last executing test programs: 4m37.69272548s ago: executing program 3 (id=1489): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000004000000611800000000000018110000", @ANYRES32=r2, @ANYBLOB="00000000000000001508020000000000180000000d0000000000000009000000bf1200000000000007020000f8ffffff850000000100000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$mice(0xffffffffffffff9c, &(0x7f0000000580), 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)) syz_btf_id_by_name$bpf_lsm(&(0x7f00000009c0)='bpf_lsm_inode_getsecid\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={0x0, 0xf9, 0x8}, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./dev/mapper/control\x00', 0x0, 0x0) ppoll(&(0x7f0000000a80)=[{r3, 0x4}], 0x1, &(0x7f0000000ac0)={0x0, 0x989680}, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{0x1}, &(0x7f0000000b00), &(0x7f0000000b40)='%pK \x00'}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m8.11087942s ago: executing program 3 (id=1492): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x38, 0xfff, 0xc84a, 0x40000000000180, 0x100000000, 0x4, 0xf2, 0xd, 0x7fffffffffffe, 0x0, 0x7, 0x7, 0x712f, 0x470ab5f9, 0x10000, 0x7], 0xeeef0000}) socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x3) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0xd) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000001c0)=0x7) 4m8.107702048s ago: executing program 2 (id=1493): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000004000000611800000000000018110000", @ANYRES32=r2, @ANYBLOB="00000000000000001508020000000000180000000d0000000000000009000000bf1200000000000007020000f8ffffff850000000100000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$mice(0xffffffffffffff9c, &(0x7f0000000580), 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m8.106228721s ago: executing program 2 (id=1494): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0xa, 0x3, 0x87) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000640)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000006c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000700), 0x10106, 0x2, 0x0) setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x20, 0x3, 0x0, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000840)=0x1) sendmmsg$inet6(r4, &(0x7f0000000880)=[{{&(0x7f0000000940)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00), 0x1}}], 0x3, 0x1c000) mount(0x0, &(0x7f0000000a40)='.\x00', 0x0, 0x2200cd0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000a80)='mounts\x00') read$FUSE(r5, &(0x7f0000000ac0)={0x2020}, 0x2020) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002b00)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000500)={0x2, 0x7}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000580)={0x7a0, 0x4, 0x203, 0xfffffff9, 0x3, 0xfa8, 0x4, 0x20000, r7}, &(0x7f00000005c0)=0x20) 3m48.968534151s ago: executing program 3 (id=1500): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./debug\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/cec/cec0/status\x00', 0x0, 0x0) read(r0, &(0x7f00000005c0)=""/256, 0x100) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fchdir(r3) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write(r4, &(0x7f0000000200)='dir .', 0x5) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002000200027ad7000fffff4000a0000400000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x24040840}, 0x4008000) write(r4, &(0x7f0000000240)='bind', 0x4) getegid() syz_usb_connect(0x3, 0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000000705e37e1b"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000040)={'erspan0\x00', r6, 0x20, 0x1, 0x5, 0x7, {{0x11, 0x4, 0x3, 0x0, 0x44, 0x67, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x14, 0x80, 0x1, 0x7, [{@private=0xa010101, 0x10000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}]}, @ra={0x94, 0x4}, @end, @end, @generic={0x88, 0x2}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x11, [@local, @rand_addr=0x64010100, @multicast1]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0xfffffffffffffd98, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xf}, {0x5, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56543, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xffe0, 0xf}, {0x1, 0xffff}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) syslog(0x2, &(0x7f0000000540)=""/48, 0x30) 3m48.957030387s ago: executing program 2 (id=1503): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@new_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f00000000c0)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000640)={0x0, 0x1, 0x1, 0x6, 0x10e1}, 0x0, 0x1, 0x0, 0x0) syz_ublk_process_io(0x0, 0x0, 0x1, 0x0, 0x0) 3m48.956254579s ago: executing program 3 (id=1504): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./debug\x00', &(0x7f00000004c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/cec/cec0/status\x00', 0x0, 0x0) read(r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fchdir(r3) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write(r4, &(0x7f0000000200)='dir .', 0x5) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002000200027ad7000fffff4000a0000400000000004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040840}, 0x4008000) write(r4, &(0x7f0000000240)='bind', 0x4) getegid() syz_usb_connect(0x3, 0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000000705e37e1b"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000040)={'erspan0\x00', r6, 0x20, 0x1, 0x5, 0x7, {{0x11, 0x4, 0x3, 0x0, 0x44, 0x67, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x14, 0x80, 0x1, 0x7, [{@private=0xa010101, 0x10000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}]}, @ra={0x94, 0x4}, @end, @end, @generic={0x88, 0x2}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x11, [@local, @rand_addr=0x64010100, @multicast1]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0xfffffffffffffd98, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xf}, {0x5, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56543, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xffe0, 0xf}, {0x1, 0xffff}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) syslog(0x2, &(0x7f0000000540)=""/48, 0x30) 3m48.951350156s ago: executing program 2 (id=1507): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000600)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000640), 0x0, 0x0) read$msr(r3, &(0x7f000000e0c0)=""/102392, 0x18ff8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000270c0), 0x4000000004002, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000027100), 0xc2900, 0x0) sendfile(r4, r5, 0x0, 0x201f00) 3m48.951032569s ago: executing program 3 (id=1508): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000240)=0x9, 0x12) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0xa0201, 0x0) 3m47.331196362s ago: executing program 3 (id=1511): pipe2(&(0x7f0000000180)={0x0, 0x0}, 0x84000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x80, &(0x7f00000003c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x0, 0x10000008, 0x6, 0x3ec000, 0x3, 0x7, 0x1, 0x6, 0x80000001}, 0x0) read$FUSE(r3, &(0x7f0000000440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002480)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000002500)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r3, &(0x7f0000002540)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000004540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004600)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004640)="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", 0x2000, &(0x7f0000006640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r5, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000067c0)={0x2f, 0x6, 0x0, {0x1, 0x2, 0x6, 0x0, '\x9e\xaf\x82\xa7\x13&'}}, 0x2f) 3m35.411101233s ago: executing program 2 (id=1514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mkdir(0x0, 0x1fd) setreuid(0xee01, 0x0) symlinkat(&(0x7f0000000540)='.\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000a80), 0x0, &(0x7f0000000ac0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000b00)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7/file0\x00', 0x0) symlinkat(&(0x7f0000000c00)='.\x00', 0xffffffffffffff9c, &(0x7f0000000c40)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000cc0)='./file7/file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x0) getdents64(r1, &(0x7f0000000d40)=""/157, 0x9d) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000280)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000340)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r7, r6, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x1, 0x12c}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1, 0x8004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x40000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80b4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f00000009c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a40)='stat\x00') lseek(r8, 0x9, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) close(r0) 3m32.253503073s ago: executing program 32 (id=1511): pipe2(&(0x7f0000000180)={0x0, 0x0}, 0x84000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x80, &(0x7f00000003c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x0, 0x10000008, 0x6, 0x3ec000, 0x3, 0x7, 0x1, 0x6, 0x80000001}, 0x0) read$FUSE(r3, &(0x7f0000000440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002480)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000002500)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r3, &(0x7f0000002540)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000004540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004600)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004640)="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", 0x2000, &(0x7f0000006640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r5, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000067c0)={0x2f, 0x6, 0x0, {0x1, 0x2, 0x6, 0x0, '\x9e\xaf\x82\xa7\x13&'}}, 0x2f) 3m30.234892393s ago: executing program 2 (id=1524): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000600)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000640), 0x0, 0x0) read$msr(r3, &(0x7f000000e0c0)=""/102392, 0x18ff8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000270c0), 0x4000000004002, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000027100), 0xc2900, 0x0) sendfile(r4, r5, 0x0, 0x201f00) 3m14.383486888s ago: executing program 33 (id=1524): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000600)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000640), 0x0, 0x0) read$msr(r3, &(0x7f000000e0c0)=""/102392, 0x18ff8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000270c0), 0x4000000004002, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000027100), 0xc2900, 0x0) sendfile(r4, r5, 0x0, 0x201f00) 35.179251244s ago: executing program 0 (id=1740): setxattr$system_posix_acl(0x0, &(0x7f0000000140)='system.posix_acl_default\x00', 0x0, 0x2c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) capset(&(0x7f0000000480)={0x20080522}, &(0x7f00000004c0)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3a, 0x0, 0x0) unshare(0x22020600) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000500)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000580), 0x4403, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c92012000e00050014010a"], 0x17) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x10000, 0x9, 0x1, 0xa008, 0x2, 0x2}, 0x30, 0x3) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_req={{0x17, 0x3, 0xc}, {0x4, 0x2647, 0x401, 0x7, [0x6, 0xe]}}}}, 0x19) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0xa, 0x262) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e22, @multicast2}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x3a, {0x2, 0x2, @broadcast}, 'geneve1\x00'}) landlock_restrict_self(r3, 0x1) 28.460999213s ago: executing program 0 (id=1743): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0x10, 0x800, 0xfffffffd) sendto$inet6(r1, 0x0, 0x0, 0x800, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000300)) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x2040000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, 0x0, &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_usb_connect(0x3, 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000a00)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$uac3(r3, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000ac0)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23.756834716s ago: executing program 0 (id=1748): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r0, r1, r2, 0x0) socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@new_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f00000000c0)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000640)={0x0, 0x1, 0x1, 0x6, 0x10e1}, 0x0, 0x1, 0x0, 0x0) syz_ublk_process_io(0x0, 0x0, 0x1, 0x0, 0x0) 23.227095278s ago: executing program 0 (id=1749): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./debug\x00', &(0x7f00000004c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/cec/cec0/status\x00', 0x0, 0x0) read(r0, &(0x7f00000005c0)=""/256, 0x100) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fchdir(r3) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write(r4, &(0x7f0000000200)='dir ', 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002000200027ad7000fffff4000a0000400000000004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040840}, 0x4008000) write(r4, &(0x7f0000000240)='bind', 0x4) getegid() syz_usb_connect(0x3, 0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000000705e37e1b"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000040)={'erspan0\x00', r6, 0x20, 0x1, 0x5, 0x7, {{0x11, 0x4, 0x3, 0x0, 0x44, 0x67, 0x0, 0x2, 0x0, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x14, 0x80, 0x1, 0x7, [{@private=0xa010101, 0x10000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}]}, @ra={0x94, 0x4}, @end, @end, @generic={0x88, 0x2}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x11, [@local, @rand_addr=0x64010100, @multicast1]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0xfffffffffffffd98, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xf}, {0x5, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56543, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xffe0, 0xf}, {0x1, 0xffff}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) syslog(0x2, &(0x7f0000000540)=""/48, 0x30) 20.211673085s ago: executing program 0 (id=1754): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000600)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000640), 0x0, 0x0) read$msr(r4, &(0x7f000000e0c0)=""/102392, 0x18ff8) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000270c0), 0x4000000004002, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000027100), 0xc2900, 0x0) sendfile(r5, r6, 0x0, 0x201f00) r7 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = getpid() getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000000c0)={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(r7, 0x84, 0x7d, &(0x7f00000001c0)={r9, 0x8}, 0x8) sched_setscheduler(r8, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) 15.845966442s ago: executing program 1 (id=1756): openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x2000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xda, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r1, 0x58, &(0x7f00000000c0)}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000440)={0x73622a85, 0xa, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000001c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x5, 0x355, 0x509, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x7, 0xcee5f433653f8918, 0x0, 0x0, "35cf52530599b474"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x55) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000380)={0x1d, r8, 0x1, {0x0, 0xf0}}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r4, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000500)=[@increfs]}) semget(0x3, 0x4, 0x220) prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000900)=0x8) r9 = getpid() sched_setscheduler(r9, 0x1, &(0x7f0000000940)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f00000009c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000a40), 0x318, 0x0) recvmmsg(r10, &(0x7f0000000a80), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13.813116896s ago: executing program 0 (id=1757): sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f00000012c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001300)='task\x00') lseek(r3, 0x3, 0x0) getdents(r3, 0x0, 0x40) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x3, 0x16, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x43) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) 11.953658811s ago: executing program 1 (id=1760): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x6e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="8d", 0x1}], 0x1}, 0x40004) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x1, @local, 0x8}, 0x1c) shutdown(r0, 0x1) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x40000) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000001780)={0x7e, 0x0, 0x6, 0x9, 0x6edf, 0x81}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001200), 0x84042, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$inet6(0xa, 0x803, 0x6) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000002300)={r4}) r5 = syz_open_dev$loop(&(0x7f0000001240), 0x80000001, 0x162842) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(r6, &(0x7f00000013c0)=[{{&(0x7f0000001400)={0xa, 0x0, 0x400000, @private2}, 0x1c, &(0x7f0000001440)=[{&(0x7f0000001480)="92", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x82, &(0x7f0000002340)=@assoc_value={0x0}, &(0x7f0000001500)=0x8) getsockopt$inet_sctp6_SCTP_EVENT(r6, 0x84, 0x7f, &(0x7f0000001540)={r7, 0x800a}, &(0x7f0000001580)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000015c0)={r7, @in={{0x2, 0x4e20, @multicast2}}, 0x800000, 0x1000, 0x9, 0x3, 0x1, 0x81}, 0x9c) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001280)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}}) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400030000", @ANYRES32=0x0, @ANYRES16=r2], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x4805}, 0x20004845) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002940)={0x11, 0x13, &(0x7f0000001ac0)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRESHEX, @ANYBLOB="5d4a994cc10563edd1eb8bc12292e976bc7cb687fd55d18cca9b9828ecdde2dd6f35b42b39f4c610f95f79c42f88c214f417bff6798555d7dbad9ca7d7c84cd78e615a45dd738db96037257944cdb276752f51634491544c4daa6e032c1b4b95709a96d6833071eae2cd69e551513ffbf8a8098250d4c48c8846ce3bfb2c936c8076aa54729dff0ec3206d4b265c4cae9df275f224de", @ANYRES64], &(0x7f0000001a40)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000002700)={0x5, 0xffffffff, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xc083}, 0x94) ioctl(r8, 0x400452c9, &(0x7f0000001680)='\x00'/11) r9 = dup(r5) syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000180)=""/4127, &(0x7f00000011c0)=0x101f) openat$ttyS3(0xffffff9c, &(0x7f00000014c0), 0x335481, 0x0) 11.807188881s ago: executing program 4 (id=1761): setxattr$system_posix_acl(0x0, &(0x7f0000000140)='system.posix_acl_default\x00', 0x0, 0x2c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) capset(&(0x7f0000000480)={0x20080522}, &(0x7f00000004c0)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3a, 0x0, 0x0) unshare(0x22020600) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000500)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000580), 0x4403, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c92012000e00050014010a"], 0x17) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x10000, 0x9, 0x1, 0xa008, 0x2, 0x2}, 0x30, 0x3) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_req={{0x17, 0x3, 0xc}, {0x4, 0x2647, 