last executing test programs: 25.832535216s ago: executing program 3 (id=3390): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000a80)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17) write(r0, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000040)={'nat\x00', 0x0, [0x9, 0xb, 0x81000000, 0x6, 0x5]}, &(0x7f00000000c0)=0x54) 23.509981826s ago: executing program 3 (id=3395): socket(0x40000000015, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0x5, &(0x7f0000000140)={0xa, 0x8a}, 0x0) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x1c5e42, 0xcb) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 22.342629711s ago: executing program 3 (id=3399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x8, 0x4, 0x9, 0x8000, 0x9, 0xffffffffffffffff}) 19.158774376s ago: executing program 3 (id=3407): r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x20004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x88) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x14) socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) 17.254542391s ago: executing program 0 (id=3410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0xc031, 0xffffffffffffffff, 0xd9e7d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) readv(0xffffffffffffffff, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) tkill(0x0, 0x13) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0x39ac, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xf300, 0xffffffff, 0xffffffff, 0xe8e0, 0xffffffff, 0xffffffff]], '\x00', [{0x2, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0x9, 0x8, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0xffc, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x4}) 14.474764273s ago: executing program 4 (id=3416): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x4800, 0x3}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="2000000012005f0214f9f4012100fbe40a000000edff84b5ca8d7c102775", 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880d030000006afd981d8ab4ab119928448f90351aec113335eacf52a18c87738d9679d31ce0108dc556e597655ba11bacc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a340e00000000000000bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141fa4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb67c48b80000000000000006c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff4da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d94633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d4368780082aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f918700000dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd77992f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033b65ccd4e990cb2ba86ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed5146c03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070da245c2c424aebe4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71ce787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe727e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r1, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e0100003801") 13.591122642s ago: executing program 4 (id=3418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x8, 0x4, 0x9, 0x8000, 0x9, 0xffffffffffffffff}) 12.863340429s ago: executing program 1 (id=3419): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240), 0xc30, r2}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) 11.656599103s ago: executing program 0 (id=3420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20084884) socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 9.69473442s ago: executing program 4 (id=3422): socket(0x40000000015, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) prlimit64(0x0, 0x5, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x1c5e42, 0xcb) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 9.683910002s ago: executing program 4 (id=3423): mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0xa7) 9.650846918s ago: executing program 4 (id=3424): r0 = socket(0x29, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, 0x0) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0x5, 0xb}, {0xffe0, 0x3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x0, 0x3c8, 0x9, 0x1, 0x95ce, 0x8}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x0, 0x610, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x60}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 8.710582819s ago: executing program 3 (id=3426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) symlink(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2b, 0x1, 0x1) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) 8.698927231s ago: executing program 1 (id=3427): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x19) socket(0xa, 0x3, 0xff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus/file0\x00', 0x143041, 0x12a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.079904518s ago: executing program 2 (id=3428): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x40000000015, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f00000002c0)=0xc) prlimit64(r2, 0x5, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000640)="240000001e005f02140c00fffffffff80700000001000000000000000500e99c11e85637", 0x24) sendfile(r3, r4, 0x0, 0x64) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x1c5e42, 0xcb) write$P9_RUNLINKAT(r5, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) ftruncate(r0, 0xffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000e80), 0x28902) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000ec0)={{r6}, "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"}) read(0xffffffffffffffff, &(0x7f0000000500), 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0}, 0x94) 6.738723188s ago: executing program 1 (id=3429): fsopen(0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) socket(0xa, 0x3, 0xff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus/file0\x00', 0x143041, 0x12a) r2 = io_uring_setup(0x4dec, &(0x7f0000000000)={0x0, 0x54c4, 0x8, 0x0, 0x2ff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) 6.371879152s ago: executing program 4 (id=3430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0xc031, 0xffffffffffffffff, 0xd9e7d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) readv(0xffffffffffffffff, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0x39ac, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xf300, 0xffffffff, 0xffffffff, 0xe8e0, 0xffffffff, 0xffffffff]], '\x00', [{0x2, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0x9, 0x8, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0xffc, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x4}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) 6.227223731s ago: executing program 3 (id=3431): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='\x02\xc3\xf6\xddM\xd6\x8dwE)\x83\xe1\x1f\x9c\xf5q', 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) read$FUSE(r2, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000600)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5f\x02\x00\x00\x00\x00\x00\x00\x00,r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x01\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8eu\xe1r\xf7s2\x82\xe57&bJ\xef\xd0V\x01i%\x18=E\xa7\x8e#4!3\x8d\xf9\xc1I\xcb0\x16P\x04\xc2TSxSn\xb0\f\xd9\'\xff01t\xbf\x01\x0f\xa9\xe3\a\xd2\xdf\x9f\x7f\xce\x92\x8bG\x15\x06\xcd:\x9c\x19\xc8\xf9\x84\xd7\x8b\"\x87\x05?h\x1d\xf5\v\x1a0\xa8\x85\x06\xed\xccm\xe4\x18\xca94\x8dN\x9d\xe4\xac\xa2s\xf79\xa4\xb4\xe9\xe9', 0x3, 0x8f, 0x0) request_key(0x0, 0x0, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex;De', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmsg(r4, 0x0, 0x40000100) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000007, 0x200000005c832, 0xffffffffffffffff, 0x9dc0d000) socket$nl_route(0x10, 0x3, 0x0) 5.712318815s ago: executing program 2 (id=3432): ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 5.712143605s ago: executing program 2 (id=3433): syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0xfffffffffffffde4, &(0x7f00000002c0)=0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) getdents(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') 4.974198044s ago: executing program 0 (id=3434): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) time(&(0x7f00000000c0)) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, r0, 0xcd2e8000) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x229) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in6=@private2, {0x327, 0x9, 0x0, 0x4, 0x20000000000000, 0x0, 0x1, 0x7}, {0x0, 0x0, 0x2}, {0x8f, 0x0, 0x8}, 0x70bd29, 0x3502, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 4.796043111s ago: executing program 1 (id=3435): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x1ff) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) setreuid(0xee01, 0xee01) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendto$unix(r4, 0x0, 0x0, 0xd1, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.959476052s ago: executing program 0 (id=3436): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2, 0x0, 0x32}, 0x9c) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0xc0) socket(0x10, 0x6, 0x40) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0108000007500500580012800b00010062726964"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0xccd21cca, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) 2.090041798s ago: executing program 1 (id=3437): r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs={0x0, 0x0, 0x20004e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x88) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x14) socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) 2.046805477s ago: executing program 0 (id=3438): socket(0x40000000015, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) prlimit64(0x0, 0x5, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x1c5e42, 0xcb) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 2.042194058s ago: executing program 2 (id=3439): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x19) socket(0xa, 0x3, 0xff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus/file0\x00', 0x143041, 0x12a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.753514396s ago: executing program 0 (id=3440): r0 = socket(0x29, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, 0x0) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0x5, 0xb}, {0xffe0, 0x3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x0, 0x3c8, 0x9, 0x1, 0x95ce, 0x8}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x0, 0x610, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x60}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 978.700923ms ago: executing program 2 (id=3441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x9, 0x80000001, 0x3, 0x4, 0xffff, 0x0, 0x300000}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 964.379705ms ago: executing program 1 (id=3442): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x0) 0s ago: executing program 2 (id=3443): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x40000000015, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f00000002c0)=0xc) prlimit64(r2, 0x5, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000640)="240000001e005f02140c00fffffffff80700000001000000000000000500e99c11e85637", 0x24) sendfile(r3, r4, 0x0, 0x64) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x1c5e42, 0xcb) write$P9_RUNLINKAT(r5, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) ftruncate(r0, 0xffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000e80), 0x28902) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000ec0)={{r6}, "fce642135b3ce2f3f01baf6fc7d7cf8ba70269549cf024f65c131cb2de6389ec2e3cf6f105a2e0af90fc6a8e436d345cf8a1540febe71ef4497317018c303f1b77480c37550f32a2eba7513bb732cd197e729924bf170eb07bf5e8b8a3c22a2dafec97bcea6e963a56046714b1736bd92f8d20fc90ffc5a20d7f002054fa4f94802c918190384e0b4ed2ccd8fcdbd4e1b8458cecdd06990b5e3409c33a26d7f1bc7c3c309d8c8ca8457596f5a3201c0c7bd77a5d0a67309fecbd7a1eb10e43ede0d9c12f1b44c000a9530df69c81aa3f5be46461dba9795180af50871a20282909ad68e851b81f73ce02885818a3afed592927332f511f7815a17466f98d9eb34c69bfc6d401881b5325a0915e2373b2b729efe7843981f78859ec66c71beccdf5e1a25cf7ded1c3b32d38da1041a6301ba8ad3781c880fb93766cb7f6e7d171add21343735f7c9d8e00261b033c456bec16d0252187c769d4adb07369c1c469d18a7c2fafa1527afd286c2b4af89e4afa4acf1d3dd6a52e1cdebb51c75ead2a76a15c0df4b7055f614827716d1ea67390a38a3de0362273d629a3c6126d3da88326601851c9f245f1d12e77c50ac6fa66eea9b8eb8bf65e1f5c3d15787f9fcb97069286ae2d66e2fe1ceb7a8b9baa911bc687670ecb05b470267d7a5fa55526831318fc4da1d20c7873d3511a56cc62f14c308c6013a886429499ae890917fa759b18744090de0c574ff6e6b12a7854e629381004a198cfa2ebf62e6fdb7c6b962a2335f245830ac14d345ef4442c01b8555131a88b98e433ba9ba563ccfd627b37abe966036afb6fbc80a953f07fa3465aff33e9956793f8d7a338044f1241522e2a2b61047ab885841d784a384d6c6c3adf181fd398af8e19db4a8ed4e4cc87f13cd4c01e85352a876dfebefcbba5cbcbb048f413ab4ed2784ab3a2ad391ebc9ddbdf4c12d80d1a27645af8df86bc1b1d4a1f305f7a6e3ada89d13af03775e6feaa942681c64d628670ee89e359ce59b803238674cf7461fe3d3f75da302bbdac48179f5dd754873cff795633860d6b1000f603e6ac304181370e78f14888de2d7dcd18edbbedfbd98a3ccfa51593d2eff822db7030cac9d26da8f4f517592da7595354c5a14223b0e192af1a1ad750fb8cffde6b9603ba11d54e7f1d6d36ae203da2e9c8fe66e7bb12b34813ba568ba36bdb3a857c809ce4237a37f1a4cc0c0621d43472b1bbb89869015b7801c96b4115af65e2fb021171eae5933706424e0e97d6f7f0974bdcc6f3ec8c340400753428bd9c401919ab973f63e6906d6878df0e23a771b13a4ff9944df0e71825348cc3fd66147cadbbcb9acd1bbd495747974cfac182d97796a606d4cad83a32c0b51ce86acbafe32c1dd8384c360ecf70b6c5f8db8cd331bc8970aa5e1b4ec0cf48e9284dc1d0ad7d2a0311e793dc0934cc2951c0f62b9e026ff9fd183fecaf7788e568590f4bdb4938ee02bb6e71ac9a6576a75042532ee7b54cf8449f873220b50e671f5a7a1168a02b413704409eeb69f8d9a0b0780e778d63efa54c805f83dead9db5914e41fb806a9bbc600e30f1a317ab6c1892d4cf93cbd4a4b0458af644162675cd4154a6afc7d8dcd8e398f48e7608f4e8edbc5045cfdf29c038be989f3f3f618fd5ca05786c57b889978038211d8ec1073c88d52c4092536634b4c37712f8b90f04a912f231999c02296a545eb82401e1cc0131d943e506692ab59226b06bce5931679172f194a8aea5c223fc8adc06ef00da6b991c973508dcda9a20feba0b87dba6aa073c125797390b5eaa27353b26cfebd4e184fbf16e50f7277eeb59b13a6566788c4033ed50b5d2ae221c0bea205dad62ba2777e6153dca659d89fc1b20b6b52d25f4c2d374ca45de69ccadc4f6ae014e671a8174be12acaeeb5ffcc04de1b990ae9cdce1edd45f8c00abc68b717f4a1a86bc3941d2f3e01feac6f31c9ce35ca63c3bc0cabb0973314f986bec160f6405874276f2f7af3394808e55748aeba7ce26944ffd97f7e6dfd541290860f6bc86182bb46b73e02223a3fd58143d87d86df9a67884f73240bae54c476b6bcabd417bf38c119ecc94ab690d1d07fce4de721cbfd71d0cac78c329fca75c65a50e2e855e7ec9adaf1af74cba271d1f09ac72aafd0327a37054b9a944a62cbcc22a9f3f542dfa70bd6e9721a88e4ab7d48bb66fafa0b83ac6978e7378addc8bb1fb0d7e600b0b28837587cb0a87d79a038aca3af374aef4e4ad812a956488ef52733e9dd053dd2234998dc8911a6f95a42c2b5178011551c74678d73c1ff3ecebe32889acb41bcd9d4ce7716805d5d64cc882098878a8b27f8d459692163570cbcb11f3357f5f51ee2a283fb7b7c56628770530c87a7b32959a9d8d592f05ec9962353216399b7df67ac58c73f7ba56a1f23cf1b3e81579a3d1c53b4f6a71a611566c38ce4b28ca812885d00bc114acbf706d0954d064f437c02321720205f4b9342442fce89755ca441703695e36312faa869adc1707602ee73c15db7b2e59a8ded9b33d51695b5734cccca2feb53065d41cd0d8f12f24db11cc4f46a96f17b80565f955b509e3ef58bd3fdf47060df3436dff1309bab0eba77212a71177d7746e23e7d1287c8bce7fce80e5a0ec6496fc7a7aaf28ea172d9344b5fecd413f80790db04d6a706548eec56430ee595852636f69bc9905d09f4c6e047d52253383ae83a9816e8de67de42bce93ad36ec25f8f006b508f32a96cd93f5ed7cae736777df1fb23d388ede4386fc8a197ce7a52911d10ef72770dc837a7152fe683aa0bb78f92af4bb085ac3bc8b2e6c065402b893a7f89807313eb3771e3cf7d82311c4f8af7f46c81428cc40b276e68cf09c885bb891f9808e3caa1a592c71be2deeb6c2b24f488ae783528a396df0b8b63215d8802bc1489b9c111918130d6980eea74f105de990fcb8867bda6c4da653f52b2224d173c1b55bb381bae63bacab1c22c8cc7dddb669cbe2f32d39c5318084e71921eaf9cbeddf88291327115dae8e353ccfa8aa98a885c5b4ec44488415ca37e9bd5006a436fcd6623e110d790b545fe1d074c8c288462717798b54ec28bd4ee9761e2f637293ff0fc1331b9d885f6396c159932b28c4239525105d11539f93c95821c78e00d5571bc21b7d0667cbcdb3bd8629c5c4bcc4f5e37628d4b50323c40072d3a73a969f594ea264dcd22014abc82758e9f55b67f32ed5015e009b16f4c12afb795dafc5599ae17cd22653d1ba71f12c76770901368d50e7c7601f2ba7769a64c12eb9498dd9a3df97ca0d9e4ea6cb538bcac422e225da27ba28f05bb0a3e1c2dec7bddca8eddc72426088196d1e0d68c88bfa72b6eb181d6ddc56a3bca4e3843ee45008f8cfa8681ed95f5e9a567254552321ac54cb11dc42c282ab0614c0d8ce74ba5214fa96b35f3d1b2f313f7259e9948eba154185171b6c4ec25ff5d92e78ad30b939be8