. [ 305.463839][ T7020] udc dummy_udc.0: failed to start g1: -22 [ 305.515930][ T7020] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 305.574555][ T7020] UDC core: g1: couldn't find an available UDC or it's busy [ 306.686264][ T7036] FAULT_INJECTION: forcing a failure. [ 306.686264][ T7036] name failslab, interval 1, probability 0, space 0, times 0 [ 306.699360][ T7036] CPU: 1 PID: 7036 Comm: syz.0.708 Not tainted syzkaller #0 [ 306.706672][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 306.716802][ T7036] Call Trace: [ 306.720111][ T7036] [ 306.723039][ T7036] dump_stack_lvl+0x188/0x24e [ 306.727713][ T7036] ? show_regs_print_info+0x12/0x12 [ 306.732912][ T7036] ? load_image+0x410/0x410 [ 306.737462][ T7036] ? __might_sleep+0xd0/0xd0 [ 306.742051][ T7036] ? __lock_acquire+0x7c40/0x7c40 [ 306.747073][ T7036] ? netlink_set_err+0x3b0/0x3b0 [ 306.752006][ T7036] should_fail_ex+0x390/0x4c0 [ 306.756775][ T7036] should_failslab+0x5/0x20 [ 306.761292][ T7036] slab_pre_alloc_hook+0x59/0x300 [ 306.766352][ T7036] ? genl_get_cmd+0x8b0/0x8b0 [ 306.771054][ T7036] ? rtnetlink_net_init+0xbd/0x140 [ 306.776177][ T7036] ? ops_init+0x8a/0x5e0 [ 306.780448][ T7036] __kmem_cache_alloc_node+0x4f/0x270 [ 306.785826][ T7036] ? rtnetlink_rcv+0x20/0x20 [ 306.790418][ T7036] ? ops_init+0x8a/0x5e0 [ 306.794682][ T7036] __kmalloc+0xa3/0x240 [ 306.798848][ T7036] ops_init+0x8a/0x5e0 [ 306.802936][ T7036] setup_net+0x4f2/0xbd0 [ 306.807222][ T7036] ? copy_net_ns+0x5b0/0x5b0 [ 306.811830][ T7036] ? copy_net_ns+0x324/0x5b0 [ 306.816431][ T7036] ? down_read_killable+0x1cc/0x340 [ 306.821631][ T7036] copy_net_ns+0x33e/0x5b0 [ 306.826051][ T7036] create_new_namespaces+0x3ce/0x700 [ 306.831346][ T7036] unshare_nsproxy_namespaces+0x116/0x160 [ 306.837066][ T7036] ksys_unshare+0x4f6/0x8e0 [ 306.841570][ T7036] ? sighand_ctor+0x40/0x40 [ 306.846070][ T7036] ? lock_chain_count+0x20/0x20 [ 306.850930][ T7036] ? syscall_enter_from_user_mode+0x21/0x80 [ 306.856832][ T7036] __x64_sys_unshare+0x34/0x40 [ 306.861601][ T7036] do_syscall_64+0x4c/0xa0 [ 306.866018][ T7036] ? clear_bhb_loop+0x60/0xb0 [ 306.870691][ T7036] ? clear_bhb_loop+0x60/0xb0 [ 306.875458][ T7036] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 306.881361][ T7036] RIP: 0033:0x7ff5b5d9e159 [ 306.885797][ T7036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.905492][ T7036] RSP: 002b:00007ff5b6cd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 306.914127][ T7036] RAX: ffffffffffffffda RBX: 00007ff5b6025fa0 RCX: 00007ff5b5d9e159 [ 306.922104][ T7036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 306.930367][ T7036] RBP: 00007ff5b5e3506b R08: 0000000000000000 R09: 0000000000000000 [ 306.938356][ T7036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.946507][ T7036] R13: 00007ff5b6026038 R14: 00007ff5b6025fa0 R15: 00007ffc23cfdaf8 [ 306.954497][ T7036] [ 306.990170][ T7040] binder: 7038:7040 ioctl c00c6211 0 returned -14 [ 308.090318][ T7051] fuse: Unknown parameter 'user_i00000000000000000000' [ 308.138434][ T4349] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 308.342544][ T4349] usb 2-1: Using ep0 maxpacket: 8 [ 308.350111][ T4349] usb 2-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 308.442552][ T4349] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 308.469578][ T4349] usb 2-1: config 1 has no interface number 0 [ 308.510347][ T4349] usb 2-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xBC, skipping [ 308.617192][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 309.357162][ T4349] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 309.368433][ T4349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.376580][ T4349] usb 2-1: Product: syz [ 309.381227][ T4349] usb 2-1: Manufacturer: syz [ 309.386741][ T4349] usb 2-1: SerialNumber: syz [ 310.408112][ T4349] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 310.468682][ T4349] usb 2-1: USB disconnect, device number 5 [ 310.487054][ T7084] binder: 7082:7084 ioctl c00c6211 0 returned -14 [ 311.285720][ T4670] udevd[4670]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.631526][ T7106] fuse: Unknown parameter 'user_i00000000000000000000' [ 311.666935][ T7103] FAULT_INJECTION: forcing a failure. [ 311.666935][ T7103] name failslab, interval 1, probability 0, space 0, times 0 [ 311.679760][ T7103] CPU: 1 PID: 7103 Comm: syz.2.725 Not tainted syzkaller #0 [ 311.687282][ T7103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.697369][ T7103] Call Trace: [ 311.700652][ T7103] [ 311.703575][ T7103] dump_stack_lvl+0x188/0x24e [ 311.708258][ T7103] ? show_regs_print_info+0x12/0x12 [ 311.713468][ T7103] ? load_image+0x410/0x410 [ 311.718008][ T7103] ? __might_sleep+0xd0/0xd0 [ 311.722603][ T7103] ? __lock_acquire+0x7c40/0x7c40 [ 311.727829][ T7103] should_fail_ex+0x390/0x4c0 [ 311.732538][ T7103] should_failslab+0x5/0x20 [ 311.737056][ T7103] slab_pre_alloc_hook+0x59/0x300 [ 311.742528][ T7103] ? lockdep_softirqs_off+0x430/0x430 [ 311.747949][ T7103] kmem_cache_alloc+0x56/0x2f0 [ 311.752740][ T7103] ? security_inode_alloc+0x30/0x110 [ 311.758044][ T7103] security_inode_alloc+0x30/0x110 [ 311.763171][ T7103] inode_init_always+0x910/0xc90 [ 311.768164][ T7103] new_inode_pseudo+0x91/0x1c0 [ 311.772960][ T7103] sock_create_lite+0x87/0x500 [ 311.777765][ T7103] ? net_generic+0x1e/0x240 [ 311.782272][ T7103] __netlink_kernel_create+0xf7/0x7b0 [ 311.787654][ T7103] ? netlink_set_err+0x3b0/0x3b0 [ 311.792592][ T7103] ? net_generic+0x1e/0x240 [ 311.797200][ T7103] ? net_generic+0x1e/0x240 [ 311.801766][ T7103] audit_net_init+0xc7/0x1f0 [ 311.806365][ T7103] ? kauditd_thread+0x990/0x990 [ 311.811231][ T7103] ? audit_net_exit+0x40/0x40 [ 311.815914][ T7103] ? audit_receive+0x2cc0/0x2cc0 [ 311.820866][ T7103] ? audit_multicast_bind+0x30/0x30 [ 311.826090][ T7103] ? __kmem_cache_alloc_node+0x19d/0x270 [ 311.831755][ T7103] ops_init+0x360/0x5e0 [ 311.835931][ T7103] setup_net+0x4f2/0xbd0 [ 311.840193][ T7103] ? copy_net_ns+0x5b0/0x5b0 [ 311.844828][ T7103] ? copy_net_ns+0x324/0x5b0 [ 311.849449][ T7103] ? down_read_killable+0x1cc/0x340 [ 311.854685][ T7103] copy_net_ns+0x33e/0x5b0 [ 311.859148][ T7103] create_new_namespaces+0x3ce/0x700 [ 311.864486][ T7103] unshare_nsproxy_namespaces+0x116/0x160 [ 311.870255][ T7103] ksys_unshare+0x4f6/0x8e0 [ 311.874796][ T7103] ? sighand_ctor+0x40/0x40 [ 311.879306][ T7103] ? lock_chain_count+0x20/0x20 [ 311.884171][ T7103] ? syscall_enter_from_user_mode+0x21/0x80 [ 311.890110][ T7103] __x64_sys_unshare+0x34/0x40 [ 311.894930][ T7103] do_syscall_64+0x4c/0xa0 [ 311.899363][ T7103] ? clear_bhb_loop+0x60/0xb0 [ 311.904046][ T7103] ? clear_bhb_loop+0x60/0xb0 [ 311.908726][ T7103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 311.914649][ T7103] RIP: 0033:0x7f0f6bd9e159 [ 311.919081][ T7103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.938710][ T7103] RSP: 002b:00007f0f6cbad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 311.947132][ T7103] RAX: ffffffffffffffda RBX: 00007f0f6c025fa0 RCX: 00007f0f6bd9e159 [ 311.955141][ T7103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 311.963153][ T7103] RBP: 00007f0f6be3506b R08: 0000000000000000 R09: 0000000000000000 [ 311.971152][ T7103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.979246][ T7103] R13: 00007f0f6c026038 R14: 00007f0f6c025fa0 R15: 00007fff7a70edd8 [ 311.987258][ T7103] [ 311.990861][ T7103] audit: cannot initialize netlink socket in namespace [ 312.481302][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 315.138926][ T7136] binder: 7135:7136 ioctl c00c6211 0 returned -14 [ 315.575012][ T7147] fuse: Unknown parameter 'user_id00000000000000000000' [ 315.802420][ T7153] FAULT_INJECTION: forcing a failure. [ 315.802420][ T7153] name failslab, interval 1, probability 0, space 0, times 0 [ 315.815308][ T7153] CPU: 1 PID: 7153 Comm: syz.0.741 Not tainted syzkaller #0 [ 315.822592][ T7153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 315.832647][ T7153] Call Trace: [ 315.835919][ T7153] [ 315.838839][ T7153] dump_stack_lvl+0x188/0x24e [ 315.843533][ T7153] ? show_regs_print_info+0x12/0x12 [ 315.848723][ T7153] ? load_image+0x410/0x410 [ 315.853224][ T7153] ? __might_sleep+0xd0/0xd0 [ 315.857822][ T7153] ? __lock_acquire+0x7c40/0x7c40 [ 315.863008][ T7153] should_fail_ex+0x390/0x4c0 [ 315.867738][ T7153] should_failslab+0x5/0x20 [ 315.872253][ T7153] slab_pre_alloc_hook+0x59/0x300 [ 315.877286][ T7153] ? lockdep_softirqs_off+0x430/0x430 [ 315.882729][ T7153] kmem_cache_alloc+0x56/0x2f0 [ 315.887520][ T7153] ? security_inode_alloc+0x30/0x110 [ 315.892809][ T7153] security_inode_alloc+0x30/0x110 [ 315.897983][ T7153] inode_init_always+0x910/0xc90 [ 315.902928][ T7153] new_inode_pseudo+0x91/0x1c0 [ 315.907712][ T7153] sock_create_lite+0x87/0x500 [ 315.912507][ T7153] ? net_generic+0x1e/0x240 [ 315.917039][ T7153] __netlink_kernel_create+0xf7/0x7b0 [ 315.922415][ T7153] ? netlink_set_err+0x3b0/0x3b0 [ 315.927347][ T7153] ? net_generic+0x1e/0x240 [ 315.931942][ T7153] ? net_generic+0x1e/0x240 [ 315.936452][ T7153] audit_net_init+0xc7/0x1f0 [ 315.941071][ T7153] ? kauditd_thread+0x990/0x990 [ 315.945928][ T7153] ? audit_net_exit+0x40/0x40 [ 315.950606][ T7153] ? audit_receive+0x2cc0/0x2cc0 [ 315.955545][ T7153] ? audit_multicast_bind+0x30/0x30 [ 315.960754][ T7153] ? __kmem_cache_alloc_node+0x19d/0x270 [ 315.966428][ T7153] ops_init+0x360/0x5e0 [ 315.970612][ T7153] setup_net+0x4f2/0xbd0 [ 315.974878][ T7153] ? copy_net_ns+0x5b0/0x5b0 [ 315.979476][ T7153] ? copy_net_ns+0x324/0x5b0 [ 315.984092][ T7153] ? down_read_killable+0x1cc/0x340 [ 315.989342][ T7153] copy_net_ns+0x33e/0x5b0 [ 315.993784][ T7153] create_new_namespaces+0x3ce/0x700 [ 315.999098][ T7153] unshare_nsproxy_namespaces+0x116/0x160 [ 316.004831][ T7153] ksys_unshare+0x4f6/0x8e0 [ 316.009341][ T7153] ? sighand_ctor+0x40/0x40 [ 316.013846][ T7153] ? lock_chain_count+0x20/0x20 [ 316.018714][ T7153] ? syscall_enter_from_user_mode+0x21/0x80 [ 316.024608][ T7153] __x64_sys_unshare+0x34/0x40 [ 316.029393][ T7153] do_syscall_64+0x4c/0xa0 [ 316.033822][ T7153] ? clear_bhb_loop+0x60/0xb0 [ 316.038501][ T7153] ? clear_bhb_loop+0x60/0xb0 [ 316.043179][ T7153] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.049077][ T7153] RIP: 0033:0x7ff5b5d9e159 [ 316.053496][ T7153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.073107][ T7153] RSP: 002b:00007ff5b6cd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 316.081530][ T7153] RAX: ffffffffffffffda RBX: 00007ff5b6025fa0 RCX: 00007ff5b5d9e159 [ 316.089506][ T7153] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 316.097502][ T7153] RBP: 00007ff5b5e3506b R08: 0000000000000000 R09: 0000000000000000 [ 316.105477][ T7153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.113457][ T7153] R13: 00007ff5b6026038 R14: 00007ff5b6025fa0 R15: 00007ffc23cfdaf8 [ 316.121445][ T7153] [ 316.125191][ T7153] audit: cannot initialize netlink socket in namespace [ 316.192140][ T7158] FAULT_INJECTION: forcing a failure. [ 316.192140][ T7158] name failslab, interval 1, probability 0, space 0, times 0 [ 316.231444][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 316.284019][ T7158] CPU: 1 PID: 7158 Comm: syz.4.742 Not tainted syzkaller #0 [ 316.291434][ T7158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 316.301526][ T7158] Call Trace: [ 316.304828][ T7158] [ 316.307783][ T7158] dump_stack_lvl+0x188/0x24e [ 316.312495][ T7158] ? show_regs_print_info+0x12/0x12 [ 316.317727][ T7158] ? load_image+0x410/0x410 [ 316.322271][ T7158] ? __lock_acquire+0x7c40/0x7c40 [ 316.327337][ T7158] should_fail_ex+0x390/0x4c0 [ 316.332139][ T7158] should_failslab+0x5/0x20 [ 316.336661][ T7158] slab_pre_alloc_hook+0x59/0x300 [ 316.341703][ T7158] ? pty_common_install+0xda/0x780 [ 316.346819][ T7158] __kmem_cache_alloc_node+0x4f/0x270 [ 316.352230][ T7158] ? pty_common_install+0xda/0x780 [ 316.357377][ T7158] kmalloc_trace+0x26/0xe0 [ 316.361788][ T7158] pty_common_install+0xda/0x780 [ 316.366719][ T7158] ? devpts_mntget+0x310/0x310 [ 316.371497][ T7158] tty_init_dev+0xcf/0x4c0 [ 316.375924][ T7158] ptmx_open+0xdb/0x2c0 [ 316.380085][ T7158] ? pty_start+0x140/0x140 [ 316.384520][ T7158] chrdev_open+0x585/0x5f0 [ 316.388945][ T7158] ? cd_forget+0x160/0x160 [ 316.393365][ T7158] ? fsnotify_perm+0x39b/0x550 [ 316.398133][ T7158] ? cd_forget+0x160/0x160 [ 316.402556][ T7158] do_dentry_open+0x7dd/0x10b0 [ 316.407342][ T7158] path_openat+0x2674/0x2f10 [ 316.411956][ T7158] ? verify_lock_unused+0x140/0x140 [ 316.417165][ T7158] ? do_sys_openat2+0xdd/0x4f0 [ 316.421958][ T7158] ? do_filp_open+0x420/0x420 [ 316.427131][ T7158] do_filp_open+0x1ee/0x420 [ 316.431646][ T7158] ? vfs_tmpfile+0x470/0x470 [ 316.436262][ T7158] ? _raw_spin_unlock+0x24/0x40 [ 316.441158][ T7158] ? alloc_fd+0x590/0x640 [ 316.445618][ T7158] do_sys_openat2+0x14b/0x4f0 [ 316.450422][ T7158] ? do_sys_open+0xe0/0xe0 [ 316.454868][ T7158] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 316.460873][ T7158] ? lock_chain_count+0x20/0x20 [ 316.465738][ T7158] __x64_sys_openat+0x135/0x160 [ 316.470615][ T7158] do_syscall_64+0x4c/0xa0 [ 316.475074][ T7158] ? clear_bhb_loop+0x60/0xb0 [ 316.479756][ T7158] ? clear_bhb_loop+0x60/0xb0 [ 316.484452][ T7158] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.490407][ T7158] RIP: 0033:0x7f058799e159 [ 316.494842][ T7158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.514471][ T7158] RSP: 002b:00007f05887da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 316.522895][ T7158] RAX: ffffffffffffffda RBX: 00007f0587c25fa0 RCX: 00007f058799e159 [ 316.530875][ T7158] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 316.538855][ T7158] RBP: 00007f0587a3506b R08: 0000000000000000 R09: 0000000000000000 [ 316.546868][ T7158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.554849][ T7158] R13: 00007f0587c26038 R14: 00007f0587c25fa0 R15: 00007fff65ace308 [ 316.562848][ T7158] [ 316.611765][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 316.633009][ T7] usb 2-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 316.672140][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 316.688568][ T7] usb 2-1: config 1 has no interface number 0 [ 316.695369][ T7] usb 2-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xBC, skipping [ 316.713331][ T7] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 316.738563][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.777139][ T7] usb 2-1: Product: syz [ 316.806539][ T7] usb 2-1: Manufacturer: syz [ 316.815138][ T7] usb 2-1: SerialNumber: syz [ 316.923076][ T7175] binder: 7174:7175 ioctl c00c6211 0 returned -14 [ 317.250404][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.256818][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.666600][ T7] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 317.801787][ T7] usb 2-1: USB disconnect, device number 6 [ 317.996722][ T4670] udevd[4670]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 318.366940][ T7204] fuse: Unknown parameter 'user_id00000000000000000000' [ 318.497384][ T7206] binder: 7205:7206 ioctl c00c6211 0 returned -14 [ 318.870075][ T7216] FAULT_INJECTION: forcing a failure. [ 318.870075][ T7216] name failslab, interval 1, probability 0, space 0, times 0 [ 318.958534][ T7216] CPU: 1 PID: 7216 Comm: syz.0.756 Not tainted syzkaller #0 [ 318.965900][ T7216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 318.976074][ T7216] Call Trace: [ 318.979348][ T7216] [ 318.982309][ T7216] dump_stack_lvl+0x188/0x24e [ 318.986984][ T7216] ? show_regs_print_info+0x12/0x12 [ 318.992176][ T7216] ? load_image+0x410/0x410 [ 318.996698][ T7216] ? __might_sleep+0xd0/0xd0 [ 319.001288][ T7216] ? __lock_acquire+0x7c40/0x7c40 [ 319.006315][ T7216] should_fail_ex+0x390/0x4c0 [ 319.010998][ T7216] should_failslab+0x5/0x20 [ 319.015498][ T7216] slab_pre_alloc_hook+0x59/0x300 [ 319.020557][ T7216] ? sk_prot_alloc+0xe7/0x210 [ 319.025272][ T7216] __kmem_cache_alloc_node+0x4f/0x270 [ 319.030649][ T7216] ? sk_prot_alloc+0xe7/0x210 [ 319.035325][ T7216] __kmalloc+0xa3/0x240 [ 319.039483][ T7216] ? __rwlock_init+0x140/0x140 [ 319.044245][ T7216] sk_prot_alloc+0xe7/0x210 [ 319.048757][ T7216] ? sk_alloc+0x20/0x330 [ 319.052997][ T7216] sk_alloc+0x36/0x330 [ 319.057064][ T7216] __netlink_create+0x6b/0x2d0 [ 319.061838][ T7216] __netlink_kernel_create+0x144/0x7b0 [ 319.067313][ T7216] ? netlink_set_err+0x3b0/0x3b0 [ 319.072291][ T7216] ? net_generic+0x1e/0x240 [ 319.076818][ T7216] ? net_generic+0x1e/0x240 [ 319.081320][ T7216] audit_net_init+0xc7/0x1f0 [ 319.085916][ T7216] ? kauditd_thread+0x990/0x990 [ 319.090785][ T7216] ? audit_net_exit+0x40/0x40 [ 319.095483][ T7216] ? audit_receive+0x2cc0/0x2cc0 [ 319.100437][ T7216] ? audit_multicast_bind+0x30/0x30 [ 319.105642][ T7216] ? __kmem_cache_alloc_node+0x19d/0x270 [ 319.111286][ T7216] ops_init+0x360/0x5e0 [ 319.115459][ T7216] setup_net+0x4f2/0xbd0 [ 319.119702][ T7216] ? copy_net_ns+0x5b0/0x5b0 [ 319.124303][ T7216] ? copy_net_ns+0x324/0x5b0 [ 319.128919][ T7216] ? down_read_killable+0x1cc/0x340 [ 319.134144][ T7216] copy_net_ns+0x33e/0x5b0 [ 319.138567][ T7216] create_new_namespaces+0x3ce/0x700 [ 319.143890][ T7216] unshare_nsproxy_namespaces+0x116/0x160 [ 319.149623][ T7216] ksys_unshare+0x4f6/0x8e0 [ 319.154133][ T7216] ? sighand_ctor+0x40/0x40 [ 319.158641][ T7216] ? lock_chain_count+0x20/0x20 [ 319.163525][ T7216] ? syscall_enter_from_user_mode+0x21/0x80 [ 319.169436][ T7216] __x64_sys_unshare+0x34/0x40 [ 319.174218][ T7216] do_syscall_64+0x4c/0xa0 [ 319.178688][ T7216] ? clear_bhb_loop+0x60/0xb0 [ 319.183373][ T7216] ? clear_bhb_loop+0x60/0xb0 [ 319.188053][ T7216] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.193973][ T7216] RIP: 0033:0x7ff5b5d9e159 [ 319.198385][ T7216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.218010][ T7216] RSP: 002b:00007ff5b6cd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 319.226430][ T7216] RAX: ffffffffffffffda RBX: 00007ff5b6025fa0 RCX: 00007ff5b5d9e159 [ 319.234411][ T7216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 319.242378][ T7216] RBP: 00007ff5b5e3506b R08: 0000000000000000 R09: 0000000000000000 [ 319.250346][ T7216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.258313][ T7216] R13: 00007ff5b6026038 R14: 00007ff5b6025fa0 R15: 00007ffc23cfdaf8 [ 319.266323][ T7216] [ 319.334608][ T7216] audit: cannot initialize netlink socket in namespace [ 320.547060][ T7240] device bridge0 entered promiscuous mode [ 320.578139][ T7240] team0: Port device bridge0 added [ 320.794277][ T7248] fuse: Unknown parameter 'user_id00000000000000000000' [ 321.538876][ T7276] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 321.684717][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.773'. [ 323.921900][ T7305] fuse: Bad value for 'fd' [ 325.835755][ T7342] FAULT_INJECTION: forcing a failure. [ 325.835755][ T7342] name failslab, interval 1, probability 0, space 0, times 0 [ 325.849016][ T7342] CPU: 1 PID: 7342 Comm: syz.1.787 Not tainted syzkaller #0 [ 325.856349][ T7342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 325.866420][ T7342] Call Trace: [ 325.869706][ T7342] [ 325.872658][ T7342] dump_stack_lvl+0x188/0x24e [ 325.877360][ T7342] ? __wake_up+0x12e/0x1a0 [ 325.881808][ T7342] ? show_regs_print_info+0x12/0x12 [ 325.887044][ T7342] ? load_image+0x410/0x410 [ 325.891575][ T7342] should_fail_ex+0x390/0x4c0 [ 325.896352][ T7342] should_failslab+0x5/0x20 [ 325.900896][ T7342] slab_pre_alloc_hook+0x59/0x300 [ 325.905932][ T7342] ? __lock_acquire+0x7c40/0x7c40 [ 325.910975][ T7342] kmem_cache_alloc+0x56/0x2f0 [ 325.915746][ T7342] ? __sigqueue_alloc+0x40c/0x520 [ 325.920814][ T7342] ? __sigqueue_alloc+0x32/0x520 [ 325.925792][ T7342] __sigqueue_alloc+0x40c/0x520 [ 325.930663][ T7342] __send_signal_locked+0x22f/0xde0 [ 325.935905][ T7342] do_notify_parent+0xb24/0xd10 [ 325.940789][ T7342] ? trace_signal_generate+0x260/0x260 [ 325.946259][ T7342] ? __lock_acquire+0x7c40/0x7c40 [ 325.951386][ T7342] release_task+0x121c/0x1680 [ 325.956088][ T7342] ? do_exit+0x18d7/0x2570 [ 325.960510][ T7342] ? delayed_put_task_struct+0x2f0/0x2f0 [ 325.966148][ T7342] ? _raw_write_lock_irq+0xb7/0xf0 [ 325.971298][ T7342] ? _raw_write_lock_irqsave+0x100/0x100 [ 325.976976][ T7342] ? _raw_write_unlock_irq+0x1f/0x40 [ 325.982272][ T7342] ? lockdep_hardirqs_on+0x94/0x140 [ 325.987486][ T7342] do_exit+0x18d7/0x2570 [ 325.991750][ T7342] ? put_task_struct+0x80/0x80 [ 325.996526][ T7342] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 326.002523][ T7342] ? lock_chain_count+0x20/0x20 [ 326.007383][ T7342] ? _raw_spin_lock_irq+0xb7/0xf0 [ 326.012424][ T7342] do_group_exit+0x229/0x2e0 [ 326.017024][ T7342] ? lockdep_hardirqs_on+0x94/0x140 [ 326.022233][ T7342] get_signal+0x1259/0x1340 [ 326.026751][ T7342] arch_do_signal_or_restart+0xc4/0x1310 [ 326.032392][ T7342] ? do_futex+0x310/0x320 [ 326.036722][ T7342] ? get_sigframe_size+0x10/0x10 [ 326.041664][ T7342] ? __ia32_sys_get_robust_list+0x100/0x100 [ 326.047559][ T7342] ? fput+0x150/0x1a0 [ 326.051551][ T7342] ? exit_to_user_mode_loop+0x3b/0x110 [ 326.057025][ T7342] exit_to_user_mode_loop+0x70/0x110 [ 326.062323][ T7342] exit_to_user_mode_prepare+0xee/0x180 [ 326.067880][ T7342] syscall_exit_to_user_mode+0x16/0x40 [ 326.073383][ T7342] do_syscall_64+0x58/0xa0 [ 326.078071][ T7342] ? clear_bhb_loop+0x60/0xb0 [ 326.082777][ T7342] ? clear_bhb_loop+0x60/0xb0 [ 326.087460][ T7342] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.093363][ T7342] RIP: 0033:0x7f59c959e159 [ 326.097787][ T7342] Code: Unable to access opcode bytes at 0x7f59c959e12f. [ 326.104809][ T7342] RSP: 002b:00007f59ca46f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 326.113229][ T7342] RAX: fffffffffffffe00 RBX: 00007f59c9825fa8 RCX: 00007f59c959e159 [ 326.121653][ T7342] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f59c9825fa8 [ 326.129627][ T7342] RBP: 00007f59c9825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 326.137601][ T7342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.146007][ T7342] R13: 00007f59c9826038 R14: 00007ffe7ae9bd90 R15: 00007ffe7ae9be78 [ 326.154013][ T7342] [ 327.012299][ T7367] fuse: Bad value for 'fd' [ 327.315343][ T7378] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 327.484876][ T7375] jffs2: notice: (7375) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 327.794015][ T7398] usb usb8: usbfs: process 7398 (syz.1.801) did not claim interface 0 before use [ 328.196938][ T7413] FAULT_INJECTION: forcing a failure. [ 328.196938][ T7413] name fail_futex, interval 1, probability 0, space 0, times 0 [ 328.235651][ T7413] CPU: 0 PID: 7413 Comm: syz.1.807 Not tainted syzkaller #0 [ 328.243008][ T7413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 328.253086][ T7413] Call Trace: [ 328.256436][ T7413] [ 328.259387][ T7413] dump_stack_lvl+0x188/0x24e [ 328.264095][ T7413] ? show_regs_print_info+0x12/0x12 [ 328.269327][ T7413] ? load_image+0x410/0x410 [ 328.273857][ T7413] ? cmp_ex_search+0x1a/0x70 [ 328.278470][ T7413] ? bsearch+0x86/0xb0 [ 328.282568][ T7413] ? strncpy_from_user+0x252/0x340 [ 328.287713][ T7413] should_fail_ex+0x390/0x4c0 [ 328.292422][ T7413] get_futex_key+0x1b1/0x1000 [ 328.297150][ T7413] ? futex_setup_timer+0xc0/0xc0 [ 328.302106][ T7413] ? lock_chain_count+0x20/0x20 [ 328.306992][ T7413] futex_wake+0x123/0x4f0 [ 328.311360][ T7413] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 328.317371][ T7413] ? do_user_addr_fault+0x3a5/0xb20 [ 328.322595][ T7413] ? futex_wake_mark+0x150/0x150 [ 328.327568][ T7413] do_futex+0x2e2/0x320 [ 328.331741][ T7413] ? asm_exc_page_fault+0x22/0x30 [ 328.336810][ T7413] ? __ia32_sys_get_robust_list+0x100/0x100 [ 328.342727][ T7413] ? strncpy_from_user+0x24c/0x340 [ 328.347878][ T7413] ? strncpy_from_user+0x324/0x340 [ 328.353018][ T7413] __se_sys_futex+0x381/0x410 [ 328.357723][ T7413] ? __x64_sys_futex+0xf0/0xf0 [ 328.362515][ T7413] ? __x64_sys_futex+0x1d/0xf0 [ 328.367301][ T7413] do_syscall_64+0x4c/0xa0 [ 328.371750][ T7413] ? clear_bhb_loop+0x60/0xb0 [ 328.376454][ T7413] ? clear_bhb_loop+0x60/0xb0 [ 328.381161][ T7413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 328.387100][ T7413] RIP: 0033:0x7f59c959e159 [ 328.391633][ T7413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.412919][ T7413] RSP: 002b:00007f59ca46f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 328.421369][ T7413] RAX: ffffffffffffffda RBX: 00007f59c9825fa8 RCX: 00007f59c959e159 [ 328.429367][ T7413] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f59c9825fac [ 328.437453][ T7413] RBP: 00007f59c9825fa0 R08: 0008ef55f5d93164 R09: 0000000000000000 [ 328.445445][ T7413] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 328.453430][ T7413] R13: 00007f59c9826038 R14: 00007ffe7ae9bd90 R15: 00007ffe7ae9be78 [ 328.461432][ T7413] [ 329.512302][ T4349] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 329.653228][ T7453] jffs2: notice: (7453) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 330.306555][ T7459] usb usb8: usbfs: process 7459 (syz.4.817) did not claim interface 0 before use [ 330.458496][ T7464] FAULT_INJECTION: forcing a failure. [ 330.458496][ T7464] name fail_futex, interval 1, probability 0, space 0, times 0 [ 330.482052][ T4349] usb 1-1: Using ep0 maxpacket: 8 [ 330.487615][ T7464] CPU: 1 PID: 7464 Comm: syz.1.819 Not tainted syzkaller #0 [ 330.490836][ T4349] usb 1-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 330.494929][ T7464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 330.515308][ T7464] Call Trace: [ 330.518706][ T7464] [ 330.521651][ T7464] dump_stack_lvl+0x188/0x24e [ 330.526402][ T7464] ? show_regs_print_info+0x12/0x12 [ 330.531633][ T7464] ? load_image+0x410/0x410 [ 330.536183][ T7464] ? cmp_ex_search+0x1a/0x70 [ 330.540801][ T7464] ? bsearch+0x86/0xb0 [ 330.541006][ T4349] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 330.544912][ T7464] ? strncpy_from_user+0x252/0x340 [ 330.544944][ T7464] should_fail_ex+0x390/0x4c0 [ 330.544972][ T7464] get_futex_key+0x1b1/0x1000 [ 330.568289][ T7464] ? futex_setup_timer+0xc0/0xc0 [ 330.573358][ T7464] ? lock_chain_count+0x20/0x20 [ 330.578264][ T7464] futex_wake+0x123/0x4f0 [ 330.582615][ T7464] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 330.588607][ T7464] ? do_user_addr_fault+0x3a5/0xb20 [ 330.593811][ T7464] ? futex_wake_mark+0x150/0x150 [ 330.598794][ T7464] do_futex+0x2e2/0x320 [ 330.603043][ T7464] ? asm_exc_page_fault+0x22/0x30 [ 330.608074][ T7464] ? __ia32_sys_get_robust_list+0x100/0x100 [ 330.614318][ T7464] ? strncpy_from_user+0x24c/0x340 [ 330.619436][ T7464] ? strncpy_from_user+0x324/0x340 [ 330.624553][ T7464] __se_sys_futex+0x381/0x410 [ 330.629232][ T7464] ? __x64_sys_futex+0xf0/0xf0 [ 330.634043][ T7464] ? __x64_sys_futex+0x1d/0xf0 [ 330.638814][ T7464] do_syscall_64+0x4c/0xa0 [ 330.643236][ T7464] ? clear_bhb_loop+0x60/0xb0 [ 330.647944][ T7464] ? clear_bhb_loop+0x60/0xb0 [ 330.652633][ T7464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.658544][ T7464] RIP: 0033:0x7f59c959e159 [ 330.662967][ T7464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.682589][ T7464] RSP: 002b:00007f59ca46f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 330.691007][ T7464] RAX: ffffffffffffffda RBX: 00007f59c9825fa8 RCX: 00007f59c959e159 [ 330.698979][ T7464] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f59c9825fac [ 330.706962][ T7464] RBP: 00007f59c9825fa0 R08: 00190735772594d4 R09: 0000000000000000 [ 330.714938][ T7464] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 330.727166][ T7464] R13: 00007f59c9826038 R14: 00007ffe7ae9bd90 R15: 00007ffe7ae9be78 [ 330.735151][ T7464] [ 330.745109][ T4349] usb 1-1: config 1 has no interface number 0 [ 330.764099][ T4349] usb 1-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xBC, skipping [ 330.791160][ T4349] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 330.811147][ T4349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.831465][ T4349] usb 1-1: Product: syz [ 330.835697][ T4349] usb 1-1: Manufacturer: syz [ 330.848634][ T4349] usb 1-1: SerialNumber: syz [ 331.126295][ T4349] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 331.192388][ T4349] usb 1-1: USB disconnect, device number 11 [ 331.266995][ T4670] udevd[4670]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 331.348577][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.826'. [ 331.426409][ T7485] device syzkaller0 entered promiscuous mode [ 331.429574][ T7487] FAULT_INJECTION: forcing a failure. [ 331.429574][ T7487] name failslab, interval 1, probability 0, space 0, times 0 [ 331.450583][ T7487] CPU: 0 PID: 7487 Comm: syz.6.827 Not tainted syzkaller #0 [ 331.458029][ T7487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.468119][ T7487] Call Trace: [ 331.471430][ T7487] [ 331.474390][ T7487] dump_stack_lvl+0x188/0x24e [ 331.479107][ T7487] ? show_regs_print_info+0x12/0x12 [ 331.484340][ T7487] ? load_image+0x410/0x410 [ 331.488882][ T7487] ? __might_sleep+0xd0/0xd0 [ 331.493498][ T7487] ? __lock_acquire+0x7c40/0x7c40 [ 331.498565][ T7487] should_fail_ex+0x390/0x4c0 [ 331.503317][ T7487] should_failslab+0x5/0x20 [ 331.507844][ T7487] slab_pre_alloc_hook+0x59/0x300 [ 331.512907][ T7487] kmem_cache_alloc+0x56/0x2f0 [ 331.517793][ T7487] ? __kernfs_new_node+0xe1/0x7f0 [ 331.522870][ T7487] __kernfs_new_node+0xe1/0x7f0 [ 331.527770][ T7487] ? __lock_acquire+0x7c40/0x7c40 [ 331.533013][ T7487] ? kernfs_new_node+0x250/0x250 [ 331.538097][ T7487] kernfs_new_node+0x148/0x250 [ 331.542914][ T7487] __kernfs_create_file+0x47/0x2e0 [ 331.548072][ T7487] sysfs_add_file_mode_ns+0x233/0x2f0 [ 331.553544][ T7487] internal_create_group+0x490/0xce0 [ 331.559041][ T7487] ? kernfs_add_one+0x14e/0x8f0 [ 331.564018][ T7487] ? __lock_acquire+0x7c40/0x7c40 [ 331.569111][ T7487] ? sysfs_create_group+0x20/0x20 [ 331.574195][ T7487] sysfs_create_groups+0x55/0x120 [ 331.579259][ T7487] device_add_attrs+0x1ae/0x830 [ 331.584149][ T7487] ? get_device_parent+0x3e0/0x3e0 [ 331.589297][ T7487] ? kernfs_create_link+0x186/0x200 [ 331.594579][ T7487] device_add+0x677/0x1050 [ 331.599040][ T7487] wakeup_source_sysfs_add+0x1cf/0x2b0 [ 331.604583][ T7487] wakeup_source_register+0x15f/0x230 [ 331.609998][ T7487] ep_insert+0xeab/0x1980 [ 331.614376][ T7487] ? ep_loop_check+0x1b0/0x1b0 [ 331.619176][ T7487] ? mutex_lock_nested+0x10/0x10 [ 331.624151][ T7487] ? apparmor_capable+0x12c/0x190 [ 331.629212][ T7487] ? bpf_lsm_capable+0x5/0x10 [ 331.633930][ T7487] ? security_capable+0x85/0xb0 [ 331.638836][ T7487] do_epoll_ctl+0x8b2/0xf40 [ 331.643396][ T7487] __x64_sys_epoll_ctl+0x162/0x1b0 [ 331.648562][ T7487] ? ep_modify+0xa80/0xa80 [ 331.653027][ T7487] ? lockdep_hardirqs_on+0x94/0x140 [ 331.658282][ T7487] do_syscall_64+0x4c/0xa0 [ 331.662778][ T7487] ? clear_bhb_loop+0x60/0xb0 [ 331.667496][ T7487] ? clear_bhb_loop+0x60/0xb0 [ 331.672211][ T7487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.678148][ T7487] RIP: 0033:0x7f589999e159 [ 331.682597][ T7487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.702236][ T7487] RSP: 002b:00007f589a8d4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 331.710694][ T7487] RAX: ffffffffffffffda RBX: 00007f5899c25fa0 RCX: 00007f589999e159 [ 331.718706][ T7487] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 331.726711][ T7487] RBP: 00007f5899a3506b R08: 0000000000000000 R09: 0000000000000000 [ 331.734715][ T7487] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 331.742715][ T7487] R13: 00007f5899c26038 R14: 00007f5899c25fa0 R15: 00007fffa36ce7d8 [ 331.750736][ T7487] [ 332.182918][ T7510] jffs2: notice: (7510) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 333.165062][ T7528] netlink: 'syz.6.835': attribute type 16 has an invalid length. [ 333.175610][ T7528] netlink: 'syz.6.835': attribute type 17 has an invalid length. [ 333.249401][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 333.309363][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 333.348495][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 333.372272][ T7528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 333.756551][ T7547] FAULT_INJECTION: forcing a failure. [ 333.756551][ T7547] name failslab, interval 1, probability 0, space 0, times 0 [ 333.784603][ T7547] CPU: 1 PID: 7547 Comm: syz.6.840 Not tainted syzkaller #0 [ 333.791976][ T7547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.802502][ T7547] Call Trace: [ 333.805817][ T7547] [ 333.808814][ T7547] dump_stack_lvl+0x188/0x24e [ 333.813528][ T7547] ? show_regs_print_info+0x12/0x12 [ 333.818768][ T7547] ? load_image+0x410/0x410 [ 333.823355][ T7547] ? __might_sleep+0xd0/0xd0 [ 333.827991][ T7547] ? __lock_acquire+0x7c40/0x7c40 [ 333.833053][ T7547] ? __lock_acquire+0x1465/0x7c40 [ 333.838322][ T7547] should_fail_ex+0x390/0x4c0 [ 333.843050][ T7547] should_failslab+0x5/0x20 [ 333.847589][ T7547] slab_pre_alloc_hook+0x59/0x300 [ 333.852652][ T7547] kmem_cache_alloc+0x56/0x2f0 [ 333.857446][ T7547] ? __kernfs_new_node+0xe1/0x7f0 [ 333.862500][ T7547] __kernfs_new_node+0xe1/0x7f0 [ 333.867368][ T7547] ? kernfs_new_node+0x250/0x250 [ 333.872432][ T7547] ? idr_get_free+0x8a0/0xa10 [ 333.877124][ T7547] ? node_tag_clear+0x1ec/0x310 [ 333.881980][ T7547] ? verify_lock_unused+0x140/0x140 [ 333.887228][ T7547] kernfs_new_node+0x148/0x250 [ 333.892000][ T7547] __kernfs_create_file+0x47/0x2e0 [ 333.897146][ T7547] sysfs_add_file_mode_ns+0x233/0x2f0 [ 333.902564][ T7547] internal_create_group+0x490/0xce0 [ 333.907881][ T7547] ? kernfs_add_one+0x14e/0x8f0 [ 333.912741][ T7547] ? __lock_acquire+0x7c40/0x7c40 [ 333.917792][ T7547] ? sysfs_create_group+0x20/0x20 [ 333.922866][ T7547] sysfs_create_groups+0x55/0x120 [ 333.927902][ T7547] device_add_attrs+0x1ae/0x830 [ 333.932771][ T7547] ? get_device_parent+0x3e0/0x3e0 [ 333.937887][ T7547] ? kernfs_create_link+0x186/0x200 [ 333.943098][ T7547] device_add+0x677/0x1050 [ 333.947524][ T7547] wakeup_source_sysfs_add+0x1cf/0x2b0 [ 333.953001][ T7547] wakeup_source_register+0x15f/0x230 [ 333.958391][ T7547] ep_insert+0xeab/0x1980 [ 333.962738][ T7547] ? ep_loop_check+0x1b0/0x1b0 [ 333.967537][ T7547] ? mutex_lock_nested+0x10/0x10 [ 333.972488][ T7547] ? apparmor_capable+0x12c/0x190 [ 333.977519][ T7547] ? bpf_lsm_capable+0x5/0x10 [ 333.982202][ T7547] ? security_capable+0x85/0xb0 [ 333.987059][ T7547] do_epoll_ctl+0x8b2/0xf40 [ 333.991608][ T7547] __x64_sys_epoll_ctl+0x162/0x1b0 [ 333.996768][ T7547] ? ep_modify+0xa80/0xa80 [ 334.001211][ T7547] ? lockdep_hardirqs_on+0x94/0x140 [ 334.006429][ T7547] do_syscall_64+0x4c/0xa0 [ 334.010878][ T7547] ? clear_bhb_loop+0x60/0xb0 [ 334.015586][ T7547] ? clear_bhb_loop+0x60/0xb0 [ 334.020291][ T7547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.026244][ T7547] RIP: 0033:0x7f589999e159 [ 334.030663][ T7547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.050290][ T7547] RSP: 002b:00007f589a8d4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 334.058715][ T7547] RAX: ffffffffffffffda RBX: 00007f5899c25fa0 RCX: 00007f589999e159 [ 334.066692][ T7547] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 334.074696][ T7547] RBP: 00007f5899a3506b R08: 0000000000000000 R09: 0000000000000000 [ 334.082845][ T7547] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 334.090822][ T7547] R13: 00007f5899c26038 R14: 00007f5899c25fa0 R15: 00007fffa36ce7d8 [ 334.098817][ T7547] [ 334.529275][ T4349] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 334.682735][ T7566] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 334.705578][ T7569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.842'. [ 334.721592][ T4349] usb 3-1: Using ep0 maxpacket: 8 [ 334.728680][ T4349] usb 3-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 334.804311][ T4349] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 334.805203][ T5097] libceph: connect (1)[c::]:6789 error -101 [ 334.821809][ T5097] libceph: mon0 (1)[c::]:6789 connect error [ 334.849701][ T7566] netlink: 20 bytes leftover