0x401, 0x7, [0x6, 0xe]}}}}, 0x19) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0xa, 0x262) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e22, @multicast2}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x3a, {0x2, 0x2, @broadcast}, 'geneve1\x00'}) landlock_restrict_self(r3, 0x1) 10.242020529s ago: executing program 1 (id=1762): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xd) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x7) 9.813144868s ago: executing program 1 (id=1763): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f00000012c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001300)='task\x00') lseek(r3, 0x3, 0x0) getdents(r3, 0x0, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newtfilter={0x7a4, 0x2c, 0xd2b, 0x70bd2b, 0x2ddfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x7, 0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x774, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xc3}, @TCA_ROUTE4_ACT={0x760, 0x6, [@m_vlan={0xa4, 0x7, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x7cb2, 0x0, 0x9122, 0x7b36}, 0x3}}]}, {0x5c, 0x6, "b763d70abb13554d4da47bf2aef26dc8bd46f91e3d306e9c8a05a838625dc29986fe53f79029c3a06cb9ab17a4fe2d18c1c64bb54bb8a830d06d24577e7dc558a4aae894ebf8073d23e8cb13e6efa9368d39f630bef2f973"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0xbc, 0x14, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x8, 0x3, 0x7fff, 0x5}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xd0d6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x56, 0x6, "0284b34345e54c373d6402851549044ad258962b4530505ccf732271715842a63d06215142b2866c05540ee6395980036ee28c0574dd48f9dc54168e76a9bb314df08f798d0a396248e1b8e3fa5088006a8e"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_nat={0x144, 0x1, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x4, 0x20000000, 0x7, 0x6ae1e25a}, @multicast2, @multicast2, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1, 0x10000000, 0x4, 0x1}, @remote, @rand_addr=0x64010101, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x8001, 0x20000000, 0x7, 0x9}, @dev={0xac, 0x14, 0x14, 0x41}, @loopback, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0xfffeffff, 0x20000000, 0x0, 0xed}, @loopback, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfff, 0x4, 0x20000000, 0x5, 0x1000000}, @loopback, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x2, 0x0, 0x8, 0x1}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x8, 0x10000000, 0xfffffff7, 0x4}, @loopback, @loopback, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0xac, 0xb, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xd6, 0x2, 0x1, 0xd, 0x1d}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x2, 0x6, 0x2, 0x6}}]}, {0x4f, 0x6, "a6b43279d4c5f66bd2c7daf41e483e7a2bc19baf7137b7cf6ec160878dc0f852ae1676c9e721946dbe23e53db8764140e45f6652474cbc85ed645e88d6aef5398181265b5df1a626f0f2d7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x94, 0x3, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}]}, {0x47, 0x6, "9019f94815c5bbf3fe134d6ef381c418b2c52b0775e949842bde1cc51f4019c2d79aefb23c0d18d92772ccbc9417273d0e0734d9dd89f39874187db626401f8f99b198"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_nat={0x23c, 0x1f, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x80, 0x20000002, 0x3, 0x7}, @remote, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x10000000, 0x3, 0x10, 0x8a1}, @local, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffff350, 0xdb, 0x3, 0x7, 0xffff3a26}, @rand_addr=0x64010102, @remote, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x4000000, 0x4, 0xc, 0x4}, @local, @dev={0xac, 0x14, 0x14, 0x2b}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x7af, 0x6, 0x8, 0x8}, @rand_addr=0x64010101, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0xb9d, 0x50120c9decbc724c, 0xce, 0xffff4e84}, @local, @loopback, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x4, 0x20000000, 0x4, 0x3}, @private=0xa010101, @private=0xa010100, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x3, 0x3, 0x3, 0x5}, @broadcast, @multicast1, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffff0a30, 0x8, 0x9, 0x2}, @dev={0xac, 0x14, 0x14, 0xa}, @empty, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x7fffffff, 0x7, 0x3, 0x16c}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x1}}]}, {0x82, 0x6, "312b85ceb1ae057c0134412abd81fb28dc4ef097bafe0b75f348a012e32d61324dc8a4a840cdb6e69c3798dc3fea5aee5bb6d9b0bee4e0ae3f1eb37ce0d8749335dc8d30c3c6f462caa47d2ffdf7e73b61526acb0c147318100f402becebedb96e53cb248f848e7d47e0dba88a258bc5aaf1c087d8675f6c825b7c280ddc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x13c, 0x1f, 0x0, 0x0, {{0x8}, {0xd4, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @random="21e598ad8f43"}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x377ae085, 0x7, 0x9, 0xde}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa000000, 0x8, 0xffffffffffffffff, 0xff, 0x7}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x9}, @TCA_IFE_METALST={0x44, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xd3c8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xe0}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x80000001}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xfb}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}]}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x2}]}]}, {0x41, 0x6, "2315fb40c204028aeba4b69b3a3cbf1b0bcb5391b82401411679676be34a16a5cdd3ca2eb0665ec287a678fad784b2e6e4cca2e4048c27818d22b1bdff"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r7}]}}]}, 0x7a4}}, 0x24040084) sendmsg$nl_route(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1, 0x400}, [@RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_OIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="1201100107010340b804022240000102030109021b000101fbb00c0904"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x3, 0x16, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x43) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) 9.469436936s ago: executing program 4 (id=1764): prlimit64(0x0, 0xe, &(0x7f0000000400)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000006c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000700), 0x10106, 0x2, 0x0) setfsgid(0xee00) setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x20, 0x3, 0x0, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000840)=0x1) sendmmsg$inet6(r3, &(0x7f0000000880)=[{{&(0x7f0000000940)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00), 0x1}}], 0x3, 0x1c000) mount(0x0, &(0x7f0000000a40)='.\x00', 0x0, 0x2200cd0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000a80)='mounts\x00') read$FUSE(r4, &(0x7f0000000ac0)={0x2020}, 0x2020) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002b00)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000500)={0x2, 0x7}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000580)={0x7a0, 0x4, 0x203, 0xfffffff9, 0x3, 0xfa8, 0x4, 0x20000, r6}, &(0x7f00000005c0)=0x20) 6.514019666s ago: executing program 1 (id=1765): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000600)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000640), 0x0, 0x0) read$msr(r4, &(0x7f000000e0c0)=""/102392, 0x18ff8) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000270c0), 0x4000000004002, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000027100), 0xc2900, 0x0) sendfile(r5, r6, 0x0, 0x201f00) r7 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = getpid() getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000000c0)={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(r7, 0x84, 0x7d, &(0x7f00000001c0)={r9, 0x8}, 0x8) sched_setscheduler(r8, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) 2.279483677s ago: executing program 4 (id=1766): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB], 0x6f4}}, 0x0) 1.445399381s ago: executing program 1 (id=1767): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x8e}, 0x0) r0 = getpid() ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) io_setup(0x8, &(0x7f0000000600)=0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000640), 0x101002) io_submit(r3, 0x1, &(0x7f0000000680)=[&(0x7f00000006c0)={0x0, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000700)="01", 0x400000}]) r5 = socket$inet6(0xa, 0x2, 0x3a) mount(0x0, &(0x7f0000000500)='./trace\x00', &(0x7f0000000540)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./trace/set_event\x00', 0x2, 0x0) write(r6, &(0x7f00000005c0), 0x0) sendto$inet6(r5, &(0x7f0000000140)="800037bbfa9b", 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 630.059738ms ago: executing program 4 (id=1768): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket(0x41784973695310da, 0x6, 0x103a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x4004000) r2 = add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000540)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b05003034313230300603553d030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, 0xffffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x488100, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) close_range(r3, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000ac0)={r2, 0x300, 0x13}, &(0x7f0000000b00)={'enc=', 'pkcs1', ' hash=', {'rmd160\x00'}}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x58}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x40) syz_ublk_setup_queues(r11, r9, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x3, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9fa1, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7df7, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26e}}], 0x1, 0x0, 0x0) 258.586228ms ago: executing program 4 (id=1769): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) lsm_set_self_attr(0x68, 0x0, 0xfd2d, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000240)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = creat(&(0x7f0000000100)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000901, 0x0, &(0x7f0000000440)) 0s ago: executing program 4 (id=1770): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x6e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="8d", 0x1}], 0x1}, 0x40004) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x1, @local, 0x8}, 0x1c) shutdown(r0, 0x1) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x40000) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000001780)={0x7e, 0x0, 0x6, 0x9, 0x6edf, 0x81}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001200), 0x84042, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$inet6(0xa, 0x803, 0x6) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000002300)={r4}) r5 = syz_open_dev$loop(&(0x7f0000001240), 0x80000001, 0x162842) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(r6, &(0x7f00000013c0)=[{{&(0x7f0000001400)={0xa, 0x0, 0x400000, @private2}, 0x1c, &(0x7f0000001440)=[{&(0x7f0000001480)="92", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x82, &(0x7f0000002340)=@assoc_value={0x0}, &(0x7f0000001500)=0x8) getsockopt$inet_sctp6_SCTP_EVENT(r6, 0x84, 0x7f, &(0x7f0000001540)={r7, 0x800a}, &(0x7f0000001580)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000015c0)={r7, @in={{0x2, 0x4e20, @multicast2}}, 0x800000, 0x1000, 0x9, 0x3, 0x1, 0x81}, 0x9c) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001280)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}}) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400030000", @ANYRES32=0x0, @ANYRES16=r2], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x4805}, 0x20004845) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002940)={0x11, 0x13, &(0x7f0000001ac0)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYRESHEX, @ANYBLOB="5d4a994cc10563edd1eb8bc12292e976bc7cb687fd55d18cca9b9828ecdde2dd6f35b42b39f4c610f95f79c42f88c214f417bff6798555d7dbad9ca7d7c84cd78e615a45dd738db96037257944cdb276752f51634491544c4daa6e032c1b4b95709a96d6833071eae2cd69e551513ffbf8a8098250d4c48c8846ce3bfb2c936c8076aa54729dff0ec3206d4b265c4cae9df275f224de", @ANYRES64], &(0x7f0000001a40)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000002700)={0x5, 0xffffffff, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xc083}, 0x94) ioctl(r8, 0x400452c9, &(0x7f0000001680)='\x00'/11) r9 = dup(r5) syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000180)=""/4127, &(0x7f00000011c0)=0x101f) openat$ttyS3(0xffffff9c, &(0x7f00000014c0), 0x335481, 0x0) kernel console output (not intermixed with test programs): g 0 descriptor?? [ 526.313985][ T9238] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 526.456672][ T999] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input51 [ 526.731547][ T999] usb 3-1: USB disconnect, device number 27 [ 526.790928][ T30] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 526.791544][ T30] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 526.832294][ T5704] usb 2-1: USB disconnect, device number 36 [ 526.904832][ T30] usb 5-1: USB disconnect, device number 21 [ 527.597124][ T5704] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 527.737711][ T5704] usb 2-1: device descriptor read/64, error -71 [ 528.003235][ T5704] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 528.186455][ T5704] usb 2-1: device descriptor read/64, error -71 [ 528.319168][ T5704] usb usb2-port1: attempt power cycle [ 528.754340][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.918'. [ 528.826366][ T5704] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 528.847777][ T5704] usb 2-1: device descriptor read/8, error -71 [ 528.872454][ T9264] FAULT_INJECTION: forcing a failure. [ 528.872454][ T9264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.872495][ T9264] CPU: 1 UID: 0 PID: 9264 Comm: syz.4.920 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 528.872522][ T9264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 528.872536][ T9264] Call Trace: [ 528.872546][ T9264] [ 528.872556][ T9264] dump_stack_lvl+0xe8/0x150 [ 528.872599][ T9264] should_fail_ex+0x46b/0x600 [ 528.872643][ T9264] _copy_from_user+0x2d/0xb0 [ 528.872672][ T9264] __sys_bpf+0x2e7/0xd90 [ 528.872756][ T9264] ? __pfx___sys_bpf+0x10/0x10 [ 528.872796][ T9264] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 528.872838][ T9264] ? rt_mutex_slowunlock+0x219/0x460 [ 528.872904][ T9264] __x64_sys_bpf+0xba/0xd0 [ 528.872941][ T9264] do_syscall_64+0x166/0x520 [ 528.872975][ T9264] ? trace_irq_disable+0x3b/0x140 [ 528.873007][ T9264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.873032][ T9264] ? clear_bhb_loop+0x70/0xc0 [ 528.873062][ T9264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.873086][ T9264] RIP: 0033:0x7f5142cde559 [ 528.873115][ T9264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.873136][ T9264] RSP: 002b:00007f5140f36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 528.873162][ T9264] RAX: ffffffffffffffda RBX: 00007f5142f65fa0 RCX: 00007f5142cde559 [ 528.873179][ T9264] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 528.873195][ T9264] RBP: 00007f5140f36090 R08: 0000000000000000 R09: 0000000000000000 [ 528.873210][ T9264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.873225][ T9264] R13: 00007f5142f66038 R14: 00007f5142f65fa0 R15: 00007ffeb3c29438 [ 528.873263][ T9264] [ 529.126431][ T5704] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 529.147116][ T5704] usb 2-1: device descriptor read/8, error -71 [ 529.237336][ T9266] FAULT_INJECTION: forcing a failure. [ 529.237336][ T9266] name failslab, interval 1, probability 0, space 0, times 0 [ 529.237389][ T9266] CPU: 1 UID: 0 PID: 9266 Comm: syz.2.921 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 529.237415][ T9266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 529.237429][ T9266] Call Trace: [ 529.237438][ T9266] [ 529.237448][ T9266] dump_stack_lvl+0xe8/0x150 [ 529.237507][ T9266] should_fail_ex+0x46b/0x600 [ 529.237561][ T9266] should_failslab+0xa8/0x100 [ 529.237592][ T9266] __kmalloc_cache_noprof+0xa1/0x680 [ 529.237632][ T9266] ? __mmu_notifier_register+0x33e/0x600 [ 529.237679][ T9266] ? __mmu_notifier_register+0x33e/0x600 [ 529.237727][ T9266] __mmu_notifier_register+0x33e/0x600 [ 529.237776][ T9266] mmu_notifier_register+0x70/0x1d0 [ 529.237819][ T9266] kvm_dev_ioctl+0x136a/0x17e0 [ 529.237894][ T9266] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 529.237918][ T9266] ? __fget_files+0x2a/0x420 [ 529.237953][ T9266] ? bpf_lsm_file_ioctl+0x9/0x20 [ 529.237986][ T9266] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 529.238013][ T9266] __se_sys_ioctl+0xff/0x170 [ 529.238054][ T9266] do_syscall_64+0x166/0x520 [ 529.238090][ T9266] ? trace_irq_disable+0x3b/0x140 [ 529.238125][ T9266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.238151][ T9266] ? clear_bhb_loop+0x70/0xc0 [ 529.238181][ T9266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.238206][ T9266] RIP: 0033:0x7f8a4c5be559 [ 529.238230][ T9266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.238251][ T9266] RSP: 002b:00007f8a4a816028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 529.238278][ T9266] RAX: ffffffffffffffda RBX: 00007f8a4c845fa0 RCX: 00007f8a4c5be559 [ 529.238296][ T9266] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006 [ 529.238311][ T9266] RBP: 00007f8a4c655ad8 R08: 0000000000000000 R09: 0000000000000000 [ 529.238327][ T9266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.238342][ T9266] R13: 00007f8a4c846038 R14: 00007f8a4c845fa0 R15: 00007ffec9324de8 [ 529.238382][ T9266] [ 529.287889][ T5704] usb usb2-port1: unable to enumerate USB device [ 529.720138][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.925'. [ 529.893192][ T9286] CacheFiles: Failed to register: -95 [ 530.126318][ T999] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 530.151484][ T9295] netlink: 24 bytes leftover after parsing attributes in process `syz.3.931'. [ 530.276598][ T999] usb 2-1: Using ep0 maxpacket: 32 [ 530.871065][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.933'. [ 530.916481][ T30] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 531.066524][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 531.067551][ T30] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 531.069790][ T30] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 531.069820][ T30] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 531.069845][ T30] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 531.069929][ T30] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 531.069954][ T30] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 531.069979][ T30] usb 4-1: config 0 has no interface number 0 [ 531.070088][ T30] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 531.070122][ T30] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 531.070149][ T30] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 531.070249][ T30] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 531.070282][ T30] usb 4-1: config 0 interface 125 has no altsetting 0 [ 531.120767][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.139957][ T30] usb 4-1: Product: syz [ 531.139981][ T30] usb 4-1: Manufacturer: syz [ 531.139999][ T30] usb 4-1: SerialNumber: syz [ 531.220065][ T999] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 531.221872][ T999] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 531.221901][ T999] usb 2-1: config 0 has no interface number 0 [ 531.221949][ T999] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 531.221975][ T999] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 531.222005][ T999] usb 2-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 531.222034][ T999] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 531.301908][ T999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.301941][ T999] usb 2-1: Product: syz [ 531.301959][ T999] usb 2-1: Manufacturer: syz [ 531.301977][ T999] usb 2-1: SerialNumber: syz [ 531.374072][ T30] usb 4-1: config 0 descriptor?? [ 531.392743][ T999] usb 2-1: config 0 descriptor?? [ 531.421560][ T9286] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 531.466704][ T999] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input52 [ 531.703239][ T30] usb 2-1: USB disconnect, device number 41 [ 531.703331][ C1] bcm5974 2-1:0.119: trackpad urb failed: -19 [ 531.956587][ T5838] usb 4-1: USB disconnect, device number 35 [ 532.219129][ T5704] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 532.326228][ T9309] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5587] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[9309] [ 532.355573][ T9309] FAULT_INJECTION: forcing a failure. [ 532.355573][ T9309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.355613][ T9309] CPU: 1 UID: 0 PID: 9309 Comm: syz.4.935 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 532.355641][ T9309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 532.355656][ T9309] Call Trace: [ 532.355665][ T9309] [ 532.355675][ T9309] dump_stack_lvl+0xe8/0x150 [ 532.355718][ T9309] should_fail_ex+0x46b/0x600 [ 532.355783][ T9309] _copy_from_user+0x2d/0xb0 [ 532.355811][ T9309] __sys_bind+0x1cc/0x410 [ 532.355844][ T9309] ? __pfx___sys_bind+0x10/0x10 [ 532.355885][ T9309] ? __pfx_ksys_write+0x10/0x10 [ 532.355927][ T9309] __x64_sys_bind+0x7a/0x90 [ 532.355956][ T9309] do_syscall_64+0x166/0x520 [ 532.355991][ T9309] ? trace_irq_disable+0x3b/0x140 [ 532.356025][ T9309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.356050][ T9309] ? clear_bhb_loop+0x70/0xc0 [ 532.356083][ T9309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.356107][ T9309] RIP: 0033:0x7f5142cde559 [ 532.356129][ T9309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.356150][ T9309] RSP: 002b:00007f5140ef4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 532.356176][ T9309] RAX: ffffffffffffffda RBX: 00007f5142f66180 RCX: 00007f5142cde559 [ 532.356194][ T9309] RDX: 000000000000000c RSI: 0000200000000000 RDI: 0000000000000007 [ 532.356209][ T9309] RBP: 00007f5140ef4090 R08: 0000000000000000 R09: 0000000000000000 [ 532.356224][ T9309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.356239][ T9309] R13: 00007f5142f66218 R14: 00007f5142f66180 R15: 00007ffeb3c29438 [ 532.356276][ T9309] [ 533.307060][ T5704] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 533.311067][ T5704] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.311106][ T5704] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 533.311137][ T5704] usb 3-1: config 0 interface 0 has no altsetting 0 [ 533.311173][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.503466][ T5704] usb 3-1: config 0 descriptor?? [ 534.066614][ T5595] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 534.568985][ T5704] hid (null): nested delimiters [ 534.600027][ T5595] usb 2-1: device descriptor read/64, error -71 [ 534.615681][ T5704] hid-multitouch 0003:0EEF:72C4.0012: nested delimiters [ 534.615714][ T5704] hid-multitouch 0003:0EEF:72C4.0012: item 0 1 2 10 parsing failed [ 534.626633][ T5704] hid-multitouch 0003:0EEF:72C4.0012: probe with driver hid-multitouch failed with error -22 [ 534.836264][ T5595] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 534.966375][ T5595] usb 2-1: device descriptor read/64, error -71 [ 535.076781][ T5595] usb usb2-port1: attempt power cycle [ 535.437757][ T5595] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 535.487005][ T5595] usb 2-1: device descriptor read/8, error -71 [ 536.913126][ T5704] usb 3-1: USB disconnect, device number 28 [ 537.126169][ T5592] Bluetooth: hci2: unexpected event for opcode 0x040d [ 538.023305][ T9353] fuse: Bad value for 'fd' [ 538.352959][ T9362] netlink: 36 bytes leftover after parsing attributes in process `syz.3.952'. [ 542.051979][ T9375] fuse: Bad value for 'fd' [ 543.476288][ T6739] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 543.606280][ T6739] usb 5-1: device descriptor read/64, error -71 [ 543.846792][ T6739] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 543.977668][ T6739] usb 5-1: device descriptor read/64, error -71 [ 544.088173][ T6739] usb usb5-port1: attempt power cycle [ 544.426831][ T6739] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 544.448165][ T6739] usb 5-1: device descriptor read/8, error -71 [ 544.840946][ T6739] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 544.964665][ T6739] usb 5-1: device descriptor read/8, error -71 [ 545.069349][ T6739] usb usb5-port1: unable to enumerate USB device [ 545.651130][ T9401] FAULT_INJECTION: forcing a failure. [ 545.651130][ T9401] name failslab, interval 1, probability 0, space 0, times 0 [ 545.651169][ T9401] CPU: 1 UID: 0 PID: 9401 Comm: syz.1.963 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 545.651196][ T9401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 545.651209][ T9401] Call Trace: [ 545.651218][ T9401] [ 545.651228][ T9401] dump_stack_lvl+0xe8/0x150 [ 545.651269][ T9401] should_fail_ex+0x46b/0x600 [ 545.651312][ T9401] should_failslab+0xa8/0x100 [ 545.651337][ T9401] ? do_getname+0x2e/0x250 [ 545.651361][ T9401] kmem_cache_alloc_noprof+0x9e/0x690 [ 545.651395][ T9401] ? do_getname+0x2e/0x250 [ 545.651419][ T9401] ? rt_mutex_slowunlock+0x219/0x460 [ 545.651451][ T9401] do_getname+0x2e/0x250 [ 545.651473][ T9401] ? getname_flags+0x11/0x20 [ 545.651500][ T9401] do_sys_openat2+0xcc/0x200 [ 545.651535][ T9401] ? __pfx_do_sys_openat2+0x10/0x10 [ 545.651581][ T9401] ? ksys_write+0x248/0x270 [ 545.651616][ T9401] ? __pfx_ksys_write+0x10/0x10 [ 545.651652][ T9401] __x64_sys_openat+0x138/0x170 [ 545.651685][ T9401] do_syscall_64+0x166/0x520 [ 545.651722][ T9401] ? trace_irq_disable+0x3b/0x140 [ 545.651755][ T9401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.651779][ T9401] ? clear_bhb_loop+0x70/0xc0 [ 545.651809][ T9401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.651833][ T9401] RIP: 0033:0x7f3734b8ed8e [ 545.651855][ T9401] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 545.651874][ T9401] RSP: 002b:00007f3732e25f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 545.651900][ T9401] RAX: ffffffffffffffda RBX: 00007f3732e266c0 RCX: 00007f3734b8ed8e [ 545.651918][ T9401] RDX: 0000000000000000 RSI: 00007f3734c65206 RDI: ffffffffffffff9c [ 545.651934][ T9401] RBP: 00007f3732e26090 R08: 0000000000000000 R09: 0000000000000000 [ 545.651949][ T9401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.651963][ T9401] R13: 00007f3734e56038 R14: 00007f3734e55fa0 R15: 00007ffd1d8ab598 [ 545.652000][ T9401] [ 548.846267][ T6256] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 548.996270][ T6256] usb 2-1: Using ep0 maxpacket: 16 [ 548.997260][ T6256] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 549.001131][ T6256] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.001167][ T6256] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.001195][ T6256] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 549.001239][ T6256] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.973110][ T6256] usb 2-1: config 0 descriptor?? [ 550.406358][ T6256] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 550.408891][ T6256] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 550.408926][ T6256] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 550.408955][ T6256] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 550.408983][ T6256] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 550.409011][ T6256] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 550.409039][ T6256] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 550.409068][ T6256] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 550.409103][ T6256] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 550.501056][ T6256] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0013/input/input53 [ 550.562523][ T6256] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 550.595977][ T6256] usb 2-1: USB disconnect, device number 46 [ 550.761810][ T9437] fido_id[9437]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 550.876277][ T9439] syzkaller0: entered promiscuous mode [ 550.876306][ T9439] syzkaller0: entered allmulticast mode [ 552.003722][ T5704] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 552.081537][ T9465] FAULT_INJECTION: forcing a failure. [ 552.081537][ T9465] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 552.081768][ T9465] CPU: 1 UID: 0 PID: 9465 Comm: syz.1.984 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 552.081798][ T9465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 552.081813][ T9465] Call Trace: [ 552.081824][ T9465] [ 552.081836][ T9465] dump_stack_lvl+0xe8/0x150 [ 552.081879][ T9465] should_fail_ex+0x46b/0x600 [ 552.081926][ T9465] prepare_alloc_pages+0x223/0x650 [ 552.081958][ T9465] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 552.081989][ T9465] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 552.082021][ T9465] ? __pfx_policy_nodemask+0x10/0x10 [ 552.082050][ T9465] ? __lock_acquire+0x747/0x2de0 [ 552.082092][ T9465] alloc_pages_mpol+0xd4/0x280 [ 552.082124][ T9465] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 552.082156][ T9465] vma_alloc_folio_noprof+0xe1/0x1e0 [ 552.082189][ T9465] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 552.082216][ T9465] ? lock_acquire+0x115/0x350 [ 552.082261][ T9465] do_pte_missing+0x835/0x28f0 [ 552.082296][ T9465] ? handle_mm_fault+0xeb/0x28c0 [ 552.082335][ T9465] handle_mm_fault+0xf64/0x28c0 [ 552.082375][ T9465] ? handle_mm_fault+0xeb/0x28c0 [ 552.082430][ T9465] ? __pfx_handle_mm_fault+0x10/0x10 [ 552.082463][ T9465] ? lock_vma_under_rcu+0x45a/0x500 [ 552.082501][ T9465] ? __pfx_do_futex+0x10/0x10 [ 552.082556][ T9465] do_user_addr_fault+0xa4f/0x1340 [ 552.082633][ T9465] ? trace_page_fault_user+0x84/0x1e0 [ 552.082664][ T9465] exc_page_fault+0x6a/0xc0 [ 552.082702][ T9465] asm_exc_page_fault+0x26/0x30 [ 552.082730][ T9465] RIP: 0033:0x7f3734a95de6 [ 552.082752][ T9465] Code: fc ff ff 90 41 57 31 c0 41 56 49 89 fe 48 8d 3d ef 07 1d 00 41 55 49 89 d5 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 ac c7 fe ff 4d 85 ed 0f 84 2b 0a 00 [ 552.082775][ T9465] RSP: 002b:00007f3732e23f60 EFLAGS: 00010206 [ 552.082798][ T9465] RAX: 0000000000000000 RBX: 00007f3734e55fa0 RCX: 0000000000000000 [ 552.082815][ T9465] RDX: 0000200000000880 RSI: 0000200000000880 RDI: 00007f3734c665bf [ 552.082833][ T9465] RBP: 00007f3734c65ad8 R08: 00007f3734a82930 R09: 0000000000000000 [ 552.082850][ T9465] R10: 0000000000000005 R11: 0000200000000880 R12: 0000000000000024 [ 552.082865][ T9465] R13: 0000200000000880 R14: 0000000000000005 R15: 00007ffd1d8ab598 [ 552.082905][ T9465] [ 552.083306][ T9465] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 552.189112][ T5704] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 552.308882][ T5704] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.309045][ T5704] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 552.309129][ T5704] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 552.309204][ T5704] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 552.309321][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.539087][ T9460] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 552.539262][ T9460] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 552.561651][ T5704] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 552.615175][ T5704] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 552.615288][ T5704] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 552.637206][ T9462] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 552.637348][ T9462] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 552.664241][ T5704] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 552.732741][ T5704] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 552.732853][ T5704] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 552.758399][ T5704] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 552.920578][ T9472] netlink: 44 bytes leftover after parsing attributes in process `syz.0.988'. [ 552.920606][ T9472] netlink: 43 bytes leftover after parsing attributes in process `syz.0.988'. [ 552.920622][ T9472] validate_nla: 55 callbacks suppressed [ 552.920634][ T9472] netlink: 'syz.0.988': attribute type 6 has an invalid length. [ 552.920648][ T9472] netlink: 'syz.0.988': attribute type 5 has an invalid length. [ 552.920661][ T9472] netlink: 43 bytes leftover after parsing attributes in process `syz.0.988'. [ 553.012217][ T9462] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 553.015856][ T9462] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 553.132995][ T9462] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 553.148305][ T9462] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 553.224985][ T5704] usb 3-1: USB disconnect, device number 29 [ 553.282008][ T9462] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 553.283033][ T9462] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 553.303917][ T5704] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 553.358940][ T5704] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 553.373047][ T5704] keyspan 3-1:1.0: device disconnected [ 553.706280][ T5849] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 553.771579][ T9494] binder: 9493:9494 ioctl c00c620f ffffffff81000000 returned -14 [ 553.869524][ T5849] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 553.892742][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.892773][ T5849] usb 2-1: Product: syz [ 553.892790][ T5849] usb 2-1: Manufacturer: syz [ 553.892808][ T5849] usb 2-1: SerialNumber: syz [ 554.228171][ T9507] mtrr: base(0x1000) is not aligned on a size(0x0000) boundary [ 554.230046][ T5849] usb 2-1: selecting invalid altsetting 1 [ 554.574188][ T5592] Bluetooth: hci1: command 0x0406 tx timeout [ 554.735529][ T9521] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1008'. [ 555.057822][ T5592] Bluetooth: hci4: command 0x0406 tx timeout [ 555.126933][ T5592] Bluetooth: hci3: command 0x0406 tx timeout [ 555.238998][ T9531] 9p: Unknown access argument 18446744073709551615: -34 [ 555.286204][ T5592] Bluetooth: hci2: command 0x0406 tx timeout [ 555.355931][ T5849] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 555.409353][ T9436] udevd[9436]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 555.421163][ T5849] usb 2-1: USB disconnect, device number 47 [ 555.676739][ T9546] fuse: fd is not a fuse device [ 555.820343][ T5595] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 555.969759][ T5595] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 555.972907][ T5595] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.972980][ T5595] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 555.989818][ T5595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 555.989848][ T5595] usb 4-1: SerialNumber: syz [ 556.053303][ T5595] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 556.260208][ T5595] usb 4-1: USB disconnect, device number 36 [ 556.647183][ T5592] Bluetooth: hci1: command 0x0406 tx timeout [ 556.978521][ T9564] usb usb7: usbfs: process 9564 (syz.4.1027) did not claim interface 0 before use [ 557.126484][ T5592] Bluetooth: hci4: command 0x0406 tx timeout [ 557.206250][ T5592] Bluetooth: hci3: command 0x0406 tx timeout [ 557.226291][ T5849] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 557.236401][ T30] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 557.316309][ T6739] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 557.366231][ T5592] Bluetooth: hci2: command 0x0406 tx timeout [ 557.399795][ T5849] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 557.403148][ T5849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.403184][ T5849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.425498][ T30] usb 3-1: unable to get BOS descriptor or descriptor too short [ 557.435156][ T30] usb 3-1: not running at top speed; connect to a high speed hub [ 557.435268][ T30] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 557.436317][ T5849] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 557.436344][ T5849] usb 4-1: Manufacturer: syz [ 557.483867][ T5849] usb 4-1: config 0 descriptor?? [ 557.495958][ T30] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.495989][ T30] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 557.496041][ T30] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 557.536261][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 557.536289][ T30] usb 3-1: Product: syz [ 557.536303][ T30] usb 3-1: Manufacturer: syz [ 557.581744][ T9582] loop0: detected capacity change from 0 to 1 [ 557.633004][ T30] uvcvideo 3-1:1.0: probe with driver uvcvideo failed with error -22 [ 557.692107][ T9583] Dev loop0: unable to read RDB block 1 [ 557.692149][ T9583] loop0: unable to read partition table [ 557.692332][ T9583] loop0: partition table beyond EOD, truncated [ 557.692369][ T9583] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 557.850428][ T5595] usb 3-1: USB disconnect, device number 30 [ 558.139934][ T5849] uclogic 0003:256C:006D.0014: failed retrieving Huion firmware version: -71 [ 558.140125][ T5849] uclogic 0003:256C:006D.0014: failed probing parameters: -71 [ 558.140310][ T5849] uclogic 0003:256C:006D.0014: probe with driver uclogic failed with error -71 [ 558.184745][ T5849] usb 4-1: USB disconnect, device number 37 [ 558.583881][ T9603] tipc: Can't bind to reserved service type 0 [ 558.671232][ T9601] input: syz1 as /devices/virtual/input/input56 [ 558.712632][ T6739] usb 5-1: unable to get BOS descriptor or descriptor too short [ 558.712694][ T6739] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 558.715240][ T6739] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 558.715281][ T6739] usb 5-1: can't read configurations, error -71 [ 559.336010][ T9629] input: syz0 as /devices/virtual/input/input57 [ 559.356239][ T5849] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 559.526192][ T5849] usb 4-1: Using ep0 maxpacket: 32 [ 559.780968][ T9621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.781602][ T9621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.814883][ T5849] usb 4-1: unable to get BOS descriptor or descriptor too short [ 559.814933][ T5849] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=64.5b [ 559.821307][ T5849] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 559.821346][ T5849] usb 4-1: can't read configurations, error -71 [ 559.904759][ T9645] FAULT_INJECTION: forcing a failure. [ 559.904759][ T9645] name failslab, interval 1, probability 0, space 0, times 0 [ 559.904799][ T9645] CPU: 1 UID: 0 PID: 9645 Comm: syz.2.1061 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 559.904827][ T9645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 559.904844][ T9645] Call Trace: [ 559.904854][ T9645] [ 559.904865][ T9645] dump_stack_lvl+0xe8/0x150 [ 559.904910][ T9645] should_fail_ex+0x46b/0x600 [ 559.904957][ T9645] should_failslab+0xa8/0x100 [ 559.904985][ T9645] __kmalloc_cache_noprof+0xa1/0x680 [ 559.905027][ T9645] ? kvm_dev_ioctl+0xac5/0x17e0 [ 559.905044][ T9645] ? kvm_dev_ioctl+0xac5/0x17e0 [ 559.905066][ T9645] kvm_dev_ioctl+0xac5/0x17e0 [ 559.905090][ T9645] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 559.905106][ T9645] ? __fget_files+0x2a/0x420 [ 559.905129][ T9645] ? bpf_lsm_file_ioctl+0x9/0x20 [ 559.905151][ T9645] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 559.905168][ T9645] __se_sys_ioctl+0xff/0x170 [ 559.905196][ T9645] do_syscall_64+0x166/0x520 [ 559.905220][ T9645] ? trace_irq_disable+0x3b/0x140 [ 559.905250][ T9645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.905267][ T9645] ? clear_bhb_loop+0x70/0xc0 [ 559.905288][ T9645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.905304][ T9645] RIP: 0033:0x7f8a4c5be559 [ 559.905320][ T9645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.905335][ T9645] RSP: 002b:00007f8a4a816028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 559.905353][ T9645] RAX: ffffffffffffffda RBX: 00007f8a4c845fa0 RCX: 00007f8a4c5be559 [ 559.905366][ T9645] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 