a022c6197e135ba9f9aba32f2627ff5621f803385dade45e944ab59bc08d894f2529c92ccad4316c2912dd7ee9bbb4cb175d658ca3b376f578bfa65102bc872369b5c586486cd456f00b9251fc26eecfcd95101cb101a61d11b827fc3ee5ce0ab8475c6787a36a7fe628958a135c2e4b35d64785064a2c969189d52fa8472898cb921681c9724d26b556d1cf176d5bc45aa339982a146463ed384c97e3c401e1db24bcbede80a30eaa9d60793fd8e1fd46963dee8e4d2fe178df7053614cce25cd74a5b9219550ced6e6cc137db4265bf611f50ef37dec517bbf0f1353bc567d87b5c3069d2bc64fd50d487fa352d81483c0755683e5402b2330f44471074fc7d32c3378e168edcd29098448f23e67384bc82b149b00220b36a879aba1b75a607bfce0e69c1a986f082ed311e70f51ddc776767cab56a931c67c72aae51d9cc592a802ab8ac0bab371914418c28a453c723c419a74dfdeb75d3734d242e83a2089a62b16461d174f4fd4446a359136d3dbcd7155941d3586f8d625fafbcf8dd61b9c52f46032128f32edd5a16f067e9b2616f248ce09897a5139004bb4bc47721227d53ae2e696d9f28c9e030716b16207bb2e7e2e2a9352b640785cded976f9ca78fb6afa355c32b8d0500076ca11cca243869863990ef70af9c250ac4b4e545562c2cef3eddaa18a385b41318619f8f93a34d8b1a769e26dc189163a3230af48b9d906fd65c616a7abf09b7fefb8d19ea0e1ada4bbb72601175e84c87f38fdba295e10fe3067474088ea9470fe78783498151ba70d6695ebff6a783336b8bd03cb48397fbf4dded05fb56e4c3925fe47497cfec17a2e5dab0c744fac6e72f56f3855bfbdc079c85300565b0a424e5c188cde88b42a7bbb89f56004f7ced06bfda4fa4c39c5795ea9c6451fa6a08a95238128f6a7d7279b4ed93ee85df639e840eb9d3ab592608975f39afc62a38c15172234864c88f3b8921a78ccf8d52169a95412b621989a897b5bca8ba8fd14bcd001fdf1a526cbedcc9e0ff847af62ed6eb8c5401ab0bfb45decb8e9cdf80fa9078f0aece35851c7d9d6c04f054377e51db5e9036964a6148fce3ab8ff1c3f8735769857441d574ef6280f51d83e157656445a1333057a8e0cdd2acc38eedb3f0faf38519eda91e3064fac3e50c77c002e07aeb2376d4d4ba3346f1ddb1b5b4c8d8921dc1ebfda610fd4a436659c01091a7ac26e67bf3747572f45768e13a6bebd8a4ce0cfefdbb070dcac081254a2ba4909737a934c9973da5d074714499ca7d2741195a2d3074fcb2c712a3d43762d4d362cb3c7629aa92c82f201629332ac149276020a8449bdb0bac5dde49cc415cb32487a9363c8338cd684be5e3fb90d372ab9a6c3571f836fa156c65b36c3305922f65e23c7a5fedba23f7f0ec63a88f451018359942b10fd6e287d96157a21c0dcc9fdc37a22444467e9d755b6a57f904c34173e0cb76c54f82b09927615f9f030e1929ca050102f4628762bfa0ab7b9dceccdbc320c8577cf3dd70787432091d27e2c3f697c1c1b5190edc46ab0753a62d06069a14fab0d2c5a99401bba93f656801f41e4d6821d006014162e7dafaa0c28772a2ed5486eb5b41de5b70150d80bab4b1127372c495b711d068adcd7526e151a7809e2756344d54a7ddd06a0632aad9144f0b1e7af808abd636331bd66ba34fe2de5b035b590d2ae7fd58891e46a4233d2844cacbe1705c02032e8eca299bafca50f2f5238eceb7c7d2e9ba6a22176e37c4cb5c959b4c0fd76e5cbf6b18229ae355b62e4d80a8a8d6538ae8b64919bb725ba2da104885a8b11222a815405631676b732b45ecd24d2bc77205ed3b2f255afc89632c82f73d406a732e5fbfe3296b9589e1cae3f4e70258ed769708f1cf77e6bf65a7230a8fbdf17305abfacbf5174813145f2eba096213c4fce3b137649d50fb5df7947e549b58f92f01a9ebdd42c9923ccaa2c5248422b94c3e4041f5b7ca4acd2258971ed0cc0e61100006d3a15a31a3d7be599c1e4729afaef01204c87b54595b9c252a055c919942994f6cc512f61b1bc43b6f059746c5c3839289cbd653d17650b0750b21684362c314b1213be34cd796a2f2824c2ed31e616145e494e8309bf4033ffc609d66e1ac3c719c6838c70e5caeefe30ed03093cee35e100c0048f77da0bfd1097d4b31dea93a64b7f77de5bca664f17d537f5b39c8ff68a4efacf9ae37b8312658457798d69b5accf5bf5e41ee5df0ad9e79c08f25c666e6f5769beddae4d365007cbca7212669ba"}) read(0xffffffffffffffff, &(0x7f0000000500), 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): nsion [ 764.674002][T14027] device hsr_slave_0 left promiscuous mode [ 764.679756][ T9817] em28xx 5-1:0.0: Closing input extension [ 764.706014][ T9817] em28xx 5-1:0.0: Freeing device [ 764.738560][T14027] device hsr_slave_1 left promiscuous mode [ 765.085821][T13964] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 765.114367][T13964] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 765.147685][T13964] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 765.171263][T13964] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 766.705425][ T4228] Bluetooth: hci5: command 0x040f tx timeout [ 767.854274][T13964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.904644][T14067] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2898'. [ 767.955541][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 767.991945][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 768.028848][T13964] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.114024][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 768.149805][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 768.179092][ T509] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.186176][ T509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.214312][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 768.239073][ T7] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 768.519522][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 768.639372][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 768.869664][ T7] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 768.891404][ T26] Bluetooth: hci5: command 0x0419 tx timeout [ 768.906250][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.926979][ T7] usb 4-1: Product: syz [ 768.944058][ T7] usb 4-1: Manufacturer: syz [ 768.954108][ T7] usb 4-1: SerialNumber: syz [ 768.974323][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 769.008242][ T7] usb 4-1: config 0 descriptor?? [ 769.017174][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 769.068817][ T509] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.075960][ T509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.091291][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 770.094723][ T7] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 770.195477][ T7] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 770.230228][ T3048] device hsr_slave_0 left promiscuous mode [ 770.246186][ T3048] device hsr_slave_1 left promiscuous mode [ 770.272777][ T3048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 770.306515][ T3048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 770.353566][ T3048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 770.384777][ T3048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.419455][ T3048] device bridge_slave_1 left promiscuous mode [ 770.440931][ T3048] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.451144][ T3048] device bridge_slave_0 left promiscuous mode [ 770.457353][ T3048] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.474916][ T3048] device veth1_macvtap left promiscuous mode [ 770.481863][ T3048] device veth0_macvtap left promiscuous mode [ 770.487988][ T3048] device veth1_vlan left promiscuous mode [ 770.494902][ T3048] device veth0_vlan left promiscuous mode [ 770.807735][ T3048] bond1 (unregistering): (slave veth3): Releasing active interface [ 770.816229][ T3048] bond1 (unregistering): (slave veth3): the permanent HWaddr of slave - c2:e8:ac:80:e4:a1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 770.848332][ T3048] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 770.861882][ T3048] bond1 (unregistering): Released all slaves [ 770.946325][ T7] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 773.568908][ T7] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 773.597891][ T7] em28xx 4-1:0.0: board has no eeprom [ 774.088807][ T7] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 774.102135][ T7] em28xx 4-1:0.0: dvb set to bulk mode. [ 774.132390][ T2301] em28xx 4-1:0.0: Binding DVB extension [ 774.343737][ T7] usb 4-1: USB disconnect, device number 83 [ 774.354534][ T2301] em28xx 4-1:0.0: Registering input extension [ 774.383455][ T7] em28xx 4-1:0.0: Disconnecting em28xx [ 774.479239][ T7] em28xx 4-1:0.0: Closing input extension [ 774.524837][ T7] em28xx 4-1:0.0: Freeing device [ 774.613917][ T3048] team0 (unregistering): Port device team_slave_1 removed [ 774.628513][ T3048] team0 (unregistering): Port device team_slave_0 removed [ 774.642355][ T3048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.679145][ T3048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.793166][ T3048] bond0 (unregistering): Released all slaves [ 774.832510][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 774.848275][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 774.875522][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 774.912152][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 774.981977][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 775.073358][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 775.093782][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 776.105418][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 776.124484][T13964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 776.168247][T14120] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2911'. [ 776.216717][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 776.310290][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 777.082931][ T25] kauditd_printk_skb: 1073 callbacks suppressed [ 777.082946][ T25] audit: type=1326 audit(1790817228.210:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14146 comm="syz.1.2917" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 777.177676][ T25] audit: type=1326 audit(1790817228.210:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14146 comm="syz.1.2917" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 777.215519][ T25] audit: type=1326 audit(1790817228.250:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14146 comm="syz.1.2917" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 777.253828][ T25] audit: type=1326 audit(1790817228.250:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14146 comm="syz.1.2917" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 777.263298][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 777.286008][ T25] audit: type=1326 audit(1790817228.250:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14146 comm="syz.1.2917" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 777.309035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 777.315994][ T25] audit: type=1326 audit(1790817228.260:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14146 comm="syz.1.2917" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 777.452673][ T25] audit: type=1326 audit(1790817228.260:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14146 comm="syz.1.2917" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 777.485247][ T9817] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 777.497763][T13964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.600493][ T6314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 777.620288][ T6314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 777.628624][ T25] audit: type=1326 audit(1790817228.260:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14146 comm="syz.1.2917" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 777.685943][ T6314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 777.704826][ T6314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 777.710677][ T25] audit: type=1326 audit(1790817228.260:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14146 comm="syz.1.2917" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 777.740525][T13964] device veth0_vlan entered promiscuous mode [ 777.740805][ T25] audit: type=1326 audit(1790817228.260:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14146 comm="syz.1.2917" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 777.756815][ T6314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 777.779072][ T4319] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 777.786387][ T6314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 777.844232][ T9817] usb 1-1: Using ep0 maxpacket: 16 [ 777.955876][T13964] device veth1_vlan entered promiscuous mode [ 777.985111][ T6314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 778.019247][ T4319] usb 2-1: device descriptor read/64, error -71 [ 778.671445][ T6314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 778.829655][ T9817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 778.897159][ T6314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 778.972817][ T6314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 779.107313][ T4319] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 779.843114][ T9817] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 779.869860][ T9817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.898761][ T9817] usb 1-1: Product: syz [ 779.903018][ T9817] usb 1-1: Manufacturer: syz [ 779.907666][ T9817] usb 1-1: SerialNumber: syz [ 779.917220][ T4319] usb 2-1: device descriptor read/64, error -71 [ 779.954264][ T9817] usb 1-1: config 0 descriptor?? [ 779.979053][T13964] device veth0_macvtap entered promiscuous mode [ 780.002075][ T9817] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 780.023229][ T9817] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 780.028995][T13964] device veth1_macvtap entered promiscuous mode [ 780.039036][ T4319] usb usb2-port1: attempt power cycle [ 780.106101][T13964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.147335][T13964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.175967][T13964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.205585][T13964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.219073][ T9817] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 780.235613][T13964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.269405][T13964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.284987][T14179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2923'. [ 780.302611][T13964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 780.313365][T14170] kvm [14169]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x800100000080 [ 780.318975][T14172] loop_set_status: loop8 () has still dirty pages (nrpages=480) [ 780.332010][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 780.355954][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 780.370935][T14170] kvm [14169]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 780.388909][ T9817] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 780.400438][ T9817] em28xx 1-1:0.0: board has no eeprom [ 780.410474][T14170] kvm [14169]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x800000000000 [ 780.421511][T14170] kvm [14169]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 780.432011][T14170] kvm [14169]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x800000000080 [ 780.485202][T13964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.537926][T14168] blk_update_request: I/O error, dev loop8, sector 7712 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 780.558859][ T9817] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 780.575296][ T9817] em28xx 1-1:0.0: dvb set to bulk mode. [ 780.581734][ T21] em28xx 1-1:0.0: Binding DVB extension [ 780.590329][T13964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.602921][ T9817] usb 1-1: USB disconnect, device number 79 [ 780.609315][ T9817] em28xx 1-1:0.0: Disconnecting em28xx [ 780.614888][T13964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.625574][T13964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.636054][T13964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.647362][T13964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.658382][T13964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 780.666027][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 780.739692][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 780.801278][ T21] em28xx 1-1:0.0: Registering input extension [ 780.807461][ T9817] em28xx 1-1:0.0: Closing input extension [ 780.839518][ T9817] em28xx 1-1:0.0: Freeing device [ 780.891555][T13964] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.918107][T13964] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.957912][T13964] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.017938][T13964] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.083874][T14184] syz.3.2924 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 781.094548][T14184] CPU: 1 PID: 14184 Comm: syz.3.2924 Not tainted syzkaller #0 [ 781.102001][T14184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 781.112140][T14184] Call Trace: [ 781.115408][T14184] [ 781.118319][T14184] dump_stack_lvl+0x188/0x250 [ 781.122985][T14184] ? show_regs_print_info+0x20/0x20 [ 781.128191][T14184] ? load_image+0x410/0x410 [ 781.132679][T14184] ? local_lock_release+0x170/0x170 [ 781.137932][T14184] ? __rwlock_init+0x140/0x140 [ 781.142684][T14184] dump_header+0xd9/0x780 [ 781.147029][T14184] oom_kill_process+0x20e/0x3d0 [ 