last executing test programs: 9m9.708805396s ago: executing program 32 (id=1806): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000b80)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={0x0}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000dc0)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000e00)='0', 0x1, 0x40000, &(0x7f0000000e40)={0x11, 0x6, r3, 0x1, 0x2, 0x6, @local}, 0x14) 5m11.9920398s ago: executing program 33 (id=2425): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r1 = syz_clone(0x40000080, &(0x7f0000000000)="3d3e489f992280d85f10065a3a14862e8a7ba19f0b8eef", 0x17, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180)="29c35e0420b76cbb1321d2980ff478a2b0658052f6925edb6d4450198bd7") prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r1, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = userfaultfd(0x801) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001400090401000000000000002d000000010000000500020008"], 0x20}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x12, r2, 0xec776000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e2a, @empty}, 0x10) accept(r5, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000200)) recvfrom(r7, 0x0, 0x0, 0x4100, 0x0, 0x0) 4m4.52300346s ago: executing program 34 (id=2521): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRESHEX=r3, @ANYRES16=r1, @ANYRES16=r2, @ANYRESHEX=r2, @ANYRES8, @ANYRES8=r1], 0x5, 0x1537, &(0x7f0000001140)="$eJzs3AuYTlXbOPD7XmvtMaTxNMlhsta6N09yWCZJcgjJIUkqSZJTQtIkryQkhpCkIQnJYUhiCMlhYpLz+XxKSJImSUJyStb/mpi/t6/e8/u9vuud+3ddz2Xdz9pr7Xs/93NYe19mf9d1aO0mdWo0IiL4l+DFf5IBIBYABgJAPgAIAKB8fPn4rP7cEpP/tZ2wf6+H0q50BuxK4vrnbFz/nI3rn7Nx/XM2rn/OxvXP2bj+ORvXn7GcbPO0wtfwI+c++Pp/Tsa///9FMsuM/Wptmeu6AcT8vUO4/jkb1/+/VpDdiP0rG3H9czauf071174VWE7Bn/+cINdf7OH652xcf8Zysit9/flKPyDyf+w1OJr7YmH+U8fPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9B5zxlykAyG5f6bwYY4wxxhhjjDH27+NzXekMGGOMMcYYY4wx9r8PQYAEBQHEQC6IhdyQBwQAXA1xkA8icA3Ew7WQH66DAlAQCkFhSIDroQhoMGCBIISiUAyicAMUhxuhBJSEUlAaHJSBRLgJysLNUA5ugfJwK1SA26AiVILKUAVuh6pQDarDHVAD7oSaUAtqQx24C+rC3VAP7oH6cC80gPvgfngAGsKD0AgegsbwMDSBR6ApPArNoDm0gJbQ6p8a/wL0hBehF/SGZOgDfeEl6Af9YQC8DAPhFRgEr8JgeA1SYAgMhddhGLwBw+FNGAEjYRS8BaPhbRgDY2EcjIdUmAAT4R2YBO/CZHgPpsBUSINpMB3ehxkwE2bBBzAbPoQ5MBfmwXxIh49gASyEDPgYFsEnsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG22EH7IRPYRd8BrthD+yFz2EffPEPjj/9P8Z3Q0BAgQIVKozBGIzFWMyDeTAv5sU4jMMIRjAe4zE/5scCWAALYSFMwAQsgkXQoEFCwqJYFKMYxeJYHEtgCSyFpdChw0RMxLJ4M5bDclgey2MFrIAVsRJWwipYBatiVayO1bEG1sCaWBNrY228C+/CPlgP62F9rI8NsEH25SlshI2wMTbGJtgEm2JTbIbNsAW2wFbYCltja2yDbbAdtsP22B47YAdMwiTsiB2xE3bCztgZu2AX7IpdsRt2x+6ZL+QCfBFfxN5YU/TBvtgX+2FKrgH4Mr6Mr+AgfBVfxdcwBYfgUHwdX8c3cDiewhE4EkfhKKwq3sYxOBZJjMdUTMWJOBEn4STMSvQ9nIppOA2n43ScgTNxJn6As/FD/BDn4lycj+mYjgtwIWZgBi7C07gYl+BSXIbLcQUux1W4GgCScR2uxQ24ATfhJtyCW3AbbsMduAM/RQWAn+Ee3IMpuA/34X7cjwfwAB7Eg5iJmXgID+FhPIxH8AgexaN4DI/jCTyOJ/EknsLTeAbP4Dk8h+fxuYRvGn9ack0KiCxKKBEjYkSsiBV5RB6RV+QVcSJORERExIt4kV/kFwVEAVFIFBIJIkEUEUWEEUaQCGMAQERFVBQXxUUJUUKUEqWEE04kikRRVpQV5UQ5UV7cKiqI20RFUUm0dVVEFVFVtHPVxR2ihqghaopaoraoI+qIuqKuqCfqifqivmggGoj7xQOioeiDA/AhkVWZJmIINhVDsZloLuSlb7DWYji2EW1FO/GEGIkjsINo7ZLE06KjGIOdxJ/EWHxWdBHjsat4XnQT3UUP8YLoKdq4XqK3mIx9RF8xFfuJ/mKAeFnMwFriA5ydu7Z4TaSIIWKoeF3MxzfEcPGmGCFGilHiLTFavC3GiLFinBgvUsUEMVG8IyaJd8Vk8Z6YIqaKNDFNTBfvixlippglPhCzxYdijpgr5on5Il18JBaIhSJDfCwWiU/EYrFELBXLxHKxQqwUq8RqsUasFevEerFBbBSbxGaxRWwVsbBd7BA7xadil/hM7BZ7xF7xudgnvhD7xZfigPhKHBRfi0zxjTgkvhWHxXfiiPheHBU/iGPiuDghfhQnxU/ilDgtzoiz4pz4WZwXv4gLwguQKIWUUslAxshcMlbmlnnkVTKvDC69utfIeHmtzC+vkwVkQVlIFpYJ8npZRGpppJUkQ1lUFpNReYMsLm+UJWRJWUqWlk6WkYnyJllW3izLyVtkeXmrrCBvkxVlJVlZVpG3y6qymoTIxX3UlLVkbVlH3iWT4W5ZT94j68t7ZQN5n7xfPiAbygdlI/mQbCwflk3kI7KpfFQ2k81lC9lStpKPydbycdlGtpXt5BOyvXxSdpBPyST5tOwo/aW3yLOyi3xOdpXPy26yu+whf5EXpJe9ZG8JfUD2lS/JfrK/HBALAPIVOUi+KgfL12SKHCKHytflMPmGHC7flCPkSDlKviVHy7flGDlWjpPjZaqcICfKd+Qk+a6cLN+TU+RUmSanyQFy4K8zzZLyr4+3zwD8wfjBv+59k9wst8itcpvcLnfInfJTuUvukrvlbrlX7pX75D65X+6XB+QBeVAelJkyUx6Sh+RheVgekUfkUXlUHpPH5Vn5ozwpf5Kn5Gl5Wp6V5+Q5ef7SawAKlVBSKRWoGJVLxarcKo+6SuVVV6s4lU9F1DUqXl2r8qvrVAFVUBVShVWCul4VUVoZZRWpUBVVxVRU3YCX3jCqlCqtnCqjEtVN/8h4VVzdqEqokr8Zn51f8l/Ir5VqpVqr1qqNaqPaqXaqvWqvOqgOKkklqY6qo+qkOqnOqrPqorqorqpr1vtB9VA9VE/VU/VSvVSySlZ91Uuqn+qvBqiX1UD1ihqkBqnBarBKUSlqqBqqhqlhargarkbkAjVKjVKj1Wg1Ro1R49Q4lapS1UQ1UU1Sk9RkNVlNUVNUmkpT09V0NUPNULPULDVbzVZz1Bw1T81T6SpdLVALVIbKUIvUIrVYLVFL1DK1TK1QK9QqtUqtUWvUOrVObVAbVG7YrDarrWqr2q62q51qp9qldqndYrfaq/aqfWqf2q/2qwPqgDqoDqpMlakOqUPqsDqsjqgj6qg6qo6pY+qEOqFOqpPqlDqlzqgz6pw6p86r8+qCupC17AtEIAIVqCAmiAlig9ggT5AnyBvkDeKCuCASRIL4ID7IH0yLKxAUDAoFhYOE4PqgSKADE9hAXCp6NLghKB7cGJQISgalgtKBC8oEicFNQdng5qBccEtQPrg1qBDcFlQMKgWVgyrB7UHVoFpQPbgjqBHcGdQMagW1gzrBXUHd4O6gXnBPUD+4N2gQ3BfcHzwQNAweDBoFDwWNg4eDJsEjQdPg0aBZ0DxoEbQMWv1b5/f+VMHHXS/dWyfrPrqvfkn30/31AP2yHqhf0YP0q3qwfk2n6CF6qH5dD9Nv6OH6TT1Cj9Sj9Ft6tH5bj9Fj9Tg9XqfqCXqifkdP0u/qyfo9PUVP1Wl6mp6u39cz9Ew9S3+gZ+sP9Rw9V8/T83W6/kgv0At1hv5YL9Kf6MV6iV6ql+nleoVeqVfp1XqNXqvX6fV6g96oN+nNeoveqrfp7XqH3qk/1bv0Z3q33qP36s/1Pv2F3q+/1Af0V/qg/lpn6m/0If2tPqy/00f09/qo/kEf08f1Cf2jPql/0qf0aX1Gn9Xn9M/6vP5FX9A+a3Gf9fNulFEmxsSYWBNr8pg8Jq/Ja+JMnImYiIk38Sa/yW8KmAKmkClkEkyCKWKKmCxkyBQ1RU3URE1xU9yUMCVMKVPKOONMokk0ZU1ZU86UM+VNeVPBVDAVTUVT2VQ2t5vbTTVTzdxh7jB3mjtNLVPL1DF1TF1T19Qz9Ux9U980MA3M/eZ+09A0NI1MI9PYNDZNTBPT1DQ1zUwz08K0MK1MK9PatDZtTBvTzrQz7U1708F0MEkmyXQ0HU0n08l0Np1NF9PFdDVdTTfTzfQwPUxP09P0Mr1Mskk2fU1f08/0MwPMADPQDDSDzCAz2Aw2KSbFDDVDzTAzzAw3w80IM9KMylqomrfNGDPWjDPjTapJNRPNRDPJTDKTzWQzxUwxaSbNTDfTzQwzw8wys8xsM9vMMXPMPDPPpJt0s8AsMBkmwywyi8xis9gsNUvNcrPcrDQrzWqz2qw1a816WG82mo1ms9lstpqtZrvZbnaanWaX2WV2m91mr9lr9pl9Zr/Zbw6YA+agOWgyTaY5ZA6Zw+awOWKOmKPmqDlmjpkT5oQ5aU6aU+aUOWPOmHOm4KXfS29ibW6bx15l89qrbZzNZ/9nXMgWtgn2elvEalvAFvxNbKy1JWxJW8qWts6WsYn2pt/FFW0lW9lWsbfbqraarf67uK6929az99j69l5bx971m7iBvc9mrU4aIgLY5raxbWmb2EdsU/uobWab2xa2pW1vn7Qd7FM2yT5tO9pnfhcvsAvtarvGrrXr7G67x56xZ+1h+509Z3+2vWxvO9C+YgfZV+1g+5pNsUN+F4+yb9nR9m07xo614+z438VT7FSbZqfZ6fZ9O8PO/F2cbj+ys22GnWPn2nl2/q9xVk4Z9mO7yH5iF9sAltpldrldYVfaVdm5+nx2g91oN9ld9jO71W6z2+0OuzN7IWz32L32c7vPfmEP2W/tAfuVPWiP2Ez7za9x1vEdsd/bo/YHe8wetyfsj/ak/Ullj8469h/tL/aC9RYICUiSooBiKBfFUm7KQ1dRXrqa4igfRegaiqdrKT9dRwWoIBWiwpRA11MR0mTIElFIRakYRekGyk6vFJUmR2UokW6isnQzlaNbqDzdShXoNqpIlagyVaHbqSpVo+p0B9WgO6km1aLaVIfuorp0N9Wje6g+3UsN6D66nx6ghvQgNaKHqDE9TE3oEWpKj1Izak4tqCW1oseoNT1ObagttaMnqD09SR3oKUqip6kjPUOd6E/UmZ6lLvQcdaXnqRt1px70AvWkF6kX9aZk6kN96SXqR/1pAL1MA+kVGkSv0mB6jVJoCA2l12kYvUHD6U0aQSNpFL1Fo+ltGkNjaRyNp1SaQBPpHZpE79Jkeo+m0FRKo2k0nd6nGTSTZtEHNJs+pDk0l+bRfEqnj2gBLaQM+pgW0Se0mJbQUlpGy2kFraRVtJrW0FpaR+tpA22kTbSZttBW2kbbaQftpE9pF31Gu2kP7aXPaR99QUhf0gH6ig7S15RJ39Ah+pYO03d0hL73vekHOkbH6QT9SCfpJzpFp+kMnaVz9DOdp1/oAnmCEEMRylCFQRgT5gpjw9xhnvCqMG94dRgX5gsj4TVhfHhtmD+8LiwQFgwLhYXDhPD6sEioQxPakMIwLBoWC6PhDWHx8MawRFgyLBWWDl1YJkwMbwrLhjeH5cJbwvLhrWGF8LawYlgpfOTeKuHtYdWwWlg9vCOsEd4Z1gxrhbXDOuFdYd3w7rBeeE9YP7w3LBfeF94fPhA2DB8MG4UPhY3Dh8Mm4SNh0/DRsFnYPGwRtgxbhY+FrcPHwzZh27Bd+ETYPnwy7BA+FSaFT4cdw2d+7b9v4V/uTw77hH3Dl8KXQu/vkfOi86Pp0Y+iC6ILoxnRj6OLop9EF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGN0W9r5MLHDrhpFMucDEul4t1uV0ed5XL6652cS6fi7hrXLy71uV317kCrqAr5Aq7hGq5XBGnnXHWkQtdUVfMRd0Nrri70ZVwJV0pV9o5V8YlupaulWvlWrvHXRvX1rVzT7gn3JPuSfeUe8o97Tq6Z1wn9yfX2T3rurjn3HPuedfNdXc93Auup5sQd/Ezmez6ur6un+vnBrgBbqAb6Aa5QW6wG+xSXIob6oa6YW6YG+6GuxFuhBvlRrnRbrQb48a4cW6cS3WpbqKb6Ca5SW6ym+ymuCkuzaW56W66m+FmuKozL+5ljpvj5rl5Lt2luwUua82Y4Ra5RW6xW+yWuqVuuVvuVrqVbrVb7da6tW69W+82uo1us9vstrqtbrvb7na6nW6X2+V2+3wXJ3X73H633x1wB9xB97XLdN+4Q+5bd9h95464791R94M75o67E+5Hd9L95E650+6MO+vOuZ/defeLu+C8S41MiEyMvBOZFHk3MjnyXtaskbTItMj0yPuRGZGZkVmRDyKzIx9G5kTmRuZF5kfSIx9FFkQWRjIiH0cWRT6JLI4siSyNLIssj6yIeH/91tAX9cV81N/gi/sbfQlf0pfypb3zZXyiv8mX9Tf7cv4WX97f6iv423xFX8lX9o/6Zr65b+Fb+lb+Md/aP+7b+La+nX/Ct/dP+g7+KZ/kn/Yd/TO+k/+T7+yf9V38c76rf9538919D/+C7+lf9L18b5/s+/i+/iXfz/f3A/zLfqB/xQ/yr/rB/jWf4of4of51P8y/4Yf7N/0IP9KPinnLj84+RYbxPtVP8BP9O36Sf9dP9u/5KX6qT/PT/HT/vp/hZ/pZ/gM/23/o5/i5fp6f79P9R36BX+gz/Md+kf/EL/ZLsi8q+5V+lV/t1/i1fp1f7zf4jX6T3+y3+K1+m9/ud/id/lO/y3/md/s9fq//3O/zX/j9/kt/wH/lD/qvfab/xh/y3/rD/jt/xH/vj/of/DF/3J/wP/qT/id/yp/2Z/xZf87/7M/7X/wF/ps1xhhjjLG/y4TLTfHbnouX8/v8wRjxZxv3BYCrtxXO/PP+rBXl+gIX2/1FQvsIADzdu+tD2Y+aNZOTky9tu1hCUGxu1robLt19ACAGsmOAJdAOnoQkaAtl/zD//qL7Ofob80dvBcjzZ2Ni4XJ8ef4vATD5D+Z/7IlRCyqEZ+L/yvxzAUoUuzwmN1yOl0C7X6+vtIVyfyH/gq3/Rv65v0oFaPNnY/LC5fhy/onwODwDSb/ZkjHGGGOMMcYYu6i/qNw5+/wz+398/tH5eYK6PCYXXI7/1vk5Y4wxxhhjjDHGrrxnu/d46rGkpLad//FG9b+9jfr7Joz5o66m8M8mxo1/quE9wP8vHAD8ixMCZDXkf/IotvxH9pVy6aOT/Uz2HTSXn/UB/N8o5b+jcQW/lBhjjDHGGGP/Ky4v+n/7vLpSCTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYznQv3qPN/g77tJ3pY+RMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu9L+XwAAAP//iNb1Mw==") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4b3, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) write$binfmt_script(r8, &(0x7f0000000100)={'#! ', './file1'}, 0xb) close(r8) execveat$binfmt(0xffffffffffffff9c, r7, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) r9 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r9, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 3m15.451929542s ago: executing program 35 (id=2601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000002c0)) 2m39.663837203s ago: executing program 4 (id=2679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)={@val={0xa, 0x806}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100, @val=0xd7a919ca9eb57b16}}}}}}}}}, 0x4a) 2m37.462113698s ago: executing program 0 (id=2683): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='-2 -3', 0x5) openat(0xffffffffffffff9c, 0x0, 0x2002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1d) 2m37.009995384s ago: executing program 4 (id=2686): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$FIONREAD(r0, 0x8924, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x4000090) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./cgrp\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='ccgx-ucsi 0x08', 0xe) 2m35.886180072s ago: executing program 4 (id=2690): socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select ', 0xf) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 2m34.071200628s ago: executing program 4 (id=2700): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='-2 -3', 0x5) openat(0xffffffffffffff9c, 0x0, 0x2002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1d) 2m22.271195457s ago: executing program 36 (id=2683): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='-2 -3', 0x5) openat(0xffffffffffffff9c, 0x0, 0x2002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1d) 2m21.251295721s ago: executing program 37 (id=2688): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='-2 -3', 0x5) write(0xffffffffffffffff, &(0x7f00000003c0)='0', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1d) 2m18.716606644s ago: executing program 38 (id=2700): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='-2 -3', 0x5) openat(0xffffffffffffff9c, 0x0, 0x2002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1d) 2m17.711024446s ago: executing program 39 (id=2708): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='-2 -3', 0x5) openat(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)='0', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1d) 2m14.203644333s ago: executing program 40 (id=2722): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='-2 -3', 0x5) openat(0xffffffffffffff9c, 0x0, 0x2002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1d) 2m7.81232488s ago: executing program 41 (id=2734): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./nfsd\x00', &(0x7f0000000340)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='udp 2', 0x5) 2m1.050657026s ago: executing program 5 (id=2762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x41, 0x10000, 0x5, 0x4, 0x3, 0x108000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x6, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x8, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x1, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x0, 0xb}, {0x4, 0x4b, 0x0, 0x3a, 0x7f, 0x7ff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0xcce, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0x3}, {0x1, 0x2d73, 0x400, 0xe408, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x8}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x2000000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0xa, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x102, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x3, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x5}, {0xfe, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0x2}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001240)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000001280), 0x56) sendmsg$kcm(r8, &(0x7f00000012c0)={&(0x7f0000001300)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000001380)=[{&(0x7f00000013c0)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m59.898772563s ago: executing program 5 (id=2764): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000980)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7ff, 0x2, 0xfff, 0x10, 0xffff0001, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1m59.345435912s ago: executing program 5 (id=2765): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1m59.076847832s ago: executing program 5 (id=2767): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, 0x0) 1m58.937601061s ago: executing program 5 (id=2770): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000140)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001ac0)={0x1, &(0x7f0000001b00)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m58.673141024s ago: executing program 5 (id=2772): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)='0', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1d) 1m53.005828974s ago: executing program 0 (id=2740): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000080) 1m52.611039136s ago: executing program 0 (id=2786): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f00000005c0), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000640)={0x0, 0x0, 0x1, r1, 0xfffffff9}, 0xc) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000700)=ANY=[@ANYBLOB="33330000123400112233445586dd6000000000103b40fe8000000000000000000000000000bbff0e"], 0x0) 1m52.122243673s ago: executing program 0 (id=2788): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() openat$ptmx(0xffffffffffffff9c, 0x0, 0x6c0000, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x80000000}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000002100)) r3 = socket$netlink(0x10, 0x3, 0x6) writev(r3, 0x0, 0x0) 1m50.029988758s ago: executing program 0 (id=2793): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000c00), 0x842, 0x0) writev(r0, &(0x7f0000000c40)=[{&(0x7f0000000c80)="ff071d6ce89d96666b08e828be032f55097076e40148c200000000fb00000200"/50, 0x32}, {&(0x7f0000000cc0)="d1ca876f8f46c153dde8db040cc7e763ba2fab29aca1a1a2e0a38bc757e61b5aab090000000000000051ed697ff263589940cfc1c9d8febaecb3aef2d7650869408a287d92d06f5d660a68f3f0a39e926d8dbd6f8d9de335fe4c520feaffc62c3435ab63a2e77234987d3b1130d31bd78fb28883050a1b8dd4ea2cdc62703eb86600dba7da620ad621c21b75893f334cfc82a3931e8cf3dfa12d31fa32797f5a940475fd8947bde48c8126a44eb9d229126e34e0d8aace15047ccd5bd0932270c88dac48e0bbb2af55a35efca697fe5435b19f00"/221, 0xdd}, {&(0x7f0000000dc0)="a9e47d4ed965685b48214fff756364b93155b267f07697b5c2ede6ed45f973d3da857dba0deed519dc9a7267b99f19a1b405e7d2", 0x34}], 0x3) 1m49.849689784s ago: executing program 1 (id=2795): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04000000"], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x44) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'xfrm0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1720}], 0x1) 1m49.747749965s ago: executing program 0 (id=2796): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)='0', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1d) 1m49.149839046s ago: executing program 1 (id=2801): r0 = socket(0x2, 0x80805, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r0, 0x84, 0x83, &(0x7f00000002c0)={r4, 0x2}, 0x0) 1m48.92045987s ago: executing program 1 (id=2802): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)) r1 = syz_open_pts(r0, 0x8000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x1) ioctl(0xffffffffffffffff, 0x8914, &(0x7f0000000200)="736c300000000000000000000000000001") ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0xc0) 1m48.124620512s ago: executing program 1 (id=2805): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000480)=@filename='mtd0\x00', &(0x7f00000004c0)='./mnt\x00', &(0x7f0000000140)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt/fillfile\x00', 0x42, 0x9f) write(r0, &(0x7f0000000580)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) 1m47.649975859s ago: executing program 1 (id=2807): r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_MCE_KILL(0x4f, 0x1, 0x20000) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000440)={0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000500)={0x1003, 0x8000, 0x8204, 0x100009, 0xfffffffc, 0x8, 0x3ff, 0x40000008}, &(0x7f0000000540)=0x20) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r2, 0xa0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xb3) syz_emit_ethernet(0x12, &(0x7f0000000580)=ANY=[@ANYBLOB="7d041816be2cb54fa0aaaa000004424203"], 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0xfffffffdffffffff) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={0x0, 0x114}}, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x19f6, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x40000, &(0x7f00000003c0)={0xa, 0x4e20, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000400)=0x200005, 0x4) 1m45.774476189s ago: executing program 1 (id=2815): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)='0', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1d) 1m43.54214457s ago: executing program 42 (id=2772): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)='0', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1d) 1m34.571906749s ago: executing program 43 (id=2796): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)='0', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1d) 1m30.59595288s ago: executing program 44 (id=2815): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)='0', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1d) 1m29.700743891s ago: executing program 4 (id=2824): mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020}, 0x206f) umount2(&(0x7f00000047c0)='./file0\x00', 0xb) 1m29.384602498s ago: executing program 4 (id=2874): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1d) 1m13.968406414s ago: executing program 45 (id=2874): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1d) 43.162334769s ago: executing program 8 (id=2998): socket$pppoe(0x18, 0x1, 0x0) socket(0x10, 0x803, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$inet(0x2, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000640), &(0x7f0000000680)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, 0x0, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000740)=ANY=[], 0x0) 38.275611771s ago: executing program 8 (id=3013): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='jffs2\x00', 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000003c0)='./mnt/fillfile\x00', &(0x7f0000000400), &(0x7f0000000440)={'L-', 0x1000}, 0x16, 0x1) 38.100328029s ago: executing program 8 (id=3014): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_uring_setup(0x66a9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000001280)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000012c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x1) write(r0, &(0x7f0000001300)='27', 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)={0x1, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 37.853465204s ago: executing program 8 (id=3019): mkdir(&(0x7f0000000480)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000640)='./file1\x00', &(0x7f0000000680)='tmpfs\x00', 0x0, &(0x7f00000006c0)='usrquota') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1:1\n', 0x4) 37.49326413s ago: executing program 8 (id=3023): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x40) mount(0x0, &(0x7f0000000900)='./sys\x00', &(0x7f00000009c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @remote}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x3c1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x6, 0x4}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 34.549131208s ago: executing program 8 (id=3031): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xf8024100, 0x0, 0x0, 0x0, 0x0, 0x0) 19.296684005s ago: executing program 46 (id=3031): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xf8024100, 0x0, 0x0, 0x0, 0x0, 0x0) 10.246487159s ago: executing program 6 (id=3156): mkdirat(0xffffffffffffff9c, &(0x7f0000003180)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000031c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000003200)='./file0\x00', &(0x7f0000003240), 0x80, &(0x7f0000003280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000003300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000005340)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000053c0)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f0000005400)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000007400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000074c0)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000007500)="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", 0x2000, &(0x7f0000009500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) 8.654659207s ago: executing program 7 (id=3161): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='ccgx-ucsi 0x08', 0xe) 8.578493603s ago: executing program 6 (id=3162): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000004c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000000580)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000019580)=0x7) openat$binderfs(0xffffffffffffff9c, &(0x7f00000195c0)='./binderfs/binder0\x00', 0x0, 0x0) unshare(0x2020600) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x7d4}]}}, 0x0, 0x26, 0x0, 0x1, 0x9}, 0x28) 8.50462607s ago: executing program 2 (id=3163): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181603, 0x0) socket$alg(0x26, 0x5, 0x0) socket$kcm(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 7.872887793s ago: executing program 7 (id=3166): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e7861400bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 7.1696468s ago: executing program 9 (id=3167): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRESHEX=r3, @ANYRES16=r1, @ANYRES16=r2, @ANYRESHEX=r2, @ANYRES8, @ANYRES8=r1], 0x5, 0x1537, &(0x7f0000001140)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4b3, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_script(r7, &(0x7f0000000100)={'#! ', './file1'}, 0xb) close(r7) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r8, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2b, 0x4}, 0x20) 6.359193882s ago: executing program 7 (id=3168): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000f70086dd60fca33f00083c9c5c000000000000002000000000000000fe8000000000000000000000690007ab0000fd0066000000"], 0x0) mount(&(0x7f00000002c0)=@filename='mtd0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x804040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000004c0)='27', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file2\x00', 0x101042, 0x15) ioctl$OCFS2_IOC_UNRESVSP(r1, 0x40305829, &(0x7f0000000540)={0x0, 0x2, 0x0, 0x90, 0x4, 0xffff}) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x14}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000007c0)) sendmsg$nl_route(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000001000370429bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="890c020008010500280012800a000100767863616e0000001800028014000100000000", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x10c062) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/sync_on_suspend', 0x28681, 0xd0) mknodat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x2, 0x4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980), 0x2000010, &(0x7f00000009c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x5}) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000100)={r4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6010000000001001, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ee6acc9634464c516bddc70f35000000000000000000000000000000000000000000000000000000e0ff00", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce5, 0xfd]}}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) 5.586272535s ago: executing program 9 (id=3169): r0 = io_uring_setup(0x1612, &(0x7f0000000340)={0x0, 0x0, 0x3040}) mkdirat(0xffffffffffffff9c, &(0x7f0000001840)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000018c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001980)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f00000019c0)='7', 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x0}, 0x20) 5.212865718s ago: executing program 9 (id=3170): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000180)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x4}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000200)='\b', 0x1}], 0x1}, 0x4048043) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x7, 0x33b, 0x8, 0x3, 0xd06, 0x9, 0x40, {0x0, @in6={{0xa, 0x4e22, 0x8000, @private0, 0x8}}, 0x6, 0x8, 0x7, 0x9, 0x80000000}}, &(0x7f0000000300)=0xb0) 5.039898252s ago: executing program 9 (id=3171): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="1787ef8b7a23897f0de1bd82b1009dc6841376d01fb80189ce810a4e112079ba10d349ac3a16cd140fee5b3dda921394b22af6b7eec13678fe837027fb25c614ac7ed5b898624d12c2ff844c19ab42e7ebe8c8c4d383d09fc365041fc85ef9cf76596780f2f2cfecf28156ef7e98a8e2be8d8a7bc8291334eb782d8923c7c99ac738dc9f5ca72ed68e6a808726485e7f2def663c9d9a8b90e5d14a5ebb1404a548e64ff1", 0xa4}, {&(0x7f00000006c0)="91da5abc3faa3b4f1e812a16aa3a6dba482220731927cd8138ab958c743284aec37bfe9ef561cca7c22bd7112075870452ad4f5088d40a92de82e25ff919a126f18427852d5eb07b85c48d898bd844957fff5cd6951e24bc6ae626ccfc49f597", 0x60}, {&(0x7f00000007c0)="da46d1f03c9c0dd4d5a165fce4a4e8ff58d9281daf597e1e1547d4b2b5dedb46e06cbace23e6937bf6f920b58158a3262818743cb07e49f415729ae0c8ed2539d0974e187ccac409fd992bb2ceb99831be6a854b83a846eaadb6e2624181b646155796bb7912a0d45db6b7aeff40c7c1c964af90e70277912ac52412f34f4a109822d1497625c5fc811dae0d9727f1b6cc83d7ff05157360cdfa8fad3b413ac0b01c4cb6", 0xa4}], 0x3}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)="2913d2436fbca6482ecb4dfd39321e87f18b0c28a7fa410c7b6f4c362314d4273777273f2dc32094ba0e9f0051e582b7917665670b3c39d79f60b1b136660b5d682d69aaea9f623b5fcc71ae773949079a4697360e3d25b4c9a10ecbceafa28600981ceba6da61fddc494f19d41f93ca931d8c4b172bed08dff106e8cf287b66dfc1e489052843e98d1c93040f77186a6eda1b", 0x93}, {&(0x7f00000009c0)="9282bfe8af8dd480d81de1c17120024d1df34c99cc57a79bae0e4cfb061dd9", 0x1f}], 0x2}}], 0x3, 0x2090) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d00)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000d40)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000b00)=0xdf8, 0x4) write(r0, &(0x7f0000000b40)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc0", 0x106) 4.765763731s ago: executing program 2 (id=3173): mkdirat(0xffffffffffffff9c, &(0x7f0000003180)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000031c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000003200)='./file0\x00', &(0x7f0000003240), 0x80, &(0x7f0000003280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000003300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000005340)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000053c0)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f0000005400)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000007400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000074c0)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000007500)="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", 0x2000, &(0x7f0000009500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) 4.562569901s ago: executing program 7 (id=3174): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)="4c4c4c4ca39c1d2c6491c2124c4c4d4ce7fe79fb63b809eddb4c4c4c", 0x1c, 0x3}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x0, 0x0, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r3}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLL', 0x19}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r5, 0x0, 0x0, 0x10, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL'}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r5}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x18, r1}) close(r5) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c40)={0x18, r1}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000c80)={0x48, 0x9, 0x0, 0x0, 0x10}) close(r0) 4.242474252s ago: executing program 9 (id=3176): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)=""/81, 0x7ffff000}, {&(0x7f0000000d00)=""/83, 0x20000253}], 0x2}, 0x0) 4.213282698s ago: executing program 6 (id=3177): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='ccgx-ucsi 0x08', 0xe) 4.026608735s ago: executing program 9 (id=3178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001240)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000001280), 0x56) sendmsg$kcm(r8, &(0x7f00000012c0)={&(0x7f0000001300)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000001380)=[{&(0x7f00000013c0)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.918045964s ago: executing program 3 (id=3179): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e7861400bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.868086619s ago: executing program 7 (id=3180): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ttyUSB0\x00', 0x2, 0x0) 3.782761504s ago: executing program 6 (id=3181): r0 = io_uring_setup(0x1612, &(0x7f0000000340)={0x0, 0x0, 0x3040}) mkdirat(0xffffffffffffff9c, &(0x7f0000001840)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000018c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001980)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f00000019c0)='7', 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x0}, 0x20) 3.71040647s ago: executing program 3 (id=3182): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=@filename='mtd0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x804040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000004c0)='27', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file2\x00', 0x101042, 0x15) 3.702352846s ago: executing program 2 (id=3183): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_print_times', 0x2242, 0x114) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000003c0)={0x28, 0x6, r2, 0x0, &(0x7f0000003000/0x2000)=nil, 0x2000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000002480)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 3.452752348s ago: executing program 6 (id=3184): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000180)=[{0x20, 0x0, 0x81, 0xfffff038}, {0x6}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000001400)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001440)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001480)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000001780)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001800)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001880), 0x651, 0x0) recvmmsg(r2, &(0x7f00000018c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x1) unshare(0x22020600) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a00), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001cc0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x34}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001b00)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a00000000000001001002000012670000000000"], 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) open(0x0, 0x731cc0, 0x2d4) syz_ublk_setup_io_uring(0x2c73, &(0x7f0000001b40)={0x0, 0x34bb, 0x800, 0x2, 0x2e0}, &(0x7f0000001bc0), &(0x7f0000001c00), 0x0) 3.264416966s ago: executing program 3 (id=3185): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='jffs2\x00', 0x0, 0x0) setxattr$trusted_overlay_nlink(0x0, &(0x7f0000000400), &(0x7f0000000440)={'L-', 0x1000}, 0x16, 0x1) 3.177424345s ago: executing program 2 (id=3186): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000640)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000880)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000900)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000a00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)=""/81, 0x7ffff000}, {&(0x7f0000000d00)=""/83, 0x20000253}], 0x2}, 0x0) 2.885270233s ago: executing program 3 (id=3187): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="1787ef8b7a23897f0de1bd82b1009dc6841376d01fb80189ce810a4e112079ba10d349ac3a16cd140fee5b3dda921394b22af6b7eec13678fe837027fb25c614ac7ed5b898624d12c2ff844c19ab42e7ebe8c8c4d383d09fc365041fc85ef9cf76596780f2f2cfecf28156ef7e98a8e2be8d8a7bc8291334eb782d8923c7c99ac738dc9f5ca72ed68e6a808726485e7f2def663c9d9a8b90e5d14a5ebb1404a548e64ff1", 0xa4}, {&(0x7f00000006c0)="91da5abc3faa3b4f1e812a16aa3a6dba482220731927cd8138ab958c743284aec37bfe9ef561cca7c22bd7112075870452ad4f5088d40a92de82e25ff919a126f18427852d5eb07b85c48d898bd844957fff5cd6951e24bc6ae626ccfc49f597", 0x60}, {&(0x7f00000007c0)="da46d1f03c9c0dd4d5a165fce4a4e8ff58d9281daf597e1e1547d4b2b5dedb46e06cbace23e6937bf6f920b58158a3262818743cb07e49f415729ae0c8ed2539d0974e187ccac409fd992bb2ceb99831be6a854b83a846eaadb6e2624181b646155796bb7912a0d45db6b7aeff40c7c1c964af90e70277912ac52412f34f4a109822d1497625c5fc811dae0d9727f1b6cc83d7ff05157360cdfa8fad3b413ac0b01c4cb6", 0xa4}], 0x3}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)="2913d2436fbca6482ecb4dfd39321e87f18b0c28a7fa410c7b6f4c362314d4273777273f2dc32094ba0e9f0051e582b7917665670b3c39d79f60b1b136660b5d682d69aaea9f623b5fcc71ae773949079a4697360e3d25b4c9a10ecbceafa28600981ceba6da61fddc494f19d41f93ca931d8c4b172bed08dff106e8cf287b66dfc1e489052843e98d1c93040f77186a6eda1b", 0x93}, {&(0x7f00000009c0)="9282bfe8af8dd480d81de1c17120024d1df34c99cc57a79bae0e4cfb061dd9", 0x1f}], 0x2}}], 0x3, 0x2090) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d00)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000d40)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000b00)=0xdf8, 0x4) write(r0, &(0x7f0000000b40)="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", 0x106) 2.069234376s ago: executing program 3 (id=3188): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000004c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000000580)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000019580)=0x7) openat$binderfs(0xffffffffffffff9c, &(0x7f00000195c0)='./binderfs/binder0\x00', 0x0, 0x0) unshare(0x2020600) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x7d4}]}}, 0x0, 0x26, 0x0, 0x1, 0x9}, 0x28) 2.013076284s ago: executing program 2 (id=3189): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)=""/81, 0x7ffff000}, {&(0x7f0000000d00)=""/83, 0x20000253}], 0x2}, 0x0) 400.62756ms ago: executing program 7 (id=3190): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000000)="82", 0x1}], 0x1}}], 0x1, 0x0) 344.316686ms ago: executing program 2 (id=3191): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) mount(&(0x7f0000000480)=@filename='mtd0\x00', &(0x7f00000004c0)='./mnt\x00', &(0x7f0000000140)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt/fillfile\x00', 0x42, 0x9f) write(r0, &(0x7f0000000580)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f3031323334353637", 0x38) 84.382995ms ago: executing program 6 (id=3192): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='ccgx-ucsi 0x08', 0xe) 0s ago: executing program 3 (id=3193): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e7861400bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) kernel console output (not intermixed with test programs): d allmulticast mode [ 842.283594][T15161] bridge_slave_1: entered promiscuous mode [ 842.305432][ C1] net_ratelimit: 15 callbacks suppressed [ 842.305455][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.393094][T15161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 842.398821][T15161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.501567][T15161] team0: Port device team_slave_0 added [ 842.504917][T15161] team0: Port device team_slave_1 added [ 842.575668][T15161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 842.575692][T15161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.575725][T15161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.577792][T15161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.577808][T15161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.577842][T15161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.619321][T15231] overlayfs: overlapping lowerdir path [ 842.700226][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.860969][T14482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.902242][T15161] hsr_slave_0: entered promiscuous mode [ 842.903414][T15161] hsr_slave_1: entered promiscuous mode [ 842.904203][T15161] debugfs: 'hsr0' already exists in 'hsr' [ 842.904225][T15161] Cannot create hsr debugfs directory [ 843.143671][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.340267][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.468229][T15161] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.468273][T15161] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 50497 - 0 [ 843.750024][ T5618] Bluetooth: hci12: command tx timeout [ 843.753085][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.820972][T15161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.821020][T15161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 50497 - 0 [ 843.902208][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.221168][T14482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.255149][T15161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.255194][T15161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 50497 - 0 [ 844.302915][T10692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.303235][T10692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.513475][T15258] fuse: Unknown parameter 'group_id00000000000000000000' [ 844.514049][T15161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.514089][T15161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 50497 - 0 [ 845.021481][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 845.506991][T15271] fuse: Unknown parameter '0x0000000000000003' [ 845.723980][T15161] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 845.739799][T15161] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 845.740689][T15276] jffs2: notice: (15276) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 845.765223][T15161] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 845.779645][T15161] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 845.792966][T15161] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 845.804609][T15161] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 845.808831][T15161] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 845.820963][ T5618] Bluetooth: hci12: command tx timeout [ 845.848051][T15161] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 846.000387][ T122] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 846.052446][T15293] overlayfs: overlapping lowerdir path [ 846.152122][ T122] usb 9-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 846.157485][ T122] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.157516][ T122] usb 9-1: Product: syz [ 846.157535][ T122] usb 9-1: Manufacturer: syz [ 846.157554][ T122] usb 9-1: SerialNumber: syz [ 846.162708][T15161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.171976][ T122] usb 9-1: config 0 descriptor?? [ 846.252837][T15161] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.276567][ T6355] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.278293][ T6355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.327144][ T6355] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.327273][ T6355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 846.536576][T15309] jffs2: notice: (15309) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 846.843312][ T122] usb 9-1: f81604_read: reg: 105 failed: -EPROTO [ 846.843350][ T122] f81604 9-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 846.843383][ T122] f81604 9-1:0.0: probe with driver f81604 failed with error -71 [ 846.918673][ T122] usb 9-1: USB disconnect, device number 8 [ 847.049772][T15322] tipc: Started in network mode [ 847.050021][T15322] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 847.051387][T15322] tipc: Enabled bearer , priority 1 [ 847.510584][ C1] net_ratelimit: 14 callbacks suppressed [ 847.510611][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.616160][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.713897][T10692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.717372][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.726402][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.862776][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 847.862800][ T31] audit: type=1326 audit(1792219719.843:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15328 comm="syz.8.2854" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb906b9e559 code=0x7ffc0000 [ 847.863393][ T31] audit: type=1326 audit(1792219719.843:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15328 comm="syz.8.2854" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb906b9e559 code=0x7ffc0000 [ 847.863949][ T31] audit: type=1326 audit(1792219719.843:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15328 comm="syz.8.2854" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb906b9e559 code=0x7ffc0000 [ 847.864255][ T31] audit: type=1326 audit(1792219719.843:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15328 comm="syz.8.2854" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb906b9e559 code=0x7ffc0000 [ 847.865099][ T31] audit: type=1326 audit(1792219719.843:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15328 comm="syz.8.2854" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb906b9e559 code=0x7ffc0000 [ 847.865637][ T31] audit: type=1326 audit(1792219719.843:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15328 comm="syz.8.2854" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb906b9e559 code=0x7ffc0000 [ 847.865877][ T31] audit: type=1326 audit(1792219719.843:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15328 comm="syz.8.2854" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb906b9e559 code=0x7ffc0000 [ 847.866306][ T31] audit: type=1326 audit(1792219719.843:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15328 comm="syz.8.2854" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb906b9e559 code=0x7ffc0000 [ 847.866817][ T31] audit: type=1326 audit(1792219719.843:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15328 comm="syz.8.2854" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb906b9e559 code=0x7ffc0000 [ 847.867077][ T31] audit: type=1326 audit(1792219719.843:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15328 comm="syz.8.2854" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb906b9e559 code=0x7ffc0000 [ 847.901611][ T5618] Bluetooth: hci12: command tx timeout [ 847.901873][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.000538][T15330] fuse: Bad value for 'user_id' [ 848.000564][T15330] fuse: Bad value for 'user_id' [ 848.060627][ T25] tipc: Node number set to 43690 [ 848.520414][T15343] fuse: Unknown parameter '0x0000000000000003' [ 848.540502][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.785570][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.940182][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.256693][T14482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.484423][ T52] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 849.488632][ T52] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 849.508062][ T52] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 849.531535][ T52] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 849.534301][ T52] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 849.808848][T15364] netlink: 'syz.7.2862': attribute type 1 has an invalid length. [ 849.939659][T15161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 850.660477][ T5768] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 850.821472][ T5768] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 850.825459][ T5768] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.825493][ T5768] usb 7-1: Product: syz [ 850.825512][ T5768] usb 7-1: Manufacturer: syz [ 850.825531][ T5768] usb 7-1: SerialNumber: syz [ 850.980725][ T5768] usb 7-1: config 0 descriptor?? [ 851.583861][ T5618] Bluetooth: hci13: command tx timeout [ 851.740878][T15405] fuse: Bad value for 'user_id' [ 851.740905][T15405] fuse: Bad value for 'user_id' [ 851.812358][ T5768] usb 7-1: f81604_read: reg: 105 failed: -EPROTO [ 851.812398][ T5768] f81604 7-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 851.812430][ T5768] f81604 7-1:0.0: probe with driver f81604 failed with error -71 [ 851.859077][ T5768] usb 7-1: USB disconnect, device number 31 [ 851.924297][T15161] veth0_vlan: entered promiscuous mode [ 851.945223][T15161] veth1_vlan: entered promiscuous mode [ 852.025635][T15161] veth0_macvtap: entered promiscuous mode [ 852.059457][T15161] veth1_macvtap: entered promiscuous mode [ 852.101679][T15161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 852.121774][T15161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 852.190931][ T6356] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.291134][ T5605] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 852.293149][ T8039] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.299128][T15349] rxe_eth0 speed is unknown, defaulting to 1000 [ 852.300845][T14086] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.301865][T14086] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.383646][T14482] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 852.438760][ T8039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.438790][ T8039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.440870][ T5605] usb 9-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 852.445115][ T5605] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 852.445151][ T5605] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 852.445196][ T5605] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.522922][ T5605] usb-storage 9-1:1.0: USB Mass Storage device detected [ 852.568038][ T5605] usb-storage 9-1:1.0: Quirks match for vid 0451 pid 5416: 2 [ 852.570152][ T5605] scsi host1: usb-storage 9-1:1.0 [ 852.582868][T14482] usb 8-1: Using ep0 maxpacket: 16 [ 852.584996][T14482] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 852.586827][T14482] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 852.607209][T14482] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.607247][T14482] usb 8-1: Product: syz [ 852.607269][T14482] usb 8-1: Manufacturer: syz [ 852.607292][T14482] usb 8-1: SerialNumber: syz [ 852.645432][T14482] usb 8-1: config 0 descriptor?? [ 852.701404][ C1] net_ratelimit: 14 callbacks suppressed [ 852.701429][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.748551][ T8039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.748580][ T8039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.817672][T14482] usb 9-1: USB disconnect, device number 9 [ 852.842640][ T52] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 852.845779][ T52] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 852.852286][ T52] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 852.887109][T15425] overlayfs: failed to resolve './file0': -2 [ 852.887251][ T52] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 852.889408][ T52] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 852.945499][T10658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.989614][T15425] overlayfs: overlapping lowerdir path [ 853.100261][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.232088][T15433] fuse: Bad value for 'fd' [ 853.420873][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.664263][ T52] Bluetooth: hci13: command tx timeout [ 853.740281][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.821067][ T122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.824578][ T5605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.865560][T15456] jffs2: notice: (15456) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 853.986048][T10661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.150285][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.177072][T15467] fuse: Bad value for 'user_id' [ 854.177099][T15467] fuse: Bad value for 'user_id' [ 854.280665][T15422] rxe_eth0 speed is unknown, defaulting to 1000 [ 854.464244][T14482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.554616][T15349] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.554735][T15349] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.554939][T15349] bridge_slave_0: entered allmulticast mode [ 854.566840][T15349] bridge_slave_0: entered promiscuous mode [ 854.576009][T15349] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.576126][T15349] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.580285][T15349] bridge_slave_1: entered allmulticast mode [ 854.586229][T15349] bridge_slave_1: entered promiscuous mode [ 854.723314][T15349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 854.749221][T15349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 854.825939][T15349] team0: Port device team_slave_0 added [ 854.843292][T15349] team0: Port device team_slave_1 added [ 854.918435][T15349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 854.918453][T15349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.918476][T15349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 854.953315][ T52] Bluetooth: hci14: command tx timeout [ 854.997537][T15349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.997557][T15349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.997581][T15349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 855.132565][T15493] fuse: Bad value for 'fd' [ 855.790333][ T52] Bluetooth: hci13: command tx timeout [ 856.237163][T10692] usb 8-1: USB disconnect, device number 5 [ 856.447570][T15349] hsr_slave_0: entered promiscuous mode [ 856.448556][T15349] hsr_slave_1: entered promiscuous mode [ 856.464045][T15349] debugfs: 'hsr0' already exists in 'hsr' [ 856.464073][T15349] Cannot create hsr debugfs directory [ 856.888642][T15517] netlink: 'syz.6.2886': attribute type 2 has an invalid length. [ 856.888676][T15517] netlink: 'syz.6.2886': attribute type 2 has an invalid length. [ 857.020960][ T52] Bluetooth: hci14: command tx timeout [ 857.223166][T15518] syzkaller0: entered promiscuous mode [ 857.223199][T15518] syzkaller0: entered allmulticast mode [ 857.823808][ T52] Bluetooth: hci13: command tx timeout [ 857.873949][T10661] net_ratelimit: 15 callbacks suppressed [ 857.873975][T10661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.899270][T10661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.910319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.003846][T15532] tipc: Started in network mode [ 858.003890][T15532] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 858.004066][T15532] tipc: Enabled bearer , priority 1 [ 858.300904][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.385150][T15529] syzkaller0: entered promiscuous mode [ 858.385186][T15529] syzkaller0: entered allmulticast mode [ 858.950396][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.024823][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.025291][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.118436][ T52] Bluetooth: hci14: command tx timeout [ 859.343188][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.595086][T15559] fuse: Bad value for 'fd' [ 859.902941][ T122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.903180][ T122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.999882][T15577] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 861.180562][ T52] Bluetooth: hci14: command tx timeout [ 861.690209][T15588] loop7: detected capacity change from 0 to 1024 [ 861.803101][T15588] hfsplus: failed to load extents file [ 862.942699][ T122] net_ratelimit: 12 callbacks suppressed [ 862.942731][ T122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.942951][ T122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.100682][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.181912][T14482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.182299][T14482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.500878][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.150329][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.233593][T14482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.233935][T14482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.550438][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.008333][ T25] net_ratelimit: 13 callbacks suppressed [ 868.008366][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.008766][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.300334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.701756][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.020780][ T122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.021097][ T122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.021284][T14482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.021642][T14482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.278011][ T5618] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 869.297240][ T5618] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 869.298661][ T5618] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 869.299827][ T5618] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 869.342716][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.351908][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.351977][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.397355][T12180] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 869.750214][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.087200][T10661] tipc: Node number set to 43690 [ 871.433251][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 871.438690][T15625] loop8: detected capacity change from 0 to 1024 [ 871.500659][ T5618] Bluetooth: hci15: command tx timeout [ 871.518509][T15625] hfsplus: failed to load extents file [ 871.788347][T15349] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 40929 - 0 [ 871.938888][T15422] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.939199][T15422] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.940906][T15422] bridge_slave_0: entered allmulticast mode [ 871.953537][T15422] bridge_slave_0: entered promiscuous mode [ 871.965355][T15422] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.967196][T15422] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.967435][T15422] bridge_slave_1: entered allmulticast mode [ 871.975295][T15422] bridge_slave_1: entered promiscuous mode [ 872.061193][T14482] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 872.120703][T15349] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 40929 - 0 [ 872.227122][T14482] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 872.229377][T15422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.239258][T14482] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 872.265868][T14482] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 872.267945][T14482] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.267975][T14482] usb 8-1: Product: syz [ 872.267994][T14482] usb 8-1: Manufacturer: syz [ 872.268012][T14482] usb 8-1: SerialNumber: syz [ 872.315351][T14482] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 872.338763][T14482] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 872.371310][T14482] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 872.419256][T15349] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 40929 - 0 [ 872.464218][T15598] rxe_eth0 speed is unknown, defaulting to 1000 [ 872.483006][T15422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.782875][T15652] jffs2: notice: (15652) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 872.813853][T15349] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 40929 - 0 [ 872.852374][T15422] team0: Port device team_slave_0 added [ 872.856549][T15422] team0: Port device team_slave_1 added [ 873.007666][T15422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 873.007689][T15422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.007718][T15422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 873.061351][T15422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 873.061375][T15422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.061432][T15422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 873.186017][T14482] net_ratelimit: 14 callbacks suppressed [ 873.186045][T14482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.186340][T14482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.359444][T15422] hsr_slave_0: entered promiscuous mode [ 873.366364][T15422] hsr_slave_1: entered promiscuous mode [ 873.373241][T15422] debugfs: 'hsr0' already exists in 'hsr' [ 873.373269][T15422] Cannot create hsr debugfs directory [ 873.491722][ T5605] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 873.510515][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.591291][ T5618] Bluetooth: hci15: command tx timeout [ 873.642855][ T5605] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 873.644082][ T5605] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 873.644139][ T5605] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.704448][ T5605] as10x_usb: device has been detected [ 873.707732][ T5605] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 873.755564][ T5605] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 873.856939][ T5605] as10x_usb: error during firmware upload part1 [ 873.857616][ T5605] Registered device Abilis Systems DVB-Titan [ 873.900414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.018174][T15349] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 874.031520][T15349] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 874.056474][T15349] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 874.060470][T14482] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 874.065456][T15349] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 874.093102][T15349] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 874.113865][T15349] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 874.115076][T15349] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 874.136254][T15349] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 874.231196][T14482] usb 9-1: Using ep0 maxpacket: 16 [ 874.234267][T14482] usb 9-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 874.238445][T14482] usb 9-1: config 251 has an invalid interface number: 202 but max is 0 [ 874.238478][T14482] usb 9-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 874.238526][T14482] usb 9-1: config 251 has no interface number 0 [ 874.238570][T14482] usb 