000000000000000b [ 559.905376][ T9645] RBP: 00007f8a4c655ad8 R08: 0000000000000000 R09: 0000000000000000 [ 559.905386][ T9645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.905396][ T9645] R13: 00007f8a4c846038 R14: 00007f8a4c845fa0 R15: 00007ffec9324de8 [ 559.905421][ T9645] [ 560.470073][ T9654] overlayfs: missing 'lowerdir' [ 561.600024][ T9673] input: syz1 as /devices/virtual/input/input58 [ 562.216217][ T6256] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 562.367288][ T6256] usb 2-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00 [ 562.368999][ T6256] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 562.369027][ T6256] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 562.370548][ T6256] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 562.370575][ T6256] usb 2-1: SerialNumber: syz [ 562.725648][ T6256] usb 2-1: 0:2 : does not exist [ 563.061380][ T6256] usb 2-1: USB disconnect, device number 48 [ 563.242186][ T9436] udevd[9436]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 563.558404][ T9724] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 565.189836][ T9782] input: syz0 as /devices/virtual/input/input59 [ 566.292774][ T9815] FAULT_INJECTION: forcing a failure. [ 566.292774][ T9815] name failslab, interval 1, probability 0, space 0, times 0 [ 566.292809][ T9815] CPU: 0 UID: 0 PID: 9815 Comm: syz.4.1134 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 566.292833][ T9815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 566.292845][ T9815] Call Trace: [ 566.292854][ T9815] [ 566.292862][ T9815] dump_stack_lvl+0xe8/0x150 [ 566.292905][ T9815] should_fail_ex+0x46b/0x600 [ 566.292948][ T9815] should_failslab+0xa8/0x100 [ 566.292975][ T9815] __kmalloc_noprof+0xfb/0x790 [ 566.293009][ T9815] ? tomoyo_encode+0x2ad/0x570 [ 566.293033][ T9815] ? tomoyo_encode+0x2ad/0x570 [ 566.293067][ T9815] tomoyo_encode+0x2ad/0x570 [ 566.293109][ T9815] tomoyo_realpath_from_path+0x5fa/0x640 [ 566.293145][ T9815] tomoyo_mount_permission+0x3e9/0x9e0 [ 566.293168][ T9815] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 566.293196][ T9815] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 566.293217][ T9815] ? kasan_save_track+0x4f/0x80 [ 566.293295][ T9815] ? kasan_quarantine_put+0xbb/0x1f0 [ 566.293332][ T9815] security_sb_mount+0xe4/0x320 [ 566.293367][ T9815] path_mount+0xbc/0x1050 [ 566.293395][ T9815] ? user_path_at+0xd4/0x160 [ 566.293424][ T9815] __se_sys_mount+0x31d/0x420 [ 566.293456][ T9815] ? __pfx___se_sys_mount+0x10/0x10 [ 566.293488][ T9815] ? __x64_sys_mount+0x20/0xc0 [ 566.293516][ T9815] do_syscall_64+0x166/0x520 [ 566.293550][ T9815] ? trace_irq_disable+0x3b/0x140 [ 566.293582][ T9815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.293606][ T9815] ? clear_bhb_loop+0x70/0xc0 [ 566.293635][ T9815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.293657][ T9815] RIP: 0033:0x7f5142cde559 [ 566.293678][ T9815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.293699][ T9815] RSP: 002b:00007f5140f36028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 566.293725][ T9815] RAX: ffffffffffffffda RBX: 00007f5142f65fa0 RCX: 00007f5142cde559 [ 566.293743][ T9815] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 566.293758][ T9815] RBP: 00007f5142d75ad8 R08: 0000200000000600 R09: 0000000000000000 [ 566.293773][ T9815] R10: 0000000000200042 R11: 0000000000000246 R12: 0000000000000000 [ 566.293789][ T9815] R13: 00007f5142f66038 R14: 00007f5142f65fa0 R15: 00007ffeb3c29438 [ 566.293823][ T9815] [ 566.293861][ T9815] ERROR: Out of memory at tomoyo_realpath_from_path. [ 566.729502][ T9823] overlayfs: failed to clone upperpath [ 566.771500][ T9823] overlayfs: missing 'lowerdir' [ 568.014461][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.014539][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.329346][ T5592] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 568.521241][ T6256] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 568.630200][ T9889] input: syz0 as /devices/virtual/input/input60 [ 568.702513][ T6256] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 568.704096][ T6256] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 568.704150][ T6256] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 568.746870][ T6256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.746899][ T6256] usb 4-1: Product: syz [ 568.746916][ T6256] usb 4-1: Manufacturer: syz [ 568.746931][ T6256] usb 4-1: SerialNumber: syz [ 568.916385][ T6739] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 568.990719][ T9883] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 569.067201][ T6739] usb 3-1: Using ep0 maxpacket: 16 [ 569.068642][ T6739] usb 3-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40 [ 569.073055][ T6739] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.073083][ T6739] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 569.073149][ T6739] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 569.137509][ T6739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.137539][ T6739] usb 3-1: Product: syz [ 569.137556][ T6739] usb 3-1: Manufacturer: syz [ 569.137573][ T6739] usb 3-1: SerialNumber: syz [ 569.772786][ T6739] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 569.802894][ T6739] usb 3-1: USB disconnect, device number 31 [ 569.813363][ T9883] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 569.913808][ T9410] udevd[9410]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 570.018183][ T6256] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 570.018230][ T6256] cdc_ncm 4-1:1.0: setting rx_max = 16384 [ 570.087081][ T30] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 570.219413][ T6256] cdc_ncm 4-1:1.0: setting tx_max = 16384 [ 570.249268][ T30] usb 2-1: unable to get BOS descriptor or descriptor too short [ 570.249883][ T30] usb 2-1: not running at top speed; connect to a high speed hub [ 570.249921][ T30] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 570.259528][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.259606][ T30] usb 2-1: Product: syz [ 570.259653][ T30] usb 2-1: Manufacturer: syz [ 570.259694][ T30] usb 2-1: SerialNumber: syz [ 570.586232][ T30] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 570.702275][ T6256] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 570.758138][ T5849] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 570.803906][ T6256] usb 4-1: USB disconnect, device number 40 [ 570.821586][ T6256] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 570.926232][ T5849] usb 3-1: Using ep0 maxpacket: 16 [ 570.927221][ T5849] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 570.929238][ T5849] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.929274][ T5849] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.929301][ T5849] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 570.929331][ T5849] usb 3-1: config 0 interface 0 has no altsetting 0 [ 570.929366][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.015377][ T5849] usb 3-1: config 0 descriptor?? [ 571.022278][ T30] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 571.252764][ T9410] udevd[9410]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 571.703199][ T5849] usb 3-1: USB disconnect, device number 32 [ 571.924972][ T9961] overlayfs: failed to clone lowerpath [ 571.958513][ T9961] overlayfs: failed to clone lowerpath [ 572.876729][ T5849] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 572.877281][ T6739] usb 2-1: USB disconnect, device number 49 [ 573.040752][ T5849] usb 3-1: unable to get BOS descriptor or descriptor too short [ 573.040814][ T5849] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 573.042040][ T5849] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.042068][ T5849] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 573.048384][ T5849] usb 3-1: string descriptor 0 read error: -22 [ 573.048541][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.124975][ T5849] usb 3-1: selecting invalid altsetting 1 [ 573.125857][ T5849] usb 3-1: unit 6 not found! [ 573.650041][ T36] kauditd_printk_skb: 75 callbacks suppressed [ 573.650063][ T36] audit: type=1326 audit(1792478249.479:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10014 comm="syz.1.1226" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3734bce559 code=0x0 [ 573.960886][ T5849] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 574.194287][ T5849] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 574.214993][ T5849] usb 3-1: USB disconnect, device number 33 [ 574.820893][T10075] overlayfs: missing 'lowerdir' [ 576.309897][T10124] overlayfs: failed to resolve './cgroup': -2 [ 577.640731][ T6739] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 577.787076][ T6739] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 577.788720][ T6739] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 577.788780][ T6739] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.788811][ T6739] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.788836][ T6739] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 577.791330][ T6739] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 577.791359][ T6739] usb 3-1: Manufacturer: syz [ 577.874856][ T6739] usb 3-1: config 0 descriptor?? [ 578.015121][T10167] syz.1.1284 (10167) used greatest stack depth: 17032 bytes left [ 578.038500][ T5317] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 578.207742][ T5317] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 578.242667][ T5317] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 578.242704][ T5317] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 578.277236][ T5317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.277332][ T5317] usb 5-1: Product: syz [ 578.277352][ T5317] usb 5-1: Manufacturer: syz [ 578.277368][ T5317] usb 5-1: SerialNumber: syz [ 578.330415][ T6739] appleir 0003:05AC:8243.0016: unknown main item tag 0x0 [ 578.398069][ T5317] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 578.413892][ T6739] appleir 0003:05AC:8243.0016: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 578.453442][ T5317] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 578.453442][ T5317] Please send a copy of this message to and [ 578.590394][T10187] fuse: fd is not a fuse device [ 578.976743][ T5317] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -32 [ 579.006273][ T5317] usb 5-1: USB disconnect, device number 28 [ 580.192807][T10232] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1307'. [ 580.466234][ T6256] usb 3-1: reset high-speed USB device number 34 using dummy_hcd [ 580.963988][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1319'. [ 582.154111][T10282] rxe_eth0 speed is unknown, defaulting to 1000 [ 582.287258][ T30] usb 3-1: USB disconnect, device number 34 [ 582.825885][T10309] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1340'. [ 582.986277][ T6256] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 583.145148][ T6256] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 583.171788][ T6256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.171823][ T6256] usb 3-1: Product: syz [ 583.171841][ T6256] usb 3-1: Manufacturer: syz [ 583.171858][ T6256] usb 3-1: SerialNumber: syz [ 583.569016][ T6256] rtl8150 3-1:1.0: couldn't reset the device [ 583.569432][ T6256] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 583.628258][ T6256] usb 3-1: USB disconnect, device number 35 [ 584.230103][T10343] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1354'. [ 584.319259][T10346] netlink: 'syz.2.1356': attribute type 9 has an invalid length. [ 584.833507][T10365] overlayfs: failed to clone lowerpath [ 585.396489][ T30] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 585.548183][ T30] usb 5-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00 [ 585.551174][ T30] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 585.551222][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 585.551252][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 585.551296][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.664974][ T30] usb 5-1: config 0 descriptor?? [ 585.678844][T10377] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 586.329939][ T30] apple 0003:05AC:024F.0017: hidraw0: USB HID v3.ff Device [HID 05ac:024f] on usb-dummy_hcd.4-1/input0 [ 586.391432][ T30] usb 5-1: USB disconnect, device number 29 [ 586.505500][T10411] fido_id[10411]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 587.795216][T10432] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 587.881029][ T36] audit: type=1326 audit(1792478263.709:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10435 comm="syz.3.1393" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5da94e559 code=0x0 [ 588.113958][T10440] overlayfs: failed to clone upperpath [ 588.661361][T10448] mmap: syz.0.1396 (10448): VmData 37584896 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 588.696182][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 588.856242][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 588.857110][ T10] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 588.858838][ T10] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 588.858869][ T10] usb 5-1: config 0 has no interface number 0 [ 588.858918][ T10] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 588.858947][ T10] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 588.863428][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.863461][ T10] usb 5-1: Product: syz [ 588.863478][ T10] usb 5-1: Manufacturer: syz [ 588.863496][ T10] usb 5-1: SerialNumber: syz [ 589.012527][ T10] usb 5-1: config 0 descriptor?? [ 589.013713][T10447] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 589.013909][T10447] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 589.256528][T10447] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 589.256824][T10447] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 589.462360][ T10] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 590.004674][T10470] Driver unsupported XDP return value 0 on prog (id 148) dev N/A, expect packet loss! [ 590.199535][T10474] syzkaller0: entered promiscuous mode [ 590.199629][T10474] syzkaller0: entered allmulticast mode [ 590.752283][ T10] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 590.752317][ T10] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 590.752562][ T10] asix 5-1:0.34: probe with driver asix failed with error -71 [ 590.929122][ T10] usb 5-1: USB disconnect, device number 30 [ 594.027423][ T5602] Bluetooth: hci5: command 0x1003 tx timeout [ 594.027753][ T5592] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 594.645767][T10507] Invalid logical block size (8192) [ 594.983222][T10536] CacheFiles: Failed to register: -95 [ 595.081034][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1427'. [ 595.456293][ T5317] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 595.965911][ T5317] usb 5-1: Using ep0 maxpacket: 32 [ 596.082978][ T5317] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 596.133810][ T5317] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 596.133909][ T5317] usb 5-1: config 0 has no interface number 0 [ 596.163561][ T5317] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 596.163659][ T5317] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 596.164265][ T5317] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 596.165045][ T5317] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 596.306751][ T5317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.306785][ T5317] usb 5-1: Product: syz [ 596.306802][ T5317] usb 5-1: Manufacturer: syz [ 596.306820][ T5317] usb 5-1: SerialNumber: syz [ 596.370418][ T5317] usb 5-1: config 0 descriptor?? [ 596.371637][T10536] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 596.413644][ T5317] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input63 [ 598.373295][ T6256] usb 5-1: USB disconnect, device number 31 [ 601.553926][ T36] audit: type=1326 audit(1792478277.359:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10575 comm="syz.1.1441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3734bce559 code=0x7ffc0000 [ 601.553999][ T36] audit: type=1326 audit(1792478277.359:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10575 comm="syz.1.1441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3734bce559 code=0x7ffc0000 [ 601.554048][ T36] audit: type=1326 audit(1792478277.359:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10575 comm="syz.1.1441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3734bce559 code=0x7ffc0000 [ 601.554097][ T36] audit: type=1326 audit(1792478277.369:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10575 comm="syz.1.1441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f3734bce559 code=0x7ffc0000 [ 601.554144][ T36] audit: type=1326 audit(1792478277.369:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10575 comm="syz.1.1441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3734bce559 code=0x7ffc0000 [ 601.554256][ T36] audit: type=1326 audit(1792478277.369:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10575 comm="syz.1.1441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3734bce559 code=0x7ffc0000 [ 601.554304][ T36] audit: type=1326 audit(1792478277.369:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10575 comm="syz.1.1441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3734bce559 code=0x7ffc0000 [ 601.554353][ T36] audit: type=1326 audit(1792478277.369:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10575 comm="syz.1.1441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3734bce559 code=0x7ffc0000 [ 601.554403][ T36] audit: type=1326 audit(1792478277.369:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10575 comm="syz.1.1441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3734bce559 code=0x7ffc0000 [ 601.554449][ T36] audit: type=1326 audit(1792478277.369:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10575 comm="syz.1.1441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3734bce559 code=0x7ffc0000 [ 602.312965][T10586] FAULT_INJECTION: forcing a failure. [ 602.312965][T10586] name failslab, interval 1, probability 0, space 0, times 0 [ 602.313005][T10586] CPU: 0 UID: 0 PID: 10586 Comm: syz.2.1445 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 602.313034][T10586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 602.313049][T10586] Call Trace: [ 602.313059][T10586] [ 602.313069][T10586] dump_stack_lvl+0xe8/0x150 [ 602.313116][T10586] should_fail_ex+0x46b/0x600 [ 602.313164][T10586] should_failslab+0xa8/0x100 [ 602.313196][T10586] __kmalloc_cache_noprof+0xa1/0x680 [ 602.313234][T10586] ? snd_card_file_add+0x58/0x250 [ 602.313262][T10586] ? snd_card_file_add+0x58/0x250 [ 602.313288][T10586] ? snd_lookup_oss_minor_data+0x11e/0x150 [ 602.313322][T10586] snd_card_file_add+0x58/0x250 [ 602.313352][T10586] snd_pcm_oss_open+0x180/0x1c10 [ 602.313386][T10586] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 602.313428][T10586] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 602.313467][T10586] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 602.313495][T10586] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 602.313534][T10586] ? rt_spin_unlock+0x159/0x200 [ 602.313568][T10586] ? rt_spin_unlock+0x165/0x200 [ 602.313609][T10586] chrdev_open+0x4dc/0x600 [ 602.313637][T10586] ? __pfx_chrdev_open+0x10/0x10 [ 602.313671][T10586] ? __pfx_chrdev_open+0x10/0x10 [ 602.313698][T10586] do_dentry_open+0x849/0x1420 [ 602.313745][T10586] vfs_open+0x3b/0x350 [ 602.313769][T10586] ? path_openat+0x16a9/0x20a0 [ 602.313807][T10586] path_openat+0x16c4/0x20a0 [ 602.313862][T10586] do_file_open+0x23e/0x4a0 [ 602.313904][T10586] ? __pfx_do_file_open+0x10/0x10 [ 602.313968][T10586] ? alloc_fd+0x654/0x6d0 [ 602.314009][T10586] do_sys_openat2+0x115/0x200 [ 602.314036][T10586] ? __se_sys_futex+0x3a8/0x450 [ 602.314064][T10586] ? __pfx_do_sys_openat2+0x10/0x10 [ 