781.151922][T14184] out_of_memory+0xdb2/0x1190 [ 781.156578][T14184] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 781.162194][T14184] ? mutex_lock_io_nested+0x60/0x60 [ 781.167376][T14184] ? unregister_oom_notifier+0x20/0x20 [ 781.172820][T14184] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 781.178371][T14184] ? mem_cgroup_oom_trylock+0x210/0x210 [ 781.183899][T14184] ? do_raw_spin_unlock+0x11d/0x230 [ 781.189086][T14184] try_charge_memcg+0x1075/0x15b0 [ 781.194116][T14184] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 781.199906][T14184] ? __alloc_pages+0x480/0x480 [ 781.204679][T14184] ? rcu_lock_acquire+0x30/0x30 [ 781.209518][T14184] charge_memcg+0x100/0x300 [ 781.214000][T14184] ? __mem_cgroup_charge+0x80/0x80 [ 781.219098][T14184] __mem_cgroup_charge+0x21/0x80 [ 781.224061][T14184] wp_page_copy+0x4cc/0x2090 [ 781.228641][T14184] ? __lock_acquire+0x7b50/0x7b50 [ 781.233656][T14184] ? insert_page_into_pte_locked+0x470/0x470 [ 781.239624][T14184] ? _raw_spin_unlock+0x24/0x40 [ 781.244461][T14184] ? do_wp_page+0x965/0xb30 [ 781.248956][T14184] handle_mm_fault+0x1fbd/0x4440 [ 781.253895][T14184] ? get_page+0xe0/0xe0 [ 781.258034][T14184] ? vmacache_find+0x238/0x590 [ 781.262784][T14184] ? find_vma+0xd2/0x230 [ 781.267015][T14184] do_user_addr_fault+0x494/0xc90 [ 781.272133][T14184] exc_page_fault+0x60/0x100 [ 781.276714][T14184] asm_exc_page_fault+0x22/0x30 [ 781.281544][T14184] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 781.287363][T14184] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 781.306966][T14184] RSP: 0018:ffffc9000305f8f8 EFLAGS: 00050246 [ 781.313018][T14184] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000200000099030 [ 781.320990][T14184] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 00000000ffffffff [ 781.328943][T14184] RBP: ffffc9000305fa90 R08: ffffc9000305f707 R09: 1ffff9200060bee0 [ 781.336895][T14184] R10: dffffc0000000000 R11: fffff5200060bee1 R12: dffffc0000000000 [ 781.344857][T14184] R13: 0000200000099000 R14: 0000000000000000 R15: ffffc9000305fd90 [ 781.352822][T14184] ____sys_recvmsg+0x38d/0x5b0 [ 781.357667][T14184] ? __sys_recvmsg_sock+0x40/0x40 [ 781.362700][T14184] ? import_iovec+0x6f/0xa0 [ 781.367218][T14184] ___sys_recvmsg+0x213/0x5c0 [ 781.371896][T14184] ? __sys_recvmsg+0x280/0x280 [ 781.376652][T14184] ? __lock_acquire+0x7b50/0x7b50 [ 781.381668][T14184] ? __might_fault+0xb3/0x110 [ 781.386328][T14184] do_recvmmsg+0x360/0x7f0 [ 781.390732][T14184] ? __sys_recvmmsg+0x290/0x290 [ 781.395581][T14184] ? __context_tracking_exit+0x4c/0x80 [ 781.401027][T14184] ? __lock_acquire+0x7b50/0x7b50 [ 781.406042][T14184] __x64_sys_recvmmsg+0x195/0x250 [ 781.411069][T14184] ? do_recvmmsg+0x7f0/0x7f0 [ 781.415641][T14184] ? lockdep_hardirqs_on+0x94/0x140 [ 781.420821][T14184] do_syscall_64+0x4c/0xa0 [ 781.425234][T14184] ? clear_bhb_loop+0x30/0x80 [ 781.429893][T14184] ? clear_bhb_loop+0x30/0x80 [ 781.434551][T14184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 781.440423][T14184] RIP: 0033:0x7f728d484159 [ 781.444821][T14184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.464494][T14184] RSP: 002b:00007f728b6bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 781.472895][T14184] RAX: ffffffffffffffda RBX: 00007f728d70c090 RCX: 00007f728d484159 [ 781.480868][T14184] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 781.488829][T14184] RBP: 00007f728d51b06b R08: 0000000000000000 R09: 0000000000000000 [ 781.496796][T14184] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 781.504748][T14184] R13: 00007f728d70c128 R14: 00007f728d70c090 R15: 00007fffe709e488 [ 781.512720][T14184] [ 781.518162][T14184] memory: usage 0kB, limit 0kB, failcnt 19 [ 781.525456][T14184] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 781.532946][T14184] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 781.539794][T14184] Memory cgroup stats for /syz3/test: [ 781.540672][T14184] anon 0 [ 781.540672][T14184] file 0 [ 781.540672][T14184] kernel_stack 0 [ 781.540672][T14184] pagetables 0 [ 781.540672][T14184] percpu 0 [ 781.540672][T14184] sock 0 [ 781.540672][T14184] shmem 0 [ 781.540672][T14184] file_mapped 0 [ 781.540672][T14184] file_dirty 0 [ 781.540672][T14184] file_writeback 0 [ 781.540672][T14184] swapcached 0 [ 781.540672][T14184] anon_thp 0 [ 781.540672][T14184] file_thp 0 [ 781.540672][T14184] shmem_thp 0 [ 781.540672][T14184] inactive_anon 0 [ 781.540672][T14184] active_anon 0 [ 781.540672][T14184] inactive_file 0 [ 781.540672][T14184] active_file 0 [ 781.540672][T14184] unevictable 0 [ 781.540672][T14184] slab_reclaimable 0 [ 781.540672][T14184] slab_unreclaimable 0 [ 781.540672][T14184] slab 0 [ 781.540672][T14184] workingset_refault_anon 0 [ 781.540672][T14184] workingset_refault_file 0 [ 781.540672][T14184] workingset_activate_anon 0 [ 781.540672][T14184] workingset_activate_file 0 [ 781.633809][T14184] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.2924,pid=14182,uid=0 [ 781.652436][T14184] Memory cgroup out of memory: Killed process 14182 (syz.3.2924) total-vm:102508kB, anon-rss:1924kB, file-rss:22016kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 782.019311][T14190] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2926'. [ 782.044699][T14190] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.051882][T14190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.059783][T14190] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.066847][T14190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.198805][ T25] kauditd_printk_skb: 45 callbacks suppressed [ 782.198823][ T25] audit: type=1326 audit(1790817233.260:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14197 comm="syz.0.2930" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 782.251431][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 782.374074][ T25] audit: type=1326 audit(1790817233.260:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14197 comm="syz.0.2930" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 782.485517][ T25] audit: type=1326 audit(1790817233.260:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14197 comm="syz.0.2930" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 782.554255][ T25] audit: type=1326 audit(1790817233.260:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14197 comm="syz.0.2930" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 782.579521][ T21] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 782.587129][ T25] audit: type=1326 audit(1790817233.260:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14197 comm="syz.0.2930" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 782.612878][ T25] audit: type=1326 audit(1790817233.260:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14197 comm="syz.0.2930" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 782.683399][ T25] audit: type=1326 audit(1790817233.260:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14197 comm="syz.0.2930" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 782.744917][ T6314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.777448][ T6314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.812288][ T25] audit: type=1326 audit(1790817233.260:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14197 comm="syz.0.2930" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 782.836903][ T25] audit: type=1326 audit(1790817233.260:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14197 comm="syz.0.2930" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 782.862370][ T6314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 782.871403][ T25] audit: type=1326 audit(1790817233.260:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14197 comm="syz.0.2930" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 783.616033][ T509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.634861][ T509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.760994][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 783.848978][ T21] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 784.659505][ T21] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 784.668552][ T21] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 784.677690][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.978486][ T2301] usb 1-1: USB disconnect, device number 80 [ 793.233298][T14278] netlink: 'syz.1.2949': attribute type 3 has an invalid length. [ 800.052684][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 800.883745][T14362] netlink: 'syz.1.2969': attribute type 3 has an invalid length. [ 803.133365][T14384] overlayfs: overlapping lowerdir path [ 806.048148][T14420] netlink: 'syz.0.2988': attribute type 3 has an invalid length. [ 806.603693][T14428] binder_alloc: 14421: binder_alloc_buf, no vma [ 807.041545][T14433] overlayfs: overlapping lowerdir path [ 807.105392][T14434] overlayfs: overlapping lowerdir path [ 808.593775][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.601948][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.653011][T14432] syz.4.2993 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 808.715325][T14432] CPU: 1 PID: 14432 Comm: syz.4.2993 Not tainted syzkaller #0 [ 808.722853][T14432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 808.732916][T14432] Call Trace: [ 808.736187][T14432] [ 808.739116][T14432] dump_stack_lvl+0x188/0x250 [ 808.743796][T14432] ? show_regs_print_info+0x20/0x20 [ 808.748991][T14432] ? load_image+0x410/0x410 [ 808.753491][T14432] ? local_lock_release+0x170/0x170 [ 808.758688][T14432] ? __rwlock_init+0x140/0x140 [ 808.763464][T14432] dump_header+0xd9/0x780 [ 808.767804][T14432] oom_kill_process+0x20e/0x3d0 [ 808.772667][T14432] out_of_memory+0xdb2/0x1190 [ 808.777348][T14432] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 808.782982][T14432] ? mutex_lock_io_nested+0x60/0x60 [ 808.788189][T14432] ? unregister_oom_notifier+0x20/0x20 [ 808.793659][T14432] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 808.799213][T14432] ? mem_cgroup_oom_trylock+0x210/0x210 [ 808.804762][T14432] ? do_raw_spin_unlock+0x11d/0x230 [ 808.809959][T14432] try_charge_memcg+0x1075/0x15b0 [ 808.814984][T14432] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 808.820770][T14432] ? rcu_lock_acquire+0x30/0x30 [ 808.825609][T14432] obj_cgroup_charge_pages+0x87/0x190 [ 808.830964][T14432] ? __memcg_kmem_charge_page+0x380/0x380 [ 808.836680][T14432] __memcg_kmem_charge_page+0x2fe/0x380 [ 808.842212][T14432] __alloc_pages+0x222/0x480 [ 808.846875][T14432] ? zone_statistics+0x170/0x170 [ 808.851797][T14432] ? alloc_pages+0x452/0x560 [ 808.856370][T14432] pte_alloc_one+0x7b/0x310 [ 808.860853][T14432] ? rcu_lock_release+0x20/0x20 [ 808.865685][T14432] ? verify_lock_unused+0x140/0x140 [ 808.870869][T14432] handle_mm_fault+0x2553/0x4440 [ 808.875793][T14432] ? get_page+0xe0/0xe0 [ 808.879932][T14432] ? vmacache_find+0x52a/0x590 [ 808.884677][T14432] ? find_vma+0xd2/0x230 [ 808.888897][T14432] do_user_addr_fault+0x494/0xc90 [ 808.893907][T14432] exc_page_fault+0x60/0x100 [ 808.898480][T14432] asm_exc_page_fault+0x22/0x30 [ 808.903309][T14432] RIP: 0033:0x7fdab7818980 [ 808.907701][T14432] Code: ff 48 83 e8 01 48 89 de bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 d9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 40 40 00 00 0f 85 1f fe ff ff e9 d3 fd ff ff 0f 1f 44 [ 808.927287][T14432] RSP: 002b:00007fffb878b420 EFLAGS: 00010202 [ 808.933341][T14432] RAX: 000000110c43c000 RBX: ffffffff89ca65bb RCX: 0000000000000007 [ 808.941292][T14432] RDX: 00000000000005bb RSI: 0000000000002996 RDI: 0000000000000080 [ 808.949243][T14432] RBP: 0000000000000000 R08: 00007fdab7bb6000 R09: 00007fdab7bb8000 [ 808.957191][T14432] R10: 0000000089ca65bf R11: 0000000000000006 R12: 00007fdab7bcc038 [ 808.965140][T14432] R13: 0000000000000ab2 R14: ffffffff89ca608c R15: 00007fdab86fb720 [ 808.973092][T14432] ? schedule_timeout+0x8c/0x2d0 [ 808.978012][T14432] ? usleep_range_state+0xab/0x180 [ 808.983104][T14432] [ 809.236620][T14432] memory: usage 0kB, limit 0kB, failcnt 38 [ 809.246985][T14432] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 809.255085][T14432] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 809.269388][T14432] Memory cgroup stats for /syz4/test: [ 809.269564][T14432] anon 0 [ 809.269564][T14432] file 0 [ 809.269564][T14432] kernel_stack 0 [ 809.269564][T14432] pagetables 0 [ 809.269564][T14432] percpu 0 [ 809.269564][T14432] sock 0 [ 809.269564][T14432] shmem 0 [ 809.269564][T14432] file_mapped 0 [ 809.269564][T14432] file_dirty 0 [ 809.269564][T14432] file_writeback 0 [ 809.269564][T14432] swapcached 0 [ 809.269564][T14432] anon_thp 0 [ 809.269564][T14432] file_thp 0 [ 809.269564][T14432] shmem_thp 0 [ 809.269564][T14432] inactive_anon 0 [ 809.269564][T14432] active_anon 0 [ 809.269564][T14432] inactive_file 0 [ 809.269564][T14432] active_file 0 [ 809.269564][T14432] unevictable 0 [ 809.269564][T14432] slab_reclaimable 0 [ 809.269564][T14432] slab_unreclaimable 0 [ 809.269564][T14432] slab 0 [ 809.269564][T14432] workingset_refault_anon 0 [ 809.269564][T14432] workingset_refault_file 0 [ 809.269564][T14432] workingset_activate_anon 0 [ 809.269564][T14432] workingset_activate_file 0 [ 809.434040][T14432] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.2993,pid=14432,uid=0 [ 809.517648][T14432] Memory cgroup out of memory: Killed process 14432 (syz.4.2993) total-vm:102508kB, anon-rss:1392kB, file-rss:22016kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 809.519609][T14449] kvm [14448]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 809.679679][T14449] kvm [14448]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 809.728646][T14449] kvm [14448]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 809.828691][T14449] kvm [14448]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 813.075665][ T2301] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 813.638888][ T2301] Bluetooth: hci5: Injecting HCI hardware error event [ 813.680668][ T4200] Bluetooth: hci5: hardware error 0x00 [ 813.780392][T14495] netlink: 'syz.0.3007': attribute type 3 has an invalid length. [ 813.922681][T14497] loop1: detected capacity change from 0 to 1024 [ 814.701294][T14497] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 814.740803][T14498] udevd[14498]: symlink '../../loop1' '/dev/disk/by-diskseq/72.tmp-b7:1' failed: Read-only file system [ 814.762633][T14497] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 814.782499][T14498] udevd[14498]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 814.797481][T14497] EXT4-fs error (device loop1): ext4_get_journal_inode:5187: inode #5: comm syz.1.3008: unexpected bad inode w/o EXT4_IGET_BAD [ 814.946475][T14497] EXT4-fs (loop1): no journal found [ 814.957511][T14497] EXT4-fs (loop1): can't get journal size [ 814.972943][T14507] syz.4.3010 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 814.997725][T14507] CPU: 0 PID: 14507 Comm: syz.4.3010 Not tainted syzkaller #0 [ 815.005226][T14507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 815.015268][T14507] Call Trace: [ 815.018531][T14507] [ 815.021444][T14507] dump_stack_lvl+0x188/0x250 [ 815.026104][T14507] ? show_regs_print_info+0x20/0x20 [ 815.031276][T14507] ? load_image+0x410/0x410 [ 815.035760][T14507] ? local_lock_release+0x170/0x170 [ 815.040943][T14507] ? __rwlock_init+0x140/0x140 [ 815.045692][T14507] dump_header+0xd9/0x780 [ 815.050011][T14507] oom_kill_process+0x20e/0x3d0 [ 815.054845][T14507] out_of_memory+0xdb2/0x1190 [ 815.059498][T14507] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 815.065113][T14507] ? mutex_lock_io_nested+0x60/0x60 [ 815.070292][T14507] ? unregister_oom_notifier+0x20/0x20 [ 815.075736][T14507] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 815.081264][T14507] ? mem_cgroup_oom_trylock+0x210/0x210 [ 815.086792][T14507] ? do_raw_spin_unlock+0x11d/0x230 [ 815.091970][T14507] try_charge_memcg+0x1075/0x15b0 [ 815.096981][T14507] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 815.102767][T14507] ? __alloc_pages+0x480/0x480 [ 815.107544][T14507] ? rcu_lock_acquire+0x30/0x30 [ 815.112374][T14507] charge_memcg+0x100/0x300 [ 815.116873][T14507] ? __mem_cgroup_charge+0x80/0x80 [ 815.121964][T14507] __mem_cgroup_charge+0x21/0x80 [ 815.126880][T14507] wp_page_copy+0x4cc/0x2090 [ 815.131452][T14507] ? __lock_acquire+0x7b50/0x7b50 [ 815.136459][T14507] ? insert_page_into_pte_locked+0x470/0x470 [ 815.142419][T14507] ? _raw_spin_unlock+0x24/0x40 [ 815.147252][T14507] ? do_wp_page+0x965/0xb30 [ 815.151738][T14507] handle_mm_fault+0x1fbd/0x4440 [ 815.156662][T14507] ? get_page+0xe0/0xe0 [ 815.160802][T14507] ? vmacache_find+0x238/0x590 [ 815.165544][T14507] ? find_vma+0xd2/0x230 [ 815.169762][T14507] do_user_addr_fault+0x494/0xc90 [ 815.174783][T14507] exc_page_fault+0x60/0x100 [ 815.179354][T14507] asm_exc_page_fault+0x22/0x30 [ 815.184184][T14507] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 815.189895][T14507] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 815.209485][T14507] RSP: 0018:ffffc9000329f8f8 EFLAGS: 00050246 [ 815.215538][T14507] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 000020000000d030 [ 815.223488][T14507] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 00000000ffffffff [ 815.231441][T14507] RBP: ffffc9000329fa90 R08: ffffc9000329f707 R09: 1ffff92000653ee0 [ 815.239393][T14507] R10: dffffc0000000000 R11: fffff52000653ee1 R12: dffffc0000000000 [ 815.247343][T14507] R13: 000020000000d000 R14: 0000000000000000 R15: ffffc9000329fd90 [ 815.255319][T14507] ____sys_recvmsg+0x38d/0x5b0 [ 815.260110][T14507] ? __sys_recvmsg_sock+0x40/0x40 [ 815.265146][T14507] ? import_iovec+0x6f/0xa0 [ 815.269635][T14507] ___sys_recvmsg+0x213/0x5c0 [ 815.274298][T14507] ? __sys_recvmsg+0x280/0x280 [ 815.279070][T14507] ? __lock_acquire+0x7b50/0x7b50 [ 815.284092][T14507] ? __might_fault+0x4c/0x110 [ 815.288761][T14507] ? __might_fault+0xb3/0x110 [ 815.293435][T14507] do_recvmmsg+0x360/0x7f0 [ 815.297837][T14507] ? __sys_recvmmsg+0x290/0x290 [ 815.302679][T14507] ? __context_tracking_exit+0x4c/0x80 [ 815.308121][T14507] ? __lock_acquire+0x7b50/0x7b50 [ 815.313135][T14507] __x64_sys_recvmmsg+0x195/0x250 [ 815.318143][T14507] ? do_recvmmsg+0x7f0/0x7f0 [ 815.322717][T14507] ? lockdep_hardirqs_on+0x94/0x140 [ 815.327899][T14507] do_syscall_64+0x4c/0xa0 [ 815.332293][T14507] ? clear_bhb_loop+0x30/0x80 [ 815.336947][T14507] ? clear_bhb_loop+0x30/0x80 [ 815.341613][T14507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 815.347500][T14507] RIP: 0033:0x7fdab7944159 [ 815.351905][T14507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.371506][T14507] RSP: 002b:00007fdab5b7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 815.379902][T14507] RAX: ffffffffffffffda RBX: 00007fdab7bcc090 RCX: 00007fdab7944159 [ 815.387854][T14507] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 815.395803][T14507] RBP: 00007fdab79db06b R08: 0000000000000000 R09: 0000000000000000 [ 815.403768][T14507] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 815.411733][T14507] R13: 00007fdab7bcc128 R14: 00007fdab7bcc090 R15: 00007fffb878b388 [ 815.419707][T14507] [ 815.443338][T14497] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 815.495644][T14513] loop3: detected capacity change from 0 to 64 [ 815.514230][T14498] udevd[14498]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 815.647344][T14513] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop3 [ 815.813878][T14498] udevd[14498]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 816.007770][T14517] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 816.264602][T14498] udevd[14498]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 816.365259][T14519] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3012'. [ 816.414370][T14515] udevd[14515]: symlink '../../loop1' '/dev/disk/by-diskseq/72.tmp-b7:1' failed: Read-only file system [ 816.487639][T14515] udevd[14515]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 816.802690][T14507] memory: usage 0kB, limit 0kB, failcnt 93 [ 816.808715][T14507] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 816.816726][T14507] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 816.888894][T14507] Memory cgroup stats for /syz4/test: [ 816.889075][T14507] anon 0 [ 816.889075][T14507] file 0 [ 816.889075][T14507] kernel_stack 0 [ 816.889075][T14507] pagetables 0 [ 816.889075][T14507] percpu 0 [ 816.889075][T14507] sock 0 [ 816.889075][T14507] shmem 0 [ 816.889075][T14507] file_mapped 0 [ 816.889075][T14507] file_dirty 0 [ 816.889075][T14507] file_writeback 0 [ 816.889075][T14507] swapcached 0 [ 816.889075][T14507] anon_thp 0 [ 816.889075][T14507] file_thp 0 [ 816.889075][T14507] shmem_thp 0 [ 816.889075][T14507] inactive_anon 0 [ 816.889075][T14507] active_anon 0 [ 816.889075][T14507] inactive_file 0 [ 816.889075][T14507] active_file 0 [ 816.889075][T14507] unevictable 0 [ 816.889075][T14507] slab_reclaimable 0 [ 816.889075][T14507] slab_unreclaimable 0 [ 816.889075][T14507] slab 0 [ 816.889075][T14507] workingset_refault_anon 0 [ 816.889075][T14507] workingset_refault_file 0 [ 816.889075][T14507] workingset_activate_anon 0 [ 816.889075][T14507] workingset_activate_file 0 [ 817.037136][T14515] udevd[14515]: symlink '../../loop1' '/dev/disk/by-diskseq/72.tmp-b7:1' failed: Read-only file system [ 817.072057][T14515] udevd[14515]: symlink '../../loop1' '/dev/disk/by-diskseq/72.tmp-b7:1' failed: Read-only file system [ 817.083823][T14539] netlink: 'syz.3.3019': attribute type 3 has an invalid length. [ 817.090900][T14507] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.3010,pid=14504,uid=0 [ 818.116873][T14507] Memory cgroup out of memory: Killed process 14507 (syz.4.3010) total-vm:102508kB, anon-rss:1440kB, file-rss:22660kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 820.430613][T14567] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3026'. [ 821.088371][T14584] netlink: 'syz.4.3031': attribute type 3 has an invalid length. [ 821.089060][ T4229] Bluetooth: hci3: command 0x0406 tx timeout [ 827.123235][T14638] netlink: 'syz.0.3045': attribute type 3 has an invalid length. [ 833.118821][ T9817] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 833.945628][ T9817] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 834.473251][T14701] device syzkaller0 entered promiscuous mode [ 834.479139][ T9817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.657009][ T9817] usb 4-1: config 0 descriptor?? [ 834.980853][ T2301] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 836.239158][ T9817] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 836.302592][ T9817] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 836.358934][ T9817] [drm:udl_init] *ERROR* Selecting channel failed [ 836.362963][T14715] loop0: detected capacity change from 0 to 512 [ 836.371983][ T2301] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 836.387306][ T9817] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 836.406044][ T9817] [drm] Initialized udl on minor 2 [ 836.409252][ T2301] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 836.449004][T14715] EXT4-fs (loop0): Ignoring removed nobh option [ 836.475992][ T9817] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 836.489121][ T9817] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 836.512218][ T9817] usb 4-1: USB disconnect, device number 84 [ 836.540351][ T9183] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 836.564125][ T9183] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 836.566752][ T2301] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 836.573238][ T9183] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 836.615275][T14715] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 836.645979][ T2301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.661956][T14715] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 836.700130][T14701] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 836.734635][T14715] EXT4-fs error (device loop0): ext4_find_dest_de:2117: inode #2: block 3: comm syz.0.3066: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 836.786423][ T25] kauditd_printk_skb: 33 callbacks suppressed [ 836.786438][ T25] audit: type=1326 audit(1790817287.910:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14724 comm="syz.1.3068" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 836.816841][ C1] vkms_vblank_simulate: vblank timer overrun [ 837.019541][ T2301] usb 3-1: USB disconnect, device number 78 [ 837.781868][ T25] audit: type=1326 audit(1790817287.970:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14724 comm="syz.1.3068" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 837.814360][ T25] audit: type=1326 audit(1790817287.970:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14724 comm="syz.1.3068" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 837.841072][ T25] audit: type=1326 audit(1790817287.990:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14724 comm="syz.1.3068" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 837.879276][ T25] audit: type=1326 audit(1790817287.990:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14724 comm="syz.1.3068" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 837.904520][ T25] audit: type=1326 audit(1790817287.990:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14724 comm="syz.1.3068" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 838.010747][T14729] udevd[14729]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 838.049257][ T25] audit: type=1326 audit(1790817287.990:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14724 comm="syz.1.3068" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 838.076396][ T25] audit: type=1326 audit(1790817287.990:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14724 comm="syz.1.3068" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 838.629418][ T25] audit: type=1326 audit(1790817287.990:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14724 comm="syz.1.3068" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 838.654074][ T25] audit: type=1326 audit(1790817287.990:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14724 comm="syz.1.3068" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 842.309343][ T4228] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 843.467986][T14766] kvm [14765]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 843.477747][T14766] kvm [14765]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 843.504164][T14766] kvm [14765]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 845.000113][T14783] loop4: detected capacity change from 0 to 4096 [ 845.008966][ T4228] usb 3-1: unable to read config index 0 descriptor/all [ 845.015935][ T4228] usb 3-1: can't read configurations, error -71 [ 845.465384][T14792] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3086'. [ 845.969589][T14783] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 846.034939][T14783] ntfs3: loop4: Failed to load $MFT. [ 846.078893][ T4231] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 846.319452][T14812] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 847.512120][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.542874][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.566343][ T4231] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 847.586387][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.962372][ T4231] usb 1-1: config 0 descriptor?? [ 848.579800][ T4231] usb 1-1: can't set config #0, error -71 [ 848.618848][ T4231] usb 1-1: USB disconnect, device number 81 [ 850.259318][T14837] syz.1.3099 (14837): drop_caches: 2 [ 850.778701][ T6316] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.887592][ T6316] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.982324][ T6316] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.899964][ T6316] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.036823][T14856] chnl_net:caif_netlink_parms(): no params data found [ 853.093858][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 855.542512][ T6316] tipc: Left network mode [ 855.593545][T14856] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.648851][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 856.343142][T14856] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.360498][T14856] device bridge_slave_0 entered promiscuous mode [ 856.378072][T14856] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.385407][T14856] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.415209][T14856] device bridge_slave_1 entered promiscuous mode [ 856.610750][T14856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.637810][T14856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.820195][T14856] team0: Port device team_slave_0 added [ 857.031550][T14856] team0: Port device team_slave_1 added [ 857.103109][T14856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.117428][T14856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.183769][T14856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.225122][T14856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.243133][T14856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.318116][T14856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.521712][T14856] device hsr_slave_0 entered promiscuous mode [ 857.532714][T14856] device hsr_slave_1 entered promiscuous mode [ 857.555080][T14856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 857.610210][T14856] Cannot create hsr debugfs directory [ 858.772947][T14173] Bluetooth: hci1: command 0x040f tx timeout [ 861.099055][T14972] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[13276] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[14972] [ 861.129869][ T4228] Bluetooth: hci1: command 0x0419 tx timeout [ 862.125911][T14856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 862.294438][ T6316] device hsr_slave_0 left promiscuous mode [ 862.317908][ T6316] device hsr_slave_1 left promiscuous mode [ 863.205503][ T6316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.218854][ T6316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.320561][ T6316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.328018][ T6316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.600761][ T6316] device bridge_slave_1 left promiscuous mode [ 863.608061][ T6316] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.616825][ T6316] device bridge_slave_0 left promiscuous mode [ 863.625385][ T6316] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.646360][ T6316] device veth1_macvtap left promiscuous mode [ 863.652657][ T6316] device veth0_macvtap left promiscuous mode [ 863.659016][ T6316] device veth1_vlan left promiscuous mode [ 863.664868][ T6316] device veth0_vlan left promiscuous mode [ 864.379370][ T6316] team0 (unregistering): Port device team_slave_1 removed [ 864.405193][ T6316] team0 (unregistering): Port device team_slave_0 removed [ 864.433482][ T6316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 864.542424][ T6316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 864.984312][ T6316] bond0 (unregistering): Released all slaves [ 865.031984][T14856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 865.177619][T14856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 865.238492][T14856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 865.248449][ T25] kauditd_printk_skb: 75 callbacks suppressed [ 865.248462][ T25] audit: type=1326 audit(1790817316.380:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.0.3138" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 866.439223][ T25] audit: type=1326 audit(1790817316.380:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.0.3138" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 866.468333][ T25] audit: type=1326 audit(1790817316.460:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.0.3138" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 866.508874][ T4319] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 866.656703][ T25] audit: type=1326 audit(1790817316.460:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.0.3138" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 866.762983][ T25] audit: type=1326 audit(1790817316.460:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.0.3138" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 866.793761][ T25] audit: type=1326 audit(1790817316.460:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.0.3138" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 867.109161][ T4319] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.298935][ T4319] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 867.373886][ T4319] usb 2-1: config 0 interface 0 has no altsetting 0 [ 867.380991][ T4319] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 867.393689][ T4319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.419134][ T4319] usb 2-1: config 0 descriptor?? [ 867.436736][ T25] audit: type=1326 audit(1790817316.460:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.0.3138" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 867.571172][T14856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.646587][ T25] audit: type=1326 audit(1790817316.460:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.0.3138" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 867.676179][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 867.719713][ T25] audit: type=1326 audit(1790817316.460:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.0.3138" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 867.734866][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 867.747882][ T25] audit: type=1326 audit(1790817316.460:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.0.3138" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 867.903723][T14856] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.951054][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 868.015658][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 868.050064][ T3048] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.057188][ T3048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.067243][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 868.076876][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 868.089226][ T3048] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.096299][ T3048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.106180][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 868.174088][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 868.189974][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 868.335805][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 868.349118][ T4319] sony 0003:054C:09CC.001C: Failed to get calibration data from Dualshock 4 [ 868.399381][ T4319] sony 0003:054C:09CC.001C: hidraw0: USB HID vb6.