last executing test programs: 1m2.0845284s ago: executing program 2 (id=234): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private0, 0x40, 0x1}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private0}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @private0}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private0}, 0x1c) r3 = accept4$inet6(r1, 0x0, 0x0, 0x0) close(r2) close(r3) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @private0, @private0, {[], {{0x4e22, 0x4e23, 0x7fffffff, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1000, 0x0, 0x0, {[@eol, @timestamp={0x8, 0xa, 0x7fffffff}]}}}}}}}}, 0x0) syz_usb_connect(0x3, 0x64, 0x0, 0x0) 57.844247096s ago: executing program 2 (id=238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x1b, 0xc, 0x10000, 0x2, 0x7f, "fff903e7ffffff0072010000ffffffffffff00", 0x8, 0x4}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x96, 0x0, 0x100, 0x10000, 0x1, '\x00', 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 57.359662319s ago: executing program 2 (id=241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0x3, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xffff}}}]}, 0x38}}, 0x4000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80a40, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 53.085226216s ago: executing program 2 (id=247): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) gettid() timer_create(0x8, 0x0, &(0x7f0000bbdffc)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000200)={0x2e, 0x33, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 52.436595562s ago: executing program 2 (id=250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB='\a\x00', @ANYRES16=0x0, @ANYBLOB="000200000000000000001d0000000c000600020000000200000014002f80080001000000000008"], 0x34}}, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 51.780055578s ago: executing program 2 (id=254): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r1, &(0x7f0000000040)="3c5c2b3ecd45036a2762bb626c65640a", 0x10) 51.33756067s ago: executing program 32 (id=254): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r1, &(0x7f0000000040)="3c5c2b3ecd45036a2762bb626c65640a", 0x10) 18.357779967s ago: executing program 3 (id=315): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) sched_setaffinity(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0x41d9fda7) 18.115600913s ago: executing program 3 (id=316): r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000007c0)=[@in={0x2, 0x4e20, @multicast2}], 0x10) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) 9.703967445s ago: executing program 3 (id=332): socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x0) setns(0xc9, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x20, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {}, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 'veth0_to_batadv\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 8.779923698s ago: executing program 0 (id=335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000680)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) landlock_restrict_self(0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x21, 0x2, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newsa={0x13c, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x4d2, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha1)\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x0) 7.689353466s ago: executing program 0 (id=340): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x26aba000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) 6.522924036s ago: executing program 0 (id=352): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) inotify_init1(0x800) pipe2(&(0x7f0000000000), 0x80000) pipe2(&(0x7f0000000040), 0x0) userfaultfd(0x80801) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.764086184s ago: executing program 3 (id=346): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x4004401) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) 5.762961254s ago: executing program 4 (id=355): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200), 0x2, 0x8}}, 0x20) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/snmp\x00') lseek(r1, 0x38, 0x0) 5.683175337s ago: executing program 1 (id=347): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa216ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x4c060) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 5.628604988s ago: executing program 0 (id=348): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="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", 0xdea}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x1, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x4, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0xe, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x4, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0xfffffffe, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x402, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x7ef, 0x2, 0x9, 0x3000000, 0x9, 0x8, 0x9, 0x6, 0xb, 0xff, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x4400004], [0x5, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x2c, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x1, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfae, 0x1000, 0xfffffff6, 0x5, 0x7, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0xf2ed, 0xb, 0x5, 0x1, 0x6, 0x1, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0xfd, 0x10000, 0x7, 0x8003, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0x4, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x6) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.690898242s ago: executing program 4 (id=349): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x80002, 0x3, 0xfffffffffffffffd, 0x3, 0x40000000080, 0x9}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x8, 0x4000, 0x663, 0x7fffffff, 0x6608c64b}, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="588d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 4.521893326s ago: executing program 1 (id=350): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.379590249s ago: executing program 3 (id=351): r0 = creat(0x0, 0x109) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000080)={0x6}) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r5 = syz_usb_connect$hid(0x2, 0x37, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0xc, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xb4, 0x83, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)={0x27ed4f847164e2a, 0xb, 0x82, {0x82, 0x5, "83efb930f0187f62478fa22a61a54607b71ea9e43d359c479c37f525cde38bf7914077366b487d780a33535bcb3d8b70656de05c61a0f263245e9ebc91058437b39924f7bf661d9a59c367038e6eb5cc76c0072bc10ec700ece20a98b4fe6978677fa2a4d3faf7d41943c638e6ec28c9030eca8230ffc6c21a6cdd58e9393010"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) read$FUSE(r1, &(0x7f0000003b80)={0x2020}, 0x2020) preadv(r4, &(0x7f0000002540)=[{&(0x7f0000002480)=""/167, 0xa7}], 0x1, 0x5, 0xfffffffc) 3.57831888s ago: executing program 0 (id=353): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c", 0x4a}, {&(0x7f0000000ac0)="3fe4c8a3288f", 0x6}], 0x2, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.57805482s ago: executing program 1 (id=354): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000180)) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 3.351916456s ago: executing program 4 (id=356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e1f, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x511}}, [0x8, 0x80042e, 0x6, 0xfffffffffffffffc, 0x16f, 0x8001, 0x401, 0x9, 0x387, 0x7f, 0x2, 0xa, 0xfffffffffffffffd, 0x3fe, 0x9]}, &(0x7f0000000400)=0x100) 2.889412477s ago: executing program 1 (id=357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) 2.197465425s ago: executing program 4 (id=358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x1, 0xb}, {0x9, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f00000001c0), 0x39) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 497.279957ms ago: executing program 1 (id=359): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f00000000c0)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ca, &(0x7f0000000500)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x80, 0x146) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@ifindex, 0xffffffffffffffff, 0x2b, 0x10}, 0x20) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, &(0x7f0000000140)) getdents64(r0, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000001c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x4) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x20004000, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 452.938418ms ago: executing program 3 (id=360): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, 0x0, 0x10) 414.012879ms ago: executing program 4 (id=361): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') mount(0x0, &(0x7f0000002200)='./dev\x00', &(0x7f0000002300)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff) openat2(r1, &(0x7f0000000040)='./config/usb_gadget/g1\x00', 0x0, 0x0) write(r1, &(0x7f0000001600)='dummy_udc.0', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./dev/hidg0\x00', 0x800, 0x0) read(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x13}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000ee86dd6015690900132f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88d"], 0x0) 412.980239ms ago: executing program 0 (id=362): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) unshare(0x24020400) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x80047456, 0xf0ff1f00000000) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$drirender128(0xffffffffffffff9c, 0x0, 0x800, 0x0) timerfd_create(0x0, 0x0) io_submit(0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) 105.900497ms ago: executing program 4 (id=363): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8a", 0xd6}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000b40)="86545d2157646172b8", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71", 0x3d}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 1 (id=364): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.39' (ED25519) to the list of known hosts. [ 79.527581][ T5765] cgroup: Unknown subsys name 'net' [ 79.678891][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.351099][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.087277][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.087278][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.090691][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.096643][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.117395][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.124826][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.126280][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.140010][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.149688][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.150425][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.164201][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.171435][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.176269][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.184815][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.187648][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.213641][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.229015][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.236518][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.246073][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.254296][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.263364][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.270754][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.280331][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.288114][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.733073][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 83.866043][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 83.951685][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.959598][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.966971][ T5778] bridge_slave_0: entered allmulticast mode [ 83.974405][ T5778] bridge_slave_0: entered promiscuous mode [ 83.984333][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.993216][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.001199][ T5778] bridge_slave_1: entered allmulticast mode [ 84.011770][ T5778] bridge_slave_1: entered promiscuous mode [ 84.037577][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 84.123119][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.145473][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.152759][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.160460][ T5779] bridge_slave_0: entered allmulticast mode [ 84.167521][ T5779] bridge_slave_0: entered promiscuous mode [ 84.176486][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.183783][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.191207][ T5779] bridge_slave_1: entered allmulticast mode [ 84.198567][ T5779] bridge_slave_1: entered promiscuous mode [ 84.209169][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.218735][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 84.312510][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.339176][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.362151][ T5778] team0: Port device team_slave_0 added [ 84.407078][ T5778] team0: Port device team_slave_1 added [ 84.444488][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.451917][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.459888][ T5776] bridge_slave_0: entered allmulticast mode [ 84.466940][ T5776] bridge_slave_0: entered promiscuous mode [ 84.488396][ T5779] team0: Port device team_slave_0 added [ 