602.314098][T10586] ? rcu_is_watching+0x16/0xb0 [ 602.314129][T10586] __x64_sys_openat+0x138/0x170 [ 602.314162][T10586] do_syscall_64+0x166/0x520 [ 602.314195][T10586] ? trace_irq_disable+0x3b/0x140 [ 602.314230][T10586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.314256][T10586] ? clear_bhb_loop+0x70/0xc0 [ 602.314287][T10586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.314311][T10586] RIP: 0033:0x7f8a4c5be559 [ 602.314336][T10586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.314358][T10586] RSP: 002b:00007f8a4a816028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 602.314385][T10586] RAX: ffffffffffffffda RBX: 00007f8a4c845fa0 RCX: 00007f8a4c5be559 [ 602.314404][T10586] RDX: 00000000000a0201 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 602.314422][T10586] RBP: 00007f8a4c655ad8 R08: 0000000000000000 R09: 0000000000000000 [ 602.314438][T10586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.314453][T10586] R13: 00007f8a4c846038 R14: 00007f8a4c845fa0 R15: 00007ffec9324de8 [ 602.314491][T10586] [ 602.635257][T10592] CacheFiles: Failed to register: -95 [ 604.259610][ T30] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 605.946523][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 605.951110][ T30] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 607.020150][ T30] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 607.020183][ T30] usb 5-1: config 0 has no interface number 0 [ 607.021082][ T30] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 607.021110][ T30] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 607.021141][ T30] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 607.021167][ T30] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 608.028370][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.028402][ T30] usb 5-1: Product: syz [ 608.028418][ T30] usb 5-1: Manufacturer: syz [ 608.028435][ T30] usb 5-1: SerialNumber: syz [ 609.870655][ T30] usb 5-1: config 0 descriptor?? [ 610.130145][ T30] usb 5-1: can't set config #0, error -71 [ 610.186197][ T30] usb 5-1: USB disconnect, device number 32 [ 610.226178][ T5595] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 610.343748][ T5592] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 610.343792][ T5592] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 611.340549][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 611.340573][ T36] audit: type=1800 audit(1792478287.159:2488): pid=10638 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.1460" name="nullb0" dev="tmpfs" ino=1568 res=0 errno=0 [ 613.480674][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1461'. [ 613.734030][T10652] CacheFiles: Failed to register: -95 [ 614.226988][ T5849] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 616.227919][ T5849] usb 5-1: Using ep0 maxpacket: 32 [ 616.229306][ T5849] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 616.232417][ T5849] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 616.232447][ T5849] usb 5-1: config 0 has no interface number 0 [ 616.232496][ T5849] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 616.232521][ T5849] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 616.232551][ T5849] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 616.232579][ T5849] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 616.329005][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.329037][ T5849] usb 5-1: Product: syz [ 616.329054][ T5849] usb 5-1: Manufacturer: syz [ 616.329071][ T5849] usb 5-1: SerialNumber: syz [ 616.365202][ T5849] usb 5-1: config 0 descriptor?? [ 616.367617][T10652] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 616.406623][ T5849] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input64 [ 618.374429][ T5595] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 618.477490][ T30] usb 5-1: USB disconnect, device number 33 [ 618.634412][ T5595] usb 3-1: Using ep0 maxpacket: 32 [ 618.639400][ T5595] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 618.658091][ T5595] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 618.658123][ T5595] usb 3-1: config 0 has no interface number 0 [ 618.658923][ T5595] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 618.658959][ T5595] usb 3-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 618.658989][ T5595] usb 3-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 618.659015][ T5595] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 618.691784][ T5595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.691816][ T5595] usb 3-1: Product: syz [ 618.691835][ T5595] usb 3-1: Manufacturer: syz [ 618.691851][ T5595] usb 3-1: SerialNumber: syz [ 618.785656][ T5595] usb 3-1: config 0 descriptor?? [ 618.789534][T10681] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 618.815600][ T5595] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input65 [ 620.667506][ T5704] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 620.822383][ T5704] usb 4-1: New USB device found, idVendor=04b8, idProduct=2202, bcdDevice= 0.40 [ 620.824686][ T5704] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 620.829152][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.829311][ T5704] usb 4-1: Product: syz [ 620.829345][ T5704] usb 4-1: Manufacturer: syz [ 620.829362][ T5704] usb 4-1: SerialNumber: syz [ 620.848226][ T5317] usb 3-1: USB disconnect, device number 37 [ 620.848312][ C0] bcm5974 3-1:0.119: trackpad urb failed: -19 [ 622.070163][T10710] FAULT_INJECTION: forcing a failure. [ 622.070163][T10710] name failslab, interval 1, probability 0, space 0, times 0 [ 622.070207][T10710] CPU: 1 UID: 0 PID: 10710 Comm: syz.2.1483 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 622.070240][T10710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 622.070255][T10710] Call Trace: [ 622.070265][T10710] [ 622.070275][T10710] dump_stack_lvl+0xe8/0x150 [ 622.070320][T10710] should_fail_ex+0x46b/0x600 [ 622.070367][T10710] should_failslab+0xa8/0x100 [ 622.070397][T10710] __kmalloc_cache_noprof+0xa1/0x680 [ 622.070436][T10710] ? snd_pcm_oss_open+0xa3d/0x1c10 [ 622.070461][T10710] ? snd_pcm_oss_open+0xa3d/0x1c10 [ 622.070484][T10710] ? snd_pcm_oss_open+0x957/0x1c10 [ 622.070513][T10710] snd_pcm_oss_open+0xa3d/0x1c10 [ 622.070558][T10710] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 622.070599][T10710] ? rt_spin_unlock+0x159/0x200 [ 622.070631][T10710] ? __pfx_default_wake_function+0x10/0x10 [ 622.070664][T10710] ? rt_spin_unlock+0x165/0x200 [ 622.070706][T10710] chrdev_open+0x4dc/0x600 [ 622.070733][T10710] ? __pfx_chrdev_open+0x10/0x10 [ 622.070768][T10710] ? __pfx_chrdev_open+0x10/0x10 [ 622.070791][T10710] do_dentry_open+0x849/0x1420 [ 622.070830][T10710] vfs_open+0x3b/0x350 [ 622.070853][T10710] ? path_openat+0x16a9/0x20a0 [ 622.070898][T10710] path_openat+0x16c4/0x20a0 [ 622.070955][T10710] do_file_open+0x23e/0x4a0 [ 622.070998][T10710] ? __pfx_do_file_open+0x10/0x10 [ 622.071061][T10710] ? alloc_fd+0x654/0x6d0 [ 622.071101][T10710] do_sys_openat2+0x115/0x200 [ 622.071127][T10710] ? __se_sys_futex+0x3a8/0x450 [ 622.071155][T10710] ? __pfx_do_sys_openat2+0x10/0x10 [ 622.071188][T10710] ? rcu_is_watching+0x16/0xb0 [ 622.071218][T10710] __x64_sys_openat+0x138/0x170 [ 622.071252][T10710] do_syscall_64+0x166/0x520 [ 622.071287][T10710] ? trace_irq_disable+0x3b/0x140 [ 622.071321][T10710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.071345][T10710] ? clear_bhb_loop+0x70/0xc0 [ 622.071376][T10710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.071400][T10710] RIP: 0033:0x7f8a4c5be559 [ 622.071423][T10710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.071443][T10710] RSP: 002b:00007f8a4a816028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 622.071470][T10710] RAX: ffffffffffffffda RBX: 00007f8a4c845fa0 RCX: 00007f8a4c5be559 [ 622.071488][T10710] RDX: 00000000000a0201 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 622.071505][T10710] RBP: 00007f8a4c655ad8 R08: 0000000000000000 R09: 0000000000000000 [ 622.071521][T10710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.071536][T10710] R13: 00007f8a4c846038 R14: 00007f8a4c845fa0 R15: 00007ffec9324de8 [ 622.071574][T10710] [ 622.664219][T10715] CacheFiles: Failed to register: -95 [ 623.006199][ T5317] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 623.306160][ T5317] usb 3-1: Using ep0 maxpacket: 32 [ 623.323296][ T5317] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 623.329470][ T5317] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 623.329552][ T5317] usb 3-1: config 0 has no interface number 0 [ 623.329669][ T5317] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 623.329736][ T5317] usb 3-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 623.329806][ T5317] usb 3-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 623.329874][ T5317] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 623.413523][ T5317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.413553][ T5317] usb 3-1: Product: syz [ 623.413570][ T5317] usb 3-1: Manufacturer: syz [ 623.413586][ T5317] usb 3-1: SerialNumber: syz [ 623.450056][ T5704] usb 4-1: USB disconnect, device number 41 [ 623.486405][ T5317] usb 3-1: config 0 descriptor?? [ 623.488301][T10715] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 623.558367][ T5317] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input66 [ 625.708079][ T5595] usb 3-1: USB disconnect, device number 38 [ 626.004288][T10036] Bluetooth: hci5: Frame reassembly failed (-84) [ 626.014440][T10177] Bluetooth: hci5: Frame reassembly failed (-84) [ 626.262176][T10744] FAULT_INJECTION: forcing a failure. [ 626.262176][T10744] name failslab, interval 1, probability 0, space 0, times 0 [ 626.262215][T10744] CPU: 1 UID: 0 PID: 10744 Comm: syz.4.1495 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 626.262243][T10744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 626.262258][T10744] Call Trace: [ 626.262268][T10744] [ 626.262278][T10744] dump_stack_lvl+0xe8/0x150 [ 626.262321][T10744] should_fail_ex+0x46b/0x600 [ 626.262368][T10744] should_failslab+0xa8/0x100 [ 626.262397][T10744] __kmalloc_cache_noprof+0xa1/0x680 [ 626.262440][T10744] ? snd_card_file_add+0x58/0x250 [ 626.262478][T10744] ? snd_card_file_add+0x58/0x250 [ 626.262505][T10744] ? snd_lookup_oss_minor_data+0x11e/0x150 [ 626.262537][T10744] snd_card_file_add+0x58/0x250 [ 626.262568][T10744] snd_pcm_oss_open+0x180/0x1c10 [ 626.262603][T10744] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 626.262642][T10744] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 626.262682][T10744] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 626.262709][T10744] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 626.262748][T10744] ? rt_spin_unlock+0x159/0x200 [ 626.262782][T10744] ? rt_spin_unlock+0x165/0x200 [ 626.262823][T10744] chrdev_open+0x4dc/0x600 [ 626.262849][T10744] ? __pfx_chrdev_open+0x10/0x10 [ 626.262882][T10744] ? __pfx_chrdev_open+0x10/0x10 [ 626.262903][T10744] do_dentry_open+0x849/0x1420 [ 626.262942][T10744] vfs_open+0x3b/0x350 [ 626.262965][T10744] ? path_openat+0x16a9/0x20a0 [ 626.263003][T10744] path_openat+0x16c4/0x20a0 [ 626.263070][T10744] do_file_open+0x23e/0x4a0 [ 626.263109][T10744] ? __pfx_do_file_open+0x10/0x10 [ 626.263169][T10744] ? alloc_fd+0x654/0x6d0 [ 626.263206][T10744] do_sys_openat2+0x115/0x200 [ 626.263232][T10744] ? __se_sys_futex+0x3a8/0x450 [ 626.263259][T10744] ? __pfx_do_sys_openat2+0x10/0x10 [ 626.263309][T10744] ? rcu_is_watching+0x16/0xb0 [ 626.263340][T10744] __x64_sys_openat+0x138/0x170 [ 626.263373][T10744] do_syscall_64+0x166/0x520 [ 626.263409][T10744] ? trace_irq_disable+0x3b/0x140 [ 626.263442][T10744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.263477][T10744] ? clear_bhb_loop+0x70/0xc0 [ 626.263508][T10744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.263532][T10744] RIP: 0033:0x7f5142cde559 [ 626.263555][T10744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.263576][T10744] RSP: 002b:00007f5140f36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 626.263602][T10744] RAX: ffffffffffffffda RBX: 00007f5142f65fa0 RCX: 00007f5142cde559 [ 626.263620][T10744] RDX: 00000000000a0201 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 626.263637][T10744] RBP: 00007f5142d75ad8 R08: 0000000000000000 R09: 0000000000000000 [ 626.263653][T10744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 626.263667][T10744] R13: 00007f5142f66038 R14: 00007f5142f65fa0 R15: 00007ffeb3c29438 [ 626.263705][T10744] [ 628.133153][ T5592] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 629.493238][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.493324][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.645712][T10764] CacheFiles: Failed to register: -95 [ 631.696252][ T5595] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 631.846381][ T5595] usb 4-1: Using ep0 maxpacket: 32 [ 631.848779][ T5595] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 631.850471][ T5595] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 631.850560][ T5595] usb 4-1: config 0 has no interface number 0 [ 631.850608][ T5595] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 631.850634][ T5595] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 631.850671][ T5595] usb 4-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 631.850699][ T5595] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 631.854086][ T5595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.854114][ T5595] usb 4-1: Product: syz [ 631.854132][ T5595] usb 4-1: Manufacturer: syz [ 631.854148][ T5595] usb 4-1: SerialNumber: syz [ 631.956468][ T5595] usb 4-1: config 0 descriptor?? [ 631.957924][T10764] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 631.981797][ T5595] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input67 [ 632.026514][ C1] bcm5974 4-1:0.119: trackpad urb failed: -1 [ 633.568361][ T30] usb 4-1: USB disconnect, device number 42 [ 652.968270][T10778] CacheFiles: Failed to register: -95 [ 653.216195][ T5595] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 653.366353][ T5595] usb 4-1: Using ep0 maxpacket: 32 [ 653.367334][ T5595] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 653.369667][ T5595] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 653.369696][ T5595] usb 4-1: config 0 has no interface number 0 [ 653.369743][ T5595] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 653.369770][ T5595] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 653.369801][ T5595] usb 4-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 653.369828][ T5595] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 653.374235][ T5595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.374267][ T5595] usb 4-1: Product: syz [ 653.374280][ T5595] usb 4-1: Manufacturer: syz [ 653.374291][ T5595] usb 4-1: SerialNumber: syz [ 653.480361][ T5595] usb 4-1: config 0 descriptor?? [ 653.482253][T10778] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 653.504202][ T5595] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input68 [ 653.707777][ C1] bcm5974 4-1:0.119: trackpad urb failed: -1 [ 655.945986][ T5595] usb 4-1: USB disconnect, device number 43 [ 671.977007][ T36] audit: type=1326 audit(1792478347.809:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10783 comm="syz.0.1505" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4e77e559 code=0x7ffc0000 [ 671.979655][ T36] audit: type=1326 audit(1792478347.809:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10783 comm="syz.0.1505" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4e77e559 code=0x7ffc0000 [ 671.979708][ T36] audit: type=1326 audit(1792478347.809:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10783 comm="syz.0.1505" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4e77e559 code=0x7ffc0000 [ 671.979758][ T36] audit: type=1326 audit(1792478347.809:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10783 comm="syz.0.1505" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f3d4e77e559 code=0x7ffc0000 [ 671.979804][ T36] audit: type=1326 audit(1792478347.809:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10783 comm="syz.0.1505" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4e77e559 code=0x7ffc0000 [ 671.979852][ T36] audit: type=1326 audit(1792478347.809:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10783 comm="syz.0.1505" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4e77e559 code=0x7ffc0000 [ 671.979901][ T36] audit: type=1326 audit(1792478347.809:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10783 comm="syz.0.1505" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4e77e559 code=0x7ffc0000 [ 671.979949][ T36] audit: type=1326 audit(1792478347.809:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10783 comm="syz.0.1505" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3d4e77e559 code=0x7ffc0000 [ 671.979996][ T36] audit: type=1326 audit(1792478347.809:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10783 comm="syz.0.1505" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4e77e559 code=0x7ffc0000 [ 671.980044][ T36] audit: type=1326 audit(1792478347.809:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10783 comm="syz.0.1505" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4e77e559 code=0x7ffc0000 [ 672.303175][T10790] FAULT_INJECTION: forcing a failure. [ 672.303175][T10790] name failslab, interval 1, probability 0, space 0, times 0 [ 672.303216][T10790] CPU: 0 UID: 0 PID: 10790 Comm: syz.3.1508 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 672.303245][T10790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 672.303260][T10790] Call Trace: [ 672.303270][T10790] [ 672.303280][T10790] dump_stack_lvl+0xe8/0x150 [ 672.303324][T10790] should_fail_ex+0x46b/0x600 [ 672.303370][T10790] should_failslab+0xa8/0x100 [ 672.303399][T10790] __kmalloc_cache_noprof+0xa1/0x680 [ 672.303439][T10790] ? snd_pcm_oss_open+0xa3d/0x1c10 [ 672.303461][T10790] ? snd_pcm_oss_open+0xa3d/0x1c10 [ 672.303485][T10790] ? snd_pcm_oss_open+0x957/0x1c10 [ 672.303513][T10790] snd_pcm_oss_open+0xa3d/0x1c10 [ 672.303558][T10790] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 672.303599][T10790] ? rt_spin_unlock+0x159/0x200 [ 672.303632][T10790] ? __pfx_default_wake_function+0x10/0x10 [ 672.303666][T10790] ? rt_spin_unlock+0x165/0x200 [ 672.303708][T10790] chrdev_open+0x4dc/0x600 [ 672.303735][T10790] ? __pfx_chrdev_open+0x10/0x10 [ 672.303770][T10790] ? __pfx_chrdev_open+0x10/0x10 [ 672.303792][T10790] do_dentry_open+0x849/0x1420 [ 672.303831][T10790] vfs_open+0x3b/0x350 [ 672.303853][T10790] ? path_openat+0x16a9/0x20a0 [ 672.303891][T10790] path_openat+0x16c4/0x20a0 [ 672.303949][T10790] do_file_open+0x23e/0x4a0 [ 672.303991][T10790] ? __pfx_do_file_open+0x10/0x10 [ 672.304054][T10790] ? alloc_fd+0x654/0x6d0 [ 672.304095][T10790] do_sys_openat2+0x115/0x200 [ 672.304122][T10790] ? __se_sys_futex+0x3a8/0x450 [ 672.304157][T10790] ? __pfx_do_sys_openat2+0x10/0x10 [ 672.304191][T10790] ? rcu_is_watching+0x16/0xb0 [ 672.304221][T10790] __x64_sys_openat+0x138/0x170 [ 672.304255][T10790] do_syscall_64+0x166/0x520 [ 672.304289][T10790] ? trace_irq_disable+0x3b/0x140 [ 672.304323][T10790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.304354][T10790] ? clear_bhb_loop+0x70/0xc0 [ 672.304384][T10790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.304409][T10790] RIP: 0033:0x7fb5da94e559 [ 672.304431][T10790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.304453][T10790] RSP: 002b:00007fb5d8ba6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 672.304479][T10790] RAX: ffffffffffffffda RBX: 00007fb5dabd5fa0 RCX: 00007fb5da94e559 [ 672.304497][T10790] RDX: 00000000000a0201 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 672.304515][T10790] RBP: 00007fb5da9e5ad8 R08: 0000000000000000 R09: 0000000000000000 [ 672.304531][T10790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.304546][T10790] R13: 00007fb5dabd6038 R14: 00007fb5dabd5fa0 R15: 00007ffea8915968 [ 