9-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 874.238594][T14482] usb 9-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 874.238621][T14482] usb 9-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 874.238674][T14482] usb 9-1: config 251 interface 202 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 874.238708][T14482] usb 9-1: config 251 interface 202 has no altsetting 0 [ 874.261779][T10658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.262226][T10658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.282605][T14482] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 874.282672][T14482] usb 9-1: Product: syz [ 874.282693][T14482] usb 9-1: SerialNumber: syz [ 874.399340][T15422] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.399389][T15422] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 56548 - 0 [ 874.463352][T15638] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 874.468644][T10692] usb 8-1: USB disconnect, device number 6 [ 874.529324][T14482] cxacru 9-1:251.202: usbatm_usb_probe: bind failed: -19! [ 874.540322][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.550136][T14482] usb 9-1: USB disconnect, device number 10 [ 874.575997][T10692] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 874.605241][T10692] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 874.606428][T10692] ti_usb_3410_5052 8-1:2.0: device disconnected [ 874.721493][ T5605] usb 7-1: USB disconnect, device number 32 [ 874.829814][T15422] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.829867][T15422] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 56548 - 0 [ 874.875929][ T5605] Unregistered device Abilis Systems DVB-Titan [ 874.883792][ T5605] as10x_usb: device has been disconnected [ 874.940535][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.073724][T15422] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.073771][T15422] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 56548 - 0 [ 875.105516][ T122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.105806][ T122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.405912][T15422] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.405959][T15422] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 56548 - 0 [ 875.460538][T10658] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 875.545768][T15598] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.545900][T15598] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.546113][T15598] bridge_slave_0: entered allmulticast mode [ 875.577921][T15598] bridge_slave_0: entered promiscuous mode [ 875.607112][T15598] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.607234][T15598] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.607452][T15598] bridge_slave_1: entered allmulticast mode [ 875.638814][T10658] usb 8-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 875.642794][T15598] bridge_slave_1: entered promiscuous mode [ 875.653876][T10658] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 875.653935][T10658] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.660143][ T5618] Bluetooth: hci15: command tx timeout [ 875.720191][T15349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.722153][T10658] as10x_usb: device has been detected [ 875.723018][T10658] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 875.756726][T15679] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2922'. [ 875.777771][T10658] usb 8-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 875.811945][T15598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.834090][T10658] as10x_usb: error during firmware upload part1 [ 875.834714][T10658] Registered device Abilis Systems DVB-Titan [ 875.864551][T15598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.948035][T15598] team0: Port device team_slave_0 added [ 875.968935][T15598] team0: Port device team_slave_1 added [ 875.976755][T15349] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.113138][T15598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 876.113162][T15598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.113196][T15598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 876.163416][ T7415] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.163533][ T7415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 876.165812][T15598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.165828][T15598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.165867][T15598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 876.279700][ T7415] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.279813][ T7415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.424869][T15598] hsr_slave_0: entered promiscuous mode [ 877.676494][T15598] hsr_slave_1: entered promiscuous mode [ 877.695733][T15598] debugfs: 'hsr0' already exists in 'hsr' [ 877.695765][T15598] Cannot create hsr debugfs directory [ 877.740392][ T5618] Bluetooth: hci15: command tx timeout [ 877.748245][T15422] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 877.770634][T10692] usb 8-1: USB disconnect, device number 7 [ 877.791542][T15422] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 877.859360][T15686] snd_dummy snd_dummy.0: control 2:0:0:syz0:0 is already present [ 877.883983][T10692] Unregistered device Abilis Systems DVB-Titan [ 877.895736][T10692] as10x_usb: device has been disconnected [ 877.929174][T15422] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 877.979338][T15422] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 878.075130][T15422] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 878.108158][T15422] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 878.235520][T15422] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 878.253631][T15422] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 878.701102][ C1] net_ratelimit: 16 callbacks suppressed [ 878.701130][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.703322][T14482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.703738][T14482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.792825][T15697] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 879.026120][T15598] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.100203][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.237870][T15598] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.496774][T15717] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 879.586416][T15598] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.686497][T15422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.730339][T14482] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 879.751123][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.751546][T14614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.751859][T14614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.835921][T15598] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.894341][T15422] 8021q: adding VLAN 0 to HW filter on device team0 [ 879.910048][T14482] usb 8-1: Using ep0 maxpacket: 16 [ 879.910794][T14482] usb 8-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 879.911839][T14482] usb 8-1: config 251 has an invalid interface number: 202 but max is 0 [ 879.911868][T14482] usb 8-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 879.911892][T14482] usb 8-1: config 251 has no interface number 0 [ 879.911937][T14482] usb 8-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 879.911964][T14482] usb 8-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 879.911994][T14482] usb 8-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 879.912020][T14482] usb 8-1: config 251 interface 202 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 879.912055][T14482] usb 8-1: config 251 interface 202 has no altsetting 0 [ 879.913625][T14482] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 879.913652][T14482] usb 8-1: Product: syz [ 879.913670][T14482] usb 8-1: SerialNumber: syz [ 879.994171][T14085] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.994288][T14085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 880.004524][T14085] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.004644][T14085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 880.140300][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.197315][T14482] cxacru 8-1:251.202: usbatm_usb_probe: bind failed: -19! [ 880.223288][T14482] usb 8-1: USB disconnect, device number 8 [ 880.565738][T15598] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 880.584870][T15598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 880.587889][T15598] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 880.612586][T15598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 880.613871][T15598] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 880.640991][T15598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 880.643611][T15598] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 880.670339][T15598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 880.780988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.783886][T14614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.847568][T15725] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2932'. [ 880.886595][T15349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 880.934211][T15598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 881.052461][T15598] 8021q: adding VLAN 0 to HW filter on device team0 [ 881.104526][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.104639][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.137676][T14086] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.137787][T14086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 881.170129][T10658] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 881.212785][T15349] veth0_vlan: entered promiscuous mode [ 881.262462][T15349] veth1_vlan: entered promiscuous mode [ 881.373641][T10658] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 881.391615][T10658] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.391648][T10658] usb 8-1: Product: syz [ 881.391667][T10658] usb 8-1: Manufacturer: syz [ 881.391686][T10658] usb 8-1: SerialNumber: syz [ 881.494744][T15349] veth0_macvtap: entered promiscuous mode [ 881.543455][T15349] veth1_macvtap: entered promiscuous mode [ 881.633357][T15349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 881.684590][T15349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 881.741597][T14085] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.744697][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.785712][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.930289][T14085] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.936368][T10658] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 882.021473][ T8039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.021502][ T8039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.286860][T14086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.286888][T14086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.441234][T15422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 883.765409][ T5768] net_ratelimit: 10 callbacks suppressed [ 883.765435][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.765578][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.900534][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.300225][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.322979][ T122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.323096][ T122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.522304][T15779] jffs2: notice: (15779) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 884.708704][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 884.950263][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.212062][T10658] usb 8-1: USB disconnect, device number 9 [ 885.278247][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.278423][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.335932][T15422] veth0_vlan: entered promiscuous mode [ 885.351730][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.367788][T10658] usblp0: removed [ 885.403913][ T122] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 885.461870][T15422] veth1_vlan: entered promiscuous mode [ 885.551051][ T122] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 885.552221][ T122] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 885.552261][ T122] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 885.552307][ T122] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.559793][T15775] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 885.620346][ T122] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 885.776202][T10691] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 885.778558][T15422] veth0_macvtap: entered promiscuous mode [ 885.829315][T15422] veth1_macvtap: entered promiscuous mode [ 885.920313][T10691] usb 3-1: Using ep0 maxpacket: 16 [ 885.921355][T10691] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 885.922856][T10691] usb 3-1: config 251 has an invalid interface number: 202 but max is 0 [ 885.922885][T10691] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 885.922910][T10691] usb 3-1: config 251 has no interface number 0 [ 885.922956][T10691] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 885.922982][T10691] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 885.923012][T10691] usb 3-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 885.923039][T10691] usb 3-1: config 251 interface 202 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 885.923071][T10691] usb 3-1: config 251 interface 202 has no altsetting 0 [ 885.924790][T10691] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 885.924819][T10691] usb 3-1: Product: syz [ 885.924836][T10691] usb 3-1: SerialNumber: syz [ 885.926874][ T122] usb 9-1: USB disconnect, device number 11 [ 885.969011][T15422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 886.053845][T15422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 886.101770][ T8158] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.320410][T14085] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.427527][ T7431] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.462971][T10691] cxacru 3-1:251.202: usbatm_usb_probe: bind failed: -19! [ 886.474753][T15598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 886.503811][T10691] usb 3-1: USB disconnect, device number 56 [ 886.641533][ T1165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.687925][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.687952][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.814493][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.814523][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.924410][T10661] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 887.072645][T10661] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 887.075479][T10661] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 887.075532][T10661] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 887.075565][T10661] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 887.075595][T10661] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 887.075643][T10661] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.095015][T15803] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 887.095165][T15803] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 887.119237][T10661] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 887.172580][T10661] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 887.174020][T10661] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 887.184848][T10661] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 887.223014][T10661] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 887.223107][T10661] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 887.242214][T10661] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 887.367395][T10658] usb 8-1: USB disconnect, device number 10 [ 888.265388][T10658] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 888.288836][T10658] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 888.312705][T10658] keyspan 8-1:1.0: device disconnected [ 888.504490][T15598] veth0_vlan: entered promiscuous mode [ 888.554538][T15598] veth1_vlan: entered promiscuous mode [ 888.616045][ T31] kauditd_printk_skb: 42 callbacks suppressed [ 888.616072][ T31] audit: type=1804 audit(1792219760.593:2182): pid=15819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2950" name="/newroot/1/file0" dev="fuse" ino=1 res=1 errno=0 [ 888.716517][T15598] veth0_macvtap: entered promiscuous mode [ 888.734551][T15598] veth1_macvtap: entered promiscuous mode [ 889.095939][T15828] jffs2: notice: (15828) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 889.118260][ C1] net_ratelimit: 15 callbacks suppressed [ 889.118287][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.186213][T15598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 889.340242][T15598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 889.424233][T10658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.424621][T10658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.500320][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.547566][T14085] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.605521][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.605850][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.606178][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.744202][T15816] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 889.744248][T15816] device-mapper: ioctl: error adding target to table [ 889.790912][T15833] netlink: 'syz.8.2954': attribute type 2 has an invalid length. [ 889.790944][T15833] netlink: 'syz.8.2954': attribute type 2 has an invalid length. [ 890.140595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.540270][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.180317][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.580315][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.768245][T10691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.770395][T10676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.971868][T10661] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 892.037642][T14084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.037670][T14084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.125608][ T8042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.125636][ T8042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.151699][T10661] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 892.154006][T10661] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 892.154057][T10661] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.199294][T10661] as10x_usb: device has been detected [ 892.205894][T10661] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 892.232250][T10661] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 892.237503][T10661] as10x_usb: error during firmware upload part1 [ 892.238162][T10661] Registered device Abilis Systems DVB-Titan [ 892.370179][ T5784] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 892.534901][ T5784] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 892.539282][ T5784] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 892.539368][ T5784] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 892.539399][ T5784] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 892.539428][ T5784] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 892.539477][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.552602][T15850] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 892.552756][T15850] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 892.561186][ T5784] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 892.576326][ T5784] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 