after parsing attributes in process `syz.6.843'. [ 335.148247][ T7579] jffs2: notice: (7579) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 335.170693][ T5097] libceph: connect (1)[c::]:6789 error -101 [ 335.176763][ T5097] libceph: mon0 (1)[c::]:6789 connect error [ 335.385008][ T7569] ceph: No mds server is up or the cluster is laggy [ 335.541330][ T4349] usb 3-1: config 1 has no interface number 0 [ 335.547500][ T4349] usb 3-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xBC, skipping [ 335.570899][ T4349] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 335.592762][ T4349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.601235][ T4349] usb 3-1: Product: syz [ 335.605430][ T4349] usb 3-1: Manufacturer: syz [ 335.610201][ T4349] usb 3-1: SerialNumber: syz [ 335.881276][ T4349] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 336.003126][ T4349] usb 3-1: USB disconnect, device number 4 [ 336.020525][ T7596] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 336.081955][ T4670] udevd[4670]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 336.313609][ T7603] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 336.870196][ T7629] FAULT_INJECTION: forcing a failure. [ 336.870196][ T7629] name failslab, interval 1, probability 0, space 0, times 0 [ 336.920499][ T7629] CPU: 1 PID: 7629 Comm: syz.2.854 Not tainted syzkaller #0 [ 336.927887][ T7629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 336.937966][ T7629] Call Trace: [ 336.941249][ T7629] [ 336.944182][ T7629] dump_stack_lvl+0x188/0x24e [ 336.948900][ T7629] ? show_regs_print_info+0x12/0x12 [ 336.954106][ T7629] ? load_image+0x410/0x410 [ 336.958623][ T7629] ? __might_sleep+0xd0/0xd0 [ 336.963224][ T7629] ? __lock_acquire+0x7c40/0x7c40 [ 336.968288][ T7629] ? mark_lock+0x94/0x320 [ 336.972631][ T7629] should_fail_ex+0x390/0x4c0 [ 336.977330][ T7629] should_failslab+0x5/0x20 [ 336.981840][ T7629] slab_pre_alloc_hook+0x59/0x300 [ 336.986878][ T7629] kmem_cache_alloc+0x56/0x2f0 [ 336.991651][ T7629] ? __kernfs_new_node+0xe1/0x7f0 [ 336.996695][ T7629] __kernfs_new_node+0xe1/0x7f0 [ 337.001560][ T7629] ? kernfs_add_one+0x14e/0x8f0 [ 337.006422][ T7629] ? kernfs_new_node+0x250/0x250 [ 337.011370][ T7629] ? kernfs_create_dir_ns+0x10e/0x120 [ 337.016845][ T7629] ? sysfs_create_dir_ns+0x12c/0x290 [ 337.022235][ T7629] kernfs_new_node+0x148/0x250 [ 337.027017][ T7629] __kernfs_create_file+0x47/0x2e0 [ 337.032160][ T7629] sysfs_add_file_mode_ns+0x233/0x2f0 [ 337.037556][ T7629] sysfs_create_file_ns+0x128/0x1b0 [ 337.042775][ T7629] ? sysfs_add_bin_file_mode_ns+0x200/0x200 [ 337.048700][ T7629] device_add+0x554/0x1050 [ 337.053133][ T7629] wakeup_source_sysfs_add+0x1cf/0x2b0 [ 337.058605][ T7629] wakeup_source_register+0x15f/0x230 [ 337.063997][ T7629] ep_insert+0xeab/0x1980 [ 337.068346][ T7629] ? ep_loop_check+0x1b0/0x1b0 [ 337.073207][ T7629] ? mutex_lock_nested+0x10/0x10 [ 337.078156][ T7629] ? apparmor_capable+0x12c/0x190 [ 337.083327][ T7629] ? bpf_lsm_capable+0x5/0x10 [ 337.088033][ T7629] ? security_capable+0x85/0xb0 [ 337.092896][ T7629] do_epoll_ctl+0x8b2/0xf40 [ 337.097502][ T7629] __x64_sys_epoll_ctl+0x162/0x1b0 [ 337.102629][ T7629] ? ep_modify+0xa80/0xa80 [ 337.107183][ T7629] ? lockdep_hardirqs_on+0x94/0x140 [ 337.112528][ T7629] do_syscall_64+0x4c/0xa0 [ 337.116963][ T7629] ? clear_bhb_loop+0x60/0xb0 [ 337.121676][ T7629] ? clear_bhb_loop+0x60/0xb0 [ 337.126362][ T7629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.132272][ T7629] RIP: 0033:0x7f0f6bd9e159 [ 337.136810][ T7629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.156433][ T7629] RSP: 002b:00007f0f6cb8c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 337.165218][ T7629] RAX: ffffffffffffffda RBX: 00007f0f6c026090 RCX: 00007f0f6bd9e159 [ 337.173196][ T7629] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 337.182479][ T7629] RBP: 00007f0f6be3506b R08: 0000000000000000 R09: 0000000000000000 [ 337.190455][ T7629] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 337.198456][ T7629] R13: 00007f0f6c026128 R14: 00007f0f6c026090 R15: 00007fff7a70edd8 [ 337.206451][ T7629] [ 337.210978][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 337.529379][ T7636] jffs2: notice: (7636) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 337.885532][ T7642] ------------[ cut here ]------------ [ 337.891741][ T7642] WARNING: CPU: 1 PID: 7642 at mm/page_alloc.c:5634 __alloc_pages+0x2fe/0x4f0 [ 337.900826][ T7642] Modules linked in: [ 337.904828][ T7642] CPU: 1 PID: 7642 Comm: syz.0.858 Not tainted syzkaller #0 [ 337.912368][ T7642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 337.922596][ T7642] RIP: 0010:__alloc_pages+0x2fe/0x4f0 [ 337.928020][ T7642] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 9f 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 cf 30 44 0c 01 <0f> 0b eb a4 a9 00 00 08 00 8b 74 24 04 75 3e 44 89 f1 81 e1 7f ff [ 337.947791][ T7642] RSP: 0018:ffffc90004e7fa20 EFLAGS: 00010246 [ 337.954043][ T7642] RAX: ffffc90004e7fa00 RBX: 1ffff920009cff48 RCX: 0000000000000000 [ 337.962125][ T7642] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90004e7fa88 [ 337.970186][ T7642] RBP: ffffc90004e7fb10 R08: ffffc90004e7fa87 R09: ffffc90004e7fa60 [ 337.978247][ T7642] R10: dffffc0000000000 R11: fffff520009cff51 R12: 0000000000000013 [ 337.986490][ T7642] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 337.994642][ T7642] FS: 00007ff5b6cd86c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 338.003679][ T7642] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 338.010357][ T7642] CR2: 000000110c3d288a CR3: 0000000057181000 CR4: 00000000003506e0 [ 338.018404][ T7642] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 338.026408][ T7642] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 338.034462][ T7642] Call Trace: [ 338.037756][ T7642] [ 338.040761][ T7642] ? aa_file_perm+0x112/0xf00 [ 338.045473][ T7642] ? zone_statistics+0x170/0x170 [ 338.050512][ T7642] __kmalloc_large_node+0x8c/0x1f0 [ 338.055660][ T7642] ? bitmap_parse_user+0x1f/0x60 [ 338.060741][ T7642] __kmalloc_node_track_caller+0x10f/0x240 [ 338.066606][ T7642] memdup_user_nul+0x28/0xf0 [ 338.071290][ T7642] bitmap_parse_user+0x1f/0x60 [ 338.076097][ T7642] write_irq_affinity+0x1bc/0x310 [ 338.081212][ T7642] ? irq_affinity_proc_show+0x100/0x100 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 338.086791][ T7642] ? rcu_read_lock_any_held+0xb0/0x130 [ 338.092334][ T7642] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 338.097662][ T7642] ? end_current_label_crit_section+0x14b/0x170 [ 338.104025][ T7642] ? irq_affinity_proc_open+0x50/0x50 [ 338.109474][ T7642] proc_reg_write+0x1dd/0x2c0 [ 338.114289][ T7642] ? proc_reg_llseek+0x280/0x280 [ 338.119407][ T7642] vfs_write+0x2dc/0x9a0 [ 338.123701][ T7642] ? file_end_write+0x250/0x250 [ 338.128650][ T7642] ? __fget_files+0x28/0x460 [ 338.133299][ T7642] ? __fget_files+0x3fc/0x460 [ 338.138021][ T7642] ? __fdget_pos+0x2ae/0x360 [ 338.142718][ T7642] ? ksys_write+0x70/0x260 [ 338.147189][ T7642] ksys_write+0x14d/0x260 [ 338.151594][ T7642] ? __ia32_sys_read+0x80/0x80 [ 338.156402][ T7642] ? lockdep_hardirqs_on+0x94/0x140 [ 338.161698][ T7642] do_syscall_64+0x4c/0xa0 [ 338.166141][ T7642] ? clear_bhb_loop+0x60/0xb0 [ 338.170888][ T7642] ? clear_bhb_loop+0x60/0xb0 [ 338.175602][ T7642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.181604][ T7642] RIP: 0033:0x7ff5b5d9e159 [ 338.186166][ T7642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.205841][ T7642] RSP: 002b:00007ff5b6cd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 338.214292][ T7642] RAX: ffffffffffffffda RBX: 00007ff5b6025fa0 RCX: 00007ff5b5d9e159 [ 338.222330][ T7642] RDX: 00000000fffffffb RSI: 0000000000000000 RDI: 0000000000000009 [ 338.230329][ T7642] RBP: 00007ff5b5e3506b R08: 0000000000000000 R09: 0000000000000000 [ 338.238341][ T7642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.246318][ T7642] R13: 00007ff5b6026038 R14: 00007ff5b6025fa0 R15: 00007ffc23cfdaf8 [ 338.254358][ T7642] [ 338.257407][ T7642] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 338.264710][ T7642] CPU: 1 PID: 7642 Comm: syz.0.858 Not tainted syzkaller #0 [ 338.271983][ T7642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 338.282032][ T7642] Call Trace: [ 338.285299][ T7642] [ 338.288225][ T7642] dump_stack_lvl+0x188/0x24e [ 338.292923][ T7642] ? memcpy+0x3c/0x60 [ 338.296901][ T7642] ? show_regs_print_info+0x12/0x12 [ 338.302101][ T7642] ? load_image+0x410/0x410 [ 338.306698][ T7642] panic+0x2d3/0x710 [ 338.310611][ T7642] ? bpf_jit_dump+0xd0/0xd0 [ 338.315229][ T7642] __warn+0x2f8/0x4f0 [ 338.319220][ T7642] ? __alloc_pages+0x2fe/0x4f0 [ 338.324117][ T7642] ? __alloc_pages+0x2fe/0x4f0 [ 338.328895][ T7642] report_bug+0x2ba/0x4f0 [ 338.333224][ T7642] ? __alloc_pages+0x2fe/0x4f0 [ 338.337986][ T7642] handle_bug+0x3a/0x70 [ 338.342135][ T7642] exc_invalid_op+0x16/0x40 [ 338.346652][ T7642] asm_exc_invalid_op+0x16/0x20 [ 338.351497][ T7642] RIP: 0010:__alloc_pages+0x2fe/0x4f0 [ 338.356868][ T7642] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 9f 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 cf 30 44 0c 01 <0f> 0b eb a4 a9 00 00 08 00 8b 74 24 04 75 3e 44 89 f1 81 e1 7f ff [ 338.376657][ T7642] RSP: 0018:ffffc90004e7fa20 EFLAGS: 00010246 [ 338.382830][ T7642] RAX: ffffc90004e7fa00 RBX: 1ffff920009cff48 RCX: 0000000000000000 [ 338.390812][ T7642] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90004e7fa88 [ 338.398781][ T7642] RBP: ffffc90004e7fb10 R08: ffffc90004e7fa87 R09: ffffc90004e7fa60 [ 338.406771][ T7642] R10: dffffc0000000000 R11: fffff520009cff51 R12: 0000000000000013 [ 338.414748][ T7642] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 338.422728][ T7642] ? aa_file_perm+0x112/0xf00 [ 338.427420][ T7642] ? zone_statistics+0x170/0x170 [ 338.432378][ T7642] __kmalloc_large_node+0x8c/0x1f0 [ 338.437497][ T7642] ? bitmap_parse_user+0x1f/0x60 [ 338.442430][ T7642] __kmalloc_node_track_caller+0x10f/0x240 [ 338.448281][ T7642] memdup_user_nul+0x28/0xf0 [ 338.452978][ T7642] bitmap_parse_user+0x1f/0x60 [ 338.457763][ T7642] write_irq_affinity+0x1bc/0x310 [ 338.462795][ T7642] ? irq_affinity_proc_show+0x100/0x100 [ 338.468360][ T7642] ? rcu_read_lock_any_held+0xb0/0x130 [ 338.474275][ T7642] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 338.479599][ T7642] ? end_current_label_crit_section+0x14b/0x170 [ 338.485855][ T7642] ? irq_affinity_proc_open+0x50/0x50 [ 338.491266][ T7642] proc_reg_write+0x1dd/0x2c0 [ 338.495970][ T7642] ? proc_reg_llseek+0x280/0x280 [ 338.500934][ T7642] vfs_write+0x2dc/0x9a0 [ 338.505244][ T7642] ? file_end_write+0x250/0x250 [ 338.510117][ T7642] ? __fget_files+0x28/0x460 [ 338.514728][ T7642] ? __fget_files+0x3fc/0x460 [ 338.519408][ T7642] ? __fdget_pos+0x2ae/0x360 [ 338.524000][ T7642] ? ksys_write+0x70/0x260 [ 338.528449][ T7642] ksys_write+0x14d/0x260 [ 338.532785][ T7642] ? __ia32_sys_read+0x80/0x80 [ 338.537573][ T7642] ? lockdep_hardirqs_on+0x94/0x140 [ 338.542781][ T7642] do_syscall_64+0x4c/0xa0 [ 338.547230][ T7642] ? clear_bhb_loop+0x60/0xb0 [ 338.551906][ T7642] ? clear_bhb_loop+0x60/0xb0 [ 338.556585][ T7642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.562547][ T7642] RIP: 0033:0x7ff5b5d9e159 [ 338.566987][ T7642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.586741][ T7642] RSP: 002b:00007ff5b6cd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 338.595171][ T7642] RAX: ffffffffffffffda RBX: 00007ff5b6025fa0 RCX: 00007ff5b5d9e159 [ 338.603159][ T7642] RDX: 00000000fffffffb RSI: 0000000000000000 RDI: 0000000000000009 [ 338.611180][ T7642] RBP: 00007ff5b5e3506b R08: 0000000000000000 R09: 0000000000000000 [ 338.619189][ T7642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.627194][ T7642] R13: 00007ff5b6026038 R14: 00007ff5b6025fa0 R15: 00007ffc23cfdaf8 [ 338.635270][ T7642] [ 338.638627][ T7642] Kernel Offset: disabled [ 338.643023][ T7642] Rebooting in 86400 seconds..