672.304584][T10790] [ 685.765630][T10809] CacheFiles: Failed to register: -95 [ 687.246740][ T5595] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 687.426260][ T5595] usb 5-1: Using ep0 maxpacket: 32 [ 687.428578][ T5595] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 687.430475][ T5595] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 687.430501][ T5595] usb 5-1: config 0 has no interface number 0 [ 687.430548][ T5595] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 687.430572][ T5595] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 687.430602][ T5595] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 687.430723][ T5595] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 687.434503][ T5595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.434532][ T5595] usb 5-1: Product: syz [ 687.434549][ T5595] usb 5-1: Manufacturer: syz [ 687.434567][ T5595] usb 5-1: SerialNumber: syz [ 687.467446][ T5595] usb 5-1: config 0 descriptor?? [ 687.521918][T10809] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 687.572847][ T5595] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input69 [ 688.950026][ T5602] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 688.986536][ T5602] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 688.988045][ T5602] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 688.989307][ T5602] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 688.990112][ T5602] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 689.230009][ T6256] usb 5-1: USB disconnect, device number 34 [ 689.943823][T10839] rxe_eth0 speed is unknown, defaulting to 1000 [ 690.889339][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.889425][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.047966][ T5592] Bluetooth: hci5: command tx timeout [ 692.419605][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1526'. [ 693.136218][ T5592] Bluetooth: hci5: command tx timeout [ 694.717983][ T5838] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 695.718640][ T5592] Bluetooth: hci5: command tx timeout [ 696.996120][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 696.996948][ T5838] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 696.998295][ T5838] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 696.998319][ T5838] usb 5-1: config 0 has no interface number 0 [ 696.998352][ T5838] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 696.998368][ T5838] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 696.998388][ T5838] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 696.998407][ T5838] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 697.114333][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.114365][ T5838] usb 5-1: Product: syz [ 697.114382][ T5838] usb 5-1: Manufacturer: syz [ 697.114398][ T5838] usb 5-1: SerialNumber: syz [ 697.186992][ T5838] usb 5-1: config 0 descriptor?? [ 697.194048][T10873] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 697.223339][ T5838] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input70 [ 697.508548][ T5838] usb 5-1: USB disconnect, device number 35 [ 697.508628][ C0] bcm5974 5-1:0.119: trackpad urb failed: -19 [ 697.776180][ T5592] Bluetooth: hci5: command tx timeout [ 699.813215][T10894] CacheFiles: Failed to register: -95 [ 700.006363][T10176] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.047578][ T5595] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 700.196484][ T5595] usb 5-1: Using ep0 maxpacket: 32 [ 700.197287][ T5595] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 700.198417][ T5595] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 700.198436][ T5595] usb 5-1: config 0 has no interface number 0 [ 700.198467][ T5595] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 700.198484][ T5595] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 700.198503][ T5595] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 700.198526][ T5595] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 700.200474][ T5595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.200493][ T5595] usb 5-1: Product: syz [ 700.200504][ T5595] usb 5-1: Manufacturer: syz [ 700.200518][ T5595] usb 5-1: SerialNumber: syz [ 700.246181][ T5595] usb 5-1: config 0 descriptor?? [ 700.262320][T10894] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 700.329918][ T5595] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input71 [ 701.054364][ C0] bcm5974 5-1:0.119: trackpad urb failed: -1 [ 701.303736][T10176] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.336684][ T5838] usb 5-1: USB disconnect, device number 36 [ 705.489135][T10907] FAULT_INJECTION: forcing a failure. [ 705.489135][T10907] name failslab, interval 1, probability 0, space 0, times 0 [ 705.489163][T10907] CPU: 1 UID: 0 PID: 10907 Comm: syz.4.1535 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 705.489181][T10907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 705.489190][T10907] Call Trace: [ 705.489196][T10907] [ 705.489203][T10907] dump_stack_lvl+0xe8/0x150 [ 705.489231][T10907] should_fail_ex+0x46b/0x600 [ 705.489260][T10907] should_failslab+0xa8/0x100 [ 705.489279][T10907] __kmalloc_noprof+0xfb/0x790 [ 705.489303][T10907] ? tomoyo_encode+0x2ad/0x570 [ 705.489320][T10907] ? tomoyo_encode+0x2ad/0x570 [ 705.489341][T10907] tomoyo_encode+0x2ad/0x570 [ 705.489361][T10907] tomoyo_realpath_from_path+0x5fa/0x640 [ 705.489388][T10907] tomoyo_check_open_permission+0x229/0x470 [ 705.489413][T10907] ? tomoyo_check_open_permission+0x1d3/0x470 [ 705.489436][T10907] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 705.489461][T10907] ? __asan_memset+0x22/0x50 [ 705.489504][T10907] ? mnt_get_write_access+0x66/0x2d0 [ 705.489529][T10907] ? tomoyo_file_open+0x167/0x220 [ 705.489551][T10907] security_file_open+0xa9/0x240 [ 705.489567][T10907] do_dentry_open+0x4be/0x1420 [ 705.489590][T10907] vfs_open+0x3b/0x350 [ 705.489603][T10907] ? path_openat+0x16a9/0x20a0 [ 705.489627][T10907] path_openat+0x16c4/0x20a0 [ 705.489661][T10907] do_file_open+0x23e/0x4a0 [ 705.489687][T10907] ? __pfx_do_file_open+0x10/0x10 [ 705.489716][T10907] ? __pfx_kfree_link+0x10/0x10 [ 705.489742][T10907] ? alloc_fd+0x654/0x6d0 [ 705.489767][T10907] do_sys_openat2+0x115/0x200 [ 705.489783][T10907] ? __se_sys_futex+0x3a8/0x450 [ 705.489800][T10907] ? __pfx_do_sys_openat2+0x10/0x10 [ 705.489817][T10907] ? ksys_write+0x248/0x270 [ 705.489836][T10907] ? __pfx___se_sys_futex+0x10/0x10 [ 705.489853][T10907] ? __pfx_ksys_write+0x10/0x10 [ 705.489875][T10907] __x64_sys_openat+0x138/0x170 [ 705.489895][T10907] do_syscall_64+0x166/0x520 [ 705.489918][T10907] ? trace_irq_disable+0x3b/0x140 [ 705.489939][T10907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.489954][T10907] ? clear_bhb_loop+0x70/0xc0 [ 705.489972][T10907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.490006][T10907] RIP: 0033:0x7f5142c9ed8e [ 705.490027][T10907] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 705.490042][T10907] RSP: 002b:00007f5140f35f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 705.490060][T10907] RAX: ffffffffffffffda RBX: 00007f5140f366c0 RCX: 00007f5142c9ed8e [ 705.490072][T10907] RDX: 0000000000000002 RSI: 00007f5142d753d2 RDI: ffffffffffffff9c [ 705.490083][T10907] RBP: 00007f5142d75ad8 R08: 0000000000000000 R09: 0000000000000000 [ 705.490094][T10907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.490103][T10907] R13: 00007f5142f66038 R14: 00007f5142f65fa0 R15: 00007ffeb3c29438 [ 705.490129][T10907] [ 705.490159][T10907] ERROR: Out of memory at tomoyo_realpath_from_path. [ 705.490207][T10907] FAULT_INJECTION: forcing a failure. [ 705.490207][T10907] name failslab, interval 1, probability 0, space 0, times 0 [ 705.490245][T10907] CPU: 1 UID: 0 PID: 10907 Comm: syz.4.1535 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 705.490262][T10907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 705.490271][T10907] Call Trace: [ 705.490276][T10907] [ 705.490283][T10907] dump_stack_lvl+0xe8/0x150 [ 705.490321][T10907] should_fail_ex+0x46b/0x600 [ 705.490349][T10907] should_failslab+0xa8/0x100 [ 705.490364][T10907] ? do_getname+0x2e/0x250 [ 705.490380][T10907] kmem_cache_alloc_noprof+0x9e/0x690 [ 705.490403][T10907] ? do_getname+0x2e/0x250 [ 705.490419][T10907] ? rt_mutex_slowunlock+0x219/0x460 [ 705.490439][T10907] do_getname+0x2e/0x250 [ 705.490454][T10907] ? getname_flags+0x11/0x20 [ 705.490471][T10907] do_sys_openat2+0xcc/0x200 [ 705.490490][T10907] ? __pfx_do_sys_openat2+0x10/0x10 [ 705.490507][T10907] ? ksys_write+0x248/0x270 [ 705.490532][T10907] ? __pfx_ksys_write+0x10/0x10 [ 705.490557][T10907] __x64_sys_openat+0x138/0x170 [ 705.490578][T10907] do_syscall_64+0x166/0x520 [ 705.490601][T10907] ? trace_irq_disable+0x3b/0x140 [ 705.490623][T10907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.490639][T10907] ? clear_bhb_loop+0x70/0xc0 [ 705.490658][T10907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.490673][T10907] RIP: 0033:0x7f5142cde559 [ 705.490686][T10907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.490699][T10907] RSP: 002b:00007f5140f36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 705.490715][T10907] RAX: ffffffffffffffda RBX: 00007f5142f65fa0 RCX: 00007f5142cde559 [ 705.490727][T10907] RDX: 0000000000121301 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 705.490737][T10907] RBP: 00007f5140f36090 R08: 0000000000000000 R09: 0000000000000000 [ 705.490746][T10907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.490755][T10907] R13: 00007f5142f66038 R14: 00007f5142f65fa0 R15: 00007ffeb3c29438 [ 705.490779][T10907] [ 706.510088][T10176] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.378671][ T5602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 707.439206][ T5602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 707.440637][ T5602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 707.457448][ T5602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 707.462245][ T5602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 707.949164][T10176] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.581301][ T5592] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 710.597659][ T5592] Bluetooth: hci1: command tx timeout [ 710.816326][T10839] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.816454][T10839] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.816662][T10839] bridge_slave_0: entered allmulticast mode [ 710.854762][T10839] bridge_slave_0: entered promiscuous mode [ 710.923377][T10839] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.923509][T10839] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.923704][T10839] bridge_slave_1: entered allmulticast mode [ 710.949505][T10839] bridge_slave_1: entered promiscuous mode [ 711.182222][T10921] rxe_eth0 speed is unknown, defaulting to 1000 [ 711.251704][T10839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.556277][T10176] bridge_slave_1: left allmulticast mode [ 711.593476][T10176] bridge_slave_1: left promiscuous mode [ 711.626164][T10176] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.646236][ T5592] Bluetooth: hci1: command tx timeout [ 713.071313][T10176] bridge_slave_0: left allmulticast mode [ 713.071355][T10176] bridge_slave_0: left promiscuous mode [ 713.071646][T10176] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.192720][T10977] fuse: fd is not a fuse device [ 714.389967][T10978] BTRFS error: failed to parse compression option 'zstd>6' [ 714.393255][ T5592] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9 [ 714.393293][ T5592] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 714.836160][ T5592] Bluetooth: hci1: command tx timeout [ 715.606384][T10047] IPVS: starting estimator thread 0... [ 715.696300][T10991] IPVS: using max 7 ests per chain, 16800 per kthread [ 716.896643][ T5592] Bluetooth: hci1: command tx timeout [ 717.017069][T10176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.076852][T10176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.128801][T10176] bond0 (unregistering): Released all slaves [ 717.149838][T10176] bond1 (unregistering): Released all slaves [ 717.211909][T10839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.986223][ T5317] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 718.728254][ T5317] usb 5-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 718.734153][ T5317] usb 5-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 718.734195][ T5317] usb 5-1: config 0 interface 0 has no altsetting 0 [ 718.734232][ T5317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.881432][ T5317] usb 5-1: config 0 descriptor?? [ 719.107402][T11002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.114649][T11002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.226875][ T5244] 8021q: adding VLAN 0 to HW filter on device eth1 [ 719.360706][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1555'. [ 719.360793][T11012] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1555'. [ 719.363138][T11012] 9p: Bad value for 'rfdno' [ 721.142336][T11013] kAFS: unable to lookup cell '.' [ 722.744059][ T5317] usbhid 5-1:0.0: can't add hid device: -71 [ 722.744175][ T5317] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 722.799215][ T5317] usb 5-1: USB disconnect, device number 37 [ 723.871687][T10839] team0: Port device team_slave_0 added [ 724.706476][T10839] team0: Port device team_slave_1 added [ 725.395725][T10839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.395746][T10839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.395936][T10839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.187915][T10839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.187937][T10839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.187971][T10839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.557645][T10839] hsr_slave_0: entered promiscuous mode [ 726.560051][T10839] hsr_slave_1: entered promiscuous mode [ 726.561247][T10839] debugfs: 'hsr0' already exists in 'hsr' [ 726.561274][T10839] Cannot create hsr debugfs directory [ 726.652524][T11052] FAULT_INJECTION: forcing a failure. [ 726.652524][T11052] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 726.652576][T11052] CPU: 0 UID: 0 PID: 11052 Comm: syz.4.1565 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 726.652603][T11052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 726.652618][T11052] Call Trace: [ 726.652627][T11052] [ 726.652638][T11052] dump_stack_lvl+0xe8/0x150 [ 726.652681][T11052] should_fail_ex+0x46b/0x600 [ 726.652728][T11052] prepare_alloc_pages+0x223/0x650 [ 726.652760][T11052] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 726.652790][T11052] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 726.652819][T11052] ? __pfx_policy_nodemask+0x10/0x10 [ 726.652847][T11052] ? __lock_acquire+0x747/0x2de0 [ 726.652889][T11052] alloc_pages_mpol+0xd4/0x280 [ 726.652921][T11052] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 726.652953][T11052] vma_alloc_folio_noprof+0xe1/0x1e0 [ 726.652983][T11052] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 726.653013][T11052] ? lock_acquire+0x115/0x350 [ 726.653057][T11052] do_pte_missing+0x835/0x28f0 [ 726.653091][T11052] ? handle_mm_fault+0xeb/0x28c0 [ 726.653129][T11052] handle_mm_fault+0xf64/0x28c0 [ 726.653169][T11052] ? handle_mm_fault+0xeb/0x28c0 [ 726.653214][T11052] ? __pfx_handle_mm_fault+0x10/0x10 [ 726.653245][T11052] ? lock_vma_under_rcu+0x45a/0x500 [ 726.653283][T11052] ? do_sys_openat2+0x14e/0x200 [ 726.653335][T11052] do_user_addr_fault+0xa4f/0x1340 [ 726.653371][T11052] ? trace_page_fault_user+0x84/0x1e0 [ 726.653398][T11052] exc_page_fault+0x6a/0xc0 [ 726.653434][T11052] asm_exc_page_fault+0x26/0x30 [ 726.653457][T11052] RIP: 0033:0x7f5142b9c61a [ 726.653479][T11052] Code: 48 83 c4 08 5b 5d e9 c5 fa ff ff 0f 1f 44 00 00 41 57 45 31 ff 41 56 41 55 41 54 41 bc 00 00 c0 fe 55 53 48 81 ec 38 1b 00 00 <48> 89 bc 24 a8 00 00 00 4c 8d ac 24 20 07 00 00 48 89 b4 24 a0 00 [ 726.653501][T11052] RSP: 002b:00007f5140f344b0 EFLAGS: 00010202 [ 726.653523][T11052] RAX: 00007f5142b9c600 RBX: 00007f5142f65fa0 RCX: 00002000000000c0 [ 726.653541][T11052] RDX: 000020000000a000 RSI: 0000000000000005 RDI: 0000000000000004 [ 726.653564][T11052] RBP: 00007f5140f36090 R08: 0000000000000001 R09: 0000000000000000 [ 726.653580][T11052] R10: 0000000000000004 R11: 000020000000a000 R12: 00000000fec00000 [ 726.653596][T11052] R13: 00007f5142f66038 R14: 00007f5142f65fa0 R15: 0000000000000000 [ 726.653633][T11052] [ 726.656903][T11052] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 726.911358][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1566'. [ 726.911385][T11055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1566'. [ 726.912346][T11055] 9p: Bad value for 'rfdno' [ 733.829769][ T5244] 8021q: adding VLAN 0 to HW filter on device eth2 [ 740.639867][T10176] hsr_slave_0: left promiscuous mode [ 740.677130][T10176] hsr_slave_1: left promiscuous mode [ 740.680032][T10176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.680196][T10176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.730153][T10176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.730182][T10176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.904511][T10176] veth1_macvtap: left promiscuous mode [ 740.913679][T10176] veth0_macvtap: left promiscuous mode [ 740.913945][T10176] veth1_vlan: left promiscuous mode [ 740.914243][T10176] veth0_vlan: left promiscuous mode [ 741.920534][T11128] syz.0.1576 uses obsolete (PF_INET,SOCK_PACKET) [ 742.848393][T10176] team0 (unregistering): Port device team_slave_1 removed [ 742.888577][T10176] team0 (unregistering): Port device team_slave_0 removed [ 743.225242][T11113] syzkaller0: entered promiscuous mode [ 743.225272][T11113] syzkaller0: entered allmulticast mode [ 743.414648][ T5244] 8021q: adding VLAN 0 to HW filter on device eth3 [ 743.758853][T10921] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.758944][T10921] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.759104][T10921] bridge_slave_0: entered allmulticast mode [ 743.761019][T10921] bridge_slave_0: entered promiscuous mode [ 743.981092][T10921] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.981228][T10921] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.981414][T10921] bridge_slave_1: entered allmulticast mode [ 743.987698][T10921] bridge_slave_1: entered promiscuous mode [ 745.021127][T10921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.065346][T10921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.107280][ T6739] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 745.185411][T10839] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 745.336754][T10839] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 745.571453][T10839] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 745.587492][ T6739] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 745.590124][ T6739] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 745.590152][ T6739] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 745.590190][ T6739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.309951][T10839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 746.569447][ T6739] usb 5-1: probing VID:PID(0424:012C) [ 746.571915][ T6739] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 746.571943][ T6739] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 746.571966][ T6739] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 746.571988][ T6739] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04 [ 746.572009][ T6739] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 746.649550][T10921] team0: Port device team_slave_0 added [ 746.702726][T10839] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 746.963199][T10839] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 746.976351][T10921] team0: Port device team_slave_1 added [ 747.008796][T10839] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 747.039499][ T6739] usb 5-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 