84.510216][ T5779] team0: Port device team_slave_1 added [ 84.516397][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.523761][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.531239][ T5776] bridge_slave_1: entered allmulticast mode [ 84.538285][ T5776] bridge_slave_1: entered promiscuous mode [ 84.546506][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.553757][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.581396][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.593476][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.600862][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.608086][ T5777] bridge_slave_0: entered allmulticast mode [ 84.617193][ T5777] bridge_slave_0: entered promiscuous mode [ 84.626024][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.633488][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.642921][ T5777] bridge_slave_1: entered allmulticast mode [ 84.650363][ T5777] bridge_slave_1: entered promiscuous mode [ 84.687482][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.694656][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.721065][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.763478][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.806262][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.827034][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.835597][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.861880][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.875045][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.882841][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.909233][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.923840][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.936536][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.975105][ T5777] team0: Port device team_slave_0 added [ 85.000844][ T5778] hsr_slave_0: entered promiscuous mode [ 85.007446][ T5778] hsr_slave_1: entered promiscuous mode [ 85.018298][ T5777] team0: Port device team_slave_1 added [ 85.040236][ T5776] team0: Port device team_slave_0 added [ 85.074873][ T5776] team0: Port device team_slave_1 added [ 85.140040][ T5779] hsr_slave_0: entered promiscuous mode [ 85.146915][ T5779] hsr_slave_1: entered promiscuous mode [ 85.153819][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.161946][ T5779] Cannot create hsr debugfs directory [ 85.170264][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.177266][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.203642][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.217030][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.224359][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.250650][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.269499][ T5793] Bluetooth: hci1: command tx timeout [ 85.287374][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.294476][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.320452][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.333165][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.340214][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.366260][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.366269][ T5793] Bluetooth: hci3: command tx timeout [ 85.382937][ T5085] Bluetooth: hci2: command tx timeout [ 85.388883][ T5790] Bluetooth: hci0: command tx timeout [ 85.485310][ T5777] hsr_slave_0: entered promiscuous mode [ 85.492255][ T5777] hsr_slave_1: entered promiscuous mode [ 85.498703][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.506817][ T5777] Cannot create hsr debugfs directory [ 85.586292][ T5776] hsr_slave_0: entered promiscuous mode [ 85.593429][ T5776] hsr_slave_1: entered promiscuous mode [ 85.599987][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.607598][ T5776] Cannot create hsr debugfs directory [ 85.922052][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.970713][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.982882][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.014004][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.089467][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.108313][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.120616][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.133812][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.229821][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.245972][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.273471][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.293916][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.372127][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.383732][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.398915][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.411383][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.486498][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.515566][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.548393][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.584323][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.625691][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.633210][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.665834][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.673071][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.683322][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.690573][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.710758][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.741869][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.749096][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.837097][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.883983][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.891211][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.903120][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.910332][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.927857][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.011136][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.045506][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.052758][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.125666][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.132964][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.351032][ T5793] Bluetooth: hci1: command tx timeout [ 87.433178][ T5793] Bluetooth: hci3: command tx timeout [ 87.439279][ T5085] Bluetooth: hci2: command tx timeout [ 87.439798][ T5790] Bluetooth: hci0: command tx timeout [ 87.514483][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.630031][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.703638][ T5779] veth0_vlan: entered promiscuous mode [ 87.727010][ T5779] veth1_vlan: entered promiscuous mode [ 87.816034][ T5778] veth0_vlan: entered promiscuous mode [ 87.894038][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.914532][ T5778] veth1_vlan: entered promiscuous mode [ 87.993882][ T5779] veth0_macvtap: entered promiscuous mode [ 88.007922][ T5779] veth1_macvtap: entered promiscuous mode [ 88.077076][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.097607][ T5777] veth0_vlan: entered promiscuous mode [ 88.118325][ T5777] veth1_vlan: entered promiscuous mode [ 88.140043][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.164801][ T5778] veth0_macvtap: entered promiscuous mode [ 88.196322][ T5778] veth1_macvtap: entered promiscuous mode [ 88.208346][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.255447][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.265750][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.275677][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.284758][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.335022][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.350793][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.366148][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.399386][ T5776] veth0_vlan: entered promiscuous mode [ 88.419622][ T5777] veth0_macvtap: entered promiscuous mode [ 88.430179][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.443040][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.456792][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.476824][ T5777] veth1_macvtap: entered promiscuous mode [ 88.495585][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.504586][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.514249][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.523915][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.539898][ T5776] veth1_vlan: entered promiscuous mode [ 88.596468][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.607250][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.619055][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.632127][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.643644][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.687791][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.699573][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.713263][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.723801][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.737152][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.779250][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.788086][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.808376][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.829286][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.838041][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.847249][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.908829][ T5776] veth0_macvtap: entered promiscuous mode [ 88.933373][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.944618][ T5776] veth1_macvtap: entered promiscuous mode [ 88.951335][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.012706][ T4541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.025677][ T4541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.069910][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.079735][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.130890][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.146639][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.157855][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.171667][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.181623][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.192282][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.205048][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.232874][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.250788][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.263583][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.275838][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.287769][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.298793][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.314876][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.371965][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.384105][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.394896][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.409952][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.429132][ T5790] Bluetooth: hci1: command tx timeout [ 89.479964][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.487864][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.568706][ T5790] Bluetooth: hci0: command tx timeout [ 89.574311][ T5790] Bluetooth: hci3: command tx timeout [ 89.580256][ T5790] Bluetooth: hci2: command tx timeout [ 89.759118][ T2988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.782322][ T2988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.735861][ T4541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.774608][ T4541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.900741][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.928919][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.019203][ T5839] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 91.146861][ T5870] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.236973][ T5861] syz.3.5[5861]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.281702][ T5861] loop3: detected capacity change from 0 to 512 [ 91.293032][ T5874] netlink: 'syz.1.2': attribute type 11 has an invalid length. [ 91.297252][ T5861] ======================================================= [ 91.297252][ T5861] WARNING: The mand mount option has been deprecated and [ 91.297252][ T5861] and is ignored by this kernel. Remove the mand [ 91.297252][ T5861] option from the mount to silence this warning. [ 91.297252][ T5861] ======================================================= [ 91.368842][ T5861] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.375374][ T5861] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.420023][ T5861] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 91.493901][ T5861] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 91.509206][ T5861] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 91.519703][ T5793] Bluetooth: hci1: command tx timeout [ 91.589484][ T5793] Bluetooth: hci2: command tx timeout [ 91.594762][ T5085] Bluetooth: hci0: command tx timeout [ 91.600877][ T5790] Bluetooth: hci3: command tx timeout [ 91.606482][ T5861] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.5: Failed to acquire dquot type 0 [ 91.619863][ T5861] EXT4-fs (loop3): Remounting filesystem read-only [ 91.627153][ T5861] EXT4-fs (loop3): 1 orphan inode deleted [ 91.635979][ T5861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.658747][ T5861] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.716733][ T5877] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 91.725672][ T5877] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 91.863441][ T5839] usb 4-1: unable