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.1-1/input0 [ 868.422506][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 869.207103][ T4319] sony 0003:054C:09CC.001C: failed to claim input [ 869.258503][ T4319] usb 2-1: USB disconnect, device number 95 [ 869.275749][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 870.375067][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.381418][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.470602][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 870.515906][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 870.631846][T15062] fido_id[15062]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 870.705902][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 870.867283][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 870.897608][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 870.970204][T15079] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 871.626382][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 871.715379][T14856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 871.771079][T15083] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3148'. [ 872.992545][ T25] kauditd_printk_skb: 28 callbacks suppressed [ 872.992559][ T25] audit: type=1326 audit(1790817324.120:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15090 comm="syz.4.3151" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab7944159 code=0x7ffc0000 [ 873.490627][ T25] audit: type=1326 audit(1790817324.120:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15090 comm="syz.4.3151" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab7944159 code=0x7ffc0000 [ 873.876476][ T9817] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 873.922975][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 874.239847][ T9817] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.292177][ T9817] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 874.301399][ T9817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.432114][ T9817] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 874.512149][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 874.755711][T14856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 875.985923][ T9817] usb 5-1: USB disconnect, device number 109 [ 876.621566][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 876.640838][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 877.731210][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 877.751264][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 877.856677][T14856] device veth0_vlan entered promiscuous mode [ 877.873915][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 877.922376][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 878.366955][T14856] device veth1_vlan entered promiscuous mode [ 878.493967][T14856] device veth0_macvtap entered promiscuous mode [ 878.502237][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 878.527419][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 878.683064][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 878.735135][T14856] device veth1_macvtap entered promiscuous mode [ 879.243369][T14856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.313679][ T25] audit: type=1326 audit(1790817330.440:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15180 comm="syz.1.3168" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 879.368908][T14856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.411879][T14856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.433937][ T25] audit: type=1326 audit(1790817330.440:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15180 comm="syz.1.3168" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 879.465399][T14856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.523935][T14856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.580279][ T25] audit: type=1326 audit(1790817330.440:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15180 comm="syz.1.3168" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 879.621898][T14856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.677234][T14856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 879.727601][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 879.751382][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 879.796492][ T25] audit: type=1326 audit(1790817330.440:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15180 comm="syz.1.3168" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 879.845618][T14856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.994707][T14856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.064813][T15197] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 880.751690][T14856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.762362][ T25] audit: type=1326 audit(1790817330.440:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15180 comm="syz.1.3168" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 880.828839][T14856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.907024][T14856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.948248][ T25] audit: type=1326 audit(1790817330.440:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15180 comm="syz.1.3168" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 880.997333][T14856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.081165][ T25] audit: type=1326 audit(1790817330.440:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15180 comm="syz.1.3168" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 881.085800][T14856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 881.167578][ T25] audit: type=1326 audit(1790817330.440:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15180 comm="syz.1.3168" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 881.438152][T14856] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.511283][T14856] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.617106][T14856] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.928796][T14856] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.983970][ T25] audit: type=1326 audit(1790817330.440:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15180 comm="syz.1.3168" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 882.115087][ T25] audit: type=1326 audit(1790817330.440:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15180 comm="syz.1.3168" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ce78d159 code=0x7ffc0000 [ 883.701781][T15201] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.711252][T15201] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.723009][T15201] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.732032][T15201] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.913018][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 883.935879][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 885.302985][T15220] batman_adv: batadv0: Adding interface: syzkaller0 [ 885.313449][T15220] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.339942][T15220] batman_adv: batadv0: Interface activated: syzkaller0 [ 885.366543][ T25] kauditd_printk_skb: 22 callbacks suppressed [ 885.366556][ T25] audit: type=1326 audit(1790817336.490:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15237 comm="syz.0.3179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 885.462903][ T25] audit: type=1326 audit(1790817336.530:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15237 comm="syz.0.3179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 885.510508][T15219] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 885.544493][T15219] batman_adv: batadv0: Removing interface: syzkaller0 [ 885.827241][ T25] audit: type=1326 audit(1790817336.530:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15237 comm="syz.0.3179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 886.117655][ T25] audit: type=1326 audit(1790817336.530:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15237 comm="syz.0.3179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 886.157262][ T6052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.169159][ T26] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 886.179039][ T25] audit: type=1326 audit(1790817336.530:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15237 comm="syz.0.3179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 887.222369][ T6052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.275330][ T25] audit: type=1326 audit(1790817336.530:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15237 comm="syz.0.3179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 887.292948][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 887.305887][T15250] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 887.314681][ T25] audit: type=1326 audit(1790817336.530:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15237 comm="syz.0.3179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 887.438962][T14217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.463953][T14217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.491822][ T25] audit: type=1326 audit(1790817336.530:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15237 comm="syz.0.3179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 887.532899][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 887.571602][ T25] audit: type=1326 audit(1790817336.530:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15237 comm="syz.0.3179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 887.578909][ T26] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.676817][ T25] audit: type=1326 audit(1790817336.530:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15237 comm="syz.0.3179" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8383fb159 code=0x7ffc0000 [ 887.676826][ T26] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 887.676853][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.861736][ T26] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 887.956896][T15256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3101'. [ 889.152899][ T1107] usb 1-1: USB disconnect, device number 82 [ 891.394717][ T6052] tipc: Left network mode [ 893.345924][T15292] chnl_net:caif_netlink_parms(): no params data found [ 893.488924][ T9183] Bluetooth: hci0: command 0x0409 tx timeout [ 893.688931][T15292] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.695989][T15292] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.730336][T15292] device bridge_slave_0 entered promiscuous mode [ 894.906303][T15292] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.844620][ T1107] Bluetooth: hci0: command 0x041b tx timeout [ 895.951231][T15292] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.979282][T15292] device bridge_slave_1 entered promiscuous mode [ 896.444323][ T6052] device hsr_slave_0 left promiscuous mode [ 896.627917][ T6052] device hsr_slave_1 left promiscuous mode [ 898.508917][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 900.272365][ T6052] bond0 (unregistering): Released all slaves [ 901.110400][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 901.430047][T15384] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 901.668409][T15292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.260889][T15292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.441377][ T7] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 903.187200][T15292] team0: Port device team_slave_0 added [ 903.246031][T15292] team0: Port device team_slave_1 added [ 903.264756][T15292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 903.277661][T15292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 903.309588][T15292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 903.322029][T15292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.329452][T15292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 903.433863][T15292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 903.599041][ T7] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 903.621527][T15292] device hsr_slave_0 entered promiscuous mode [ 903.628109][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.656893][T15292] device hsr_slave_1 entered promiscuous mode [ 903.664732][ T7] usb 4-1: config 0 descriptor?? [ 903.710670][ T7] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 903.890807][ T9817] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 904.176606][T15404] o2cb: This node has not been configured. [ 904.182662][T15404] o2cb: Cluster check failed. Fix errors before retrying. [ 904.189974][T15404] (syz.4.3210,15404,1):user_dlm_register:675 ERROR: status = -22 [ 904.197810][T15404] (syz.4.3210,15404,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 904.309318][ T9817] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 904.458413][ T9817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.686402][ T9817] usb 3-1: config 0 descriptor?? [ 904.688853][ T7] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 904.849017][ T7] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 905.060577][ T7] usb 4-1: USB disconnect, device number 85 [ 906.124076][T15292] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 906.828884][ T9817] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 906.843054][ T9817] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 907.011055][T15292] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 907.088899][ T9817] [drm:udl_init] *ERROR* Selecting channel failed [ 907.109431][T15292] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 907.119173][T15292] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 907.186953][T15292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.206744][T15292] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.208826][ T9817] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 907.252515][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 908.319390][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 908.374847][ T9817] [drm] Initialized udl on minor 2 [ 908.379095][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 908.399365][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 908.408950][ T9817] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 908.437841][ T9817] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 908.439227][T14217] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.451471][T14217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.483627][ T9817] usb 3-1: USB disconnect, device number 81 [ 908.520555][ T9183] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 908.539057][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 908.539330][ T9183] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 908.579093][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 908.589102][T14217] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.596164][T14217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.606448][ T9183] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 908.669116][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 908.709734][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 908.741662][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 908.780316][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 908.829032][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 908.865674][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 908.903178][T15292] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 908.960862][T15292] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 909.016907][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 909.029253][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 909.045025][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 909.070433][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 909.131145][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 909.303569][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 909.357453][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 912.098446][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 912.105964][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 912.128653][T15292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 912.264770][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 912.398989][T14950] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 912.713850][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 913.159313][T15292] device veth0_vlan entered promiscuous mode [ 913.169594][T15387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 913.177863][T15387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 913.263345][T15292] device veth1_vlan entered promiscuous mode [ 913.271830][T15387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 913.356390][T15387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 913.396581][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 913.420875][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 913.465132][T15292] device veth0_macvtap entered promiscuous mode [ 913.494506][T15529] netlink: 'syz.3.3239': attribute type 12 has an invalid length. [ 913.510066][T15292] device veth1_macvtap entered promiscuous mode [ 913.885588][T15539] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 914.635467][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 914.644471][ T3048] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 914.662684][T15292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.680414][T14950] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 914.689177][T15292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.699443][T14950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.706903][T15292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.718202][T15292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.735577][T15292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.747098][T15292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.830945][T14950] usb 1-1: config 0 descriptor?? [ 914.835494][T15292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.854181][T15292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.866281][T15292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 914.877654][T15292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.888545][T14950] usb 1-1: can't set config #0, error -71 [ 914.889538][T15292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.899083][T14950] usb 1-1: USB disconnect, device number 83 [ 914.905923][T15292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.928427][T15292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.943499][T15292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.958117][T15292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.973388][T15292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.985184][T15292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.996845][T15292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 915.006708][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 915.021375][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 915.034334][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 915.045441][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 915.062499][T15292] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.071710][T15292] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.080983][T15292] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.090488][T15292] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.346565][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.394534][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.428099][ T6316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.428457][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 915.449773][ T6316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.080119][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 917.274993][T15584] loop1: detected capacity change from 0 to 8192 [ 918.994289][ T4243] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.472444][T15598] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 919.535652][ T4243] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.935414][ T4243] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.171426][ T4243] bond0: (slave netdevsim0): Releasing backup interface [ 921.298847][ T4243] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.666096][T15605] chnl_net:caif_netlink_parms(): no params data found [ 923.608955][T14950] Bluetooth: hci2: command 0x0409 tx timeout [ 923.643878][ T4243] tipc: Left network mode [ 923.727136][T15605] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.845024][T15605] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.883810][T15605] device bridge_slave_0 entered promiscuous mode [ 923.940945][T15605] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.988687][T15605] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.040178][T15605] device bridge_slave_1 entered promiscuous mode [ 924.213553][T15605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.306925][T15605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.452947][T15605] team0: Port device team_slave_0 added [ 924.554142][T15605] team0: Port device team_slave_1 added [ 924.818842][ T4319] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 925.210535][T15605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.217504][T15605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.393767][T15605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.482760][T15605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.517438][T15605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.649001][ T2301] Bluetooth: hci2: command 0x041b tx timeout [ 925.769202][ T4319] usb 2-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 927.208822][T15605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.252227][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 927.301805][ T4319] usb 2-1: Product: syz [ 927.306005][ T4319] usb 2-1: Manufacturer: syz [ 927.507893][T15605] device hsr_slave_0 entered promiscuous mode [ 927.547362][ T4319] usb 2-1: USB disconnect, device number 96 [ 928.260975][ T2301] Bluetooth: hci2: command 0x040f tx timeout [ 928.481071][T15605] device hsr_slave_1 entered promiscuous mode [ 928.508262][T15605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 928.539640][T15605] Cannot create hsr debugfs directory [ 928.798931][ T1107] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 929.121471][T15702] loop2: detected capacity change from 0 to 4096 [ 929.252769][ T1107] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 929.307151][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.410352][ T1107] usb 4-1: config 0 descriptor?? [ 929.456642][T15702] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,i_version,lazytime,stripe=0x0000000000000008,minixdf,norecovery,,errors=continue. Quota mode: writeback. [ 929.690437][ T4243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 929.725603][ T4243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.770038][ T4243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 929.802409][ T4243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 930.014697][ T4243] device bridge_slave_1 left promiscuous mode [ 930.197336][ T4243] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.232211][ T4243] device bridge_slave_0 left promiscuous mode [ 930.289008][ T4319] Bluetooth: hci2: command 0x0419 tx timeout [ 930.987912][T15718] loop1: detected capacity change from 0 to 32768 [ 931.011756][ T4243] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.097654][T15278] udevd[15278]: symlink '../../loop1' '/dev/disk/by-diskseq/83.tmp-b7:1' failed: Read-only file system [ 931.111791][T15278] udevd[15278]: symlink '../../loop1' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:1' failed: Read-only file system [ 931.138011][T15718] XFS (loop1): Mounting V5 Filesystem [ 931.192637][T15278] udevd[15278]: symlink '../../loop1' '/dev/disk/by-diskseq/83.tmp-b7:1' failed: Read-only file system [ 931.204508][T15278] udevd[15278]: symlink '../../loop1' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:1' failed: Read-only file system [ 931.332315][T15718] XFS (loop1): Ending clean mount [ 931.346235][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.353235][ T1107] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 931.364973][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.392306][T15718] XFS (loop1): Quotacheck needed: Please wait. [ 931.404874][ T1107] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 931.439006][ T1107] [drm:udl_init] *ERROR* Selecting channel failed [ 931.457591][ T1107] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 931.465212][ T1107] [drm] Initialized udl on minor 2 [ 931.498919][ T1107] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 931.507545][ T1107] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 931.541633][ T1107] usb 4-1: USB disconnect, device number 86 [ 931.569722][ T4319] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 931.596620][ T4319] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 931.644837][ T4319] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 931.764793][T15718] XFS (loop1): Quotacheck: Done. [ 932.561459][T15292] XFS (loop1): Unmounting Filesystem [ 933.650421][ T4243] device veth1_macvtap left promiscuous mode [ 933.656507][ T4243] device veth0_macvtap left promiscuous mode [ 933.680088][ T4243] device veth1_vlan left promiscuous mode [ 933.685914][ T4243] device veth0_vlan left promiscuous mode [ 934.141760][T15774] binder: 15766:15774 ioctl c0306201 0 returned -14 [ 934.766607][ T4243] team0 (unregistering): Port device team_slave_1 removed [ 934.853562][ T4243] team0 (unregistering): Port device team_slave_0 removed [ 934.976109][ T4243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 935.077615][ T4243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 935.580806][ T4243] bond0 (unregistering): Released all slaves [ 938.549012][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 940.592990][ T13] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 940.878837][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 941.019715][ T13] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 941.258383][ T13] usb 3-1: config 0 has no interface number 0 [ 941.303006][ T13] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.371428][ T13] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.419507][ T13] usb 3-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 941.485216][ T13] usb 3-1: config 0 interface 1 has no altsetting 0 [ 941.513731][ T13] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 941.544520][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.582003][ T13] usb 3-1: config 0 descriptor?? [ 941.680877][ T13] usbhid 3-1:0.1: fixing wrong optional hid class descriptors count [ 942.183059][T15843] hub 8-0:1.0: USB hub found [ 942.188865][T15843] hub 8-0:1.0: 1 port detected [ 942.711696][ T13] elan 0003:04F3:074D.001D: failed to start in urb: -90 [ 942.835166][T15605] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 942.894149][T15605] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 942.946268][T15605] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 943.019213][T15605] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 943.158962][ T13] elan 0003:04F3:074D.001D: Get report error for parm 6: -71 [ 943.183807][ T13] elan 0003:04F3:074D.001D: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.2-1/input1 [ 943.235638][ T13] elan 0003:04F3:074D.001D: Input device is not registered [ 943.271332][ T13] elan: probe of 0003:04F3:074D.001D failed with error -119 [ 943.328595][ T13] usb 3-1: USB disconnect, device number 82 [ 943.328653][T15605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.431336][T15605] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.480173][ T6053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 943.496045][ T6053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 943.505524][T15858] fido_id[15858]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 943.544428][ T6053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 943.582540][ T6053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 943.632852][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.639983][ T6053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.879274][ T6053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 943.888072][ T6053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 944.619855][ T6053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 944.655624][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.662753][ T6053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 945.504103][ T6053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 945.513016][ T6053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 945.535954][ T6053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 945.547414][ T6053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 945.557479][ T6053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 945.571363][ T6053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 945.579955][ T6053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 945.588361][ T6053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 945.596739][ T6053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 945.606401][ T6053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 945.616899][T15605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 945.626173][ T6053] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 947.651988][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 947.666398][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 947.703379][T15605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 951.186167][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 951.227793][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 951.317110][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 951.361956][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 951.428014][T15605] device veth0_vlan entered promiscuous mode [ 951.453013][ T6053] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 951.502481][ T6053] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 951.533848][T15605] device veth1_vlan entered promiscuous mode [ 951.805523][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 951.846347][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 951.863486][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 951.877781][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 951.893019][T15605] device veth0_macvtap entered promiscuous mode [ 951.953635][T15605] device veth1_macvtap entered promiscuous mode [ 952.099796][T15605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.194155][T15605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.303147][T15605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.377016][T15605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.388312][T15605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.398982][T15605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.415182][T15605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.441127][T15605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.554585][T15605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 952.563718][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 952.574169][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 