747.222472][T10839] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 747.235527][ T6739] usb 5-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 747.441726][ T5244] 8021q: adding VLAN 0 to HW filter on device eth4 [ 747.454081][T10921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.454101][T10921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.454135][T10921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.522196][T10921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.522216][T10921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.522248][T10921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.842579][T10921] hsr_slave_0: entered promiscuous mode [ 747.843935][T10921] hsr_slave_1: entered promiscuous mode [ 747.844929][T10921] debugfs: 'hsr0' already exists in 'hsr' [ 747.844956][T10921] Cannot create hsr debugfs directory [ 748.082010][ T6739] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 748.160766][ T6739] usb 5-1: USB disconnect, device number 38 [ 748.260645][ T10] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 750.192529][ T5602] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 750.220408][ T5602] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 750.223627][ T5602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 750.246132][ T5602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 750.248191][ T5602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 752.653429][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.653507][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.794498][ T6217] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.303198][ T5602] Bluetooth: hci4: command tx timeout [ 753.682387][ T6217] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.175673][ T6217] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.248114][T11209] rxe_eth0 speed is unknown, defaulting to 1000 [ 755.366161][ T5602] Bluetooth: hci4: command tx timeout [ 755.748455][ T6217] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.061187][T10921] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 756.144630][T10921] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 756.158722][T10921] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 756.266594][T10921] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 756.297336][T10921] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 756.499746][T10921] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 756.544498][T10921] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 756.647459][T10921] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 757.448291][ T5602] Bluetooth: hci4: command tx timeout [ 758.668783][ T6217] bridge_slave_1: left allmulticast mode [ 758.668814][ T6217] bridge_slave_1: left promiscuous mode [ 758.669133][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.855946][ T6217] bridge_slave_0: left allmulticast mode [ 758.862780][ T6217] bridge_slave_0: left promiscuous mode [ 758.862993][ T6217] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.204381][ T5602] Bluetooth: hci4: command tx timeout [ 765.006734][ T5592] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 765.038488][ T5592] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 766.228243][ T6217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 766.279441][ T6217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 766.366904][ T6217] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 766.420469][ T6217] bond0 (unregistering): Released all slaves [ 767.884629][ T5602] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 767.929160][ T5602] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 767.951221][ T5602] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 767.994615][ T5602] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 768.009803][ T5602] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 770.326147][ T5592] Bluetooth: hci5: command tx timeout [ 770.789575][ T5244] 8021q: adding VLAN 0 to HW filter on device eth5 [ 773.127426][ T5592] Bluetooth: hci5: command tx timeout [ 775.206394][ T5592] Bluetooth: hci5: command tx timeout [ 777.082058][T11395] FAULT_INJECTION: forcing a failure. [ 777.082058][T11395] name failslab, interval 1, probability 0, space 0, times 0 [ 777.082097][T11395] CPU: 0 UID: 0 PID: 11395 Comm: syz.4.1631 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 777.082124][T11395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 777.082139][T11395] Call Trace: [ 777.082149][T11395] [ 777.082159][T11395] dump_stack_lvl+0xe8/0x150 [ 777.082199][T11395] should_fail_ex+0x46b/0x600 [ 777.082244][T11395] should_failslab+0xa8/0x100 [ 777.082272][T11395] __kmalloc_noprof+0xfb/0x790 [ 777.082318][T11395] ? tomoyo_realpath_from_path+0xef/0x640 [ 777.082345][T11395] ? tomoyo_realpath_from_path+0xef/0x640 [ 777.082381][T11395] tomoyo_realpath_from_path+0xef/0x640 [ 777.082430][T11395] ? tomoyo_path_number_perm+0x219/0x5f0 [ 777.082465][T11395] tomoyo_path_number_perm+0x246/0x5f0 [ 777.082504][T11395] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 777.082537][T11395] ? __lock_acquire+0x747/0x2de0 [ 777.082585][T11395] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 777.082619][T11395] ? hook_file_ioctl+0x1f5/0x610 [ 777.082670][T11395] ? __fget_files+0x2a/0x420 [ 777.082701][T11395] ? __fget_files+0x2a/0x420 [ 777.082726][T11395] ? __fget_files+0x3a8/0x420 [ 777.082753][T11395] ? __fget_files+0x2a/0x420 [ 777.082785][T11395] security_file_ioctl+0xc3/0x2a0 [ 777.082827][T11395] __se_sys_ioctl+0x47/0x170 [ 777.082865][T11395] do_syscall_64+0x166/0x520 [ 777.082898][T11395] ? trace_irq_disable+0x3b/0x140 [ 777.082929][T11395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.082954][T11395] ? clear_bhb_loop+0x70/0xc0 [ 777.082982][T11395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.083005][T11395] RIP: 0033:0x7f5142cde559 [ 777.083026][T11395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.083046][T11395] RSP: 002b:00007f5140f36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 777.083071][T11395] RAX: ffffffffffffffda RBX: 00007f5142f65fa0 RCX: 00007f5142cde559 [ 777.083089][T11395] RDX: 0000000000000000 RSI: 0000000090009427 RDI: 0000000000000003 [ 777.083103][T11395] RBP: 00007f5140f36090 R08: 0000000000000000 R09: 0000000000000000 [ 777.083117][T11395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.083131][T11395] R13: 00007f5142f66038 R14: 00007f5142f65fa0 R15: 00007ffeb3c29438 [ 777.083168][T11395] [ 777.286347][ T5592] Bluetooth: hci5: command tx timeout [ 777.354092][T11395] ERROR: Out of memory at tomoyo_realpath_from_path. [ 777.384971][T11209] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.386560][T11209] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.387174][T11209] bridge_slave_0: entered allmulticast mode [ 777.484156][T11209] bridge_slave_0: entered promiscuous mode [ 777.501072][T11327] rxe_eth0 speed is unknown, defaulting to 1000 [ 777.513061][T11209] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.515590][T11209] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.515758][T11209] bridge_slave_1: entered allmulticast mode [ 777.601802][T11209] bridge_slave_1: entered promiscuous mode [ 778.070123][T11209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.134492][T11209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.583333][T11209] team0: Port device team_slave_0 added [ 778.610690][T11209] team0: Port device team_slave_1 added [ 778.998892][T11209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.998913][T11209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.998945][T11209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.058493][T11209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.058513][T11209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.058546][T11209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.606319][ T6217] hsr_slave_0: left promiscuous mode [ 784.012847][ T6217] hsr_slave_1: left promiscuous mode [ 784.014138][ T6217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.014166][ T6217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.076480][ T6217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.076512][ T6217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.361314][ T6217] veth1_macvtap: left promiscuous mode [ 784.361429][ T6217] veth0_macvtap: left promiscuous mode [ 784.361710][ T6217] veth1_vlan: left promiscuous mode [ 784.361898][ T6217] veth0_vlan: left promiscuous mode [ 784.449575][T11435] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1636'. [ 785.612053][T11440] BTRFS error: failed to parse compression option 'zstd>6' [ 785.613682][ T5592] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9 [ 785.613708][ T5592] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 791.728991][ T6217] team0 (unregistering): Port device team_slave_1 removed [ 791.799835][ T6217] team0 (unregistering): Port device team_slave_0 removed [ 792.362500][T11209] hsr_slave_0: entered promiscuous mode [ 792.365919][T11209] hsr_slave_1: entered promiscuous mode [ 792.377875][T11209] debugfs: 'hsr0' already exists in 'hsr' [ 792.377973][T11209] Cannot create hsr debugfs directory [ 801.898234][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1645'. [ 801.898263][T11486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1645'. [ 801.935246][T11486] 9p: Bad value for 'rfdno' [ 806.377546][T11529] kAFS: unable to lookup cell '.' [ 809.151633][T11327] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.151768][T11327] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.152256][T11327] bridge_slave_0: entered allmulticast mode [ 809.288344][T11327] bridge_slave_0: entered promiscuous mode [ 809.446746][T11327] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.448696][T11327] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.448882][T11327] bridge_slave_1: entered allmulticast mode [ 809.488481][T11327] bridge_slave_1: entered promiscuous mode [ 809.622130][T11546] fuse: fd is not a fuse device [ 809.972305][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1655'. [ 809.972329][T11552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1655'. [ 809.973278][T11552] 9p: Bad value for 'rfdno' [ 810.207136][T11327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.288757][T11327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.556447][T11557] kAFS: unable to lookup cell '.' [ 810.718966][ T5602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 810.778720][ T5602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 810.796241][ T5602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 810.829601][ T5602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 810.835375][ T5602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 811.205392][T11327] team0: Port device team_slave_0 added [ 811.493393][T11327] team0: Port device team_slave_1 added [ 811.579439][T11574] CacheFiles: No cache directory specified [ 811.637872][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1658'. [ 812.039635][T11327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.039655][T11327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.039685][T11327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.064227][ T5244] 8021q: adding VLAN 0 to HW filter on device eth6 [ 812.085956][T11327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.087139][T11327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.087229][T11327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.213342][ T5602] Bluetooth: hci1: command tx timeout [ 813.413139][ T6217] bridge_slave_1: left allmulticast mode [ 813.413198][ T6217] bridge_slave_1: left promiscuous mode [ 813.413418][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.588538][ T6217] bridge_slave_0: left allmulticast mode [ 813.588569][ T6217] bridge_slave_0: left promiscuous mode [ 813.588754][ T6217] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.617926][T11591] fuse: fd is not a fuse device [ 813.776247][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.776302][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.937627][ T6217] bridge_slave_1: left allmulticast mode [ 813.937655][ T6217] bridge_slave_1: left promiscuous mode [ 813.937896][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.994064][T11595] kAFS: unable to lookup cell '.' [ 814.089549][ T6217] bridge_slave_0: left allmulticast mode [ 814.089579][ T6217] bridge_slave_0: left promiscuous mode [ 814.089778][ T6217] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.926381][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1667'. [ 815.023111][T11605] BTRFS error: failed to parse compression option 'zstd>6' [ 815.055630][ T5602] Bluetooth: hci3: unexpected cc 0x1407 length: 11 > 9 [ 815.055659][ T5602] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 815.193604][ T6217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 815.288361][ T5602] Bluetooth: hci1: command tx timeout [ 815.307553][ T6217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 815.414737][ T6217] bond0 (unregistering): Released all slaves [ 815.472697][T11609] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1670'. [ 816.208158][ T6217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.368748][ T6217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.471037][ T6217] bond0 (unregistering): Released all slaves [ 816.665223][T11327] hsr_slave_0: entered promiscuous mode [ 816.698008][T11327] hsr_slave_1: entered promiscuous mode [ 816.698804][T11327] debugfs: 'hsr0' already exists in 'hsr' [ 816.698824][T11327] Cannot create hsr debugfs directory [ 817.366348][ T5602] Bluetooth: hci1: command tx timeout [ 821.901899][ T5602] Bluetooth: hci1: command tx timeout [ 821.947224][T11636] fuse: fd is not a fuse device [ 822.261798][T11560] rxe_eth0 speed is unknown, defaulting to 1000 [ 822.278603][T11640] CacheFiles: No cache directory specified [ 822.479844][T11647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1677'. [ 822.901053][ T5602] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 822.901097][ T5602] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 823.098233][ T5244] 8021q: adding VLAN 0 to HW filter on device eth7 [ 829.170279][T11679] fuse: fd is not a fuse device [ 831.096407][ T5592] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 831.156700][ T5592] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 831.160818][ T5592] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 831.185194][ T5592] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 831.196445][ T5592] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 831.809680][ T5244] 8021q: adding VLAN 0 to HW filter on device eth8 [ 831.892168][T11716] CacheFiles: No cache directory specified [ 832.305525][T11724] fuse: fd is not a fuse device [ 833.809060][ T5602] Bluetooth: hci4: command tx timeout [ 836.778906][ T5602] Bluetooth: hci4: command tx timeout [ 839.700865][ T5592] Bluetooth: hci4: command tx timeout [ 840.339351][T11704] rxe_eth0 speed is unknown, defaulting to 1000 [ 840.433138][T11767] fuse: fd is not a fuse device [ 841.027637][ T6217] hsr_slave_0: left promiscuous mode [ 841.067887][ T6217] hsr_slave_1: left promiscuous mode [ 841.083893][ T6217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.120477][ T6217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.341107][T11784] kAFS: unable to lookup cell '.' [ 841.366236][ T6217] hsr_slave_0: left promiscuous mode [ 841.386534][ T6217] hsr_slave_1: left promiscuous mode [ 841.387606][ T6217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.430585][ T6217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.766156][ T5602] Bluetooth: hci4: command tx timeout [ 841.968278][ T6217] team0 (unregistering): Port device team_slave_1 removed [ 842.056908][ T6217] team0 (unregistering): Port device team_slave_0 removed [ 842.636774][ T5602] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 842.637247][ T5602] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 843.357220][ T6217] team0 (unregistering): Port device team_slave_1 removed [ 843.387084][ T6217] team0 (unregistering): Port device team_slave_0 removed [ 849.750516][T11803] fuse: fd is not a fuse device [ 852.666843][T11560] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.666977][T11560] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.670341][T11560] bridge_slave_0: entered allmulticast mode [ 852.679635][T11560] bridge_slave_0: entered promiscuous mode [ 852.729963][T11560] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.730097][T11560] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.730308][T11560] bridge_slave_1: entered allmulticast mode [ 852.735709][T11560] bridge_slave_1: entered promiscuous mode [ 853.171448][T11560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 853.268346][T11560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 854.693517][T11560] team0: Port device team_slave_0 added [ 854.695521][T11704] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.695636][T11704] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.695787][T11704] bridge_slave_0: entered allmulticast mode [ 854.700412][T11704] bridge_slave_0: entered promiscuous mode [ 855.770810][T11560] team0: Port device team_slave_1 added [ 855.771058][T11704] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.771244][T11704] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.771450][T11704] bridge_slave_1: entered allmulticast mode [ 855.824184][T11704] bridge_slave_1: entered promiscuous mode [ 856.241860][T11560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.241881][T11560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.241912][T11560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.244530][T11560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.244543][T11560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.244565][T11560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.409640][T11704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.429966][T11704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.730404][T11704] team0: Port device team_slave_0 added [ 856.754015][T11560] hsr_slave_0: entered promiscuous mode [ 856.765471][T11560] hsr_slave_1: entered promiscuous mode [ 856.777091][T11560] debugfs: 'hsr0' already exists in 'hsr' [ 856.777122][T11560] Cannot create hsr debugfs directory [ 856.784470][T11704] team0: Port device team_slave_1 added [ 861.862287][T11889] Invalid logical block size (8192) [ 862.139733][T11704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.139755][T11704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.139788][T11704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.243974][T11704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.243995][T11704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.244025][T11704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.888645][T11704] hsr_slave_0: entered promiscuous mode [ 862.891832][T11704] hsr_slave_1: entered promiscuous mode [ 862.893505][T11704] debugfs: 'hsr0' already exists in 'hsr' [ 862.893533][T11704] Cannot create hsr debugfs directory [ 862.934608][T11908] CacheFiles: Empty directory specified [ 862.941811][T11908] CacheFiles: No cache directory specified [ 865.687547][ T6217] bridge_slave_1: left allmulticast mode [ 865.687605][ T6217] bridge_slave_1: left promiscuous mode [ 865.687882][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.081264][ T6217] bridge_slave_0: left allmulticast mode [ 866.081305][ T6217] bridge_slave_0: left promiscuous mode [ 866.082686][ T6217] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.200702][T11951] Invalid logical block size (8192) [ 872.323160][ T6217] bridge_slave_1: left allmulticast mode [ 872.323201][ T6217] bridge_slave_1: left promiscuous mode [ 872.323459][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.639363][ T6217] bridge_slave_0: left