to get BOS descriptor or descriptor too short [ 91.908176][ T5839] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 91.937857][ T5839] usb 4-1: can't read configurations, error -71 [ 92.257791][ T28] cfg80211: failed to load regulatory.db [ 92.671514][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.740855][ T5882] loop2: detected capacity change from 0 to 32768 [ 93.037809][ T5882] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.8 (5882) [ 93.216995][ T5882] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.269845][ T5882] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 93.298630][ T5882] BTRFS info (device loop2): setting nodatasum [ 93.305916][ T5882] BTRFS info (device loop2): force zlib compression, level 3 [ 93.338873][ T5882] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 93.368657][ T5882] BTRFS info (device loop2): use lzo compression, level 0 [ 93.398620][ T5882] BTRFS info (device loop2): turning on flush-on-commit [ 93.406546][ T5882] BTRFS info (device loop2): enabling auto defrag [ 93.468592][ T5882] BTRFS info (device loop2): max_inline at 4096 [ 93.475025][ T5882] BTRFS info (device loop2): using free space tree [ 95.270712][ T5894] loop3: detected capacity change from 0 to 40427 [ 95.303961][ T5894] F2FS-fs (loop3): build fault injection attr: rate: 11, type: 0x7ffff [ 95.323117][ T5894] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x7ffff [ 95.346340][ T5894] F2FS-fs (loop3): LFS is not compatible with checkpoint=disable [ 95.503179][ T5882] BTRFS error (device loop2): open_ctree failed: -4 [ 95.568338][ T5927] loop1: detected capacity change from 0 to 164 [ 95.987368][ T5929] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 96.459245][ T5945] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 96.466914][ T5945] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 96.918608][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.256347][ T8] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 98.271901][ T8] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 98.285180][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 98.293191][ T8] usb 2-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 98.306063][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.051069][ T8] usb 2-1: config 0 descriptor?? [ 99.059474][ T5950] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 99.275533][ T5975] netlink: 'syz.0.27': attribute type 1 has an invalid length. [ 100.749637][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 100.772158][ T8] usbhid: probe of 2-1:0.0 failed with error -71 [ 100.973574][ T8] usb 2-1: USB disconnect, device number 2 [ 103.619035][ T6012] loop1: detected capacity change from 0 to 512 [ 103.758776][ T6012] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 103.822866][ T6012] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 103.910078][ T6012] EXT4-fs (loop1): 1 truncate cleaned up [ 103.917185][ T6012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.130936][ T6016] syz_tun: entered allmulticast mode [ 105.898600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.709305][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.421593][ T6030] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6031] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6030] [ 108.458611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.013935][ T6041] loop0: detected capacity change from 0 to 128 [ 110.207375][ T6041] md: invalid superblock checksum on loop0 [ 110.227609][ T6041] md: loop0 does not have a valid v1.1 superblock, not importing! [ 110.411103][ T6046] Zero length message leads to an empty skb [ 110.450400][ T23] IPVS: starting estimator thread 0... [ 110.558725][ T6047] IPVS: using max 20 ests per chain, 48000 per kthread [ 111.063698][ T6053] loop3: detected capacity change from 0 to 128 [ 111.265223][ T6053] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.352671][ T6053] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 111.418568][ T27] audit: type=1800 audit(1786118898.035:2): pid=6044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.47" name="bus" dev="ramfs" ino=8211 res=0 errno=0 [ 111.631712][ T6061] process 'syz.0.49' launched './file0' with NULL argv: empty string added [ 111.677532][ T5779] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.841657][ T6085] loop3: detected capacity change from 0 to 32768 [ 113.904336][ T6085] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 113.971650][ T6087] loop1: detected capacity change from 0 to 40427 [ 113.994104][ T6087] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 114.004497][ T6087] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 114.024920][ T6085] XFS (loop3): Ending clean mount [ 114.077087][ T6087] F2FS-fs (loop1): Found nat_bits in checkpoint [ 114.228806][ T6087] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 114.236347][ T6087] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 116.429416][ T6116] sched: RT throttling activated [ 116.548654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 117.038865][ T5779] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 117.967797][ T5776] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 118.012133][ T5776] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 118.019886][ T5776] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 118.027488][ T5776] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 118.035116][ T5776] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 118.042790][ T5776] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 118.050446][ T5776] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 118.383738][ T6130] loop3: detected capacity change from 0 to 1024 [ 118.440373][ T6130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.498900][ T56] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 118.603964][ T8] smpboot: CPU 1 is now offline [ 118.701230][ T56] usb 3-1: Using ep0 maxpacket: 32 [ 118.711687][ T6130] EXT4-fs error (device loop3): ext4_xattr_set_entry:1672: inode #18: comm syz.3.61: corrupted xattr entries [ 118.740374][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.761397][ T6136] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 118.781179][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.819394][ T56] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 118.851871][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.891978][ T56] usb 3-1: config 0 descriptor?? [ 118.932784][ T56] hub 3-1:0.0: USB hub found [ 119.230096][ T6129] EXT4-fs error (device loop3): ext4_free_inode:356: comm syz.3.61: bit already cleared for inode 18 [ 119.641452][ T56] hub 3-1:0.0: 1 port detected [ 122.844953][ T8] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 122.856243][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.892819][ T8] usb 3-1: USB disconnect, device number 2 [ 122.908930][ T56] usb 3-1: Failed to suspend device, error -19 [ 124.833767][ T6154] loop0: detected capacity change from 0 to 512 [ 124.846352][ T6154] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 124.868827][ T6154] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.70: bad orphan inode 131083 [ 124.890028][ T6154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.036812][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.336511][ T6167] loop2: detected capacity change from 0 to 164 [ 125.426605][ T6159] kvm: pic: non byte write [ 125.613252][ T6171] Bluetooth: MGMT ver 1.22 [ 125.632889][ T6171] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 128.638847][ T6207] syzkaller0: entered promiscuous mode [ 128.644415][ T6207] syzkaller0: entered allmulticast mode [ 129.884378][ T6221] syzkaller0: entered promiscuous mode [ 129.909542][ T6221] syzkaller0: entered allmulticast mode [ 129.967415][ T6225] pim6reg1: entered promiscuous mode [ 129.982999][ T6225] pim6reg1: entered allmulticast mode [ 130.932148][ T6246] syzkaller0: entered promiscuous mode [ 130.955359][ T6246] syzkaller0: entered allmulticast mode [ 130.990692][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.97'. [ 131.380153][ T6257] loop2: detected capacity change from 0 to 512 [ 131.410565][ T6257] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 131.473969][ T6257] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 131.535511][ T6257] EXT4-fs (loop2): 1 truncate cleaned up [ 131.556558][ T6257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.907041][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.208056][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.218638][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.585480][ T6279] syzkaller0: entered promiscuous mode [ 134.574066][ T6279] syzkaller0: entered allmulticast mode [ 138.078797][ T5841] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 138.268781][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 138.290890][ T5841] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 138.309587][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.461186][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.483945][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.504534][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 138.538802][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.567204][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.593607][ T8] usb 1-1: config 0 descriptor?? [ 138.947263][ T5841] dvb_ttusb_budget: cmd xter failed, receive error -75 [ 138.954763][ T5841] dvb_ttusb_budget: ttusb_init_controller: error [ 138.962643][ T5841] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 139.036647][ T8] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 139.069687][ T5841] DVB: Unable to find symbol stv0299_attach() [ 139.079949][ T8] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 139.144557][ T5841] DVB: Unable to find symbol tda8083_attach() [ 139.158898][ T5841] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 139.258105][ T5841] usb 1-1: USB disconnect, device number 2 [ 139.893290][ T6328] loop2: detected capacity change from 0 to 256 [ 139.940011][ T6328] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.978635][ T6328] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 140.037500][ T6328] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 140.078553][ T6328] exFAT-fs (loop2): failed to load alloc-bitmap [ 140.103561][ T6328] exFAT-fs (loop2): failed to recognize exfat type [ 140.914672][ T6341] syzkaller0: entered promiscuous mode [ 140.929688][ T6341] syzkaller0: entered allmulticast mode [ 141.260576][ T5841] usb 4-1: USB disconnect, device number 4 [ 141.624714][ T6343] syzkaller0: entered promiscuous mode [ 141.641488][ T6343] syzkaller0: entered allmulticast mode [ 142.698669][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 145.952809][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 146.294687][ T8] usb 2-1: device descriptor read/all, error -71 [ 147.972427][ T6390] loop3: detected capacity change from 0 to 512 [ 147.987575][ T6390] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 148.017135][ T6390] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.136: bad orphan inode 131083 [ 148.029435][ T6390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.183336][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.366574][ T6401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.140'. [ 148.611523][ T6405] syzkaller0: entered promiscuous mode [ 148.640023][ T6405] syzkaller0: entered allmulticast mode [ 149.679415][ T6420] netlink: 156 bytes leftover after parsing attributes in process `syz.2.146'. [ 151.554588][ T6430] loop2: detected capacity change from 0 to 512 [ 151.566439][ T6430] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 151.592869][ T6430] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.148: bad orphan inode 131083 [ 151.605833][ T6430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.772482][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.108568][ T5841] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 157.447323][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 157.753271][ T6455] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by ""[6455] [ 157.804830][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 163.678788][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 163.871403][ T8] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 163.900725][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.990204][ T8] snd-ua101 1-1:1.0: sample format descriptor not found [ 165.538702][ T27] audit: type=1800 audit(1786118952.165:3): pid=6499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.167" name="ipv4_address" dev="configfs" ino=11578 res=0 errno=0 [ 165.569722][ T27] audit: type=1800 audit(1786118952.205:4): pid=6499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.167" name="ipv4_port" dev="configfs" ino=11579 res=0 errno=0 [ 165.597460][ T27] audit: type=1800 audit(1786118952.215:5): pid=6499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.167" name="num" dev="configfs" ino=11580 res=0 errno=0 [ 165.624916][ T27] audit: type=1800 audit(1786118952.225:6): pid=6499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.167" name="local" dev="configfs" ino=11581 res=0 errno=0 [ 166.128320][ T9] usb 1-1: USB disconnect, device number 3 [ 166.400998][ T5841] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 166.748672][ T5841] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 166.970478][ T6499] loop3: detected capacity change from 0 to 32768 [ 167.407119][ T6499] (syz.3.167,6499,0):ocfs2_verify_heartbeat:826 ERROR: Mismatching o2cb heartbeat modes [ 168.531849][ T6499] (syz.3.167,6499,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 170.957593][ T6547] loop3: detected capacity change from 0 to 512 [ 171.006682][ T6547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.044122][ T6547] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.172588][ T6547] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.182: corrupted inode contents [ 171.274721][ T6547] EXT4-fs (loop3): Remounting filesystem read-only [ 173.147038][ T6560] comedi comedi2: board detection failed [ 173.331455][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.361057][ T27] audit: type=1800 audit(1786118959.995:7): pid=6564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.185" name="ipv4_address" dev="configfs" ino=11781 res=0 errno=0 [ 173.385492][ T27] audit: type=1800 audit(1786118960.015:8): pid=6564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.185" name="ipv4_port" dev="configfs" ino=11782 res=0 errno=0 [ 173.410441][ T27] audit: type=1800 audit(1786118960.035:9): pid=6564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.185" name="num" dev="configfs" ino=11783 res=0 errno=0 [ 173.442879][ T27] audit: type=1800 audit(1786118960.045:10): pid=6564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.185" name="local" dev="configfs" ino=11784 res=0 errno=0 [ 173.656546][ T6567] CIFS: Attempting to mount //::1/share [ 173.732758][ T6567] CIFS: VFS: Error connecting to socket. Aborting operation. [ 173.798848][ T6567] CIFS: VFS: cifs_mount failed w/return code = -4 [ 173.954617][ T6570] loop2: detected capacity change from 0 to 2048 [ 174.021662][ T6570] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 174.108644][ T6570] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.262008][ T6572] nvme nvme0: failed to connect socket: -111 [ 174.384434][ T6564] loop0: detected capacity change from 0 to 32768 [ 174.480535][ T6564] (syz.0.185,6564,0):ocfs2_verify_heartbeat:826 ERROR: Mismatching o2cb heartbeat modes [ 174.537730][ T6564] (syz.0.185,6564,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 174.891344][ T6582] loop0: detected capacity change from 0 to 128 [ 174.970730][ T6583] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 175.059036][ T6584] syzkaller0: entered promiscuous mode [ 175.071230][ T6582] socket: no more sockets [ 175.085900][ T6584] syzkaller0: entered allmulticast mode [ 175.126980][ T6582] socket: no more sockets [ 175.146236][ T6584] tipc: Started in network mode [ 175.175981][ T6584] tipc: Node identity 5206116c45e2, cluster identity 4711 [ 175.209321][ T6584] tipc: Enabled bearer , priority 0 [ 175.258996][ T6579] tipc: Resetting bearer [ 175.340501][ T6591] capability: warning: `syz.2.194' uses deprecated v2 capabilities in a way that may be insecure [ 175.371611][ T6579] tipc: Disabling bearer [ 175.403736][ T6595] loop0: detected capacity change from 0 to 2048 [ 175.449645][ T6595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.507574][ T6595] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 177.244068][ T8] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 178.971650][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.225031][ T27] audit: type=1800 audit(1786118965.855:11): pid=6618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.201" name="ipv4_address" dev="configfs" ino=11988 res=0 errno=0 [ 179.251911][ T27] audit: type=1800 audit(1786118965.885:12): pid=6618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.201" name="ipv4_port" dev="configfs" ino=11990 res=0 errno=0 [ 179.277955][ T27] audit: type=1800 audit(1786118965.895:13): pid=6618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.201" name="num" dev="configfs" ino=11991 res=0 errno=0 [ 179.306681][ T27] audit: type=1800 audit(1786118965.905:14): pid=6618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.201" name="local" dev="configfs" ino=11992 res=0 errno=0 [ 179.322690][ T6616] syzkaller0: entered promiscuous mode [ 179.334340][ T6621] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 179.363004][ T6616] syzkaller0: entered allmulticast mode [ 179.426780][ T6614] kvm: pic: non byte read [ 179.459195][ T6614] kvm: pic: level sensitive irq not supported [ 179.459359][ T6614] kvm: pic: non byte read [ 179.499572][ T6614] kvm: pic: level sensitive irq not supported [ 179.512221][ T6614] kvm: pic: non byte read [ 179.556499][ T6614] kvm: pic: level sensitive irq not supported [ 179.556598][ T6614] kvm: pic: non byte read [ 179.608989][ T6614] kvm: pic: level sensitive irq not supported [ 179.609119][ T6614] kvm: pic: non byte read [ 181.008724][ T6614] kvm: pic: level sensitive irq not supported [ 181.008859][ T6614] kvm: pic: non byte read [ 182.417247][ T6638] syzkaller0: entered promiscuous mode [ 182.432997][ T6638] syzkaller0: entered allmulticast mode [ 183.049518][ T6643] loop5: detected capacity change from 0 to 6 [ 183.215709][ T2928] loop: Write error at byte offset 0, length 3072. [ 183.242984][ C1] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 183.253007][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 184.329112][ T6658] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 184.423522][ T6660] syzkaller0: entered promiscuous mode [ 184.435750][ T6660] syzkaller0: entered allmulticast mode [ 184.704193][ T27] audit: type=1800 audit(1786118971.335:15): pid=6666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.215" name="power" dev="configfs" ino=12130 res=0 errno=0 [ 184.817469][ T6666] null_blk: disk nullb1 created [ 184.961266][ T6666] zonefs (nullb1) ERROR: Not a zoned block device [ 184.993913][ T6668] block device autoloading is deprecated and will be removed. [ 186.171424][ T6699] syzkaller0: entered promiscuous mode [ 186.177027][ T6699] syzkaller0: entered allmulticast mode [ 189.849332][ T6744] loop0: detected capacity change from 0 to 2048 [ 189.892859][ T6744] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 189.926930][ T6744] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.260901][ T6729] loop3: detected capacity change from 0 to 40427 [ 190.647267][ T6729] F2FS-fs (loop3): Image doesn't support compression [ 192.425842][ T6729] F2FS-fs (loop3): Unrecognized mount option "whint_mode=fs-based" or missing value [ 194.031420][ T6755] netlink: 'syz.0.237': attribute type 1 has an invalid length. [ 194.141427][ T6755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.213403][ T6760] bond1: (slave syz_tun): making interface the new active one [ 194.303298][ T6760] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 194.363755][ T6755] bond1: entered promiscuous mode [ 194.375637][ T6755] syz_tun: entered promiscuous mode [ 194.392642][ T6755] bond1: entered allmulticast mode [ 194.424069][ T6755] syz_tun: entered allmulticast mode [ 194.689644][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.696096][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.170527][ T6778] netlink: 76 bytes leftover after parsing attributes in process `syz.1.244'. [ 198.205199][ T6775] syzkaller0: entered promiscuous mode [ 198.221069][ T6775] syzkaller0: entered allmulticast mode [ 198.230126][ T6779] syzkaller0: entered promiscuous mode [ 198.238020][ T6779] syzkaller0: entered allmulticast mode [ 198.559847][ T6779] tipc: Enabled bearer , priority 0 [ 198.588308][ T6777] tipc: Resetting bearer [ 198.664933][ T6777] tipc: Disabling bearer [ 199.726384][ T5777] syz_tun (unregistering): left allmulticast mode [ 199.772932][ T6790] loop3: detected capacity change from 0 to 32768 [ 199.863988][ T6790] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 200.070670][ T6790] XFS (loop3): Ending clean mount [ 200.144096][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'. [ 200.612206][ T5779] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 200.946403][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 200.955787][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 200.974958][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 200.984251][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 200.993048][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 201.000778][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 201.333518][ T6816] chnl_net:caif_netlink_parms(): no params data found [ 201.448754][ T6816] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.456027][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.463870][ T6816] bridge_slave_0: entered allmulticast mode [ 201.474850][ T6816] bridge_slave_0: entered promiscuous mode [ 201.485114][ T6816] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.492868][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.500438][ T6816] bridge_slave_1: entered allmulticast mode [ 201.507963][ T6816] bridge_slave_1: entered promiscuous mode [ 201.563071][ T6816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.576497][ T6816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.618089][ T6816] team0: Port device team_slave_0 added [ 201.627620][ T6816] team0: Port device team_slave_1 added [ 201.686038][ T6816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.698826][ T6816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.739704][ T6816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.789435][ T6816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.796490][ T6816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.861998][ T6816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.941547][ T6816] hsr_slave_0: entered promiscuous mode [ 201.959940][ T6816] hsr_slave_1: entered promiscuous mode [ 201.966710][ T6816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.979620][ T6816] Cannot create hsr debugfs directory [ 202.347194][ T6816] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 202.535977][ T6816] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 202.584759][ T6816] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 202.606959][ T6816] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 202.870633][ T6816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.904631][ T6816] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.917505][ T2938] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.924718][ T2938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.943287][ T2938] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.950552][ T2938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.031566][ T5790] Bluetooth: hci1: command tx timeout [ 203.294920][ T6816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.506325][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 203.644443][ T6816] veth0_vlan: entered promiscuous mode [ 203.664618][ T6816] veth1_vlan: entered promiscuous mode [ 203.701051][ T9] usb 2-1: config index 0 descriptor too short (expected 53, got 35) [ 203.714966][ T6816] veth0_macvtap: entered promiscuous mode [ 203.722065][ T9] usb 2-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 203.749644][ T6816] veth1_macvtap: entered promiscuous mode [ 203.771977][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 203.805472][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.816830][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.833401][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.846522][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.850465][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 203.873917][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.884892][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.901552][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.906980][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 203.925169][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.954740][ T6816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.961770][ T9] usb 2-1: Product: syz [ 203.966232][ T9] usb 2-1: Manufacturer: syz [ 203.990972][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.019662][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.031373][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.043954][ T6862] loop3: detected capacity change from 0 to 512 [ 204.075615][ T6862] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.265: iget: bad i_size value: 38620345925642 [ 204.082334][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.109909][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.111643][ T6862] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.265: couldn't read orphan inode 15 (err -117) [ 204.121441][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.147350][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.156343][ T6862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.168814][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.190861][ T6816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.242537][ T6816] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.260675][ T6816] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.274844][ T6816] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.285311][ T6816] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.576254][ T1033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.607326][ T1033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.667635][ T2928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.687068][ T2928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.109026][ T51] Bluetooth: hci1: command tx timeout [ 205.566905][ T8] usb 2-1: USB disconnect, device number 5 [ 205.567526][ T1033] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm kworker/u4:5: bg 0: block 5: invalid block bitmap [ 205.606967][ T5141] FAULT_INJECTION: forcing a failure. [ 205.606967][ T5141] name failslab, interval 1, probability 100, space 0, times 1 [ 205.607161][ T6874] FAULT_INJECTION: forcing a failure. [ 205.607161][ T6874] name failslab, interval 1, probability 100, space 1, times 1 [ 205.620956][ T23] FAULT_INJECTION: forcing a failure. [ 205.620956][ T23] name failslab, interval 1, probability 100, space 1, times 1 [ 205.634721][ T6874] CPU: 0 PID: 