952.583293][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 952.609432][ T6052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 953.411922][T15605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.434216][T15605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.444472][T15605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.545254][T15605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.638827][T15605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 954.678893][T15605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.720363][T15605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 954.762447][T15605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.816336][T15605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 954.964461][ T6053] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 954.981896][ T6053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 955.024958][T15605] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.087472][T15605] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.096696][T15605] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.108400][T15605] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.778001][ T6316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.798882][ T6316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.046124][ T6259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.061861][ T6259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.064359][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 957.117487][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 968.083061][T16100] loop4: detected capacity change from 0 to 128 [ 968.740598][T16102] udevd[16102]: symlink '../../loop4' '/dev/disk/by-diskseq/86.tmp-b7:4' failed: Read-only file system [ 968.791510][T16102] udevd[16102]: symlink '../../loop4' '/dev/disk/by-label/SYZKALLER.tmp-b7:4' failed: Read-only file system [ 968.804204][T16102] udevd[16102]: symlink '../../loop4' '/dev/disk/by-uuid/1DD9-F30B.tmp-b7:4' failed: Read-only file system [ 968.847505][T16102] udevd[16102]: symlink '../../loop4' '/dev/disk/by-diskseq/86.tmp-b7:4' failed: Read-only file system [ 969.039932][T16102] udevd[16102]: symlink '../../loop4' '/dev/disk/by-label/SYZKALLER.tmp-b7:4' failed: Read-only file system [ 969.065691][T16106] loop1: detected capacity change from 0 to 32768 [ 969.604266][T16102] udevd[16102]: symlink '../../loop4' '/dev/disk/by-uuid/1DD9-F30B.tmp-b7:4' failed: Read-only file system [ 969.780074][T16106] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3353 (16106) [ 969.897275][T16102] udevd[16102]: symlink '../../loop4' '/dev/disk/by-diskseq/86.tmp-b7:4' failed: Read-only file system [ 969.910510][T16102] udevd[16102]: symlink '../../loop4' '/dev/disk/by-label/SYZKALLER.tmp-b7:4' failed: Read-only file system [ 969.982438][T16102] udevd[16102]: symlink '../../loop4' '/dev/disk/by-uuid/1DD9-F30B.tmp-b7:4' failed: Read-only file system [ 970.008445][T16106] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 970.018229][T16106] BTRFS info (device loop1): force clearing of disk cache [ 970.025512][T16106] BTRFS info (device loop1): enabling auto defrag [ 970.032014][T16106] BTRFS info (device loop1): max_inline at 0 [ 970.037997][T16106] BTRFS info (device loop1): enabling disk space caching [ 970.045127][T16106] BTRFS info (device loop1): disk space caching is enabled [ 970.052368][T16106] BTRFS info (device loop1): has skinny extents [ 970.190994][T16114] udevd[16114]: symlink '../../loop4' '/dev/disk/by-diskseq/86.tmp-b7:4' failed: Read-only file system [ 970.220454][T16125] o2cb: This node has not been configured. [ 970.226348][T16125] o2cb: Cluster check failed. Fix errors before retrying. [ 970.233690][T16125] (syz.3.3354,16125,0):user_dlm_register:675 ERROR: status = -22 [ 970.241495][T16125] (syz.3.3354,16125,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 971.119942][T16106] BTRFS info (device loop1): enabling ssd optimizations [ 971.133364][T16106] BTRFS info (device loop1): clearing free space tree [ 971.141638][T16106] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 971.152179][T16106] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 972.335655][T16143] kvm [16141]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 972.424514][T16143] kvm [16141]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 972.809092][T16109] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (16109) [ 976.487470][T15753] Bluetooth: hci1: command 0x0406 tx timeout [ 980.210046][T16226] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 980.974300][T16230] loop0: detected capacity change from 0 to 128 [ 981.258116][T16230] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 981.381780][T16230] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 981.791398][T16230] EXT4-fs (loop0): shut down requested (2) [ 981.797990][T16230] fscrypt (loop0, inode 12): Error -5 getting encryption context [ 982.080745][T16240] syz.4.3379 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 982.125235][T16240] CPU: 1 PID: 16240 Comm: syz.4.3379 Not tainted syzkaller #0 [ 982.132768][T16240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 982.142842][T16240] Call Trace: [ 982.146134][T16240] [ 982.149066][T16240] dump_stack_lvl+0x188/0x250 [ 982.153736][T16240] ? show_regs_print_info+0x20/0x20 [ 982.158920][T16240] ? load_image+0x410/0x410 [ 982.163409][T16240] ? local_lock_release+0x170/0x170 [ 982.168587][T16240] ? __rwlock_init+0x140/0x140 [ 982.173331][T16240] dump_header+0xd9/0x780 [ 982.177643][T16240] oom_kill_process+0x20e/0x3d0 [ 982.182494][T16240] out_of_memory+0xdb2/0x1190 [ 982.187157][T16240] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 982.192776][T16240] ? mutex_lock_io_nested+0x60/0x60 [ 982.197957][T16240] ? unregister_oom_notifier+0x20/0x20 [ 982.203405][T16240] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 982.208949][T16240] ? mem_cgroup_oom_trylock+0x210/0x210 [ 982.214475][T16240] ? do_raw_spin_unlock+0x11d/0x230 [ 982.219653][T16240] try_charge_memcg+0x1075/0x15b0 [ 982.224677][T16240] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 982.230472][T16240] ? __alloc_pages+0x480/0x480 [ 982.235244][T16240] ? rcu_lock_acquire+0x30/0x30 [ 982.240076][T16240] charge_memcg+0x100/0x300 [ 982.244560][T16240] ? __mem_cgroup_charge+0x80/0x80 [ 982.249652][T16240] __mem_cgroup_charge+0x21/0x80 [ 982.254573][T16240] wp_page_copy+0x4cc/0x2090 [ 982.259412][T16240] ? __lock_acquire+0x7b50/0x7b50 [ 982.264444][T16240] ? insert_page_into_pte_locked+0x470/0x470 [ 982.270412][T16240] ? _raw_spin_unlock+0x24/0x40 [ 982.275241][T16240] ? do_wp_page+0x965/0xb30 [ 982.279753][T16240] handle_mm_fault+0x1fbd/0x4440 [ 982.284684][T16240] ? get_page+0xe0/0xe0 [ 982.288823][T16240] ? vmacache_find+0x238/0x590 [ 982.293566][T16240] ? find_vma+0xd2/0x230 [ 982.297784][T16240] do_user_addr_fault+0x494/0xc90 [ 982.302798][T16240] exc_page_fault+0x60/0x100 [ 982.307372][T16240] asm_exc_page_fault+0x22/0x30 [ 982.312202][T16240] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 982.317900][T16240] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 982.337495][T16240] RSP: 0018:ffffc900051078f8 EFLAGS: 00050246 [ 982.343572][T16240] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 000020000000b030 [ 982.351552][T16240] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 00000000ffffffff [ 982.359529][T16240] RBP: ffffc90005107a90 R08: ffffc90005107707 R09: 1ffff92000a20ee0 [ 982.367510][T16240] R10: dffffc0000000000 R11: fffff52000a20ee1 R12: dffffc0000000000 [ 982.375487][T16240] R13: 000020000000b000 R14: 0000000000000000 R15: ffffc90005107d90 [ 982.383511][T16240] ____sys_recvmsg+0x38d/0x5b0 [ 982.388307][T16240] ? __sys_recvmsg_sock+0x40/0x40 [ 982.393362][T16240] ? import_iovec+0x6f/0xa0 [ 982.397878][T16240] ___sys_recvmsg+0x213/0x5c0 [ 982.402569][T16240] ? __sys_recvmsg+0x280/0x280 [ 982.407366][T16240] ? __lock_acquire+0x7b50/0x7b50 [ 982.412416][T16240] ? __might_fault+0xb3/0x110 [ 982.417105][T16240] do_recvmmsg+0x360/0x7f0 [ 982.421536][T16240] ? __sys_recvmmsg+0x290/0x290 [ 982.426415][T16240] ? __context_tracking_exit+0x4c/0x80 [ 982.431894][T16240] ? __lock_acquire+0x7b50/0x7b50 [ 982.436940][T16240] __x64_sys_recvmmsg+0x195/0x250 [ 982.441988][T16240] ? do_recvmmsg+0x7f0/0x7f0 [ 982.446599][T16240] ? lockdep_hardirqs_on+0x94/0x140 [ 982.451785][T16240] do_syscall_64+0x4c/0xa0 [ 982.456185][T16240] ? clear_bhb_loop+0x30/0x80 [ 982.460870][T16240] ? clear_bhb_loop+0x30/0x80 [ 982.465635][T16240] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 982.471529][T16240] RIP: 0033:0x7f6a235c9159 [ 982.475931][T16240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 982.495526][T16240] RSP: 002b:00007f6a21800028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 982.503948][T16240] RAX: ffffffffffffffda RBX: 00007f6a23851090 RCX: 00007f6a235c9159 [ 982.511914][T16240] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 982.519870][T16240] RBP: 00007f6a2366006b R08: 0000000000000000 R09: 0000000000000000 [ 982.527823][T16240] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 982.535788][T16240] R13: 00007f6a23851128 R14: 00007f6a23851090 R15: 00007fff6a7757f8 [ 982.543768][T16240] [ 984.752584][T16265] loop0: detected capacity change from 0 to 16 [ 984.827590][T16265] erofs: (device loop0): mounted with root inode @ nid 36. [ 986.038882][T16240] memory: usage 0kB, limit 0kB, failcnt 182 [ 986.045857][T16240] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 986.058819][T16240] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 986.145861][T16240] Memory cgroup stats for /syz4/test: [ 986.190369][T16240] anon 0 [ 986.190369][T16240] file 0 [ 986.190369][T16240] kernel_stack 0 [ 986.190369][T16240] pagetables 0 [ 986.190369][T16240] percpu 0 [ 986.190369][T16240] sock 0 [ 986.190369][T16240] shmem 0 [ 986.190369][T16240] file_mapped 0 [ 986.190369][T16240] file_dirty 0 [ 986.190369][T16240] file_writeback 0 [ 986.190369][T16240] swapcached 0 [ 986.190369][T16240] anon_thp 0 [ 986.190369][T16240] file_thp 0 [ 986.190369][T16240] shmem_thp 0 [ 986.190369][T16240] inactive_anon 0 [ 986.190369][T16240] active_anon 0 [ 986.190369][T16240] inactive_file 0 [ 986.190369][T16240] active_file 0 [ 986.190369][T16240] unevictable 0 [ 986.190369][T16240] slab_reclaimable 0 [ 986.190369][T16240] slab_unreclaimable 0 [ 986.190369][T16240] slab 0 [ 986.190369][T16240] workingset_refault_anon 0 [ 986.190369][T16240] workingset_refault_file 0 [ 986.190369][T16240] workingset_activate_anon 0 [ 986.190369][T16240] workingset_activate_file 0 [ 986.295807][T16277] o2cb: This node has not been configured. [ 986.301983][T16277] o2cb: Cluster check failed. Fix errors before retrying. [ 986.309295][T16277] (syz.0.3387,16277,1):user_dlm_register:675 ERROR: status = -22 [ 986.317022][T16277] (syz.0.3387,16277,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 986.738883][T16240] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.3379,pid=16236,uid=0 [ 986.818960][T16240] Memory cgroup out of memory: Killed process 16240 (syz.4.3379) total-vm:102508kB, anon-rss:1448kB, file-rss:22640kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 987.083589][T16282] netlink: 'syz.3.3384': attribute type 3 has an invalid length. [ 988.880158][T16291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3391'. [ 988.910210][T16289] FAULT_INJECTION: forcing a failure. [ 988.910210][T16289] name failslab, interval 1, probability 0, space 0, times 0 [ 988.983454][T16289] CPU: 1 PID: 16289 Comm: syz.3.3390 Not tainted syzkaller #0 [ 988.990945][T16289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 989.000980][T16289] Call Trace: [ 989.004247][T16289] [ 989.007162][T16289] dump_stack_lvl+0x188/0x250 [ 989.011824][T16289] ? show_regs_print_info+0x20/0x20 [ 989.017002][T16289] ? load_image+0x410/0x410 [ 989.021508][T16289] ? __might_sleep+0xf0/0xf0 [ 989.026078][T16289] ? __lock_acquire+0x7b50/0x7b50 [ 989.031087][T16289] should_fail+0x383/0x4b0 [ 989.035506][T16289] should_failslab+0x5/0x20 [ 989.039991][T16289] slab_pre_alloc_hook+0x51/0xc0 [ 989.044917][T16289] kmem_cache_alloc_trace+0x47/0x290 [ 989.050187][T16289] ? nf_nat_register_fn+0x29b/0x530 [ 989.055488][T16289] nf_nat_register_fn+0x29b/0x530 [ 989.060499][T16289] iptable_nat_table_init+0xd0/0x2d0 [ 989.065830][T16289] xt_find_table_lock+0x220/0x360 [ 989.070900][T16289] xt_request_find_table_lock+0x22/0x100 [ 989.076539][T16289] do_ipt_get_ctl+0x6e2/0x1110 [ 989.081301][T16289] ? do_ipt_set_ctl+0xd70/0xd70 [ 989.086155][T16289] ? nf_getsockopt+0x21b/0x280 [ 989.090961][T16289] ? __lock_acquire+0x7b50/0x7b50 [ 989.095988][T16289] ? __mutex_lock_common+0x435/0x2400 [ 989.101350][T16289] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 989.106963][T16289] ? mutex_unlock+0x10/0x10 [ 989.111442][T16289] ? __might_fault+0xb7/0x110 [ 989.116099][T16289] ? __lock_acquire+0x7b50/0x7b50 [ 989.121107][T16289] ? __local_bh_enable_ip+0x136/0x1c0 [ 989.126461][T16289] nf_getsockopt+0x25e/0x280 [ 989.131032][T16289] ip_getsockopt+0x1219/0x1660 [ 989.135846][T16289] ? ip_setsockopt+0x31e0/0x31e0 [ 989.140762][T16289] ? __might_sleep+0xf0/0xf0 [ 989.145338][T16289] ? rcu_lock_release+0x9/0x20 [ 989.150081][T16289] ? __lock_acquire+0x7b50/0x7b50 [ 989.155085][T16289] ? aa_sk_perm+0x7dc/0x910 [ 989.159570][T16289] ? aa_af_perm+0x340/0x340 [ 989.164050][T16289] ? __fget_files+0x402/0x470 [ 989.168703][T16289] ? aa_sock_opt_perm+0x74/0x100 [ 989.173627][T16289] ? sctp_getsockopt+0x9e/0x8a0 [ 989.178531][T16289] ? sock_recv_errqueue+0x580/0x580 [ 989.183734][T16289] __sys_getsockopt+0x1b0/0x230 [ 989.188567][T16289] __x64_sys_getsockopt+0xb1/0xc0 [ 989.193570][T16289] do_syscall_64+0x4c/0xa0 [ 989.197965][T16289] ? clear_bhb_loop+0x30/0x80 [ 989.202629][T16289] ? clear_bhb_loop+0x30/0x80 [ 989.207295][T16289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 989.213170][T16289] RIP: 0033:0x7fd216c99159 [ 989.217566][T16289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.237153][T16289] RSP: 002b:00007fd214ef1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 989.245559][T16289] RAX: ffffffffffffffda RBX: 00007fd216f20fa0 RCX: 00007fd216c99159 [ 989.253512][T16289] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 989.261459][T16289] RBP: 00007fd216d3006b R08: 00002000000000c0 R09: 0000000000000000 [ 989.269410][T16289] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 989.277369][T16289] R13: 00007fd216f21038 R14: 00007fd216f20fa0 R15: 00007ffe839eb068 [ 989.285323][T16289] [ 991.735523][T16324] SET target dimension over the limit! [ 991.809409][T16327] syz.3.3399 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 991.901848][T16327] CPU: 1 PID: 16327 Comm: syz.3.3399 Not tainted syzkaller #0 [ 991.909345][T16327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 991.919395][T16327] Call Trace: [ 991.922664][T16327] [ 991.925580][T16327] dump_stack_lvl+0x188/0x250 [ 991.930249][T16327] ? show_regs_print_info+0x20/0x20 [ 991.935431][T16327] ? load_image+0x410/0x410 [ 991.939921][T16327] ? local_lock_release+0x170/0x170 [ 991.945112][T16327] ? __rwlock_init+0x140/0x140 [ 991.949863][T16327] dump_header+0xd9/0x780 [ 991.954180][T16327] oom_kill_process+0x20e/0x3d0 [ 991.959019][T16327] out_of_memory+0xdb2/0x1190 [ 991.963681][T16327] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 991.969301][T16327] ? mutex_lock_io_nested+0x60/0x60 [ 991.974490][T16327] ? unregister_oom_notifier+0x20/0x20 [ 991.979942][T16327] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 991.985478][T16327] ? mem_cgroup_oom_trylock+0x210/0x210 [ 991.991018][T16327] ? do_raw_spin_unlock+0x11d/0x230 [ 991.996204][T16327] try_charge_memcg+0x1075/0x15b0 [ 992.001228][T16327] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 992.007020][T16327] ? __alloc_pages+0x480/0x480 [ 992.011782][T16327] ? rcu_lock_acquire+0x30/0x30 [ 992.016623][T16327] charge_memcg+0x100/0x300 [ 992.021115][T16327] ? __mem_cgroup_charge+0x80/0x80 [ 992.026224][T16327] __mem_cgroup_charge+0x21/0x80 [ 992.031147][T16327] wp_page_copy+0x4cc/0x2090 [ 992.035728][T16327] ? __lock_acquire+0x7b50/0x7b50 [ 992.040757][T16327] ? insert_page_into_pte_locked+0x470/0x470 [ 992.046733][T16327] ? _raw_spin_unlock+0x24/0x40 [ 992.051567][T16327] ? do_wp_page+0x965/0xb30 [ 992.056060][T16327] handle_mm_fault+0x1fbd/0x4440 [ 992.060995][T16327] ? get_page+0xe0/0xe0 [ 992.065142][T16327] ? vmacache_find+0x238/0x590 [ 992.069891][T16327] ? find_vma+0xd2/0x230 [ 992.074118][T16327] do_user_addr_fault+0x494/0xc90 [ 