allmulticast mode [ 872.639403][ T6217] bridge_slave_0: left promiscuous mode [ 872.639673][ T6217] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.801451][ T5592] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 872.844747][ T5592] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 872.855107][ T5592] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 872.871424][ T5592] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 872.879485][ T5592] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 875.254321][ T5602] Bluetooth: hci5: command tx timeout [ 875.255776][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.255864][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.286117][ T5602] Bluetooth: hci5: command tx timeout [ 877.860020][ T6217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 878.101792][ T6217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 878.200739][ T6217] bond0 (unregistering): Released all slaves [ 878.826959][ T6217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 878.936799][ T6217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.010026][ T6217] bond0 (unregistering): Released all slaves [ 879.067301][ T5244] 8021q: adding VLAN 0 to HW filter on device eth9 [ 879.367001][ T5602] Bluetooth: hci5: command tx timeout [ 881.354796][ T5602] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 881.365482][ T5602] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 881.956494][ T5602] Bluetooth: hci5: command tx timeout [ 886.267358][T12026] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1755'. [ 887.315723][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1756'. [ 889.423702][T11966] rxe_eth0 speed is unknown, defaulting to 1000 [ 889.885336][ T5602] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 889.892166][ T5602] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 890.720268][ T5592] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 890.752960][ T5592] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 890.766903][ T5592] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 890.776443][ T5592] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 890.779997][ T5592] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 892.966120][ T5602] Bluetooth: hci6: command tx timeout [ 894.183677][T12063] rxe_eth0 speed is unknown, defaulting to 1000 [ 895.769913][ T5602] Bluetooth: hci6: command tx timeout [ 898.592849][ T5602] Bluetooth: hci6: command tx timeout [ 899.669608][T12109] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1766'. [ 900.646509][ T5602] Bluetooth: hci6: command tx timeout [ 901.446120][ T39] INFO: task kworker/0:1:10 blocked for more than 149 seconds. [ 901.446156][ T39] Not tainted syzkaller #0 [ 901.446169][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 901.446181][ T39] task:kworker/0:1 state:D stack:22976 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 901.446247][ T39] Workqueue: events_freezable mmc_rescan [ 901.446391][ T39] Call Trace: [ 901.446399][ T39] [ 901.446416][ T39] __schedule+0x16d9/0x5700 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 901.446455][ T39] ? __lock_acquire+0x747/0x2de0 [ 901.446498][ T39] ? insert_work+0x3d/0x330 [ 901.446540][ T39] ? queue_work_on+0x106/0x1d0 [ 901.446572][ T39] ? vub300_mmc_request+0xd97/0x1910 [ 901.446657][ T39] ? mmc_go_idle+0x12c/0x2a0 [ 901.446708][ T39] ? mmc_rescan+0x701/0x1040 [ 901.446732][ T39] ? kthread+0x38b/0x470 [ 901.446755][ T39] ? ret_from_fork+0x514/0xb70 [ 901.446777][ T39] ? look_up_lock_class+0x57/0x110 [ 901.446820][ T39] ? __pfx___schedule+0x10/0x10 [ 901.446849][ T39] ? lock_acquire+0x115/0x350 [ 901.446892][ T39] ? schedule+0x90/0x2b0 [ 901.446927][ T39] schedule+0x164/0x2b0 [ 901.446964][ T39] schedule_timeout+0xc0/0x2c0 [ 901.446996][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 901.447045][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 901.447084][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 901.447118][ T39] ? wait_for_completion+0x272/0x5e0 [ 901.447170][ T39] wait_for_completion+0x2ca/0x5e0 [ 901.447218][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 901.447254][ T39] ? vub300_mmc_request+0x1000/0x1910 [ 901.447296][ T39] ? trace_mmc_request_start+0x81/0x1e0 [ 901.447358][ T39] mmc_wait_for_req_done+0x37/0x490 [ 901.447394][ T39] ? mmc_start_request+0x202/0x2d0 [ 901.447437][ T39] ? mmc_wait_for_req+0x1b5/0x240 [ 901.447470][ T39] mmc_wait_for_cmd+0x183/0x2a0 [ 901.447506][ T39] ? debug_object_free+0x29c/0x340 [ 901.447686][ T39] ? __pfx_mmc_wait_for_cmd+0x10/0x10 [ 901.447737][ T39] ? __pfx_mmc_wait_done+0x10/0x10 [ 901.447766][ T39] ? ktime_get+0x1f5/0x220 [ 901.447793][ T39] ? usleep_range_state+0x95/0x180 [ 901.447832][ T39] mmc_go_idle+0x12c/0x2a0 [ 901.447866][ T39] ? __pfx_mmc_go_idle+0x10/0x10 [ 901.447908][ T39] ? irqentry_exit+0x2a0/0x9b0 [ 901.447940][ T39] ? mmc_power_up+0x5d/0x650 [ 901.447969][ T39] ? mmc_attach_sd_uhs2+0x5e/0x900 [ 901.447993][ T39] ? trace_ ** replaying previous printk message ** [ 901.447993][ T39] ? trace_irq_disable+0x3b/0x140 [ 901.448029][ T39] mmc_rescan+0x701/0x1040 [ 901.448067][ T39] ? process_scheduled_works+0x97a/0x1630 [ 901.448116][ T39] process_scheduled_works+0xc3d/0x1630 [ 901.448190][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 901.448230][ T39] ? assign_work+0x3cf/0x5d0 [ 901.448268][ T39] worker_thread+0xa47/0xfb0 [ 901.448331][ T39] kthread+0x38b/0x470 [ 901.448356][ T39] ? __pfx_worker_thread+0x10/0x10 [ 901.448387][ T39] ? __pfx_kthread+0x10/0x10 [ 901.448413][ T39] ret_from_fork+0x514/0xb70 [ 901.448441][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 901.448465][ T39] ? __switch_to+0xc89/0x1420 [ 901.448504][ T39] ? __pfx_kthread+0x10/0x10 [ 901.448529][ T39] ret_from_fork_asm+0x1a/0x30 [ 901.448572][ T39] [ 901.448723][ T39] INFO: task kworker/0:8:6739 blocked for more than 149 seconds. [ 901.448741][ T39] Not tainted syzkaller #0 [ 901.448753][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 901.448764][ T39] task:kworker/0:8 state:D stack:21312 pid:6739 tgid:6739 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 901.448828][ T39] Workqueue: usb_hub_wq hub_event [ 901.448930][ T39] Call Trace: [ 901.448939][ T39] [ 901.448953][ T39] __schedule+0x16d9/0x5700 [ 901.448986][ T39] ? __lock_acquire+0x747/0x2de0 [ 901.449039][ T39] ? rcu_is_watching+0x16/0xb0 [ 901.449080][ T39] ? __pfx___schedule+0x10/0x10 [ 901.449722][ T39] ? schedule+0x90/0x2b0 [ 901.450129][ T39] schedule+0x164/0x2b0 [ 901.450294][ T39] schedule_timeout+0xc0/0x2c0 [ 901.450328][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 901.450362][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 901.450390][ T39] ? wait_for_completion+0x272/0x5e0 [ 901.451509][ T39] ? preempt_schedule_common+0x7f/0xd0 [ 901.451547][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 901.451580][ T39] ? wait_for_completion+0x272/0x5e0 [ 901.451613][ T39] wait_for_completion+0x2ca/0x5e0 [ 901.451661][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 901.451708][ T39] __flush_work+0x9c2/0xd70 [ 901.451743][ T39] ? __flush_work+0x101/0xd70 [ 901.451784][ T39] ? __pfx___flush_work+0x10/0x10 [ 901.451819][ T39] ? __pfx_wq_barrier_func+0x10/0x10 [ 901.451876][ T39] ? __cancel_work_sync+0x5c/0x110 [ 901.451903][ T39] __cancel_work_sync+0xbf/0x110 [ 901.451929][ T39] mmc_stop_host+0xd9/0x460 [ 901.451956][ T39] mmc_remove_host+0x15/0x60 [ 901.451983][ T39] vub300_disconnect+0x154/0x2f0 [ 901.452022][ T39] usb_unbind_interface+0x295/0x9f0 [ 901.452130][ T39] ? kernfs_remove_by_name_ns+0x101/0x140 [ 901.452170][ T39] ? __pfx_usb_unbind_interface+0x10/0x10 [ 901.452201][ T39] device_release_driver_internal+0x4f5/0x880 [ 901.452320][ T39] bus_remove_device+0x449/0x560 [ 901.452351][ T39] ? __pfx_bus_remove_device+0x10/0x10 [ 901.452377][ T39] ? up_read+0x34/0x180 [ 901.452404][ T39] ? kernfs_remove_by_name_ns+0x101/0x140 [ 901.452433][ T39] device_del+0x528/0x8f0 [ 901.452471][ T39] ? __pfx_device_del+0x10/0x10 [ 901.452498][ T39] ? kobject_put+0x516/0x550 [ 901.452535][ T39] usb_disable_device+0x3d4/0x8d0 [ 901.452575][ T39] usb_disconnect+0x32d/0x990 [ 901.452612][ T39] hub_event+0x1bb7/0x4cf0 [ 901.452652][ T39] ? __lock_acquire+0x747/0x2de0 [ 901.452689][ T39] ? register_lock_class+0x31/0x2e0 [ 901.455062][ T39] ? __pfx_hub_event+0x10/0x10 [ 901.455109][ T39] ? rcu_is_watching+0x16/0xb0 [ 901.455163][ T39] ? process_scheduled_works+0x97a/0x1630 [ 901.455198][ T39] process_scheduled_works+0xc3d/0x1630 [ 901.455267][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 901.455308][ T39] ? assign_work+0x3cf/0x5d0 [ 901.455348][ T39] worker_thread+0xa47/0xfb0 [ 901.455398][ T39] ? __kthread_parkme+0x71/0x1f0 [ 901.455446][ T39] kthread+0x38b/0x470 [ 901.455472][ T39] ? __pfx_worker_thread+0x10/0x10 [ 901.455504][ T39] ? __pfx_kthread+0x10/0x10 [ 901.455532][ T39] ret_from_fork+0x514/0xb70 [ 901.455560][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 901.455585][ T39] ? __switch_to+0xc89/0x1420 [ 901.455624][ T39] ? __pfx_kthread+0x10/0x10 [ 901.455651][ T39] ret_from_fork_asm+0x1a/0x30 [ 901.455693][ T39] [ 901.455740][ T39] [ 901.455740][ T39] Showing all locks held in the system: [ 901.455791][ T39] locks held by kworker/0:1/10: 2, on CPU#0: [ 901.455844][ T39] #0: ffff88813ff2a938 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 901.537656][ T39] #1: ffffc900000f7c40 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 901.537883][ T39] locks held by pr/ttyS0/38: 3, last CPU#1: [ 901.537903][ T39] #0: ffffffff8f09d858 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 901.538088][ T39] #1: ffffffff9aeb3f98 (&port_lock_key){+.+.}-{3:3}, at: nbcon_kthread_func+0x64c/0x880 [ 901.544762][ T39] #2: ffffffff8f1c3d40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 901.544925][ T39] locks held by khungtaskd/39: 1, last CPU#0: [ 901.544965][ T39] #0: ffffffff8f1c3d40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 901.549168][ T39] locks held by klogd/4938: 1, last CPU#0: [ 901.549218][ T39] #0: ffffffff8f1c3d40 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 901.549406][ T39] locks held by getty/5333: 2, on CPU#1: [ 901.549462][ T39] #0: ffff888035ed60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 901.549739][ T39] #1: ffffc900044db2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 901.549915][ T39] locks held by syz-executor/5569: 4, last CPU#0: [ 901.559796][ T39] #0: ffff8880373f44b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 901.559990][ T39] #1: ffffffff8f1c3d40 (rcu_read_lock){....}-{1:3}, at: is_module_text_address+0x1d/0x1e0 [ 901.560095][ T39] #2: ffff8880b843c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 901.561995][ T39] #3: ffff8880b8424548 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x57/0x790 [ 901.562140][ T39] locks held by syz-executor/5588: 2, last CPU#0: [ 901.562187][ T39] #0: ffff8880346a4510 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 901.562443][ T39] #1: ffffffff8f1c3d40 (rcu_read_lock){....}-{1:3}, at: find_lock_entries+0x12a/0xad0 [ 901.562622][ T39] locks held by kworker/u8:15/6217: 5, on CPU#0: [ 901.562663][ T39] #0: ffff88801beb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 901.562828][ T39] #1: ffffc9000605fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 901.575043][ T39] #2: ffffffff905c8240 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 901.575326][ T39] #3: ffff88813ff77348 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 901.575480][ T39] #4: ffff88813ff77238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 901.575606][ T39] locks held by kworker/0:8/6739: 5, on CPU#0: [ 901.575664][ T39] #0: ffff8880216add38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 901.575827][ T39] #1: ffffc90004867c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 901.582082][ T39] #2: ffff888029a9c210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 901.582246][ T39] #3: ffff888026f34210 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xe3/0x990 [ 901.602407][ T39] #4: ffff8880373071d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 901.602616][ T39] locks held by kworker/u8:24/10036: 8, on CPU#0: [ 901.602665][ T39] #0: ffff88813ff6c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 901.602836][ T39] #1: ffffc90020bbfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 901.603006][ T39] #2: ffff8880272d8310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 901.603346][ T39] #3: ffff88803f0ba120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 901.603555][ T39] #4: ffffffff8f1c3d40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 901.603710][ T39] #5: ffffffff8f059580 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 901.623373][ T39] #6: ffffffff8f1c3d40 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 901.623733][ T39] #7: ffff8880b84396f8 ((bh_lock)){+...}-{3:3}, at: napi_skb_cache_get+0xbf/0x450 [ 901.623995][ T39] locks held by syz-executor/11966: 5, last CPU#0: [ 901.624045][ T39] #0: ffffffff905c8240 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 901.624181][ T39] #1: ffffffff905d6a78 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820 [ 901.624368][ T39] #2: ffffffff8f3119f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 901.624540][ T39] #3: ffff88801bea9958 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xef/0x2a0 [ 901.624684][ T39] #4: ffffffff8f1c3d40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 901.637098][ T39] locks held by syz-executor/12063: 5, last CPU#0: [ 901.637151][ T39] #0: ffffffff905c8240 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 901.637328][ T39] #1: ffffffff90320420 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0 [ 901.637573][ T39] #2: ffffffff90320660 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0 [ 901.637755][ T39] #3: ffff888022abd208 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 901.637915][ T39] #4: ffff88813ff77238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 901.638082][ T39] locks held by syz.0.1757/12122: 1, last CPU#0: [ 901.638123][ T39] #0: ffff88813ff5deb8 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaf/0x130 [ 901.638304][ T39] locks held by syz.4.1770/12132: 4, last CPU#0: [ 901.638349][ T39] #0: ffff88803b2bdf58 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_sendmsg+0xb7c/0x2a50 [ 901.638537][ T39] #1: ffffffff8f1c3d40 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 901.657150][ T39] #2: ffff8880b843c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 901.657329][ T39] #3: ffff8880b8424548 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x57/0x790 [ 901.657487][ T39] locks held by dhcpcd-run-hook/12133: 5, last CPU#0: [ 901.657529][ T39] #0: ffff88803cdf8a88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 901.657709][ T39] #1: ffffffff8f1c3d40 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 901.657855][ T39] #2: ffff888050793958 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 901.658037][ T39] #3: ffffffff8f1c3d40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 901.658191][ T39] #4: ffff8880b8433f68 ((lock)#2){+.+.}-{3:3}, at: __folio_batch_add_and_move+0x289/0xaa0 [ 901.672321][ T39] [ 901.672343][ T39] ============================================= [ 901.672343][ T39] [ 901.672381][ T39] NMI backtrace for cpu 0 [ 901.672424][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 901.672500][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 901.672540][ T39] Call Trace: [ 901.672588][ T39] [ 901.672610][ T39] dump_stack_lvl+0xe8/0x150 [ 901.672708][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 901.672861][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 901.672937][ T39] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 901.673014][ T39] sys_info+0x135/0x170 [ 901.673077][ T39] watchdog+0xfd7/0x1030 [ 901.673168][ T39] ? watchdog+0x1c7/0x1030 [ 901.673271][ T39] kthread+0x38b/0x470 [ 901.673337][ T39] ? __pfx_watchdog+0x10/0x10 [ 901.673416][ T39] ? __pfx_kthread+0x10/0x10 [ 901.673485][ T39] ret_from_fork+0x514/0xb70 [ 901.673555][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 901.673623][ T39] ? __switch_to+0xc89/0x1420 [ 901.673718][ T39] ? __pfx_kthread+0x10/0x10 [ 901.673787][ T39] ret_from_fork_asm+0x1a/0x30 [ 901.673898][ T39] [ 901.673958][ T39] Sending NMI from CPU 0 to CPUs 1: [ 901.674023][ C1] NMI backtrace for cpu 1 [ 901.674038][ C1] CPU: 1 UID: 0 PID: 38 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 901.674067][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 901.674079][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 901.674161][ C1] Code: e8 fe 84 63 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 cf 42 d0 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 4a 15 fb 05 cc 44 89 f9 80 e1 07 [ 901.674177][ C1] RSP: 0018:ffffc90000af78b8 EFLAGS: 00000202 [ 901.674195][ C1] RAX: 1ffffffff35d6700 RBX: 00000000000003fd RCX: 0000000000000000 [ 901.674208][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 901.674220][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 901.674233][ C1] R10: dffffc0000000000 R11: ffffffff85635590 R12: dffffc0000000000 [ 901.674248][ C1] R13: 0000000000000000 R14: ffffffff9aeb3fc0 R15: 0000000000000000 [ 901.674260][ C1] FS: 0000000000000000(0000) GS:ffff888124ab9000(0000) knlGS:0000000000000000 [ 901.674277][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 901.674290][ C1] CR2: 0000200000001780 CR3: 000000003f0ea000 CR4: 00000000003526f0 [ 901.674307][ C1] Call Trace: [ 901.674315][ C1] [ 901.674324][ C1] wait_for_lsr+0x190/0x300 [ 901.674384][ C1] __serial8250_console_fifo_write+0xd0/0x3f0 [ 901.674414][ C1] serial8250_console_write+0xaa2/0x1220 [ 901.674450][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 901.674489][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 901.674526][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 901.674557][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 901.674598][ C1] nbcon_kthread_func+0x679/0x880 [ 901.674627][ C1] ? nbcon_kthread_func+0x163/0x880 [ 901.674653][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 901.674683][ C1] ? __kthread_parkme+0x71/0x1f0 [ 901.674712][ C1] ? __kthread_parkme+0x199/0x1f0 [ 901.674743][ C1] kthread+0x38b/0x470 [ 901.674762][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 901.674787][ C1] ? __pfx_kthread+0x10/0x10 [ 901.674807][ C1] ret_from_fork+0x514/0xb70 [ 901.674827][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 901.674846][ C1] ? __switch_to+0xc89/0x1420 [ 901.674874][ C1] ? __pfx_kthread+0x10/0x10 [ 901.674893][ C1] ret_from_fork_asm+0x1a/0x30 [ 901.674921][ C1] [ 901.702472][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 903.108117][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 903.117789][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 903.127884][ T39] Call Trace: [ 903.131201][ T39] [ 903.134164][ T39] vpanic+0x56d/0xa60 [ 903.138183][ T39] ? __pfx___schedule+0x10/0x10 [ 903.143083][ T39] ? __pfx_vpanic+0x10/0x10 [ 903.147635][ T39] panic+0xc5/0xd0 [ 903.151399][ T39] ? __pfx_panic+0x10/0x10 [ 903.155841][ T39] ? preempt_schedule_common+0x7f/0xd0 [ 903.161342][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 903.166753][ T39] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 903.172947][ T39] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 903.179150][ T39] watchdog+0x1030/0x1030 [ 903.183538][ T39] ? watchdog+0x1c7/0x1030 [ 903.188004][ T39] kthread+0x38b/0x470 [ 903.192116][ T39] ? __pfx_watchdog+0x10/0x10 [ 903.196923][ T39] ? __pfx_kthread+0x10/0x10 [ 903.201557][ T39] ret_from_fork+0x514/0xb70 [ 903.206227][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 903.211377][ T39] ? __switch_to+0xc89/0x1420 [ 903.216113][ T39] ? __pfx_kthread+0x10/0x10 [ 903.220783][ T39] ret_from_fork_asm+0x1a/0x30 [ 903.225612][ T39] [ 903.229254][ T39] Kernel Offset: disabled [ 903.233608][ T39] Rebooting in 86400 seconds..