892.576430][ T5784] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 892.589294][T10661] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 892.600790][ T5784] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 892.614032][ T5784] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 892.614127][ T5784] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 892.622984][ T5784] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 892.830316][T10661] usb 9-1: Using ep0 maxpacket: 16 [ 892.834006][T10661] usb 9-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 892.855556][T10661] usb 9-1: config 251 has an invalid interface number: 202 but max is 0 [ 892.855595][T10661] usb 9-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 892.855626][T10661] usb 9-1: config 251 has no interface number 0 [ 892.855677][T10661] usb 9-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 892.855710][T10661] usb 9-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 892.855745][T10661] usb 9-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 892.855777][T10661] usb 9-1: config 251 interface 202 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 892.855817][T10661] usb 9-1: config 251 interface 202 has no altsetting 0 [ 892.979152][T10661] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 892.979192][T10661] usb 9-1: Product: syz [ 892.979212][T10661] usb 9-1: SerialNumber: syz [ 893.127528][ T25] usb 3-1: USB disconnect, device number 57 [ 893.142498][ T25] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 893.164462][ T25] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 893.166128][ T25] keyspan 3-1:1.0: device disconnected [ 893.223296][T10676] usb 4-1: USB disconnect, device number 64 [ 893.306196][T10661] cxacru 9-1:251.202: usbatm_usb_probe: bind failed: -19! [ 893.309376][T10661] usb 9-1: USB disconnect, device number 12 [ 893.327716][T15857] snd_dummy snd_dummy.0: control 2:0:0:syz0:0 is already present [ 893.407806][T15864] jffs2: notice: (15864) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 893.538280][T10676] Unregistered device Abilis Systems DVB-Titan [ 893.558069][T10676] as10x_usb: device has been disconnected [ 894.310440][ C1] net_ratelimit: 10 callbacks suppressed [ 894.310470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.710229][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.858073][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.858208][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.943522][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 894.951519][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 894.971011][T10676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.012678][T15873] jffs2: notice: (15873) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 895.021789][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.021951][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.108299][T15878] FAULT_INJECTION: forcing a failure. [ 895.108299][T15878] name failslab, interval 1, probability 0, space 0, times 0 [ 895.108348][T15878] CPU: 0 UID: 0 PID: 15878 Comm: syz.8.2968 Tainted: G L syzkaller #0 PREEMPT(full) [ 895.108390][T15878] Tainted: [L]=SOFTLOCKUP [ 895.108401][T15878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 895.108418][T15878] Call Trace: [ 895.108429][T15878] [ 895.108440][T15878] dump_stack_lvl+0xe8/0x150 [ 895.108486][T15878] should_fail_ex+0x410/0x560 [ 895.108529][T15878] ? zswap_store+0xc25/0x2050 [ 895.108571][T15878] should_failslab+0xa8/0x100 [ 895.108611][T15878] ? zswap_store+0xc25/0x2050 [ 895.108649][T15878] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 895.108681][T15878] ? percpu_ref_put+0x1e/0x230 [ 895.108708][T15878] ? percpu_ref_put+0x1e/0x230 [ 895.108732][T15878] ? zswap_store+0xc25/0x2050 [ 895.108772][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.108810][T15878] zswap_store+0xc25/0x2050 [ 895.108858][T15878] ? __lock_acquire+0x747/0x2de0 [ 895.108892][T15878] ? zswap_store+0x76b/0x2050 [ 895.108951][T15878] ? __pfx_zswap_store+0x10/0x10 [ 895.108993][T15878] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 895.109040][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.109074][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.109110][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.109141][T15878] ? do_raw_spin_unlock+0xf5/0x200 [ 895.109187][T15878] swap_writeout+0x96a/0x14d0 [ 895.109236][T15878] ? _raw_spin_unlock_irq+0x23/0x50 [ 895.109271][T15878] shmem_writeout+0x145b/0x1790 [ 895.109323][T15878] ? __pfx_shmem_writeout+0x10/0x10 [ 895.109367][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.109405][T15878] ? folio_clear_dirty_for_io+0x162/0x820 [ 895.109440][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.109472][T15878] ? try_to_unmap_flush_dirty+0x74/0x100 [ 895.109507][T15878] shrink_folio_list+0x340c/0x5250 [ 895.109578][T15878] ? __pfx_shrink_folio_list+0x10/0x10 [ 895.109615][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.109646][T15878] ? __lock_acquire+0x747/0x2de0 [ 895.109685][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.109716][T15878] ? __lock_acquire+0x747/0x2de0 [ 895.109778][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.109810][T15878] ? __css_rstat_updated+0x237/0x540 [ 895.109855][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.109900][T15878] reclaim_folio_list+0x100/0x430 [ 895.109932][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.109981][T15878] ? __pfx_reclaim_folio_list+0x10/0x10 [ 895.110018][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.110053][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.110093][T15878] reclaim_pages+0x452/0x530 [ 895.110124][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.110164][T15878] ? __pfx_reclaim_pages+0x10/0x10 [ 895.110202][T15878] ? madvise_cold_or_pageout_pte_range+0x1bf5/0x2300 [ 895.110248][T15878] madvise_cold_or_pageout_pte_range+0x1c1e/0x2300 [ 895.110285][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.110316][T15878] ? lock_acquire+0x115/0x350 [ 895.110365][T15878] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 895.110409][T15878] ? mod_memcg_lruvec_state+0xd5/0x270 [ 895.110440][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.110471][T15878] ? lru_gen_update_size+0x718/0xcf0 [ 895.110508][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.110539][T15878] ? __mod_zone_page_state+0xd5/0x140 [ 895.110584][T15878] walk_pgd_range+0x102d/0x1dc0 [ 895.110667][T15878] ? __pfx_walk_pgd_range+0x10/0x10 [ 895.110706][T15878] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 895.110742][T15878] __walk_page_range+0x16d/0x720 [ 895.110799][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.110836][T15878] walk_page_range_vma_unsafe+0x309/0x410 [ 895.110878][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.110915][T15878] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 895.110963][T15878] ? mlock_drain_local+0x79/0x490 [ 895.111002][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.111034][T15878] ? walk_page_range_vma+0x6b/0x90 [ 895.111077][T15878] madvise_vma_behavior+0x2831/0x41d0 [ 895.111125][T15878] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 895.111167][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.111199][T15878] ? lock_acquire+0x115/0x350 [ 895.111232][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.111267][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.111302][T15878] ? ktime_get+0x45/0x220 [ 895.111335][T15878] ? ktime_get+0x45/0x220 [ 895.111363][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.111401][T15878] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 895.111433][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.111464][T15878] ? ktime_get+0x1f5/0x220 [ 895.111495][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.111525][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.111557][T15878] ? clockevents_program_event+0x491/0x630 [ 895.111601][T15878] ? __pfx_clockevents_program_event+0x10/0x10 [ 895.111639][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.111670][T15878] ? hrtimer_start_range_ns_common+0x7cd/0xb60 [ 895.111714][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.111748][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.111783][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.111825][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.111856][T15878] ? rcu_is_watching+0x16/0xb0 [ 895.111891][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.111942][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.111979][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.112010][T15878] ? mas_prev_slot+0xb76/0xbf0 [ 895.112061][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.112093][T15878] ? find_vma_prev+0x123/0x1b0 [ 895.112134][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.112167][T15878] ? __pfx_find_vma_prev+0x10/0x10 [ 895.112205][T15878] ? futex_unqueue+0x22/0x240 [ 895.112250][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.112279][T15878] ? __futex_wait+0x358/0x400 [ 895.112315][T15878] madvise_walk_vmas+0x576/0xb00 [ 895.112365][T15878] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 895.112411][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.112445][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.112475][T15878] ? blk_start_plug+0x6e/0x1b0 [ 895.112517][T15878] madvise_do_behavior+0x385/0x540 [ 895.112559][T15878] ? __pfx_madvise_do_behavior+0x10/0x10 [ 895.112593][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.112633][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.112664][T15878] ? down_read+0x2be/0x330 [ 895.112703][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.112739][T15878] do_madvise+0x327/0x3a0 [ 895.112776][T15878] ? __pfx_do_madvise+0x10/0x10 [ 895.112822][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 895.112853][T15878] ? __se_sys_futex+0x3a8/0x450 [ 895.112915][T15878] __x64_sys_madvise+0xa6/0xc0 [ 895.112951][T15878] do_syscall_64+0x166/0x520 [ 895.112984][T15878] ? trace_irq_disable+0x3b/0x140 [ 895.113014][T15878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.113048][T15878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.113076][T15878] RIP: 0033:0x7fb906b9e559 [ 895.113101][T15878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.113124][T15878] RSP: 002b:00007fb907a11028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 895.113153][T15878] RAX: ffffffffffffffda RBX: 00007fb906e25fa0 RCX: 00007fb906b9e559 [ 895.113173][T15878] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000200000000000 [ 895.113192][T15878] RBP: 00007fb906c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 895.113209][T15878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 895.113227][T15878] R13: 00007fb906e26038 R14: 00007fb906e25fa0 R15: 00007fffdb621c38 [ 895.113268][T15878] [ 895.341460][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.741069][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.062780][T10661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.099665][T15895] jffs2: notice: (15895) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 896.369661][T15898] syzkaller0: entered promiscuous mode [ 896.369695][T15898] syzkaller0: entered allmulticast mode [ 896.439828][T15907] jffs2: notice: (15907) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 897.704436][T15890] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2972'. [ 897.704461][T15890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2972'. [ 897.704477][T15890] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2972'. [ 898.190835][T15931] fuse: Unknown parameter 'user_i00000000000000000000' [ 898.353145][T15928] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 898.529252][T15938] jffs2: notice: (15938) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 898.540276][T15934] md: could not open device unknown-block(1,1). [ 898.577143][T15938] FAULT_INJECTION: forcing a failure. [ 898.577143][T15938] name failslab, interval 1, probability 0, space 0, times 0 [ 898.577184][T15938] CPU: 0 UID: 0 PID: 15938 Comm: syz.2.2991 Tainted: G L syzkaller #0 PREEMPT(full) [ 898.577221][T15938] Tainted: [L]=SOFTLOCKUP [ 898.577232][T15938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 898.577249][T15938] Call Trace: [ 898.577260][T15938] [ 898.577270][T15938] dump_stack_lvl+0xe8/0x150 [ 898.577317][T15938] should_fail_ex+0x410/0x560 [ 898.577364][T15938] should_failslab+0xa8/0x100 [ 898.577407][T15938] __kmalloc_noprof+0xfe/0x720 [ 898.577437][T15938] ? ima_alloc_init_template+0x185/0x700 [ 898.577472][T15938] ? ima_write_template_field_data+0x47/0x490 [ 898.577511][T15938] ? ima_write_template_field_data+0x47/0x490 [ 898.577554][T15938] ? __x64_sys_openat+0x138/0x170 [ 898.577597][T15938] ima_write_template_field_data+0x47/0x490 [ 898.577639][T15938] ? ima_eventdigest_init_common+0x2b1/0x400 [ 898.577685][T15938] ima_eventdigest_init_common+0x2cc/0x400 [ 898.577729][T15938] ? ima_eventdigest_init_common+0x1d1/0x400 [ 898.577771][T15938] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 898.577840][T15938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 898.577874][T15938] ? __kmalloc_noprof+0x38c/0x720 [ 898.577911][T15938] ? __kmalloc_noprof+0x1ab/0x720 [ 898.577942][T15938] ? ima_alloc_init_template+0x185/0x700 [ 898.577977][T15938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 898.578010][T15938] ? __pfx_ima_eventdigest_ng_init+0x10/0x10 [ 898.578056][T15938] ima_alloc_init_template+0x323/0x700 [ 898.578099][T15938] ima_store_measurement+0x1d4/0x690 [ 898.578145][T15938] ? __pfx_ima_store_measurement+0x10/0x10 [ 898.578177][T15938] ? ima_d_path+0x16b/0x230 [ 898.578220][T15938] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 898.578273][T15938] process_measurement+0x15ac/0x1c10 [ 898.578326][T15938] ? __pfx_process_measurement+0x10/0x10 [ 898.578359][T15938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 898.578389][T15938] ? tomoyo_check_open_permission+0x38e/0x470 [ 898.578429][T15938] ? tomoyo_check_open_permission+0x1d3/0x470 [ 898.578513][T15938] ? mnt_get_write_access+0x66/0x280 [ 898.578545][T15938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 898.578584][T15938] ima_file_check+0xe1/0x130 [ 898.578614][T15938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 898.578644][T15938] ? do_dentry_open+0xd21/0x1380 [ 898.578682][T15938] ? __pfx_ima_file_check+0x10/0x10 [ 898.578722][T15938] security_file_post_open+0xb3/0x260 [ 898.578763][T15938] path_openat+0x170b/0x2090 [ 898.578817][T15938] do_file_open+0x23e/0x4a0 [ 898.578854][T15938] ? __pfx_do_file_open+0x10/0x10 [ 898.578917][T15938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 898.578948][T15938] ? _raw_spin_unlock+0x28/0x50 [ 898.578974][T15938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 898.579005][T15938] ? alloc_fd+0x651/0x6c0 [ 898.579058][T15938] do_sys_openat2+0x115/0x200 [ 898.579095][T15938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 898.579127][T15938] ? __se_sys_futex+0x3a8/0x450 [ 898.579166][T15938] ? __pfx_do_sys_openat2+0x10/0x10 [ 898.579213][T15938] ? rcu_is_watching+0x16/0xb0 [ 898.579249][T15938] ? srso_alias_return_thunk+0x5/0xfbef5 [ 898.579286][T15938] __x64_sys_openat+0x138/0x170 [ 898.579331][T15938] do_syscall_64+0x166/0x520 [ 898.579363][T15938] ? trace_irq_disable+0x3b/0x140 [ 898.579393][T15938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.579428][T15938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.579455][T15938] RIP: 0033:0x7fe84e19e559 [ 898.579479][T15938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.579503][T15938] RSP: 002b:00007fe84f105028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 898.579532][T15938] RAX: ffffffffffffffda RBX: 00007fe84e425fa0 RCX: 00007fe84e19e559 [ 898.579552][T15938] RDX: 0000000000101042 RSI: 0000200000000500 RDI: ffffffffffffff9c [ 898.579572][T15938] RBP: 00007fe84e235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 898.579591][T15938] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000000 [ 898.579608][T15938] R13: 00007fe84e426038 R14: 00007fe84e425fa0 R15: 00007ffeface61b8 [ 898.579650][T15938] [ 898.729560][ T31] audit: type=1804 audit(1792219770.553:2183): pid=15938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.2991" name="/newroot/8/file0/file2" dev="jffs2" ino=8 res=0 errno=0 [ 898.829275][T15938] fuse: Unknown parameter 'use00000000000000000000' [ 898.895935][T15944] loop7: detected capacity change from 0 to 8 [ 899.117083][T15949] FAULT_INJECTION: forcing a failure. [ 899.117083][T15949] name failslab, interval 1, probability 0, space 0, times 0 [ 899.117132][T15949] CPU: 1 UID: 0 PID: 15949 Comm: syz.6.2996 Tainted: G L syzkaller #0 PREEMPT(full) [ 899.117169][T15949] Tainted: [L]=SOFTLOCKUP [ 899.117180][T15949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 899.117198][T15949] Call Trace: [ 899.117209][T15949] [ 899.117222][T15949] dump_stack_lvl+0xe8/0x150 [ 899.117275][T15949] should_fail_ex+0x410/0x560 [ 899.117322][T15949] should_failslab+0xa8/0x100 [ 899.117365][T15949] __kmalloc_cache_noprof+0xa3/0x600 [ 899.117411][T15949] ? xa_load+0x1db/0x210 [ 899.117446][T15949] ? __io_uring_add_tctx_node+0x186/0x630 [ 899.117482][T15949] ? __io_uring_add_tctx_node+0x186/0x630 [ 899.117526][T15949] __io_uring_add_tctx_node+0x186/0x630 [ 899.117567][T15949] ? srso_alias_return_thunk+0x5/0xfbef5 [ 899.117603][T15949] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 899.117644][T15949] ? __anon_inode_getfile+0x169/0x200 [ 899.117688][T15949] io_uring_create+0x596/0x990 [ 899.117738][T15949] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 899.117779][T15949] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 899.117816][T15949] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 899.117872][T15949] ? srso_alias_return_thunk+0x5/0xfbef5 [ 899.117904][T15949] ? rcu_is_watching+0x16/0xb0 [ 899.117941][T15949] ? srso_alias_return_thunk+0x5/0xfbef5 [ 899.117987][T15949] do_syscall_64+0x166/0x520 [ 899.118019][T15949] ? trace_irq_disable+0x3b/0x140 [ 899.118051][T15949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.118086][T15949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.118114][T15949] RIP: 0033:0x7fb5e359e559 [ 899.118140][T15949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 899.118164][T15949] RSP: 002b:00007fb5e4476fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 899.118194][T15949] RAX: ffffffffffffffda RBX: 0000200000000700 RCX: 00007fb5e359e559 [ 899.118215][T15949] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000001c0b [ 899.118233][T15949] RBP: 00007fb5e3635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 899.118251][T15949] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 899.118268][T15949] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec74ebc08 [ 899.118307][T15949] [ 899.522931][ C1] net_ratelimit: 13 callbacks suppressed [ 899.522954][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.745674][T14482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.745840][T14482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.791630][T15944] Dev loop7: unable to read RDB block 8 [ 899.791661][T15944] loop7: unable to read partition table [ 899.791860][T15944] loop7: partition table beyond EOD, truncated [ 899.791895][T15944] loop_reread_partitions: partition scan of loop7 (Cj̖4FLQk5) failed (rc=-5) [ 899.900619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.540525][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.940612][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.102480][T14482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.102624][T14482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.108667][T10676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.108779][T10676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.091943][T15966] fuse: Unknown parameter 'user_i00000000000000000000' [ 902.560165][T15976] md: could not open device unknown-block(1,1). [ 902.691884][T15978] FAULT_INJECTION: forcing a failure. [ 902.691884][T15978] name fail_futex, interval 1, probability 0, space 0, times 0 [ 902.691931][T15978] CPU: 0 UID: 0 PID: 15978 Comm: syz.6.3008 Tainted: G L syzkaller #0 PREEMPT(full) [ 902.691966][T15978] Tainted: [L]=SOFTLOCKUP [ 902.691976][T15978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 902.691993][T15978] Call Trace: [ 902.692004][T15978] [ 902.692015][T15978] dump_stack_lvl+0xe8/0x150 [ 902.692061][T15978] should_fail_ex+0x410/0x560 [ 902.692106][T15978] get_futex_key+0x8e2/0x1580 [ 902.692155][T15978] ? __pfx_get_futex_key+0x10/0x10 [ 902.692205][T15978] futex_wake+0x119/0x5f0 [ 902.692239][T15978] ? __pfx_futex_wake+0x10/0x10 [ 902.692276][T15978] ? mm_exit_exec_release+0x20/0x290 [ 902.692318][T15978] do_futex+0x458/0x4e0 [ 902.692361][T15978] ? __pfx_do_futex+0x10/0x10 [ 902.692410][T15978] ? __might_fault+0xaf/0x130 [ 902.692441][T15978] mm_exit_exec_release+0x10d/0x290 [ 902.692481][T15978] exit_mm+0x50/0x240 [ 902.692511][T15978] do_exit+0x6cd/0x2350 [ 902.692549][T15978] ? __pfx_do_exit+0x10/0x10 [ 902.692581][T15978] ? do_raw_spin_lock+0x12b/0x2f0 [ 902.692622][T15978] ? srso_alias_return_thunk+0x5/0xfbef5 [ 902.692664][T15978] do_group_exit+0x22d/0x2f0 [ 902.692691][T15978] ? _raw_spin_unlock_irq+0x23/0x50 [ 902.692724][T15978] get_signal+0x121b/0x12c0 [ 902.692786][T15978] arch_do_signal_or_restart+0xbb/0x860 [ 902.692830][T15978] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 902.692899][T15978] exit_to_user_mode_loop+0x10e/0x770 [ 902.692930][T15978] ? srso_alias_return_thunk+0x5/0xfbef5 [ 902.692960][T15978] ? rcu_is_watching+0x16/0xb0 [ 902.693001][T15978] do_syscall_64+0x328/0x520 [ 902.693032][T15978] ? trace_irq_disable+0x3b/0x140 [ 902.693062][T15978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.693095][T15978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.693122][T15978] RIP: 0033:0x7fb5e359e559 [ 902.693147][T15978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.693171][T15978] RSP: 002b:00007fb5e44770e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 902.693199][T15978] RAX: fffffffffffffe00 RBX: 00007fb5e3825fa8 RCX: 00007fb5e359e559 [ 902.693220][T15978] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb5e3825fa8 [ 902.693238][T15978] RBP: 00007fb5e3825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 902.693255][T15978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 902.693272][T15978] R13: 00007fb5e3826038 R14: 00007ffec74ebb20 R15: 00007ffec74ebc08 [ 902.693313][T15978] [ 904.106925][T15940] lo: entered allmulticast mode [ 904.107512][T15940] tunl0: entered allmulticast mode [ 904.107899][T15940] gre0: entered allmulticast mode [ 904.108231][T15940] gretap0: entered allmulticast mode [ 904.108566][T15940] erspan0: entered allmulticast mode [ 904.108903][T15940] ip_vti0: entered allmulticast mode [ 904.109265][T15940] ip6_vti0: entered allmulticast mode [ 904.109579][T15940] sit0: entered allmulticast mode [ 904.124917][T15940] ip6tnl0: entered allmulticast mode [ 904.125442][T15940] ip6gre0: entered allmulticast mode [ 904.125917][T15940] syz_tun: entered allmulticast mode [ 904.126440][T15940] ip6gretap0: entered allmulticast mode [ 904.128786][T15940] bridge0: entered allmulticast mode [ 904.129420][T15940] vcan0: entered allmulticast mode [ 904.131768][T15940] bond0: entered allmulticast mode [ 904.131788][T15940] bond_slave_0: entered allmulticast mode [ 904.131810][T15940] bond_slave_1: entered allmulticast mode [ 904.132651][T15940] team0: entered allmulticast mode [ 904.132670][T15940] team_slave_0: entered allmulticast mode [ 904.132691][T15940] team_slave_1: entered allmulticast mode [ 904.133451][T15940] dummy0: entered allmulticast mode [ 904.133970][T15940] nlmon0: entered allmulticast mode [ 904.136176][T15940] batadv0: entered allmulticast mode [ 904.136868][T15940] vxcan0: entered allmulticast mode [ 904.137348][T15940] vxcan1: entered allmulticast mode [ 904.141116][T15940] veth0: entered allmulticast mode [ 904.142629][T15940] veth1: entered allmulticast mode [ 904.143138][T15940] wg0: entered allmulticast mode [ 904.143625][T15940] wg1: entered allmulticast mode [ 904.148252][T15940] wg2: entered allmulticast mode [ 904.153375][T15940] veth0_to_bridge: entered allmulticast mode [ 904.158486][T15940] veth1_to_bridge: entered allmulticast mode [ 904.166301][T15940] veth0_to_bond: entered allmulticast mode [ 904.167407][T15940] veth1_to_bond: entered allmulticast mode [ 904.171107][T15940] veth0_to_team: entered allmulticast mode [ 904.172444][T15940] veth1_to_team: entered allmulticast mode [ 904.173607][T15940] veth0_to_batadv: entered allmulticast mode [ 904.174122][T15940] batadv_slave_0: entered allmulticast mode [ 904.174635][T15940] veth1_to_batadv: entered allmulticast mode [ 904.175142][T15940] batadv_slave_1: entered allmulticast mode [ 904.175664][T15940] xfrm0: entered allmulticast mode [ 904.176147][T15940] veth0_to_hsr: entered allmulticast mode [ 904.176657][T15940] hsr_slave_0: entered allmulticast mode [ 904.177162][T15940] veth1_to_hsr: entered allmulticast mode [ 904.177667][T15940] hsr_slave_1: entered allmulticast mode [ 904.178188][T15940] hsr0: entered allmulticast mode [ 904.178730][T15940] veth1_virt_wifi: entered allmulticast mode [ 904.179244][T15940] veth0_virt_wifi: entered allmulticast mode [ 904.179767][T15940] virt_wifi0: entered allmulticast mode [ 904.199109][T15940] veth1_vlan: entered allmulticast mode [ 904.199799][T15940] veth0_vlan: entered allmulticast mode [ 904.226329][T15940] vlan0: entered allmulticast mode [ 904.226937][T15940] vlan1: entered allmulticast mode [ 904.241303][T15940] macvlan0: entered allmulticast mode [ 904.241918][T15940] macvlan1: entered allmulticast mode [ 904.242459][T15940] ipvlan0: entered allmulticast mode [ 904.246148][T15940] ipvlan1: entered allmulticast mode [ 904.246327][T15940] veth1_macvtap: entered allmulticast mode [ 904.246879][T15940] veth0_macvtap: entered allmulticast mode [ 904.247445][T15940] macvtap0: entered allmulticast mode [ 904.252947][T15940] macsec0: entered allmulticast mode [ 904.253426][T15940] geneve0: entered allmulticast mode [ 904.253965][T15940] geneve1: entered allmulticast mode [ 904.256785][T15940] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 904.266635][T15940] netdevsim netdevsim7 netdevsim1: entered allmulticast mode [ 904.275506][T15940] netdevsim netdevsim7 netdevsim2: entered allmulticast mode [ 904.276206][T15940] netdevsim netdevsim7 netdevsim3: entered allmulticast mode [ 904.283276][T15940] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 904.283940][T15940] mac80211_hwsim hwsim39 wlan0: entered allmulticast mode [ 904.545311][ T5784] net_ratelimit: 14 callbacks suppressed [ 904.545336][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.700470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.080174][T16005] md: could not open device unknown-block(1,1). [ 905.100289][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.263295][T14482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.263445][T14482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.446358][T16011] loop9: detected capacity change from 0 to 256 [ 905.549771][T16011] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 905.624447][T16016] syzkaller0: entered promiscuous mode [ 905.624477][T16016] syzkaller0: entered allmulticast mode [ 905.712603][T16015] netlink: 'syz.6.3025': attribute type 2 has an invalid length. [ 905.712633][T16015] netlink: 'syz.6.3025': attribute type 2 has an invalid length. [ 905.750260][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.140220][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.397631][T16022] fuse: Bad value for 'user_id' [ 906.397657][T16022] fuse: Bad value for 'user_id' [ 906.438949][T10661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.439105][T10661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.780551][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.323411][T16030] No source specified [ 909.096352][T16043] md: could not open device unknown-block(1,1). [ 909.123330][ T5784] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 909.757394][T10658] net_ratelimit: 9 callbacks suppressed [ 909.757424][T10658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.757598][T10658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.900367][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.042576][ T5784] usb 7-1: device descriptor read/64, error -71 [ 910.290141][ T5784] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 910.304727][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 910.311124][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.420133][ T5784] usb 7-1: device descriptor read/64, error -71 [ 910.543499][T10691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.543693][T10691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.544489][ T5784] usb usb7-port1: attempt power cycle [ 910.782709][T14482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.782951][T14482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.942601][ T5784] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 910.944397][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.971786][ T5784] usb 7-1: device descriptor read/8, error -71 [ 911.210059][ T5784] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 911.250632][T16065] jffs2: notice: (16065) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 911.250970][ T5784] usb 7-1: device descriptor read/8, error -71 [ 911.340217][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.360457][ T5784] usb usb7-port1: unable to enumerate USB device [ 911.688611][T16069] fuse: Bad value for 'fd' [ 912.067993][T16074] jffs2: notice: (16074) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 912.348642][T16079] No source specified [ 912.538663][T16085] netlink: 'syz.2.3047': attribute type 1 has an invalid length. [ 912.732935][T16087] md: could not open device unknown-block(1,1). [ 913.082346][T16094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 913.296140][T16097] overlayfs: overlapping lowerdir path [ 913.550047][T16104] fuse: Bad value for 'fd' [ 913.600047][ T25] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 913.765070][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 913.785162][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 913.785215][ T25] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 913.787592][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.787624][ T25] usb 3-1: Product: syz [ 913.787643][ T25] usb 3-1: Manufacturer: syz [ 913.787661][ T25] usb 3-1: SerialNumber: syz [ 913.798066][ T25] cdc_mbim 3-1:1.0: skipping garbage [ 914.021225][T16102] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 914.372221][T16114] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3060'. [ 914.372251][T16114] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3060'. [ 914.661814][T16102] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 914.663206][ T25] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 914.668926][ T25] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 914.686315][ T25] wwan wwan0: port wwan0mbim0 attached [ 914.756978][T16116] No source specified [ 914.950527][T14482] net_ratelimit: 15 callbacks suppressed [ 914.950553][T14482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.950694][T14482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.100916][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.500234][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.024800][T10658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.024958][T10658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.140317][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.449056][T16132] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 916.552989][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.180543][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.191785][T15842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.287978][T16138] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 917.625924][T16144] fuse: Unknown parameter 'user_id00000000000000000000' [ 918.310024][ T25] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, c6:f6:c9:a3:b6:80 [ 918.330589][ T25] usb 3-1: USB disconnect, device number 58 [ 918.336169][ T25] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 918.393748][T16163] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3078'. [ 918.393777][T16163] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3078'. [ 918.400160][T16155] syzkaller1: entered promiscuous mode [ 918.400191][T16155] syzkaller1: entered allmulticast mode [ 918.600084][T16170] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 918.632836][T16173] jffs2: notice: (16173) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 918.673930][T16172] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 918.716410][T16163] FAULT_INJECTION: forcing a failure. [ 918.716410][T16163] name failslab, interval 1, probability 0, space 0, times 0 [ 918.716455][T16163] CPU: 0 UID: 0 PID: 16163 Comm: syz.6.3078 Tainted: G L syzkaller #0 PREEMPT(full) [ 918.716492][T16163] Tainted: [L]=SOFTLOCKUP [ 918.716502][T16163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 918.716519][T16163] Call Trace: [ 918.716529][T16163] [ 918.716541][T16163] dump_stack_lvl+0xe8/0x150 [ 918.716587][T16163] should_fail_ex+0x410/0x560 [ 918.716631][T16163] ? __alloc_skb+0x1db/0x7a0 [ 918.716657][T16163] should_failslab+0xa8/0x100 [ 918.716698][T16163] ? __alloc_skb+0x1db/0x7a0 [ 918.716722][T16163] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 918.716753][T16163] ? __alloc_skb+0x18d/0x7a0 [ 918.716779][T16163] ? __alloc_skb+0x1db/0x7a0 [ 918.716813][T16163] __alloc_skb+0x1db/0x7a0 [ 918.716845][T16163] mpls_netconf_notify_devconf+0x46/0x100 [ 918.716884][T16163] mpls_dev_sysctl_register+0x1e0/0x280 [ 918.716923][T16163] ? __pfx_mpls_dev_sysctl_register+0x10/0x10 [ 918.716975][T16163] mpls_dev_notify+0x3b7/0xd30 [ 918.717011][T16163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.717042][T16163] ? ovs_netdev_get_vport+0x11c/0x120 [ 918.717085][T16163] notifier_call_chain+0x1a5/0x3d0 [ 918.717124][T16163] register_netdevice+0x18a4/0x1eb0 [ 918.717178][T16163] ? __pfx_register_netdevice+0x10/0x10 [ 918.717211][T16163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.717243][T16163] ? validate_linkmsg+0x765/0x950 [ 918.717289][T16163] ? rtnl_create_link+0xa04/0xd70 [ 918.717326][T16163] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 918.717364][T16163] rtnl_newlink_create+0x305/0x7b0 [ 918.717411][T16163] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 918.717448][T16163] ? __pfx___mutex_lock+0x10/0x10 [ 918.717481][T16163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.717525][T16163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.717556][T16163] ? ns_capable+0x89/0xe0 [ 918.717599][T16163] rtnl_newlink+0x166d/0x1c30 [ 918.717648][T16163] ? __pfx_rtnl_newlink+0x10/0x10 [ 918.717673][T16163] ? do_syscall_64+0x166/0x520 [ 918.717705][T16163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.717772][T16163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.717807][T16163] ? kasan_quarantine_put+0xbb/0x1f0 [ 918.717839][T16163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.717870][T16163] ? lockdep_hardirqs_on+0x7b/0x110 [ 918.717901][T16163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.717937][T16163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.717968][T16163] ? kmem_cache_free+0x182/0x650 [ 918.718015][T16163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.718045][T16163] ? __lock_acquire+0x747/0x2de0 [ 918.718080][T16163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.718118][T16163] ? __local_bh_enable_ip+0xd6/0x140 [ 918.718155][T16163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.718186][T16163] ? lockdep_hardirqs_on+0x7b/0x110 [ 918.718216][T16163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.718247][T16163] ? __local_bh_enable_ip+0xd6/0x140 [ 918.718294][T16163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.718326][T16163] ? lock_acquire+0x115/0x350 [ 918.718362][T16163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.718413][T16163] ? __pfx_rtnl_newlink+0x10/0x10 [ 918.718439][T16163] rtnetlink_rcv_msg+0x802/0xc00 [ 918.718471][T16163] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 918.718498][T16163] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 918.718524][T16163] ? ref_tracker_free+0x689/0x830 [ 918.718570][T16163] ? __pfx_ref_tracker_free+0x10/0x10 [ 918.718610][T16163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.718645][T16163] ? __asan_memcpy+0x40/0x70 [ 918.718673][T16163] ? __skb_clone+0x5c/0x6c0 [ 918.718712][T16163] netlink_rcv_skb+0x226/0x4a0 [ 918.718749][T16163] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 918.718778][T16163] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 918.718829][T16163] ? netlink_deliver_tap+0x2e/0x1b0 [ 918.718868][T16163] ? netlink_deliver_tap+0x2e/0x1b0 [ 918.718909][T16163] netlink_unicast+0x8ef/0xa80 [ 918.718962][T16163] netlink_sendmsg+0x813/0xb40 [ 918.719010][T16163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 918.719054][T16163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.719084][T16163] ? apparmor_socket_sendmsg+0x98/0x360 [ 918.719125][T16163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.719159][T16163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 918.719193][T16163] sock_sendmsg_nosec+0x13a/0x180 [ 918.719236][T16163] ____sys_sendmsg+0x54e/0x850 [ 918.719273][T16163] ? __pfx_____sys_sendmsg+0x10/0x10 [ 918.719307][T16163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.719344][T16163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.719374][T16163] ? import_iovec+0x73/0xa0 [ 918.719413][T16163] ___sys_sendmsg+0x2a5/0x360 [ 918.719442][T16163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.719473][T16163] ? __lock_acquire+0x747/0x2de0 [ 918.719510][T16163] ? __pfx____sys_sendmsg+0x10/0x10 [ 918.719546][T16163] ? futex_wait+0x2a2/0x390 [ 918.719612][T16163] ? __fget_files+0x2a/0x420 [ 918.719635][T16163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.719666][T16163] ? __fget_files+0x3a2/0x420 [ 918.719705][T16163] __x64_sys_sendmsg+0x1b1/0x290 [ 918.719735][T16163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.719770][T16163] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 918.719811][T16163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.719858][T16163] do_syscall_64+0x166/0x520 [ 918.719889][T16163] ? trace_irq_disable+0x3b/0x140 [ 918.719922][T16163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.719956][T16163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.719982][T16163] RIP: 0033:0x7fb5e359e559 [ 918.720006][T16163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.720030][T16163] RSP: 002b:00007fb5e4477028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 918.720058][T16163] RAX: ffffffffffffffda RBX: 00007fb5e3825fa0 RCX: 00007fb5e359e559 [ 918.720079][T16163] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 918.720096][T16163] RBP: 00007fb5e3635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 918.720114][T16163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 918.720131][T16163] R13: 00007fb5e3826038 R14: 00007fb5e3825fa0 R15: 00007ffec74ebc08 [ 918.720173][T16163] [ 918.809830][ T25] wwan wwan0: port wwan0mbim0 disconnected [ 919.167956][T16182] jffs2: notice: (16182) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 919.176502][T16032] rxe_eth0 