992.079137][T16327] exc_page_fault+0x60/0x100 [ 992.083719][T16327] asm_exc_page_fault+0x22/0x30 [ 992.088557][T16327] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 992.094263][T16327] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 992.113852][T16327] RSP: 0018:ffffc900032cf8f8 EFLAGS: 00050246 [ 992.119907][T16327] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000200000009030 [ 992.127863][T16327] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 00000000ffffffff [ 992.135821][T16327] RBP: ffffc900032cfa90 R08: ffffc900032cf707 R09: 1ffff92000659ee0 [ 992.143777][T16327] R10: dffffc0000000000 R11: fffff52000659ee1 R12: dffffc0000000000 [ 992.151733][T16327] R13: 0000200000009000 R14: 0000000000000000 R15: ffffc900032cfd90 [ 992.159712][T16327] ____sys_recvmsg+0x38d/0x5b0 [ 992.164479][T16327] ? __sys_recvmsg_sock+0x40/0x40 [ 992.169499][T16327] ? import_iovec+0x6f/0xa0 [ 992.173992][T16327] ___sys_recvmsg+0x213/0x5c0 [ 992.178659][T16327] ? __sys_recvmsg+0x280/0x280 [ 992.183423][T16327] ? __lock_acquire+0x7b50/0x7b50 [ 992.188440][T16327] ? __might_fault+0xb3/0x110 [ 992.193103][T16327] do_recvmmsg+0x360/0x7f0 [ 992.197511][T16327] ? __sys_recvmmsg+0x290/0x290 [ 992.202364][T16327] ? __context_tracking_exit+0x4c/0x80 [ 992.207829][T16327] ? __lock_acquire+0x7b50/0x7b50 [ 992.212863][T16327] __x64_sys_recvmmsg+0x195/0x250 [ 992.217887][T16327] ? do_recvmmsg+0x7f0/0x7f0 [ 992.222473][T16327] ? lockdep_hardirqs_on+0x94/0x140 [ 992.227662][T16327] do_syscall_64+0x4c/0xa0 [ 992.232065][T16327] ? clear_bhb_loop+0x30/0x80 [ 992.236728][T16327] ? clear_bhb_loop+0x30/0x80 [ 992.241389][T16327] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 992.247265][T16327] RIP: 0033:0x7fd216c99159 [ 992.251666][T16327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.271256][T16327] RSP: 002b:00007fd214ed0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 992.279655][T16327] RAX: ffffffffffffffda RBX: 00007fd216f21090 RCX: 00007fd216c99159 [ 992.287613][T16327] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 992.295570][T16327] RBP: 00007fd216d3006b R08: 0000000000000000 R09: 0000000000000000 [ 992.303529][T16327] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 992.311483][T16327] R13: 00007fd216f21128 R14: 00007fd216f21090 R15: 00007ffe839eb068 [ 992.319451][T16327] [ 992.418879][T16327] memory: usage 0kB, limit 0kB, failcnt 74 [ 992.425271][T16327] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 992.446060][T16332] netlink: 'syz.2.3401': attribute type 3 has an invalid length. [ 992.488843][T16327] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 992.526490][T16327] Memory cgroup stats for /syz3/test: [ 992.527090][T16327] anon 0 [ 992.527090][T16327] file 0 [ 992.527090][T16327] kernel_stack 0 [ 992.527090][T16327] pagetables 0 [ 992.527090][T16327] percpu 0 [ 992.527090][T16327] sock 0 [ 992.527090][T16327] shmem 0 [ 992.527090][T16327] file_mapped 0 [ 992.527090][T16327] file_dirty 0 [ 992.527090][T16327] file_writeback 0 [ 992.527090][T16327] swapcached 0 [ 992.527090][T16327] anon_thp 0 [ 992.527090][T16327] file_thp 0 [ 992.527090][T16327] shmem_thp 0 [ 992.527090][T16327] inactive_anon 0 [ 992.527090][T16327] active_anon 0 [ 992.527090][T16327] inactive_file 0 [ 992.527090][T16327] active_file 0 [ 992.527090][T16327] unevictable 0 [ 992.527090][T16327] slab_reclaimable 0 [ 992.527090][T16327] slab_unreclaimable 0 [ 992.527090][T16327] slab 0 [ 992.527090][T16327] workingset_refault_anon 0 [ 992.527090][T16327] workingset_refault_file 0 [ 992.527090][T16327] workingset_activate_anon 0 [ 992.527090][T16327] workingset_activate_file 0 [ 993.339151][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.348042][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.514935][T16327] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.3399,pid=16317,uid=0 [ 993.531770][T16327] Memory cgroup out of memory: Killed process 16317 (syz.3.3399) total-vm:102508kB, anon-rss:1404kB, file-rss:21996kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 997.154297][T16375] netlink: 'syz.2.3413': attribute type 3 has an invalid length. [ 1000.085011][T16386] device-mapper: ioctl: Unable to rename non-existent device, to uuid .2\´£«.j—DH [ 1000.452103][T16396] syz.4.3418 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1000.517574][T16396] CPU: 0 PID: 16396 Comm: syz.4.3418 Not tainted syzkaller #0 [ 1000.525066][T16396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1000.535112][T16396] Call Trace: [ 1000.538376][T16396] [ 1000.541288][T16396] dump_stack_lvl+0x188/0x250 [ 1000.545948][T16396] ? show_regs_print_info+0x20/0x20 [ 1000.551129][T16396] ? load_image+0x410/0x410 [ 1000.555613][T16396] ? local_lock_release+0x170/0x170 [ 1000.560789][T16396] ? __rwlock_init+0x140/0x140 [ 1000.565553][T16396] dump_header+0xd9/0x780 [ 1000.569878][T16396] oom_kill_process+0x20e/0x3d0 [ 1000.574717][T16396] out_of_memory+0xdb2/0x1190 [ 1000.579382][T16396] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 1000.585014][T16396] ? mutex_lock_io_nested+0x60/0x60 [ 1000.590201][T16396] ? unregister_oom_notifier+0x20/0x20 [ 1000.595649][T16396] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 1000.601195][T16396] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1000.606739][T16396] ? do_raw_spin_unlock+0x11d/0x230 [ 1000.611920][T16396] try_charge_memcg+0x1075/0x15b0 [ 1000.616930][T16396] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 1000.622716][T16396] ? __alloc_pages+0x480/0x480 [ 1000.627469][T16396] ? rcu_lock_acquire+0x30/0x30 [ 1000.632305][T16396] charge_memcg+0x100/0x300 [ 1000.636788][T16396] ? __mem_cgroup_charge+0x80/0x80 [ 1000.641882][T16396] __mem_cgroup_charge+0x21/0x80 [ 1000.646803][T16396] wp_page_copy+0x4cc/0x2090 [ 1000.651376][T16396] ? __lock_acquire+0x7b50/0x7b50 [ 1000.656381][T16396] ? insert_page_into_pte_locked+0x470/0x470 [ 1000.662345][T16396] ? _raw_spin_unlock+0x24/0x40 [ 1000.667179][T16396] ? do_wp_page+0x965/0xb30 [ 1000.671665][T16396] handle_mm_fault+0x1fbd/0x4440 [ 1000.676588][T16396] ? get_page+0xe0/0xe0 [ 1000.680731][T16396] ? vmacache_find+0x238/0x590 [ 1000.685474][T16396] ? find_vma+0xd2/0x230 [ 1000.689697][T16396] do_user_addr_fault+0x494/0xc90 [ 1000.694729][T16396] exc_page_fault+0x60/0x100 [ 1000.699304][T16396] asm_exc_page_fault+0x22/0x30 [ 1000.704131][T16396] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 1000.709829][T16396] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 1000.729412][T16396] RSP: 0018:ffffc900044578f8 EFLAGS: 00050246 [ 1000.735458][T16396] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000200000006030 [ 1000.743408][T16396] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 00000000ffffffff [ 1000.751443][T16396] RBP: ffffc90004457a90 R08: ffffc90004457707 R09: 1ffff9200088aee0 [ 1000.759399][T16396] R10: dffffc0000000000 R11: fffff5200088aee1 R12: dffffc0000000000 [ 1000.767351][T16396] R13: 0000200000006000 R14: 0000000000000000 R15: ffffc90004457d90 [ 1000.775312][T16396] ____sys_recvmsg+0x38d/0x5b0 [ 1000.780067][T16396] ? __sys_recvmsg_sock+0x40/0x40 [ 1000.785076][T16396] ? import_iovec+0x6f/0xa0 [ 1000.789556][T16396] ___sys_recvmsg+0x213/0x5c0 [ 1000.794240][T16396] ? __sys_recvmsg+0x280/0x280 [ 1000.798996][T16396] ? __lock_acquire+0x7b50/0x7b50 [ 1000.804003][T16396] ? __might_fault+0xb3/0x110 [ 1000.808659][T16396] do_recvmmsg+0x360/0x7f0 [ 1000.813088][T16396] ? __sys_recvmmsg+0x290/0x290 [ 1000.817928][T16396] ? __context_tracking_exit+0x4c/0x80 [ 1000.823369][T16396] ? __lock_acquire+0x7b50/0x7b50 [ 1000.828380][T16396] __x64_sys_recvmmsg+0x195/0x250 [ 1000.833387][T16396] ? do_recvmmsg+0x7f0/0x7f0 [ 1000.837958][T16396] ? lockdep_hardirqs_on+0x94/0x140 [ 1000.843153][T16396] do_syscall_64+0x4c/0xa0 [ 1000.847548][T16396] ? clear_bhb_loop+0x30/0x80 [ 1000.852205][T16396] ? clear_bhb_loop+0x30/0x80 [ 1000.856859][T16396] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1000.862735][T16396] RIP: 0033:0x7f6a235c9159 [ 1000.867130][T16396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1000.886713][T16396] RSP: 002b:00007f6a21800028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1000.895107][T16396] RAX: ffffffffffffffda RBX: 00007f6a23851090 RCX: 00007f6a235c9159 [ 1000.903059][T16396] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1000.911028][T16396] RBP: 00007f6a2366006b R08: 0000000000000000 R09: 0000000000000000 [ 1000.918978][T16396] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1000.926929][T16396] R13: 00007f6a23851128 R14: 00007f6a23851090 R15: 00007fff6a7757f8 [ 1000.934897][T16396] [ 1003.800919][T16396] memory: usage 0kB, limit 0kB, failcnt 254 [ 1003.806993][T16396] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1003.815392][T16396] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1003.828804][T16396] Memory cgroup stats for /syz4/test: [ 1003.829035][T16396] anon 0 [ 1003.829035][T16396] file 0 [ 1003.829035][T16396] kernel_stack 0 [ 1003.829035][T16396] pagetables 0 [ 1003.829035][T16396] percpu 0 [ 1003.829035][T16396] sock 0 [ 1003.829035][T16396] shmem 0 [ 1003.829035][T16396] file_mapped 0 [ 1003.829035][T16396] file_dirty 0 [ 1003.829035][T16396] file_writeback 0 [ 1003.829035][T16396] swapcached 0 [ 1003.829035][T16396] anon_thp 0 [ 1003.829035][T16396] file_thp 0 [ 1003.829035][T16396] shmem_thp 0 [ 1003.829035][T16396] inactive_anon 0 [ 1003.829035][T16396] active_anon 0 [ 1003.829035][T16396] inactive_file 0 [ 1003.829035][T16396] active_file 0 [ 1003.829035][T16396] unevictable 0 [ 1003.829035][T16396] slab_reclaimable 0 [ 1003.829035][T16396] slab_unreclaimable 0 [ 1003.829035][T16396] slab 0 [ 1003.829035][T16396] workingset_refault_anon 0 [ 1003.829035][T16396] workingset_refault_file 0 [ 1003.829035][T16396] workingset_activate_anon 0 [ 1003.829035][T16396] workingset_activate_file 0 [ 1003.948808][T16396] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.3418,pid=16391,uid=0 [ 1003.969698][T16396] Memory cgroup out of memory: Killed process 16396 (syz.4.3418) total-vm:102508kB, anon-rss:1448kB, file-rss:22640kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1005.118855][ T4228] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1005.378073][T16428] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1005.559507][ T4228] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1005.583160][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.735947][ T4228] usb 5-1: config 0 descriptor?? [ 1007.569700][ T4228] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1007.612327][ T4228] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1007.739403][ T4228] [drm:udl_init] *ERROR* Selecting channel failed [ 1007.920625][ T4228] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 1007.940444][ T4228] [drm] Initialized udl on minor 2 [ 1010.720248][ T4228] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1010.736901][ T4228] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1010.899181][ T4231] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1011.206643][ T4228] usb 5-1: USB disconnect, device number 110 [ 1011.218624][ T4231] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 1011.246352][ T4231] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1011.281672][T16468] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3436'. [ 1012.698231][T16479] o2cb: This node has not been configured. [ 1012.704127][T16479] o2cb: Cluster check failed. Fix errors before retrying. [ 1012.711275][T16479] (syz.1.3437,16479,1):user_dlm_register:675 ERROR: status = -22 [ 1012.719021][T16479] (syz.1.3437,16479,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 1013.792879][ T4189] ------------[ cut here ]------------ [ 1013.799440][ T4189] WARNING: CPU: 0 PID: 4189 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x24f/0x450 [ 1013.810865][ T4189] Modules linked in: [ 1013.814993][ T4189] CPU: 0 PID: 4189 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1013.823981][ T4189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1013.834262][ T4189] Workqueue: hci0 hci_conn_timeout [ 1013.839467][ T4189] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 1013.845651][ T4189] Code: 8b 8d e8 64 be dd f8 48 8b 35 15 95 aa 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 46 5c 6d f8 e8 81 8a 98 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 1013.865671][ T4189] RSP: 0018:ffffc90002f2fc08 EFLAGS: 00010293 [ 1013.872063][ T4189] RAX: ffffffff88e08a1f RBX: ffff88807b24a138 RCX: ffff8880797dd940 [ 1013.880158][ T4189] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 1013.888343][ T4189] RBP: 00000000ffffffff R08: ffff88807b24a013 R09: 1ffff1100f649402 [ 1013.895504][ T4228] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1013.896437][ T4189] R10: dffffc0000000000 R11: ffffed100f649403 R12: ffff88801ee69008 [ 1013.912935][ T4189] R13: dffffc0000000000 R14: ffff88807b24a000 R15: ffff88807b24a010 [ 1013.921922][ T4189] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 1013.930981][ T4189] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1013.938020][ T4189] CR2: 00007f0bd9fe34ff CR3: 0000000029ecf000 CR4: 00000000003506f0 [ 1013.946075][ T4189] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1013.954315][ T4189] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1013.962374][ T4189] Call Trace: [ 1013.965802][ T4189] [ 1013.968887][ T4189] process_one_work+0x867/0xff0 [ 1013.973986][ T4189] ? worker_detach_from_pool+0x240/0x240 [ 1013.979693][ T4189] ? lockdep_hardirqs_off+0x70/0x100 [ 1013.985187][ T4189] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1013.990310][ T4189] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1013.996792][ T4189] ? wq_worker_running+0x97/0x170 [ 1014.002347][ T4189] worker_thread+0xad7/0x12a0 [ 1014.007144][ T4189] kthread+0x42e/0x520 [ 1014.011374][ T4189] ? rcu_lock_release+0x20/0x20 [ 1014.016326][ T4189] ? kthread_blkcg+0xd0/0xd0 [ 1014.021000][ T4189] ret_from_fork+0x1f/0x30 [ 1014.025597][ T4189] [ 1014.028622][ T4189] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1014.035876][ T4189] CPU: 0 PID: 4189 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1014.043395][ T4189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1014.053435][ T4189] Workqueue: hci0 hci_conn_timeout [ 1014.058541][ T4189] Call Trace: [ 1014.061804][ T4189] [ 1014.064720][ T4189] dump_stack_lvl+0x188/0x250 [ 1014.069383][ T4189] ? show_regs_print_info+0x20/0x20 [ 1014.074559][ T4189] ? load_image+0x410/0x410 [ 1014.079049][ T4189] panic+0x2f8/0x850 [ 1014.082988][ T4189] ? bpf_jit_dump+0xd0/0xd0 [ 1014.087474][ T4189] ? ret_from_fork+0x1f/0x30 [ 1014.092044][ T4189] ? hci_conn_timeout+0x24f/0x450 [ 1014.097051][ T4189] __warn+0x248/0x2b0 [ 1014.101018][ T4189] ? hci_conn_timeout+0x24f/0x450 [ 1014.106033][ T4189] report_bug+0x1b9/0x2e0 [ 1014.110365][ T4189] handle_bug+0x3a/0x70 [ 1014.114499][ T4189] exc_invalid_op+0x16/0x40 [ 1014.118980][ T4189] asm_exc_invalid_op+0x16/0x20 [ 1014.123809][ T4189] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 1014.129419][ T4189] Code: 8b 8d e8 64 be dd f8 48 8b 35 15 95 aa 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 46 5c 6d f8 e8 81 8a 98 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 1014.149003][ T4189] RSP: 0018:ffffc90002f2fc08 EFLAGS: 00010293 [ 1014.155062][ T4189] RAX: ffffffff88e08a1f RBX: ffff88807b24a138 RCX: ffff8880797dd940 [ 1014.163038][ T4189] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 1014.170997][ T4189] RBP: 00000000ffffffff R08: ffff88807b24a013 R09: 1ffff1100f649402 [ 1014.178951][ T4189] R10: dffffc0000000000 R11: ffffed100f649403 R12: ffff88801ee69008 [ 1014.186901][ T4189] R13: dffffc0000000000 R14: ffff88807b24a000 R15: ffff88807b24a010 [ 1014.194855][ T4189] ? hci_conn_timeout+0x24f/0x450 [ 1014.199885][ T4189] ? hci_conn_timeout+0x24f/0x450 [ 1014.204892][ T4189] process_one_work+0x867/0xff0 [ 1014.209750][ T4189] ? worker_detach_from_pool+0x240/0x240 [ 1014.215366][ T4189] ? lockdep_hardirqs_off+0x70/0x100 [ 1014.220633][ T4189] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1014.225643][ T4189] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1014.231186][ T4189] ? wq_worker_running+0x97/0x170 [ 1014.236194][ T4189] worker_thread+0xad7/0x12a0 [ 1014.240868][ T4189] kthread+0x42e/0x520 [ 1014.244933][ T4189] ? rcu_lock_release+0x20/0x20 [ 1014.249782][ T4189] ? kthread_blkcg+0xd0/0xd0 [ 1014.254351][ T4189] ret_from_fork+0x1f/0x30 [ 1014.258761][ T4189] [ 1014.262008][ T4189] Kernel Offset: disabled [ 1014.266780][ T4189] Rebooting in 86400 seconds..