6874 Comm: syz.0.266 Tainted: G S syzkaller #0 [ 205.647247][ C1] FAULT_INJECTION: forcing a failure. [ 205.647247][ C1] name failslab, interval 1, probability 100, space 1, times 1 [ 205.655848][ T6874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.655879][ T6874] Call Trace: [ 205.655892][ T6874] [ 205.655903][ T6874] dump_stack_lvl+0x18c/0x250 [ 205.690133][ T6874] ? show_regs_print_info+0x20/0x20 [ 205.695373][ T6874] ? load_image+0x420/0x420 [ 205.699920][ T6874] ? __might_sleep+0xe0/0xe0 [ 205.704541][ T6874] ? __lock_acquire+0x7d80/0x7d80 [ 205.709603][ T6874] should_fail_ex+0x394/0x4c0 [ 205.714321][ T6874] should_failslab+0x9/0x20 [ 205.718863][ T6874] slab_pre_alloc_hook+0x59/0x300 [ 205.723924][ T6874] ? __lock_acquire+0x7d80/0x7d80 [ 205.728989][ T6874] kmem_cache_alloc_node+0x5e/0x310 [ 205.734233][ T6874] ? __alloc_skb+0x103/0x2c0 [ 205.738855][ T6874] __alloc_skb+0x103/0x2c0 [ 205.743303][ T6874] netlink_sendmsg+0x66a/0xbf0 [ 205.748104][ T6874] ? netlink_getsockopt+0x590/0x590 [ 205.753338][ T6874] ? apparmor_socket_sendmsg+0x8e/0x330 [ 205.758910][ T6874] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 205.764224][ T6874] ? security_socket_sendmsg+0x80/0xa0 [ 205.769707][ T6874] ? netlink_getsockopt+0x590/0x590 [ 205.774946][ T6874] ____sys_sendmsg+0x61b/0x980 [ 205.779749][ T6874] ? __asan_memset+0x22/0x40 [ 205.784380][ T6874] ? __sys_sendmsg_sock+0x30/0x30 [ 205.789442][ T6874] ? __import_iovec+0x5f2/0x850 [ 205.794337][ T6874] ? import_iovec+0x73/0xa0 [ 205.798880][ T6874] ___sys_sendmsg+0x2a6/0x360 [ 205.803597][ T6874] ? __sys_sendmsg+0x2b0/0x2b0 [ 205.808442][ T6874] __se_sys_sendmsg+0x1d0/0x2c0 [ 205.813328][ T6874] ? __x64_sys_sendmsg+0x80/0x80 [ 205.818312][ T6874] ? lockdep_hardirqs_on+0x98/0x150 [ 205.823548][ T6874] do_syscall_64+0x55/0xb0 [ 205.828014][ T6874] ? clear_bhb_loop+0x40/0x90 [ 205.832727][ T6874] ? clear_bhb_loop+0x40/0x90 [ 205.837444][ T6874] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.843383][ T6874] RIP: 0033:0x7f333a79e0d9 [ 205.847839][ T6874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.867586][ T6874] RSP: 002b:00007f333b6c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.876030][ T6874] RAX: ffffffffffffffda RBX: 00007f333aa25fa0 RCX: 00007f333a79e0d9 [ 205.884028][ T6874] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 205.892025][ T6874] RBP: 00007f333a835024 R08: 0000000000000000 R09: 0000000000000000 [ 205.900026][ T6874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.908027][ T6874] R13: 00007f333aa26038 R14: 00007f333aa25fa0 R15: 00007ffd9a025d38 [ 205.916044][ T6874] [ 205.919117][ C1] CPU: 1 PID: 23 Comm: kworker/1:0 Tainted: G S syzkaller #0 [ 205.919966][ C0] FAULT_INJECTION: forcing a failure. [ 205.919966][ C0] name failslab, interval 1, probability 100, space 1, times 1 [ 205.927923][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.927938][ C1] Workqueue: events nsim_fib_event_work [ 205.927967][ C1] Call Trace: [ 205.960025][ C1] [ 205.962910][ C1] dump_stack_lvl+0x18c/0x250 [ 205.967627][ C1] ? show_regs_print_info+0x20/0x20 [ 205.972860][ C1] ? load_image+0x420/0x420 [ 205.977404][ C1] ? mark_lock+0x94/0x320 [ 205.981776][ C1] ? verify_lock_unused+0x140/0x140 [ 205.987008][ C1] ? mark_lock+0x94/0x320 [ 205.991377][ C1] should_fail_ex+0x394/0x4c0 [ 205.996100][ C1] should_failslab+0x9/0x20 [ 206.000659][ C1] slab_pre_alloc_hook+0x59/0x300 [ 206.005727][ C1] ? __lock_acquire+0x1262/0x7d80 [ 206.010799][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 206.016032][ C1] ? __alloc_skb+0x103/0x2c0 [ 206.020662][ C1] __alloc_skb+0x103/0x2c0 [ 206.025116][ C1] __netdev_alloc_skb+0x10c/0x500 [ 206.030177][ C1] ? kmalloc_reserve+0x240/0x240 [ 206.035153][ C1] __ieee80211_beacon_get+0xd5d/0x1520 [ 206.040649][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 206.046241][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 206.051833][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 206.058645][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 206.064236][ C1] __iterate_interfaces+0x225/0x4c0 [ 206.069469][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 206.075747][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 206.082973][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 206.089281][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 206.096343][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 206.101572][ C1] ? hw_scan_work+0xf10/0xf10 [ 206.106277][ C1] __hrtimer_run_queues+0x525/0xc10 [ 206.111522][ C1] ? hrtimer_interrupt+0x980/0x980 [ 206.116697][ C1] ? read_tsc+0x9/0x20 [ 206.120872][ C1] hrtimer_run_softirq+0x177/0x290 [ 206.126041][ C1] handle_softirqs+0x27d/0x820 [ 206.130845][ C1] ? read_tsc+0x9/0x20 [ 206.134954][ C1] ? ktime_get+0x24b/0x280 [ 206.139407][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 206.144238][ C1] ? do_softirq+0x1a0/0x1a0 [ 206.148779][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 206.154015][ C1] __irq_exit_rcu+0xd3/0x190 [ 206.158637][ C1] ? irq_exit_rcu+0x20/0x20 [ 206.163173][ C1] irq_exit_rcu+0x9/0x20 [ 206.167443][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 206.173204][ C1] [ 206.176195][ C1] [ 206.179150][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 206.185160][ C1] RIP: 0010:console_flush_all+0x883/0xcf0 [ 206.190945][ C1] Code: ed 01 00 00 e8 5e 7e 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 4f 7e 1b 00 eb 06 e8 48 7e 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 206.210579][ C1] RSP: 0018:ffffc900001d72a0 EFLAGS: 00000293 [ 206.216673][ C1] RAX: ffffffff816bf338 RBX: ffffc900001d741f RCX: ffff88801ce45a00 [ 206.224671][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 206.232666][ C1] RBP: ffffc900001d73f0 R08: ffffffff911eb5e7 R09: 1ffffffff223d6bc [ 206.240667][ C1] R10: dffffc0000000000 R11: fffffbfff223d6bd R12: ffffffff8d8ce1e0 [ 206.248679][ C1] R13: 1ffffffff19f96d8 R14: ffffffff8d8ce238 R15: dffffc0000000000 [ 206.256690][ C1] ? console_flush_all+0x878/0xcf0 [ 206.261852][ C1] ? console_flush_all+0x10b/0xcf0 [ 206.267004][ C1] ? is_console_locked+0x20/0x20 [ 206.272165][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 206.278191][ C1] console_unlock+0xad/0x350 [ 206.282814][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 206.287887][ C1] ? vprintk_emit+0x467/0x610 [ 206.292599][ C1] ? vprintk_emit+0x30b/0x610 [ 206.297312][ C1] ? vprintk_emit+0x30b/0x610 [ 206.302107][ C1] vprintk_emit+0x497/0x610 [ 206.306645][ C1] ? vprintk_emit+0x30b/0x610 [ 206.311361][ C1] ? printk_sprint+0x460/0x460 [ 206.316156][ C1] ? get_random_u8+0x4af/0x980 [ 206.320960][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 206.326195][ C1] ? get_random_u8+0x16c/0x980 [ 206.331079][ C1] ? get_random_u8+0x516/0x980 [ 206.335887][ C1] _printk+0xde/0x130 [ 206.339928][ C1] ? load_image+0x420/0x420 [ 206.344477][ C1] ? __might_sleep+0xe0/0xe0 [ 206.349104][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 206.354167][ C1] should_fail_ex+0x375/0x4c0 [ 206.358890][ C1] should_failslab+0x9/0x20 [ 206.363430][ C1] slab_pre_alloc_hook+0x59/0x300 [ 206.368525][ C1] ? __might_sleep+0xe0/0xe0 [ 206.373174][ C1] ? nsim_fib_event_work+0x1249/0x32c0 [ 206.378755][ C1] __kmem_cache_alloc_node+0x53/0x250 [ 206.384171][ C1] ? nsim_fib_event_work+0x1249/0x32c0 [ 206.389657][ C1] kmalloc_trace+0x2a/0xe0 [ 206.394134][ C1] nsim_fib_event_work+0x1249/0x32c0 [ 206.399471][ C1] ? nsim_fib_create+0xb20/0xb20 [ 206.404439][ C1] ? mark_lock+0x94/0x320 [ 206.408799][ C1] ? verify_lock_unused+0x140/0x140 [ 206.414054][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 206.420075][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 206.425175][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 206.430412][ C1] ? process_scheduled_works+0x975/0x1600 [ 206.436172][ C1] ? process_scheduled_works+0x975/0x1600 [ 206.441926][ C1] process_scheduled_works+0xa60/0x1600 [ 206.447536][ C1] ? worker_attach_to_pool+0x370/0x370 [ 206.453044][ C1] ? assign_work+0x3cc/0x5d0 [ 206.457672][ C1] worker_thread+0xa5e/0xfe0 [ 206.462319][ C1] kthread+0x2fa/0x390 [ 206.466414][ C1] ? pr_cont_work+0x550/0x550 [ 206.471129][ C1] ? kthread_blkcg+0xd0/0xd0 [ 206.475763][ C1] ret_from_fork+0x48/0x80 [ 206.480213][ C1] ? kthread_blkcg+0xd0/0xd0 [ 206.484842][ C1] ret_from_fork_asm+0x11/0x20 [ 206.489652][ C1] [ 206.492723][ C0] CPU: 0 PID: 6874 Comm: syz.0.266 Tainted: G S syzkaller #0 [ 206.501637][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.511749][ C0] Call Trace: [ 206.515086][ C0] [ 206.517979][ C0] dump_stack_lvl+0x18c/0x250 [ 206.522817][ C0] ? show_regs_print_info+0x20/0x20 [ 206.528091][ C0] ? load_image+0x420/0x420 [ 206.532667][ C0] ? mark_lock+0x94/0x320 [ 206.537069][ C0] ? verify_lock_unused+0x140/0x140 [ 206.542342][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 206.548469][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 206.553553][ C0] should_fail_ex+0x394/0x4c0 [ 206.558467][ C0] should_failslab+0x9/0x20 [ 206.563096][ C0] slab_pre_alloc_hook+0x59/0x300 [ 206.568161][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 206.573486][ C0] ? __alloc_skb+0x103/0x2c0 [ 206.578105][ C0] __alloc_skb+0x103/0x2c0 [ 206.582549][ C0] wg_packet_send_keepalive+0x65/0x2b0 [ 206.588036][ C0] call_timer_fn+0x189/0x540 [ 206.592740][ C0] ? wg_expired_zero_key_material+0x2a0/0x2a0 [ 206.598835][ C0] ? call_timer_fn+0xd2/0x540 [ 206.603536][ C0] ? __run_timers+0x810/0x810 [ 206.608246][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 206.613481][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 206.618709][ C0] ? wg_expired_zero_key_material+0x2a0/0x2a0 [ 206.624804][ C0] __run_timers+0x570/0x810 [ 206.629348][ C0] ? detach_timer+0x2b0/0x2b0 [ 206.634053][ C0] ? lock_chain_count+0x20/0x20 [ 206.638940][ C0] run_timer_softirq+0x67/0xf0 [ 206.643751][ C0] handle_softirqs+0x27d/0x820 [ 206.648543][ C0] ? read_tsc+0x9/0x20 [ 206.652636][ C0] ? ktime_get+0x24b/0x280 [ 206.657081][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 206.661877][ C0] ? do_softirq+0x1a0/0x1a0 [ 206.666441][ C0] __irq_exit_rcu+0xd3/0x190 [ 206.671061][ C0] ? irq_exit_rcu+0x20/0x20 [ 206.675605][ C0] irq_exit_rcu+0x9/0x20 [ 206.679875][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 206.685539][ C0] [ 206.688492][ C0] [ 206.691447][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 206.697454][ C0] RIP: 0010:dump_stack_lvl+0x212/0x250 [ 206.702936][ C0] Code: e8 33 f6 fa f6 48 bb 00 00 00 00 00 fc ff df 4d 85 ed 75 07 e8 1f f6 fa f6 eb 06 e8 18 f6 fa f6 fb 48 c7 44 24 20 0e 36 e0 45 <31> c0 49 89 04 1f 49 89 44 1f 08 65 48 8b 04 25 28 00 00 00 48 3b [ 206.722565][ C0] RSP: 0018:ffffc900034a76a0 EFLAGS: 00000283 [ 206.728660][ C0] RAX: ffffffff8a8c7b68 RBX: dffffc0000000000 RCX: 0000000000080000 [ 206.736655][ C0] RDX: ffffc9000d6ac000 RSI: 0000000000074249 RDI: 000000000007424a [ 206.744742][ C0] RBP: ffffc900034a77a0 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 206.752737][ C0] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: dffffc0000000004 [ 206.760739][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: 1ffff92000694ed8 [ 206.768739][ C0] ? dump_stack_lvl+0x208/0x250 [ 206.773628][ C0] ? show_regs_print_info+0x20/0x20 [ 206.778850][ C0] ? load_image+0x420/0x420 [ 206.783381][ C0] ? __might_sleep+0xe0/0xe0 [ 206.788002][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 206.793068][ C0] should_fail_ex+0x394/0x4c0 [ 206.797789][ C0] should_failslab+0x9/0x20 [ 206.802346][ C0] slab_pre_alloc_hook+0x59/0x300 [ 206.807405][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 206.812461][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 206.817693][ C0] ? __alloc_skb+0x103/0x2c0 [ 206.822303][ C0] __alloc_skb+0x103/0x2c0 [ 206.826745][ C0] netlink_sendmsg+0x66a/0xbf0 [ 206.831542][ C0] ? netlink_getsockopt+0x590/0x590 [ 206.836790][ C0] ? apparmor_socket_sendmsg+0x8e/0x330 [ 206.842364][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 206.847763][ C0] ? security_socket_sendmsg+0x80/0xa0 [ 206.853252][ C0] ? netlink_getsockopt+0x590/0x590 [ 206.858477][ C0] ____sys_sendmsg+0x61b/0x980 [ 206.863279][ C0] ? __asan_memset+0x22/0x40 [ 206.867904][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 206.872957][ C0] ? __import_iovec+0x5f2/0x850 [ 206.877842][ C0] ? import_iovec+0x73/0xa0 [ 206.882378][ C0] ___sys_sendmsg+0x2a6/0x360 [ 206.887081][ C0] ? __sys_sendmsg+0x2b0/0x2b0 [ 206.891904][ C0] __se_sys_sendmsg+0x1d0/0x2c0 [ 206.896788][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 206.901762][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 206.906992][ C0] do_syscall_64+0x55/0xb0 [ 206.911440][ C0] ? clear_bhb_loop+0x40/0x90 [ 206.916139][ C0] ? clear_bhb_loop+0x40/0x90 [ 206.920844][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.926776][ C0] RIP: 0033:0x7f333a79e0d9 [ 206.931214][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.950848][ C0] RSP: 002b:00007f333b6c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.959317][ C0] RAX: ffffffffffffffda RBX: 00007f333aa25fa0 RCX: 00007f333a79e0d9 [ 206.967359][ C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 206.975451][ C0] RBP: 00007f333a835024 R08: 0000000000000000 R09: 0000000000000000 [ 206.983476][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.991469][ C0] R13: 00007f333aa26038 R14: 00007f333aa25fa0 R15: 00007ffd9a025d38 [ 206.999480][ C0] [ 207.046289][ T5141] CPU: 1 PID: 5141 Comm: udevd Tainted: G S syzkaller #0 [ 207.054816][ T5141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.065018][ T5141] Call Trace: [ 207.068345][ T5141] [ 207.071321][ T5141] dump_stack_lvl+0x18c/0x250 [ 207.076062][ T5141] ? show_regs_print_info+0x20/0x20 [ 207.081320][ T5141] ? load_image+0x420/0x420 [ 207.085895][ T5141] ? __lock_acquire+0x7d80/0x7d80 [ 207.090982][ T5141] ? slab_post_alloc_hook+0x86/0x4d0 [ 207.094660][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 207.096312][ T5141] should_fail_ex+0x394/0x4c0 [ 207.102775][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 207.107035][ T5141] should_failslab+0x9/0x20 [ 207.113471][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 207.117512][ T5141] slab_pre_alloc_hook+0x59/0x300 [ 207.128611][ T5141] kmem_cache_alloc+0x5a/0x2c0 [ 207.133438][ T5141] ? anon_vma_fork+0xe5/0x520 [ 207.138171][ T5141] anon_vma_fork+0xe5/0x520 [ 207.142737][ T5141] ? dup_userfaultfd+0x2c1/0x800 [ 207.147743][ T5141] copy_mm+0x12c7/0x1e30 [ 207.152058][ T5141] ? copy_signal+0x640/0x640 [ 207.156693][ T5141] ? lockdep_init_map_type+0x9c/0x8e0 [ 207.162137][ T5141] ? __init_rwsem+0x122/0x160 [ 207.166842][ T5141] ? copy_signal+0x51f/0x640 [ 207.171467][ T5141] copy_process+0x16c9/0x3da0 [ 207.176200][ T5141] ? copy_process+0x98e/0x3da0 [ 207.181012][ T5141] ? __pidfd_prepare+0x140/0x140 [ 207.185978][ T5141] ? __local_bh_enable_ip+0x13a/0x1c0 [ 207.191390][ T5141] kernel_clone+0x24b/0x8a0 [ 207.195929][ T5141] ? create_io_thread+0x190/0x190 [ 207.200991][ T5141] ? __might_fault+0xaa/0x120 [ 207.205700][ T5141] __x64_sys_clone+0x1b7/0x230 [ 207.210501][ T5141] ? __ia32_sys_vfork+0x140/0x140 [ 207.215568][ T5141] ? lock_chain_count+0x20/0x20 [ 207.220449][ T5141] ? lockdep_hardirqs_on+0x98/0x150 [ 207.225686][ T5141] do_syscall_64+0x55/0xb0 [ 207.230142][ T5141] ? clear_bhb_loop+0x40/0x90 [ 207.234844][ T5141] ? clear_bhb_loop+0x40/0x90 [ 207.239549][ T5141] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.245468][ T5141] RIP: 0033:0x7ff8b64f1636 [ 207.249910][ T5141] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 207.269547][ T5141] RSP: 002b:00007fff5e7b2a00 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 207.277995][ T5141] RAX: ffffffffffffffda RBX: 00007fff5e7b2a08 RCX: 00007ff8b64f1636 [ 207.285992][ T5141] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 207.293996][ T5141] RBP: 0000557b26bb8910 R08: 0000000000000000 R09: 0000000000000210 [ 207.301993][ T5141] R10: 00007ff8b6c8db50 R11: 0000000000000246 R12: 00007fff5e7b2dc0 [ 207.309995][ T5141] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.318010][ T5141] [ 207.325797][ T23] CPU: 1 PID: 23 Comm: kworker/1:0 Tainted: G S syzkaller #0 [ 207.334632][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.344739][ T23] Workqueue: events nsim_fib_event_work [ 207.350348][ T23] Call Trace: [ 207.353136][ T5781] Bluetooth: hci1: command tx timeout [ 207.353653][ T23] [ 207.362025][ T23] dump_stack_lvl+0x18c/0x250 [ 207.366850][ T23] ? show_regs_print_info+0x20/0x20 [ 207.372113][ T23] ? load_image+0x420/0x420 [ 207.376689][ T23] ? __might_sleep+0xe0/0xe0 [ 207.381372][ T23] ? __lock_acquire+0x7d80/0x7d80 [ 207.386459][ T23] should_fail_ex+0x394/0x4c0 [ 207.391207][ T23] should_failslab+0x9/0x20 [ 207.395772][ T23] slab_pre_alloc_hook+0x59/0x300 [ 207.400855][ T23] ? __might_sleep+0xe0/0xe0 [ 207.405501][ T23] ? nsim_fib_event_work+0x1249/0x32c0 [ 207.411013][ T23] __kmem_cache_alloc_node+0x53/0x250 [ 207.416463][ T23] ? nsim_fib_event_work+0x1249/0x32c0 [ 207.421974][ T23] kmalloc_trace+0x2a/0xe0 [ 207.426452][ T23] nsim_fib_event_work+0x1249/0x32c0 [ 207.431817][ T23] ? nsim_fib_create+0xb20/0xb20 [ 207.436810][ T23] ? mark_lock+0x94/0x320 [ 207.441215][ T23] ? verify_lock_unused+0x140/0x140 [ 207.446506][ T23] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 207.452547][ T23] ? __lock_acquire+0x7d80/0x7d80 [ 207.457635][ T23] ? _raw_spin_unlock_irq+0x23/0x50 [ 207.462895][ T23] ? process_scheduled_works+0x975/0x1600 [ 207.468681][ T23] ? process_scheduled_works+0x975/0x1600 [ 207.474456][ T23] process_scheduled_works+0xa60/0x1600 [ 207.480093][ T23] ? worker_attach_to_pool+0x370/0x370 [ 207.485624][ T23] ? assign_work+0x3cc/0x5d0 [ 207.490274][ T23] worker_thread+0xa5e/0xfe0 [ 207.494953][ T23] kthread+0x2fa/0x390 [ 207.499153][ T23] ? pr_cont_work+0x550/0x550 [ 207.503894][ T23] ? kthread_blkcg+0xd0/0xd0 [ 207.508533][ T23] ret_from_fork+0x48/0x80 [ 207.513009][ T23] ? kthread_blkcg+0xd0/0xd0 [ 207.517645][ T23] ret_from_fork_asm+0x11/0x20 [ 207.522486][ T23] [ 207.552631][ T5141] udevd[5141]: fork of child failed: Cannot allocate memory [ 207.587626][ T1033] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 207.602466][ T1033] EXT4-fs (loop3): This should not happen!! Data will be lost [ 207.602466][ T1033] [ 207.640404][ T1033] EXT4-fs (loop3): Total free blocks count 0 [ 207.660270][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.269'. [ 207.738736][ T1033] EXT4-fs (loop3): Free/Dirty block details [ 207.744782][ T1033] EXT4-fs (loop3): free_blocks=0 [ 207.760987][ T1033] EXT4-fs (loop3): dirty_blocks=9252 [ 207.766922][ T1033] EXT4-fs (loop3): Block reservation details [ 207.785528][ T6877] tipc: Started in network mode [ 207.802699][ T1033] EXT4-fs (loop3): i_reserved_data_blocks=9252 [ 207.810621][ T6877] tipc: Node identity 76657468115f, cluster identity 4711 [ 207.825155][ T6877] tipc: Enabled bearer , priority 0 [ 207.903952][ T2928] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 209.335492][ T5840] tipc: Node number set to 1731884136 [ 209.435250][ T5793] Bluetooth: hci1: command tx timeout [ 209.508787][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 209.624511][ T6895] netlink: 'syz.1.276': attribute type 1 has an invalid length. [ 209.668158][ T5779] EXT4-fs: 7 callbacks suppressed [ 209.668176][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.707295][ T6895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.741649][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 209.780407][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 209.853011][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 209.880709][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.913611][ T9] usb 1-1: Product: syz [ 209.917869][ T9] usb 1-1: Manufacturer: syz [ 209.925068][ T6897] bond1: (slave gretap1): making interface the new active one [ 209.952667][ T9] usb 1-1: SerialNumber: syz [ 209.975429][ T6893] loop4: detected capacity change from 0 to 40427 [ 209.983295][ T9] usb 1-1: config 0 descriptor?? [ 210.016138][ T6893] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 210.022282][ T6897] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 210.055460][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 210.065190][ T6893] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 210.088579][ T9] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 210.114887][ T6900] warning: `syz.3.268' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 210.136372][ T6893] F2FS-fs (loop4): Found nat_bits in checkpoint [ 210.258829][ T6897] syz.1.276 (6897) used greatest stack depth: 20056 bytes left [ 210.334256][ T6893] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 210.358615][ T6893] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 210.778873][ T9] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 211.279164][ T6911] netlink: 20 bytes leftover after parsing attributes in process `syz.1.278'. [ 211.433678][ T6915] FAULT_INJECTION: forcing a failure. [ 211.433678][ T6915] name failslab, interval 1, probability 100, space 1, times 1 [ 211.439558][ T42] FAULT_INJECTION: forcing a failure. [ 211.439558][ T42] name failslab, interval 1, probability 100, space 1, times 1 [ 211.460164][ T5141] FAULT_INJECTION: forcing a failure. [ 211.460164][ T5141] name failslab, interval 1, probability 100, space 1, times 1 [ 211.472507][ C0] FAULT_INJECTION: forcing a failure. [ 211.472507][ C0] name failslab, interval 1, probability 100, space 1, times 1 [ 211.473417][ C1] FAULT_INJECTION: forcing a failure. [ 211.473417][ C1] name failslab, interval 1, probability 100, space 1, times 1 [ 211.485857][ C0] CPU: 0 PID: 5841 Comm: kworker/0:4 Tainted: G S syzkaller #0 [ 211.507489][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.517574][ C0] Workqueue: events_power_efficient gc_worker [ 211.523712][ C0] Call Trace: [ 211.527018][ C0] [ 211.529892][ C0] dump_stack_lvl+0x18c/0x250 [ 211.534604][ C0] ? show_regs_print_info+0x20/0x20 [ 211.539832][ C0] ? load_image+0x420/0x420 [ 211.544397][ C0] ? verify_lock_unused+0x140/0x140 [ 211.549633][ C0] ? mark_lock+0x94/0x320 [ 211.553999][ C0] should_fail_ex+0x394/0x4c0 [ 211.558710][ C0] should_failslab+0x9/0x20 [ 211.563250][ C0] slab_pre_alloc_hook+0x59/0x300 [ 211.568318][ C0] ? __lock_acquire+0x1262/0x7d80 [ 211.573372][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 211.578607][ C0] ? __alloc_skb+0x103/0x2c0 [ 211.583225][ C0] __alloc_skb+0x103/0x2c0 [ 211.587692][ C0] __netdev_alloc_skb+0x10c/0x500 [ 211.592771][ C0] ? kmalloc_reserve+0x240/0x240 [ 211.597759][ C0] __ieee80211_beacon_get+0xd5d/0x1520 [ 211.603292][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 211.608882][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 211.614382][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 211.621195][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 211.626777][ C0] __iterate_interfaces+0x225/0x4c0 [ 211.632031][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 211.638393][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 211.645645][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 211.651931][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 211.658990][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 211.664217][ C0] ? hw_scan_work+0xf10/0xf10 [ 211.668921][ C0] __hrtimer_run_queues+0x525/0xc10 [ 211.674166][ C0] ? hrtimer_interrupt+0x980/0x980 [ 211.679304][ C0] ? read_tsc+0x9/0x20 [ 211.683411][ C0] hrtimer_run_softirq+0x177/0x290 [ 211.688555][ C0] handle_softirqs+0x27d/0x820 [ 211.693343][ C0] ? read_tsc+0x9/0x20 [ 211.697436][ C0] ? ktime_get+0x24b/0x280 [ 211.701887][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 211.706682][ C0] ? do_softirq+0x1a0/0x1a0 [ 211.711216][ C0] __irq_exit_rcu+0xd3/0x190 [ 211.715840][ C0] ? irq_exit_rcu+0x20/0x20 [ 211.720384][ C0] irq_exit_rcu+0x9/0x20 [ 211.724653][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 211.730317][ C0] [ 211.733273][ C0] [ 211.736231][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 211.742268][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x19a/0x1d0 [ 211.749178][ C0] Code: f8 4d 85 e4 75 16 e8 95 20 c3 f8 eb 15 e8 8e 20 c3 f8 e8 89 94 c8 01 4d 85 e4 74 ea e8 7f 20 c3 f8 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 43 c7 44 3e 08 00 00 00 00 65 48 8b 04 25 [ 211.768814][ C0] RSP: 0018:ffffc90004a3f9a0 EFLAGS: 00000293 [ 211.774924][ C0] RAX: ffffffff88c45101 RBX: 0000000000000000 RCX: ffff888021f45a00 [ 211.782925][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 211.790929][ C0] RBP: ffffc90004a3fa50 R08: ffffffff911eb597 R09: 1ffffffff223d6b2 [ 211.798932][ C0] R10: dffffc0000000000 R11: fffffbfff223d6b3 R12: 0000000000000200 [ 211.806935][ C0] R13: dffffc0000000000 R14: 1ffff92000947f34 R15: dffffc0000000000 [ 211.814944][ C0] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 211.821226][ C0] ? nf_conntrack_hash_check_insert+0x6f0/0x6f0 [ 211.827512][ C0] gc_worker+0x314/0x14a0 [ 211.831882][ C0] ? gc_worker+0x266/0x14a0 [ 211.836417][ C0] ? init_conntrack+0xdb0/0xdb0 [ 211.841296][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 211.846549][ C0] ? process_scheduled_works+0x975/0x1600 [ 211.852312][ C0] ? process_scheduled_works+0x975/0x1600 [ 211.858059][ C0] process_scheduled_works+0xa60/0x1600 [ 211.863659][ C0] ? worker_attach_to_pool+0x370/0x370 [ 211.869156][ C0] ? assign_work+0x3cc/0x5d0 [ 211.873785][ C0] worker_thread+0xa5e/0xfe0 [ 211.878436][ C0] ? _raw_spin_unlock+0x40/0x40 [ 211.883320][ C0] ? __kthread_parkme+0x71/0x1c0 [ 211.888299][ C0] kthread+0x2fa/0x390 [ 211.892393][ C0] ? pr_cont_work+0x550/0x550 [ 211.897103][ C0] ? kthread_blkcg+0xd0/0xd0 [ 211.901725][ C0] ret_from_fork+0x48/0x80 [ 211.906174][ C0] ? kthread_blkcg+0xd0/0xd0 [ 211.910791][ C0] ret_from_fork_asm+0x11/0x20 [ 211.915597][ C0] [ 211.918641][ C1] CPU: 1 PID: 5141 Comm: udevd Tainted: G S syzkaller #0 [ 211.927118][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.937227][ C1] Call Trace: [ 211.940582][ C1] [ 211.943466][ C1] dump_stack_lvl+0x18c/0x250 [ 211.948226][ C1] ? show_regs_print_info+0x20/0x20 [ 211.953478][ C1] ? load_image+0x420/0x420 [ 211.958128][ C1] ? verify_lock_unused+0x140/0x140 [ 211.963374][ C1] ? mark_lock+0x94/0x320 [ 211.967759][ C1] should_fail_ex+0x394/0x4c0 [ 211.972481][ C1] should_failslab+0x9/0x20 [ 211.977046][ C1] slab_pre_alloc_hook+0x59/0x300 [ 211.982140][ C1] ? __lock_acquire+0x1262/0x7d80 [ 211.987228][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 211.992496][ C1] ? __alloc_skb+0x103/0x2c0 [ 211.997152][ C1] __alloc_skb+0x103/0x2c0 [ 212.001631][ C1] __netdev_alloc_skb+0x10c/0x500 [ 212.006714][ C1] ? kmalloc_reserve+0x240/0x240 [ 212.011722][ C1] __ieee80211_beacon_get+0xd5d/0x1520 [ 212.017254][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 212.022889][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 212.028417][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 212.035425][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 212.038060][ T9] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 212.041025][ C1] __iterate_interfaces+0x225/0x4c0 [ 212.041054][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 212.041082][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 212.041106][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 212.041131][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 212.041161][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 212.041183][ C1] ? hw_scan_work+0xf10/0xf10 [ 212.091379][ C1] __hrtimer_run_queues+0x525/0xc10 [ 212.096650][ C1] ? hrtimer_interrupt+0x980/0x980 [ 212.101807][ C1] ? read_tsc+0x9/0x20 [ 212.105923][ C1] hrtimer_run_softirq+0x177/0x290 [ 212.111075][ C1] handle_softirqs+0x27d/0x820 [ 212.115866][ C1] ? read_tsc+0x9/0x20 [ 212.119976][ C1] ? ktime_get+0x24b/0x280 [ 212.124428][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 212.129217][ C1] ? do_softirq+0x1a0/0x1a0 [ 212.133752][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 212.138989][ C1] __irq_exit_rcu+0xd3/0x190 [ 212.143609][ C1] ? irq_exit_rcu+0x20/0x20 [ 212.148146][ C1] irq_exit_rcu+0x9/0x20 [ 212.152419][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 212.158081][ C1] [ 212.161122][ C1] [ 212.164075][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 212.170080][ C1] RIP: 0010:console_flush_all+0x883/0xcf0 [ 212.175834][ C1] Code: ed 01 00 00 e8 5e 7e 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 4f 7e 1b 00 eb 06 e8 48 7e 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 212.195474][ C1] RSP: 0018:ffffc90003047840 EFLAGS: 00000293 [ 212.201574][ C1] RAX: ffffffff816bf338 RBX: ffffc900030479bf RCX: ffff88807c750000 [ 212.209576][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 212.217565][ C1] RBP: ffffc90003047990 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 212.225563][ C1] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: ffffffff8d8ce1e0 [ 212.233557][ C1] R13: 1ffffffff19f96d8 R14: ffffffff8d8ce238 R15: dffffc0000000000 [ 212.241581][ C1] ? console_flush_all+0x878/0xcf0 [ 212.246735][ C1] ? console_flush_all+0x10b/0xcf0 [ 212.251884][ C1] ? is_console_locked+0x20/0x20 [ 212.256857][ C1] ? lock_chain_count+0x20/0x20 [ 212.261736][ C1] ? __lock_acquire+0x1336/0x7d80 [ 212.266788][ C1] ? __down_trylock_console_sem+0xf6/0x1f0 [ 212.272633][ C1] console_unlock+0xad/0x350 [ 212.277250][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 212.282305][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 212.288320][ C1] vprintk_emit+0x497/0x610 [ 212.292863][ C1] ? printk_sprint+0x460/0x460 [ 212.297687][ C1] ? get_random_u8+0x4af/0x980 [ 212.302481][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 212.307712][ C1] ? get_random_u8+0x16c/0x980 [ 212.312527][ C1] ? get_random_u8+0x516/0x980 [ 212.317329][ C1] _printk+0xde/0x130 [ 212.321355][ C1] ? load_image+0x420/0x420 [ 212.325903][ C1] ? __might_sleep+0xe0/0xe0 [ 212.330523][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 212.335582][ C1] should_fail_ex+0x375/0x4c0 [ 212.340295][ C1] should_failslab+0x9/0x20 [ 212.344827][ C1] slab_pre_alloc_hook+0x59/0x300 [ 212.349887][ C1] kmem_cache_alloc+0x5a/0x2c0 [ 212.354715][ C1] ? getname_flags+0xbb/0x500 [ 212.359468][ C1] getname_flags+0xbb/0x500 [ 212.364046][ C1] do_sys_openat2+0xda/0x1d0 [ 212.368687][ C1] ? do_sys_open+0xe0/0xe0 [ 212.373153][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 212.379176][ C1] ? lock_chain_count+0x20/0x20 [ 212.384070][ C1] __x64_sys_openat+0x139/0x160 [ 212.388967][ C1] do_syscall_64+0x55/0xb0 [ 212.393418][ C1] ? clear_bhb_loop+0x40/0x90 [ 212.398134][ C1] ? clear_bhb_loop+0x40/0x90 [ 212.402866][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.408802][ C1] RIP: 0033:0x7ff8b64a7407 [ 212.413249][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 212.433602][ C1] RSP: 002b:00007fff5e7b2bd0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 212.442056][ C1] RAX: ffffffffffffffda RBX: 00007ff8b6c8d880 RCX: 00007ff8b64a7407 [ 212.450069][ C1] RDX: 0000000000080141 RSI: 0000557b0453102e RDI: ffffffffffffff9c [ 212.458074][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 212.466085][ C1] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 212.474093][ C1] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 212.482119][ C1] [ 212.485602][ T42] CPU: 1 PID: 42 Comm: kworker/u4:2 Tainted: G S syzkaller #0 [ 212.494525][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.504646][ T42] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 212.512537][ T42] Call Trace: [ 212.515875][ T42] [ 212.518866][ T42] dump_stack_lvl+0x18c/0x250 [ 212.523620][ T42] ? show_regs_print_info+0x20/0x20 [ 212.528883][ T42] ? load_image+0x420/0x420 [ 212.533451][ T42] ? mark_lock+0x94/0x320 [ 212.537934][ T42] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 212.544022][ T42] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 212.549385][ T42] should_fail_ex+0x394/0x4c0 [ 212.554141][ T42] should_failslab+0x9/0x20 [ 212.558705][ T42] slab_pre_alloc_hook+0x59/0x300 [ 212.563799][ T42] ? __local_bh_enable_ip+0x13a/0x1c0 [ 212.569232][ T42] kmem_cache_alloc+0x5a/0x2c0 [ 212.574146][ T42] ? __netdev_alloc_skb+0x213/0x500 [ 212.579474][ T42] __netdev_alloc_skb+0x213/0x500 [ 212.584562][ T42] ? __netdev_alloc_skb+0x35d/0x500 [ 212.589851][ T42] ? kmalloc_reserve+0x240/0x240 [ 212.594842][ T42] ? do_raw_spin_unlock+0x121/0x230 [ 212.600104][ T42] batadv_iv_ogm_queue_add+0x833/0xdb0 [ 212.605617][ T42] ? __lock_acquire+0x7d80/0x7d80 [ 212.610734][ T42] batadv_iv_ogm_schedule+0x864/0x1080 [ 212.616291][ T42] ? batadv_iv_ogm_schedule+0x43b/0x1080 [ 212.622007][ T42] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 212.629285][ T42] batadv_iv_send_outstanding_bat_ogm_packet+0x6ed/0x800 [ 212.636391][ T42] ? process_scheduled_works+0x975/0x1600 [ 212.642188][ T42] process_scheduled_works+0xa60/0x1600 [ 212.647842][ T42] ? worker_attach_to_pool+0x370/0x370 [ 212.653382][ T42] ? assign_work+0x3cc/0x5d0 [ 212.658040][ T42] worker_thread+0xa5e/0xfe0 [ 212.662719][ T42] kthread+0x2fa/0x390 [ 212.666834][ T42] ? pr_cont_work+0x550/0x550 [ 212.671571][ T42] ? kthread_blkcg+0xd0/0xd0 [ 212.676210][ T42] ret_from_fork+0x48/0x80 [ 212.680688][ T42] ? kthread_blkcg+0xd0/0xd0 [ 212.685326][ T42] ret_from_fork_asm+0x11/0x20 [ 212.690163][ T42] [ 212.898551][ T5141] CPU: 1 PID: 5141 Comm: udevd Tainted: G S syzkaller #0 [ 212.907069][ T5141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.917186][ T5141] Call Trace: [ 212.920510][ T5141] [ 212.923486][ T5141] dump_stack_lvl+0x18c/0x250 [ 212.928219][ T5141] ? show_regs_print_info+0x20/0x20 [ 212.933463][ T5141] ? load_image+0x420/0x420 [ 212.938022][ T5141] ? __might_sleep+0xe0/0xe0 [ 212.942658][ T5141] ? __lock_acquire+0x7d80/0x7d80 [ 212.947732][ T5141] should_fail_ex+0x394/0x4c0 [ 212.952470][ T5141] should_failslab+0x9/0x20 [ 212.957032][ T5141] slab_pre_alloc_hook+0x59/0x300 [ 212.962121][ T5141] kmem_cache_alloc+0x5a/0x2c0 [ 212.966938][ T5141] ? getname_flags+0xbb/0x500 [ 212.971678][ T5141] getname_flags+0xbb/0x500 [ 212.976241][ T5141] do_sys_openat2+0xda/0x1d0 [ 212.980924][ T5141] ? do_sys_open+0xe0/0xe0 [ 212.985393][ T5141] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 212.991423][ T5141] ? lock_chain_count+0x20/0x20 [ 212.996330][ T5141] __x64_sys_openat+0x139/0x160 [ 213.001240][ T5141] do_syscall_64+0x55/0xb0 [ 213.005712][ T5141] ? clear_bhb_loop+0x40/0x90 [ 213.010434][ T5141] ? clear_bhb_loop+0x40/0x90 [ 213.015162][ T5141] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.021105][ T5141] RIP: 0033:0x7ff8b64a7407 [ 213.025561][ T5141] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 213.045224][ T5141] RSP: 002b:00007fff5e7b2bd0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 213.053693][ T5141] RAX: ffffffffffffffda RBX: 00007ff8b6c8d880 RCX: 00007ff8b64a7407 [ 213.061712][ T5141] RDX: 0000000000080141 RSI: 0000557b0453102e RDI: ffffffffffffff9c [ 213.069728][ T5141] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 213.077755][ T5141] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 213.085879][ T5141] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 213.093914][ T5141] [ 213.118623][ T9] em28xx 1-1:0.0: board has no eeprom [ 213.138564][ T6915] CPU: 0 PID: 6915 Comm: syz.3.280 Tainted: G S syzkaller #0 [ 213.147427][ T6915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.157528][ T6915] Call Trace: [ 213.160839][ T6915] [ 213.163799][ T6915] dump_stack_lvl+0x18c/0x250 [ 213.168520][ T6915] ? show_regs_print_info+0x20/0x20 [ 213.173864][ T6915] ? load_image+0x420/0x420 [ 213.178434][ T6915] ? __might_sleep+0xe0/0xe0 [ 213.183078][ T6915] ? __lock_acquire+0x7d80/0x7d80 [ 213.188175][ T6915] should_fail_ex+0x394/0x4c0 [ 213.193187][ T6915] should_failslab+0x9/0x20 [ 213.197754][ T6915] slab_pre_alloc_hook+0x59/0x300 [ 213.202832][ T6915] ? __lock_acquire+0x7d80/0x7d80 [ 213.207912][ T6915] kmem_cache_alloc_node+0x5e/0x310 [ 213.213171][ T6915] ? __alloc_skb+0x103/0x2c0 [ 213.217810][ T6915] __alloc_skb+0x103/0x2c0 [ 213.222271][ T6915] netlink_sendmsg+0x66a/0xbf0 [ 213.227075][ T6915] ? netlink_getsockopt+0x590/0x590 [ 213.232305][ T6915] ? apparmor_socket_sendmsg+0x8e/0x330 [ 213.237878][ T6915] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 213.243205][ T6915] ? security_socket_sendmsg+0x80/0xa0 [ 213.248781][ T6915] ? netlink_getsockopt+0x590/0x590 [ 213.254025][ T6915] ____sys_sendmsg+0x61b/0x980 [ 213.258830][ T6915] ? __asan_memset+0x22/0x40 [ 213.263452][ T6915] ? __sys_sendmsg_sock+0x30/0x30 [ 213.268504][ T6915] ? __import_iovec+0x5f2/0x850 [ 213.273401][ T6915] ? import_iovec+0x73/0xa0 [ 213.277940][ T6915] ___sys_sendmsg+0x2a6/0x360 [ 213.282753][ T6915] ? __sys_sendmsg+0x2b0/0x2b0 [ 213.287586][ T6915] __se_sys_sendmsg+0x1d0/0x2c0 [ 213.292470][ T6915] ? __x64_sys_sendmsg+0x80/0x80 [ 213.297447][ T6915] ? lockdep_hardirqs_on+0x98/0x150 [ 213.302720][ T6915] do_syscall_64+0x55/0xb0 [ 213.307169][ T6915] ? clear_bhb_loop+0x40/0x90 [ 213.311872][ T6915] ? clear_bhb_loop+0x40/0x90 [ 213.316587][ T6915] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.322514][ T6915] RIP: 0033:0x7f5aead9e0d9 [ 213.326964][ T6915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.346598][ T6915] RSP: 002b:00007f5aebd52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.355050][ T6915] RAX: ffffffffffffffda RBX: 00007f5aeb025fa0 RCX: 00007f5aead9e0d9 [ 213.363046][ T6915] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 213.371050][ T6915] RBP: 00007f5aeae35024 R08: 0000000000000000 R09: 0000000000000000 [ 213.379045][ T6915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.387038][ T6915] R13: 00007f5aeb026038 R14: 00007f5aeb025fa0 R15: 00007ffe947461f8 [ 213.395053][ T6915] [ 213.478671][ T5141] udevd[5141]: could not touch /run/udev/queue: Cannot allocate memory [ 214.014041][ T9] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 214.210313][ T9] em28xx 1-1:0.0: dvb set to bulk mode. [ 214.388559][ T9] usb 1-1: USB disconnect, device number 5 [ 214.439951][ T9] em28xx 1-1:0.0: Disconnecting em28xx [ 214.466614][ T56] em28xx 1-1:0.0: Binding DVB extension [ 214.525688][ T56] em28xx 1-1:0.0: Registering input extension [ 214.539678][ T9] em28xx 1-1:0.0: Closing input extension [ 214.606576][ T9] em28xx 1-1:0.0: Freeing device [ 214.809326][ T6917] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 214.879820][ T6935] netlink: 'syz.3.284': attribute type 1 has an invalid length. [ 214.999198][ T6935] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 215.019245][ T6917] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.038535][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 215.046288][ T6917] usb 2-1: config 0 interface 0 has no altsetting 0 [ 215.056154][ T6933] kvm_intel: kvm [6932]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1 [ 215.063550][ T6917] usb 2-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 215.078031][ T6933] kvm_intel: kvm [6932]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 215.090653][ T6933] kvm_intel: kvm [6932]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 215.093795][ T6917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.108380][ T6935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.284'. [ 215.115347][ T6933] kvm_intel: kvm [6932]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 215.116191][ T6933] kvm_intel: kvm [6932]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 215.117129][ T6933] kvm_intel: kvm [6932]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 215.118052][ T6933] kvm_intel: kvm [6932]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 215.124787][ T6933] kvm_intel: kvm [6932]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 215.125717][ T6933] kvm_intel: kvm [6932]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 215.126638][ T6933] kvm_intel: kvm [6932]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 215.221593][ T6917] usb 2-1: config 0 descriptor?? [ 215.341504][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 215.352749][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 215.366702][ T42] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 215.368127][ T6935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.393618][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 215.406689][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.462397][ T9] spcp8x5 1-1:1.0: SPCP8x5 converter detected [ 215.510681][ T9] usb 1-1: SPCP8x5 converter now attached to ttyUSB0 [ 215.558319][ T1033] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 215.703333][ T6917] waltop 0003:172F:0037.0004: ignoring exceeding usage max [ 215.978498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 217.057154][ T6917] waltop 0003:172F:0037.0004: hidraw0: USB HID v0.04 Device [HID 172f:0037] on usb-dummy_hcd.1-1/input0 [ 217.200144][ T6917] usb 1-1: USB disconnect, device number 6 [ 217.273563][ T9] usb 2-1: USB disconnect, device number 6 [ 217.289343][ T6917] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 217.349307][ T6917] spcp8x5 1-1:1.0: device disconnected [ 219.328419][ T6957] FAULT_INJECTION: forcing a failure. [ 219.328419][ T6957] name failslab, interval 1, probability 100, space 1, times 1 [ 219.348573][ T6917] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 219.358078][ T6957] CPU: 1 PID: 6957 Comm: syz.4.292 Tainted: G S syzkaller #0 [ 219.366923][ T6957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.377014][ T6957] Call Trace: [ 219.380307][ T6957] [ 219.383252][ T6957] dump_stack_lvl+0x18c/0x250 [ 219.387948][ T6957] ? show_regs_print_info+0x20/0x20 [ 219.393180][ T6957] ? load_image+0x420/0x420 [ 219.397714][ T6957] ? __might_sleep+0xe0/0xe0 [ 219.402333][ T6957] ? __lock_acquire+0x7d80/0x7d80 [ 219.407377][ T6957] should_fail_ex+0x394/0x4c0 [ 219.412084][ T6957] should_failslab+0x9/0x20 [ 219.416610][ T6957] slab_pre_alloc_hook+0x59/0x300 [ 219.421682][ T6957] ? __lock_acquire+0x7d80/0x7d80 [ 219.426771][ T6957] kmem_cache_alloc_node+0x5e/0x310 [ 219.432019][ T6957] ? __alloc_skb+0x103/0x2c0 [ 219.436662][ T6957] __alloc_skb+0x103/0x2c0 [ 219.441141][ T6957] netlink_sendmsg+0x66a/0xbf0 [ 219.445969][ T6957] ? netlink_getsockopt+0x590/0x590 [ 219.451211][ T6957] ? apparmor_socket_sendmsg+0x8e/0x330 [ 219.456774][ T6957] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 219.462092][ T6957] ? security_socket_sendmsg+0x80/0xa0 [ 219.467591][ T6957] ? netlink_getsockopt+0x590/0x590 [ 219.472805][ T6957] ____sys_sendmsg+0x61b/0x980 [ 219.477591][ T6957] ? __asan_memset+0x22/0x40 [ 219.482202][ T6957] ? __sys_sendmsg_sock+0x30/0x30 [ 219.487252][ T6957] ? __import_iovec+0x5f2/0x850 [ 219.492166][ T6957] ? import_iovec+0x73/0xa0 [ 219.496688][ T6957] ___sys_sendmsg+0x2a6/0x360 [ 219.501426][ T6957] ? __sys_sendmsg+0x2b0/0x2b0 [ 219.506252][ T6957] __se_sys_sendmsg+0x1d0/0x2c0 [ 219.511144][ T6957] ? __x64_sys_sendmsg+0x80/0x80 [ 219.516104][ T6957] ? lockdep_hardirqs_on+0x98/0x150 [ 219.521395][ T6957] do_syscall_64+0x55/0xb0 [ 219.525835][ T6957] ? clear_bhb_loop+0x40/0x90 [ 219.530556][ T6957] ? clear_bhb_loop+0x40/0x90 [ 219.535254][ T6957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.541184][ T6957] RIP: 0033:0x7fbf9439e0d9 [ 219.545633][ T6957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.565257][ T6957] RSP: 002b:00007fbf9523b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.573820][ T6957] RAX: ffffffffffffffda RBX: 00007fbf94625fa0 RCX: 00007fbf9439e0d9 [ 219.581818][ T6957] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 219.589822][ T6957] RBP: 00007fbf94435024 R08: 0000000000000000 R09: 0000000000000000 [ 219.597837][ T6957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.605833][ T6957] R13: 00007fbf94626038 R14: 00007fbf94625fa0 R15: 00007ffc86c51548 [ 219.613861][ T6957] [ 219.640430][ T6917] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.668709][ T6917] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.740153][ T6917] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.749919][ T6917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.758065][ T6917] usb 1-1: Product: syz [ 219.782896][ T6917] usb 1-1: Manufacturer: syz [ 219.787602][ T6917] usb 1-1: SerialNumber: syz [ 220.059946][ T6917] usb 1-1: 0:2 : does not exist [ 220.101233][ T6917] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 221.137903][ T6964] syz.4.294 (6964) used greatest stack depth: 15288 bytes left [ 221.204016][ T6917] usb 1-1: USB disconnect, device number 7 [ 227.057136][ T6994] netlink: 20 bytes leftover after parsing attributes in process `syz.3.301'. [ 227.962042][ T7001] loop1: detected capacity change from 0 to 256 [ 228.045243][ T7001] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 228.153540][ T27] audit: type=1800 audit(1786119014.775:16): pid=7001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.303" name="file1" dev="loop1" ino=1048595 res=0 errno=0 [ 228.232563][ T7003] netlink: 168 bytes leftover after parsing attributes in process `syz.4.304'. [ 228.796872][ T7010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.305'. [ 229.375552][ T7018] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 233.158335][ T7035] loop0: detected capacity change from 0 to 128 [ 235.061207][ T7052] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.486826][ T7058] loop4: detected capacity change from 0 to 512 [ 235.517027][ T7058] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 235.620171][ T7058] EXT4-fs (loop4): 1 truncate cleaned up [ 235.627405][ T7058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.115048][ T6816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.889155][ T7086] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 241.150522][ T7092] netlink: 'syz.0.329': attribute type 1 has an invalid length. [ 241.590407][ T7095] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 241.957971][ T7099] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7099] [ 242.598878][ T7092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.329'. [ 242.696578][ T2928] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 242.731304][ T7092] 8021q: adding VLAN 0 to HW filter on device bond2 [ 243.008527][ T42] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 244.544410][ T7129] capability: warning: `syz.4.342' uses 32-bit capabilities (legacy support in use) [ 245.267520][ T7138] netlink: 'syz.4.344': attribute type 1 has an invalid length. [ 245.377615][ T7138] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 245.432016][ T7138] netlink: 28 bytes leftover after parsing attributes in process `syz.4.344'. [ 245.445988][ T2928] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 245.460428][ T7138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.589712][ T1033] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 247.768824][ T6917] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 247.982406][ T6917] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.011133][ T6917] usb 4-1: config 0 interface 0 has no altsetting 0 [ 248.026127][ T6917] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 248.050053][ T6917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.091847][ T6917] usb 4-1: config 0 descriptor?? [ 248.426460][ T7172] netlink: 168 bytes leftover after parsing attributes in process `syz.1.354'. [ 248.564480][ T6917] waltop 0003:172F:0037.0005: ignoring exceeding usage max [ 248.684452][ T6917] waltop 0003:172F:0037.0005: hidraw0: USB HID v0.04 Device [HID 172f:0037] on usb-dummy_hcd.3-1/input0 [ 248.779694][ T6917] usb 4-1: USB disconnect, device number 6 [ 249.525484][ T7180] fido_id[7180]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 249.826564][ T7188] syzkaller0: entered promiscuous mode [ 249.835337][ T7188] syzkaller0: entered allmulticast mode [ 251.844248][ T5839] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 252.045182][ T5839] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.057424][ T5839] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 252.071333][ T5839] usb 1-1: Dual-Role OTG device on HNP port [ 252.077762][ T5839] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 252.091843][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.110116][ C1] ------------[ cut here ]------------ [ 252.116028][ C1] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 252.123353][ C1] WARNING: CPU: 1 PID: 5141 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x263/0x440 [ 252.133420][ C1] Modules linked in: [ 252.137363][ C1] CPU: 1 PID: 5141 Comm: udevd Tainted: G S syzkaller #0 [ 252.145855][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.155960][ C1] RIP: 0010:usb_ep_enable+0x263/0x440 [ 252.161390][ C1] Code: 49 8b 0e 48 c7 c0 60 c5 7a 8b 49 c7 c0 80 c5 7a 8b 4c 0f 44 c0 48 c7 c7 20 c5 7a 8b 48 c7 c6 be 8d a6 8c 89 ea e8 9d ba 97 fa <0f> 0b e9 e1 fe ff ff e8 e1 ec cd fa 49 bc 00 00 00 00 00 fc ff df [ 252.181039][ C1] RSP: 0000:ffffc900030476d0 EFLAGS: 00010046 [ 252.187155][ C1] RAX: 99ef83f43230ee00 RBX: ffff8880251a80e0 RCX: ffff88807c750000 [ 252.195169][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 252.203188][ C1] RBP: 0000000000000081 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 252.211208][ C1] R10: dffffc0000000000 R11: ffffed10171e518b R12: dffffc0000000000 [ 252.219247][ C1] R13: ffff8880251a810d R14: ffff8880251a80e8 R15: ffff88803024a7ba [ 252.227263][ C1] FS: 00007ff8b6c8d880(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 252.236271][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.242904][ C1] CR2: 00007fe526040700 CR3: 0000000019ed7000 CR4: 00000000003526e0 [ 252.250922][ C1] Call Trace: [ 252.254239][ C1] [ 252.257206][ C1] hidg_set_alt+0x12a/0xa10 [ 252.261778][ C1] ? usb_gadget_set_state+0x12c/0x2a0 [ 252.267208][ C1] set_config+0x735/0xff0 [ 252.271632][ C1] composite_setup+0x1df4/0x33a0 [ 252.276637][ C1] configfs_composite_setup+0xc7/0x100 [ 252.282152][ C1] dummy_timer+0x1324/0x34e0 [ 252.286839][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 252.291919][ C1] ? lock_chain_count+0x20/0x20 [ 252.296848][ C1] ? dummy_free_streams+0x520/0x520 [ 252.302110][ C1] ? dummy_free_streams+0x520/0x520 [ 252.307396][ C1] __hrtimer_run_queues+0x525/0xc10 [ 252.312678][ C1] ? hrtimer_interrupt+0x980/0x980 [ 252.317847][ C1] ? read_tsc+0x9/0x20 [ 252.321993][ C1] hrtimer_run_softirq+0x177/0x290 [ 252.327164][ C1] handle_softirqs+0x27d/0x820 [ 252.331981][ C1] ? read_tsc+0x9/0x20 [ 252.336107][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 252.340929][ C1] ? do_softirq+0x1a0/0x1a0 [ 252.345492][ C1] __irq_exit_rcu+0xd3/0x190 [ 252.350136][ C1] ? irq_exit_rcu+0x20/0x20 [ 252.354702][ C1] irq_exit_rcu+0x9/0x20 [ 252.358993][ C1] sysvec_apic_timer_interrupt+0x56/0xc0 [ 252.364692][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 252.370748][ C1] RIP: 0033:0x7ff8b64baaa5 [ 252.375212][ C1] Code: 0f b7 0c 6a 66 85 c9 0f 84 a8 00 00 00 48 8d 7d 10 48 8b 04 fa a8 0f 0f 85 18 03 00 00 48 89 c6 83 e9 01 48 c1 ee 0c 48 33 30 <48> 89 34 fa 66 89 0c 6a 48 8b 50 f8 48 c7 40 08 00 00 00 00 48 83 [ 252.395015][ C1] RSP: 002b:00007fff5e7b0ac0 EFLAGS: 00000206 [ 252.401144][ C1] RAX: 0000557b26bda040 RBX: 0000000000000030 RCX: 0000000000000006 [ 252.409163][ C1] RDX: 0000557b26bb8010 RSI: 0000557b26be26f0 RDI: 0000000000000012 [ 252.417195][ C1] RBP: 0000000000000002 R08: 0000000000000008 R09: 0000000000000000 [ 252.425230][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: fffffffffffffea0 [ 252.433271][ C1] R13: 0000557b04531827 R14: 0000000000000001 R15: 0000000000000000 [ 252.441327][ C1] [ 252.444402][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 252.451738][ C1] CPU: 1 PID: 5141 Comm: udevd Tainted: G S syzkaller #0 [ 252.460215][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.470325][ C1] Call Trace: [ 252.473655][ C1] [ 252.476638][ C1] dump_stack_lvl+0x18c/0x250 [ 252.481395][ C1] ? show_regs_print_info+0x20/0x20 [ 252.486665][ C1] ? load_image+0x420/0x420 [ 252.491278][ C1] panic+0x2ca/0x720 [ 252.495240][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 252.499836][ C1] __warn+0x2e0/0x470 [ 252.503885][ C1] ? usb_ep_enable+0x263/0x440 [ 252.508807][ C1] ? usb_ep_enable+0x263/0x440 [ 252.513640][ C1] report_bug+0x2be/0x4f0 [ 252.518042][ C1] ? usb_ep_enable+0x263/0x440 [ 252.522882][ C1] ? usb_ep_enable+0x263/0x440 [ 252.527696][ C1] ? usb_ep_enable+0x265/0x440 [ 252.532517][ C1] handle_bug+0xcf/0x120 [ 252.536814][ C1] exc_invalid_op+0x1a/0x50 [ 252.541376][ C1] asm_exc_invalid_op+0x1a/0x20 [ 252.546283][ C1] RIP: 0010:usb_ep_enable+0x263/0x440 [ 252.551714][ C1] Code: 49 8b 0e 48 c7 c0 60 c5 7a 8b 49 c7 c0 80 c5 7a 8b 4c 0f 44 c0 48 c7 c7 20 c5 7a 8b 48 c7 c6 be 8d a6 8c 89 ea e8 9d ba 97 fa <0f> 0b e9 e1 fe ff ff e8 e1 ec cd fa 49 bc 00 00 00 00 00 fc ff df [ 252.571485][ C1] RSP: 0000:ffffc900030476d0 EFLAGS: 00010046 [ 252.577614][ C1] RAX: 99ef83f43230ee00 RBX: ffff8880251a80e0 RCX: ffff88807c750000 [ 252.585644][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 252.593669][ C1] RBP: 0000000000000081 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 252.601695][ C1] R10: dffffc0000000000 R11: ffffed10171e518b R12: dffffc0000000000 [ 252.609721][ C1] R13: ffff8880251a810d R14: ffff8880251a80e8 R15: ffff88803024a7ba [ 252.617790][ C1] hidg_set_alt+0x12a/0xa10 [ 252.622388][ C1] ? usb_gadget_set_state+0x12c/0x2a0 [ 252.627821][ C1] set_config+0x735/0xff0 [ 252.632228][ C1] composite_setup+0x1df4/0x33a0 [ 252.637249][ C1] configfs_composite_setup+0xc7/0x100 [ 252.642770][ C1] dummy_timer+0x1324/0x34e0 [ 252.647452][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 252.652622][ C1] ? lock_chain_count+0x20/0x20 [ 252.657545][ C1] ? dummy_free_streams+0x520/0x520 [ 252.662804][ C1] ? dummy_free_streams+0x520/0x520 [ 252.668059][ C1] __hrtimer_run_queues+0x525/0xc10 [ 252.673339][ C1] ? hrtimer_interrupt+0x980/0x980 [ 252.678513][ C1] ? read_tsc+0x9/0x20 [ 252.682665][ C1] hrtimer_run_softirq+0x177/0x290 [ 252.687850][ C1] handle_softirqs+0x27d/0x820 [ 252.692686][ C1] ? read_tsc+0x9/0x20 [ 252.696808][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 252.701641][ C1] ? do_softirq+0x1a0/0x1a0 [ 252.706214][ C1] __irq_exit_rcu+0xd3/0x190 [ 252.710865][ C1] ? irq_exit_rcu+0x20/0x20 [ 252.715437][ C1] irq_exit_rcu+0x9/0x20 [ 252.719717][ C1] sysvec_apic_timer_interrupt+0x56/0xc0 [ 252.725409][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 252.731438][ C1] RIP: 0033:0x7ff8b64baaa5 [ 252.735912][ C1] Code: 0f b7 0c 6a 66 85 c9 0f 84 a8 00 00 00 48 8d 7d 10 48 8b 04 fa a8 0f 0f 85 18 03 00 00 48 89 c6 83 e9 01 48 c1 ee 0c 48 33 30 <48> 89 34 fa 66 89 0c 6a 48 8b 50 f8 48 c7 40 08 00 00 00 00 48 83 [ 252.755612][ C1] RSP: 002b:00007fff5e7b0ac0 EFLAGS: 00000206 [ 252.761735][ C1] RAX: 0000557b26bda040 RBX: 0000000000000030 RCX: 0000000000000006 [ 252.769752][ C1] RDX: 0000557b26bb8010 RSI: 0000557b26be26f0 RDI: 0000000000000012 [ 252.777772][ C1] RBP: 0000000000000002 R08: 0000000000000008 R09: 0000000000000000 [ 252.785791][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: fffffffffffffea0 [ 252.793817][ C1] R13: 0000557b04531827 R14: 0000000000000001 R15: 0000000000000000 [ 252.801854][ C1] [ 252.805497][ C1] Kernel Offset: disabled [ 252.809949][ C1] Rebooting in 86400 seconds..