speed is unknown, defaulting to 1000 [ 919.502630][T16190] jffs2: notice: (16190) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 919.509218][T16190] FAULT_INJECTION: forcing a failure. [ 919.509218][T16190] name failslab, interval 1, probability 0, space 0, times 0 [ 919.509263][T16190] CPU: 0 UID: 0 PID: 16190 Comm: syz.2.3090 Tainted: G L syzkaller #0 PREEMPT(full) [ 919.509299][T16190] Tainted: [L]=SOFTLOCKUP [ 919.509308][T16190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 919.509325][T16190] Call Trace: [ 919.509335][T16190] [ 919.509346][T16190] dump_stack_lvl+0xe8/0x150 [ 919.509403][T16190] should_fail_ex+0x410/0x560 [ 919.509447][T16190] should_failslab+0xa8/0x100 [ 919.509488][T16190] __kmalloc_noprof+0xfe/0x720 [ 919.509519][T16190] ? rcu_is_watching+0x16/0xb0 [ 919.509553][T16190] ? tomoyo_realpath_from_path+0xef/0x640 [ 919.509580][T16190] ? tomoyo_realpath_from_path+0xef/0x640 [ 919.509616][T16190] tomoyo_realpath_from_path+0xef/0x640 [ 919.509656][T16190] ? tomoyo_path_number_perm+0x219/0x5f0 [ 919.509695][T16190] tomoyo_path_number_perm+0x246/0x5f0 [ 919.509735][T16190] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 919.509770][T16190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 919.509801][T16190] ? __lock_acquire+0x747/0x2de0 [ 919.509849][T16190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 919.509879][T16190] ? hook_file_ioctl+0x1f2/0x600 [ 919.509920][T16190] ? srso_alias_return_thunk+0x5/0xfbef5 [ 919.509974][T16190] ? __fget_files+0x2a/0x420 [ 919.510004][T16190] ? __fget_files+0x2a/0x420 [ 919.510028][T16190] ? __fget_files+0x3a2/0x420 [ 919.510052][T16190] ? __fget_files+0x2a/0x420 [ 919.510081][T16190] security_file_ioctl+0xc3/0x2a0 [ 919.510120][T16190] __se_sys_ioctl+0x47/0x170 [ 919.510157][T16190] do_syscall_64+0x166/0x520 [ 919.510189][T16190] ? trace_irq_disable+0x3b/0x140 [ 919.510219][T16190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.510253][T16190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.510280][T16190] RIP: 0033:0x7fe84e19e559 [ 919.510304][T16190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 919.510326][T16190] RSP: 002b:00007fe84f105028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 919.510354][T16190] RAX: ffffffffffffffda RBX: 00007fe84e425fa0 RCX: 00007fe84e19e559 [ 919.510375][T16190] RDX: 0000200000000540 RSI: 0000000040305829 RDI: 0000000000000004 [ 919.510400][T16190] RBP: 00007fe84e235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 919.510417][T16190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 919.510433][T16190] R13: 00007fe84e426038 R14: 00007fe84e425fa0 R15: 00007ffeface61b8 [ 919.510473][T16190] [ 919.552923][T16190] ERROR: Out of memory at tomoyo_realpath_from_path. [ 919.704164][T16190] fuse: Unknown parameter 'use00000000000000000000' [ 919.722541][T16190] loop7: detected capacity change from 0 to 8 [ 920.301497][ C1] net_ratelimit: 12 callbacks suppressed [ 920.301525][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.347684][T14482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.347997][T14482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.699874][T15842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.700272][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.700374][T15842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.096422][T16190] Dev loop7: unable to read RDB block 8 [ 921.096467][T16190] loop7: unable to read partition table [ 921.096659][T16190] loop7: partition table beyond EOD, truncated [ 921.096690][T16190] loop_reread_partitions: partition scan of loop7 (Cj̖4FLQk5) failed (rc=-5) [ 921.333575][T16208] loop0: detected capacity change from 0 to 32768 [ 921.346673][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.422044][T10658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.422178][T10658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.528773][ T5618] Bluetooth: hci8: connection err: -111 [ 921.718642][T16215] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3093'. [ 921.740336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.796532][T16219] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3097'. [ 921.796560][T16219] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3097'. [ 921.832240][T16220] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 921.924896][T16219] FAULT_INJECTION: forcing a failure. [ 921.924896][T16219] name failslab, interval 1, probability 0, space 0, times 0 [ 921.924942][T16219] CPU: 0 UID: 0 PID: 16219 Comm: syz.7.3097 Tainted: G L syzkaller #0 PREEMPT(full) [ 921.924980][T16219] Tainted: [L]=SOFTLOCKUP [ 921.924991][T16219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 921.925007][T16219] Call Trace: [ 921.925017][T16219] [ 921.925029][T16219] dump_stack_lvl+0xe8/0x150 [ 921.925074][T16219] should_fail_ex+0x410/0x560 [ 921.925120][T16219] should_failslab+0xa8/0x100 [ 921.925161][T16219] __kmalloc_noprof+0xfe/0x720 [ 921.925191][T16219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.925225][T16219] ? __register_sysctl_table+0xc02/0x1370 [ 921.925259][T16219] ? __register_sysctl_table+0xc02/0x1370 [ 921.925303][T16219] __register_sysctl_table+0xc02/0x1370 [ 921.925352][T16219] mpls_dev_sysctl_register+0x196/0x280 [ 921.925401][T16219] ? __pfx_mpls_dev_sysctl_register+0x10/0x10 [ 921.925453][T16219] mpls_dev_notify+0x3b7/0xd30 [ 921.925489][T16219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.925521][T16219] ? ovs_netdev_get_vport+0x11c/0x120 [ 921.925566][T16219] notifier_call_chain+0x1a5/0x3d0 [ 921.925607][T16219] register_netdevice+0x18a4/0x1eb0 [ 921.925664][T16219] ? __pfx_register_netdevice+0x10/0x10 [ 921.925698][T16219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.925729][T16219] ? validate_linkmsg+0x765/0x950 [ 921.925774][T16219] ? rtnl_create_link+0xa04/0xd70 [ 921.925812][T16219] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 921.925852][T16219] rtnl_newlink_create+0x305/0x7b0 [ 921.925892][T16219] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 921.925928][T16219] ? __pfx___mutex_lock+0x10/0x10 [ 921.925959][T16219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.926000][T16219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.926031][T16219] ? ns_capable+0x89/0xe0 [ 921.926073][T16219] rtnl_newlink+0x166d/0x1c30 [ 921.926123][T16219] ? __pfx_rtnl_newlink+0x10/0x10 [ 921.926150][T16219] ? do_syscall_64+0x166/0x520 [ 921.926182][T16219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.926250][T16219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.926286][T16219] ? kasan_quarantine_put+0xbb/0x1f0 [ 921.926317][T16219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.926348][T16219] ? lockdep_hardirqs_on+0x7b/0x110 [ 921.926380][T16219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.926424][T16219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.926455][T16219] ? kmem_cache_free+0x182/0x650 [ 921.926503][T16219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.926535][T16219] ? __lock_acquire+0x747/0x2de0 [ 921.926570][T16219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.926609][T16219] ? __local_bh_enable_ip+0xd6/0x140 [ 921.926648][T16219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.926679][T16219] ? lockdep_hardirqs_on+0x7b/0x110 [ 921.926711][T16219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.926743][T16219] ? __local_bh_enable_ip+0xd6/0x140 [ 921.926792][T16219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.926824][T16219] ? lock_acquire+0x115/0x350 [ 921.926859][T16219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.926903][T16219] ? __pfx_rtnl_newlink+0x10/0x10 [ 921.926930][T16219] rtnetlink_rcv_msg+0x802/0xc00 [ 921.926962][T16219] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 921.926989][T16219] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 921.927015][T16219] ? ref_tracker_free+0x689/0x830 [ 921.927061][T16219] ? __pfx_ref_tracker_free+0x10/0x10 [ 921.927101][T16219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.927152][T16219] ? __asan_memcpy+0x40/0x70 [ 921.927181][T16219] ? __skb_clone+0x5c/0x6c0 [ 921.927220][T16219] netlink_rcv_skb+0x226/0x4a0 [ 921.927258][T16219] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 921.927289][T16219] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 921.927340][T16219] ? netlink_deliver_tap+0x2e/0x1b0 [ 921.927375][T16219] ? netlink_deliver_tap+0x2e/0x1b0 [ 921.927425][T16219] netlink_unicast+0x8ef/0xa80 [ 921.927478][T16219] netlink_sendmsg+0x813/0xb40 [ 921.927527][T16219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 921.927573][T16219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.927603][T16219] ? apparmor_socket_sendmsg+0x98/0x360 [ 921.927641][T16219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.927676][T16219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 921.927711][T16219] sock_sendmsg_nosec+0x13a/0x180 [ 921.927755][T16219] ____sys_sendmsg+0x54e/0x850 [ 921.927794][T16219] ? __pfx_____sys_sendmsg+0x10/0x10 [ 921.927830][T16219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.927869][T16219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.927901][T16219] ? import_iovec+0x73/0xa0 [ 921.927932][T16219] ___sys_sendmsg+0x2a5/0x360 [ 921.927961][T16219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.927992][T16219] ? __lock_acquire+0x747/0x2de0 [ 921.928027][T16219] ? __pfx____sys_sendmsg+0x10/0x10 [ 921.928062][T16219] ? futex_wait+0x2a2/0x390 [ 921.928127][T16219] ? __fget_files+0x2a/0x420 [ 921.928151][T16219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.928180][T16219] ? __fget_files+0x3a2/0x420 [ 921.928219][T16219] __x64_sys_sendmsg+0x1b1/0x290 [ 921.928249][T16219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.928282][T16219] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 921.928324][T16219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.928369][T16219] do_syscall_64+0x166/0x520 [ 921.928408][T16219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.928435][T16219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 921.928473][T16219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.928501][T16219] RIP: 0033:0x7fe1c339e559 [ 921.928525][T16219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.928548][T16219] RSP: 002b:00007fe1c42c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 921.928578][T16219] RAX: ffffffffffffffda RBX: 00007fe1c3625fa0 RCX: 00007fe1c339e559 [ 921.928599][T16219] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 921.928617][T16219] RBP: 00007fe1c3435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 921.928634][T16219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.928651][T16219] R13: 00007fe1c3626038 R14: 00007fe1c3625fa0 R15: 00007fff2a271408 [ 921.928695][T16219] [ 921.976772][T16219] sysctl could not get directory: /net/mpls/conf/batadv1 -12 [ 922.208678][T16224] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 922.807476][T16212] device-mapper: thin: Data device (loop1) discard unsupported: Disabling discard passdown. [ 923.623263][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3106'. [ 923.859406][ T52] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 923.879660][ T52] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 923.893428][ T52] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 923.899005][ T52] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 923.917914][ T52] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 924.351162][ T5618] Bluetooth: hci8: connection err: -111 [ 924.356317][T16260] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3110'. [ 924.400412][T16264] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3111'. [ 924.568576][T16266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 924.620211][ T5618] Bluetooth: hci0: command 0x0406 tx timeout [ 924.806551][ T5618] Bluetooth: hci9: connection err: -111 [ 924.806948][T16272] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3113'. [ 924.912767][T16249] rxe_eth0 speed is unknown, defaulting to 1000 [ 925.174240][T16288] jffs2: notice: (16288) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 2 orphan) and 2 of xref (0 dead, 2 orphan) found. [ 925.357530][T16032] tipc: Resetting bearer [ 925.500469][ C1] net_ratelimit: 15 callbacks suppressed [ 925.500494][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.503651][T16032] tipc: Disabling bearer [ 925.862380][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.862634][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.901458][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.057412][T16297] Bluetooth: hci16: command tx timeout [ 926.540254][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.780905][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.781043][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.940278][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.951005][T10661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.951303][T10661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.406124][T16315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3127'. [ 927.422454][T16319] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 927.429400][ T7431] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.532443][ T5784] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 927.681216][ T5784] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 927.683745][ T5784] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 927.683798][ T5784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.724569][T16331] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 927.727101][ T5784] as10x_usb: device has been detected [ 927.729817][T16333] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3135'. [ 927.733863][ T5784] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 927.774370][ T7431] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.801728][ T5784] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 927.848317][ T5784] as10x_usb: error during firmware upload part1 [ 927.848934][ T5784] Registered device Abilis Systems DVB-Titan [ 927.909701][T16298] Bluetooth: hci6: command 0x0406 tx timeout [ 927.981835][ T5618] Bluetooth: hci9: command 0x0406 tx timeout [ 928.049436][T16342] overlayfs: missing 'lowerdir' [ 928.077502][ T52] Bluetooth: hci8: command 0x0406 tx timeout [ 928.094474][T16342] overlayfs: overlapping lowerdir path [ 928.121714][ T7431] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.141826][T16296] Bluetooth: hci16: command tx timeout [ 928.141846][ T52] Bluetooth: hci7: command 0x0406 tx timeout [ 929.126708][T15842] usb 4-1: USB disconnect, device number 65 [ 929.668837][T15842] Unregistered device Abilis Systems DVB-Titan [ 929.678248][T15842] as10x_usb: device has been disconnected [ 929.736363][ T7431] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.762038][T16360] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 929.915459][T16367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3147'. [ 930.042574][T16249] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.044356][T16249] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.044543][T16249] bridge_slave_0: entered allmulticast mode [ 930.079502][T16249] bridge_slave_0: entered promiscuous mode [ 930.104577][T16249] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.104704][T16249] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.104882][T16249] bridge_slave_1: entered allmulticast mode [ 930.143152][T16249] bridge_slave_1: entered promiscuous mode [ 930.220301][T16296] Bluetooth: hci16: command tx timeout [ 930.700323][ C1] net_ratelimit: 14 callbacks suppressed [ 930.700351][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.857231][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.857301][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 930.953687][T16379] tipc: Enabling of bearer rejected, already enabled [ 931.063400][T16385] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3150'. [ 931.100537][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.106054][T16249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.110340][T16249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.146412][T16249] team0: Port device team_slave_0 added [ 931.149758][T16249] team0: Port device team_slave_1 added [ 931.264248][T10658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.264409][T10658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.266776][T16249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.266793][T16249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.266827][T16249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 931.292926][T16249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.292948][T16249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.292982][T16249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.590371][T16392] loop6: detected capacity change from 0 to 256 [ 931.599848][T16392] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 931.665020][T16249] hsr_slave_0: entered promiscuous mode [ 931.674381][T16249] hsr_slave_1: entered promiscuous mode [ 931.683835][T16249] debugfs: 'hsr0' already exists in 'hsr' [ 931.683862][T16249] Cannot create hsr debugfs directory [ 931.740365][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.140237][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.300604][ T52] Bluetooth: hci16: command tx timeout [ 932.516973][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.517107][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.627389][ T7415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.762192][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.942327][ T52] Bluetooth: hci10: command 0x0406 tx timeout [ 934.059080][T16418] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 934.143938][ T7431] bridge_slave_1: left allmulticast mode [ 934.143974][ T7431] bridge_slave_1: left promiscuous mode [ 934.144192][ T7431] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.148146][ T7431] bridge_slave_0: left allmulticast mode [ 934.148169][ T7431] bridge_slave_0: left promiscuous mode [ 934.148459][ T7431] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.298140][T16422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3163'. [ 934.391306][T16424] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 934.837550][T16432] netlink: 84 bytes leftover after parsing attributes in process `syz.9.3165'. [ 935.909515][ C1] net_ratelimit: 15 callbacks suppressed [ 935.909540][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.921755][T15842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.922501][T15842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.286281][T16440] loop9: detected capacity change from 0 to 256 [ 936.300245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.313495][T16440] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 936.446132][T16442] jffs2: notice: (16442) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 2 orphan) and 2 of xref (0 dead, 2 orphan) found. [ 936.499096][T16442] FAULT_INJECTION: forcing a failure. [ 936.499096][T16442] name failslab, interval 1, probability 0, space 0, times 0 [ 936.499140][T16442] CPU: 1 UID: 0 PID: 16442 Comm: syz.7.3168 Tainted: G L syzkaller #0 PREEMPT(full) [ 936.499177][T16442] Tainted: [L]=SOFTLOCKUP [ 936.499188][T16442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 936.499204][T16442] Call Trace: [ 936.499215][T16442] [ 936.499227][T16442] dump_stack_lvl+0xe8/0x150 [ 936.499273][T16442] should_fail_ex+0x410/0x560 [ 936.499321][T16442] should_failslab+0xa8/0x100 [ 936.499364][T16442] __kmalloc_noprof+0xfe/0x720 [ 936.499395][T16442] ? ima_alloc_init_template+0x185/0x700 [ 936.499430][T16442] ? ima_write_template_field_data+0x47/0x490 [ 936.499472][T16442] ? ima_write_template_field_data+0x47/0x490 [ 936.499517][T16442] ? __x64_sys_openat+0x138/0x170 [ 936.499562][T16442] ima_write_template_field_data+0x47/0x490 [ 936.499611][T16442] ? ima_eventdigest_init_common+0x2b1/0x400 [ 936.499660][T16442] ima_eventdigest_init_common+0x2cc/0x400 [ 936.499707][T16442] ? ima_eventdigest_init_common+0x1d1/0x400 [ 936.499751][T16442] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 936.499822][T16442] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.499856][T16442] ? __kmalloc_noprof+0x38c/0x720 [ 936.499888][T16442] ? __kmalloc_noprof+0x1ab/0x720 [ 936.499918][T16442] ? ima_alloc_init_template+0x185/0x700 [ 936.499958][T16442] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.499993][T16442] ? __pfx_ima_eventdigest_ng_init+0x10/0x10 [ 936.500036][T16442] ima_alloc_init_template+0x323/0x700 [ 936.500082][T16442] ima_store_measurement+0x1d4/0x690 [ 936.500128][T16442] ? __pfx_ima_store_measurement+0x10/0x10 [ 936.500161][T16442] ? ima_d_path+0x16b/0x230 [ 936.500205][T16442] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 936.500260][T16442] process_measurement+0x15ac/0x1c10 [ 936.500314][T16442] ? __pfx_process_measurement+0x10/0x10 [ 936.500348][T16442] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.500380][T16442] ? tomoyo_check_open_permission+0x38e/0x470 [ 936.500421][T16442] ? tomoyo_check_open_permission+0x1d3/0x470 [ 936.500508][T16442] ? mnt_get_write_access+0x66/0x280 [ 936.500543][T16442] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.500583][T16442] ima_file_check+0xe1/0x130 [ 936.500614][T16442] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.500645][T16442] ? do_dentry_open+0xd21/0x1380 [ 936.500685][T16442] ? __pfx_ima_file_check+0x10/0x10 [ 936.500727][T16442] security_file_post_open+0xb3/0x260 [ 936.500769][T16442] path_openat+0x170b/0x2090 [ 936.500825][T16442] do_file_open+0x23e/0x4a0 [ 936.500864][T16442] ? __pfx_do_file_open+0x10/0x10 [ 936.500924][T16442] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.500962][T16442] ? _raw_spin_unlock+0x28/0x50 [ 936.500989][T16442] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.501021][T16442] ? alloc_fd+0x651/0x6c0 [ 936.501075][T16442] do_sys_openat2+0x115/0x200 [ 936.501115][T16442] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.501147][T16442] ? __se_sys_futex+0x3a8/0x450 [ 936.501188][T16442] ? __pfx_do_sys_openat2+0x10/0x10 [ 936.501235][T16442] ? rcu_is_watching+0x16/0xb0 [ 936.501272][T16442] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.501310][T16442] __x64_sys_openat+0x138/0x170 [ 936.501357][T16442] do_syscall_64+0x166/0x520 [ 936.501390][T16442] ? trace_irq_disable+0x3b/0x140 [ 936.501421][T16442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.501456][T16442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.501484][T16442] RIP: 0033:0x7fe1c339e559 [ 936.501510][T16442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 936.501533][T16442] RSP: 002b:00007fe1c42c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 936.501562][T16442] RAX: ffffffffffffffda RBX: 00007fe1c3625fa0 RCX: 00007fe1c339e559 [ 936.501583][T16442] RDX: 0000000000101042 RSI: 0000200000000500 RDI: ffffffffffffff9c [ 936.501603][T16442] RBP: 00007fe1c3435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 936.501622][T16442] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000000 [ 936.501640][T16442] R13: 00007fe1c3626038 R14: 00007fe1c3625fa0 R15: 00007fff2a271408 [ 936.501683][T16442] [ 936.546230][T10658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.705060][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.947247][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.041488][ T31] audit: type=1804 audit(1792219809.023:2184): pid=16442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.7.3168" name="/newroot/92/file0/file2" dev="jffs2" ino=16 res=0 errno=0 [ 937.317357][T16445] fuse: Unknown parameter 'use00000000000000000000' [ 937.339193][T16445] loop7: detected capacity change from 0 to 8 [ 937.340245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.564003][ T7431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.568439][ T7431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.590466][T14482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.606409][ T7431] bond0 (unregistering): Released all slaves [ 937.750816][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.752038][T16433] tipc: Started in network mode [ 937.752087][T16433] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 937.752261][T16433] tipc: Enabled bearer , priority 1 [ 937.805481][ T7431] tipc: Left network mode [ 938.159020][T16445] Dev loop7: unable to read RDB block 8 [ 938.159062][T16445] loop7: unable to read partition table [ 938.159287][T16445] loop7: partition table beyond EOD, truncated [ 938.159330][T16445] loop_reread_partitions: partition scan of loop7 (Cj̖4FLQk5) failed (rc=-5) [ 938.656525][T16466] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 939.196412][T16249] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.201317][ T25] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 939.234380][T16488] jffs2: notice: (16488) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 2 orphan) and 2 of xref (0 dead, 2 orphan) found. [ 939.351889][ T5768] tipc: Node number set to 43690 [ 939.352716][ T25] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 939.360560][ T25] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 939.364360][ T25] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 939.370375][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.370408][ T25] usb 8-1: Product: syz [ 939.370428][ T25] usb 8-1: Manufacturer: syz [ 939.370454][ T25] usb 8-1: SerialNumber: syz [ 939.444047][ T25] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 939.469759][ T25] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 939.527438][ T25] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 939.624251][T16505] jffs2: notice: (16505) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 2 orphan) and 2 of xref (0 dead, 2 orphan) found. [ 940.596961][T16249] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.941072][ T25] net_ratelimit: 15 callbacks suppressed [ 940.941101][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.956058][T16478] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 940.956815][T16478] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 940.956866][T16478] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 940.957094][T16478] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 941.100303][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.500446][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.031745][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.032292][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.140467][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.145152][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.145616][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.352838][ T25] usb 8-1: USB disconnect, device number 11 [ 942.466374][ T25] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 942.494061][T16511] tipc: Enabling of bearer rejected, already enabled [ 942.540245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.559867][ T25] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 942.813257][ T25] ti_usb_3410_5052 8-1:2.0: device disconnected [ 942.940602][ T33] INFO: task syz.8.2688:14200 blocked for more than 144 seconds. [ 942.940638][ T33] Tainted: G L syzkaller #0 [ 942.940654][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 942.940667][ T33] task:syz.8.2688 state:D stack:27576 pid:14200 tgid:14199 ppid:13457 task_flags:0x400140 flags:0x00080002 [ 942.940746][ T33] Call Trace: [ 942.940756][ T33] [ 942.940774][ T33] __schedule+0x17db/0x58f0 [ 942.940843][ T33] ? __pfx___schedule+0x10/0x10 [ 942.940883][ T33] ? schedule+0x90/0x2b0 [ 942.940916][ T33] schedule+0x164/0x2b0 [ 942.940948][ T33] schedule_preempt_disabled+0x13/0x30 [ 942.942129][ T33] __mutex_lock+0x7c1/0x1550 [ 942.942166][ T33] ? kasan_save_track+0x3e/0x80 [ 942.942204][ T33] ? __mutex_lock+0x5d4/0x1550 [ 942.942241][ T33] ? write_ports+0xb5/0xd10 [ 942.942271][ T33] ? __pfx_ ** replaying previous printk message ** [ 942.942271][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 942.942328][ T33] write_ports+0xb5/0xd10 [ 942.942359][ T33] ? __pfx_write_ports+0x10/0x10 [ 942.942387][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.942434][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.942478][ T33] ? _copy_from_user+0x94/0xb0 [ 942.942505][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.942536][ T33] ? simple_transaction_get+0x12d/0x160 [ 942.942584][ T33] nfsctl_transaction_write+0x10f/0x160 [ 942.942614][ T33] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 942.942641][ T33] vfs_write+0x296/0xba0 [ 942.942683][ T33] ? __pfx_vfs_write+0x10/0x10 [ 942.942714][ T33] ? __fget_files+0x2a/0x420 [ 942.942746][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.942777][ T33] ? __fget_files+0x3a2/0x420 [ 942.942802][ T33] ? __fget_files+0x2a/0x420 [ 942.942832][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.942869][ T33] ksys_write+0x150/0x270 [ 942.942901][ T33] ? __pfx_ksys_write+0x10/0x10 [ 942.942945][ T33] do_syscall_64+0x166/0x520 [ 942.942977][ T33] ? trace_irq_disable+0x3b/0x140 [ 942.943007][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.943041][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.943068][ T33] RIP: 0033:0x7fb43eb9e559 [ 942.943092][ T33] RSP: 002b:00007fb43fae8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 942.943118][ T33] RAX: ffffffffffffffda RBX: 00007fb43ee25fa0 RCX: 00007fb43eb9e559 [ 942.943139][ T33] RDX: 000000000000001d RSI: 0000200000000240 RDI: 0000000000000004 [ 942.943157][ T33] RBP: 00007fb43ec35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 942.943175][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 942.943192][ T33] R13: 00007fb43ee26038 R14: 00007fb43ee25fa0 R15: 00007ffea142a408 [ 942.943233][ T33] [ 942.943246][ T33] INFO: task syz.4.2700:14241 blocked for more than 144 seconds. [ 942.943268][ T33] Tainted: G L syzkaller #0 [ 942.943283][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 942.943296][ T33] task:syz.4.2700 state:D stack:28264 pid:14241 tgid:14240 ppid:5625 task_flags:0x400140 flags:0x00080002 [ 942.943410][ T33] Call Trace: [ 942.943425][ T33] [ 942.943440][ T33] __schedule+0x17db/0x58f0 [ 942.943487][ T33] ? kernel_text_address+0xa5/0xe0 [ 942.943518][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.943556][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.943585][ T33] ? unwind_get_return_address+0x4d/0x90 [ 942.943625][ T33] ? __pfx___schedule+0x10/0x10 [ 942.943665][ T33] ? schedule+0x90/0x2b0 [ 942.943698][ T33] schedule+0x164/0x2b0 [ 942.943729][ T33] schedule_preempt_disabled+0x13/0x30 [ 942.943757][ T33] __mutex_lock+0x7c1/0x1550 [ 942.943786][ T33] ? kasan_save_track+0x3e/0x80 [ 942.943823][ T33] ? __mutex_lock+0x5d4/0x1550 [ 942.943860][ T33] ? write_ports+0xb5/0xd10 [ 942.943891][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 942.943947][ T33] write_ports+0xb5/0xd10 [ 942.943977][ T33] ? __pfx_write_ports+0x10/0x10 [ 942.944004][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.944047][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.944090][ T33] ? _copy_from_user+0x94/0xb0 [ 942.944117][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.944148][ T33] ? simple_transaction_get+0x12d/0x160 [ 942.944194][ T33] nfsctl_transaction_write+0x10f/0x160 [ 942.944224][ T33] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 942.944252][ T33] vfs_write+0x296/0xba0 [ 942.944292][ T33] ? __pfx_vfs_write+0x10/0x10 [ 942.944324][ T33] ? __fget_files+0x2a/0x420 [ 942.944354][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.944385][ T33] ? __fget_files+0x3a2/0x420 [ 942.944408][ T33] ? __fget_files+0x2a/0x420 [ 942.944449][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.944485][ T33] ksys_write+0x150/0x270 [ 942.944517][ T33] ? __pfx_ksys_write+0x10/0x10 [ 942.944561][ T33] do_syscall_64+0x166/0x520 [ 942.944591][ T33] ? trace_irq_disable+0x3b/0x140 [ 942.944621][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.944656][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.944683][ T33] RIP: 0033:0x7ffb3bb9e559 [ 942.944706][ T33] RSP: 002b:00007ffb3ca39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 942.944733][ T33] RAX: ffffffffffffffda RBX: 00007ffb3be25fa0 RCX: 00007ffb3bb9e559 [ 942.944753][ T33] RDX: 000000000000001d RSI: 0000200000000240 RDI: 0000000000000004 [ 942.944772][ T33] RBP: 00007ffb3bc35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 942.944790][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 942.944807][ T33] R13: 00007ffb3be26038 R14: 00007ffb3be25fa0 R15: 00007ffc73a46a08 [ 942.944849][ T33] [ 942.944862][ T33] INFO: task syz.2.2708:14260 blocked for more than 144 seconds. [ 942.944886][ T33] Tainted: G L syzkaller #0 [ 942.944901][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 942.944914][ T33] task:syz.2.2708 state:D stack:28512 pid:14260 tgid:14259 ppid:5626 task_flags:0x400140 flags:0x00080002 [ 942.944990][ T33] Call Trace: [ 942.945000][ T33] [ 942.945016][ T33] __schedule+0x17db/0x58f0 [ 942.945066][ T33] ? kernel_text_address+0xa5/0xe0 [ 942.945098][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.945129][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.945160][ T33] ? unwind_get_return_address+0x4d/0x90 [ 942.945200][ T33] ? __pfx___schedule+0x10/0x10 [ 942.945241][ T33] ? schedule+0x90/0x2b0 [ 942.945273][ T33] schedule+0x164/0x2b0 [ 942.945304][ T33] schedule_preempt_disabled+0x13/0x30 [ 942.945333][ T33] __mutex_lock+0x7c1/0x1550 [ 942.945364][ T33] ? kasan_save_track+0x3e/0x80 [ 942.945402][ T33] ? __mutex_lock+0x5d4/0x1550 [ 942.945446][ T33] ? write_ports+0xb5/0xd10 [ 942.945475][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 942.945533][ T33] write_ports+0xb5/0xd10 [ 942.945563][ T33] ? __pfx_write_ports+0x10/0x10 [ 942.945590][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.945633][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.945677][ T33] ? _copy_from_user+0x94/0xb0 [ 942.945702][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.945733][ T33] ? simple_transaction_get+0x12d/0x160 [ 942.945775][ T33] nfsctl_transaction_write+0x10f/0x160 [ 942.945800][ T33] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 942.945825][ T33] vfs_write+0x296/0xba0 [ 942.945859][ T33] ? __pfx_vfs_write+0x10/0x10 [ 942.945890][ T33] ? __fget_files+0x2a/0x420 [ 942.945918][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.945945][ T33] ? __fget_files+0x3a2/0x420 [ 942.945967][ T33] ? __fget_files+0x2a/0x420 [ 942.945996][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.946032][ T33] ksys_write+0x150/0x270 [ 942.946065][ T33] ? __pfx_ksys_write+0x10/0x10 [ 942.946108][ T33] do_syscall_64+0x166/0x520 [ 942.946139][ T33] ? trace_irq_disable+0x3b/0x140 [ 942.946169][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.946203][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.946230][ T33] RIP: 0033:0x7f249dd9e559 [ 942.946253][ T33] RSP: 002b:00007f249ecb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 942.946280][ T33] RAX: ffffffffffffffda RBX: 00007f249e025fa0 RCX: 00007f249dd9e559 [ 942.946301][ T33] RDX: 000000000000001d RSI: 0000200000000240 RDI: 0000000000000004 [ 942.946317][ T33] RBP: 00007f249de35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 942.946336][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 942.946353][ T33] R13: 00007f249e026038 R14: 00007f249e025fa0 R15: 00007fffd6815098 [ 942.946395][ T33] [ 942.946408][ T33] INFO: task syz.3.2722:14294 blocked for more than 144 seconds. [ 942.946436][ T33] Tainted: G L syzkaller #0 [ 942.946452][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 942.946464][ T33] task:syz.3.2722 state:D stack:28512 pid:14294 tgid:14293 ppid:5617 task_flags:0x400140 flags:0x00080002 [ 942.946543][ T33] Call Trace: [ 942.946552][ T33] [ 942.946568][ T33] __schedule+0x17db/0x58f0 [ 942.946616][ T33] ? kernel_text_address+0xa5/0xe0 [ 942.946647][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.946679][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.946711][ T33] ? unwind_get_return_address+0x4d/0x90 [ 942.946751][ T33] ? __pfx___schedule+0x10/0x10 [ 942.962400][T16528] jffs2: notice: (16528) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 2 orphan) and 2 of xref (0 dead, 2 orphan) found. [ 942.963123][ T33] ? schedule+0x90/0x2b0 [ 942.963167][ T33] schedule+0x164/0x2b0 [ 942.963200][ T33] schedule_preempt_disabled+0x13/0x30 [ 942.963229][ T33] __mutex_lock+0x7c1/0x1550 [ 942.963261][ T33] ? kasan_save_track+0x3e/0x80 [ 942.963301][ T33] ? __mutex_lock+0x5d4/0x1550 [ 942.963338][ T33] ? write_ports+0xb5/0xd10 [ 942.963368][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 942.963433][ T33] write_ports+0xb5/0xd10 [ 942.963465][ T33] ? __pfx_write_ports+0x10/0x10 [ 942.963492][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.963536][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.963579][ T33] ? _copy_from_user+0x94/0xb0 [ 942.963607][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.963637][ T33] ? simple_transaction_get+0x12d/0x160 [ 942.963683][ T33] nfsctl_transaction_write+0x10f/0x160 [ 942.963713][ T33] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 942.963741][ T33] vfs_write+0x296/0xba0 [ 942.963782][ T33] ? __pfx_vfs_write+0x10/0x10 [ 942.963814][ T33] ? __fget_files+0x2a/0x420 [ 942.963844][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.963875][ T33] ? __fget_files+0x3a2/0x420 [ 942.963900][ T33] ? __fget_files+0x2a/0x420 [ 942.963948][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.963985][ T33] ksys_write+0x150/0x270 [ 942.964017][ T33] ? __pfx_ksys_write+0x10/0x10 [ 942.964061][ T33] do_syscall_64+0x166/0x520 [ 942.964093][ T33] ? trace_irq_disable+0x3b/0x140 [ 942.964123][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.964158][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.964186][ T33] RIP: 0033:0x7f685999e559 [ 942.964210][ T33] RSP: 002b:00007f685a91a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 942.964238][ T33] RAX: ffffffffffffffda RBX: 00007f6859c25fa0 RCX: 00007f685999e559 [ 942.964259][ T33] RDX: 000000000000001d RSI: 0000200000000240 RDI: 0000000000000004 [ 942.964277][ T33] RBP: 00007f6859a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 942.964294][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 942.964312][ T33] R13: 00007f6859c26038 R14: 00007f6859c25fa0 R15: 00007fff8e9feb58 [ 942.964354][ T33] [ 942.964497][ T33] [ 942.964497][ T33] Showing all locks held in the system: [ 942.964513][ T33] locks held by pr/ttyS0/16: 2, last CPU#0: [ 942.964533][ T33] #0: ffffffff8fc36518 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 942.964606][ T33] #1: ffffffff9bd4be38 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 942.964680][ T33] locks held by kworker/1:0/25: 3, on CPU#1: [ 942.964698][ T33] #0: ffff8880222ac940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 942.973524][ T33] #1: ffffc900001f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 942.973616][ T33] #2: ffff88802ae3e1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 942.973698][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 942.973718][ T33] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 942.973825][ T33] locks held by klogd/4967: 1, last CPU#1: [ 942.973844][ T33] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 942.973919][ T33] locks held by dhcpcd/5273: 1, on CPU#0: [ 942.973937][ T33] #0: ffffffff91255dc0 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 942.974008][ T33] locks held by getty/5366: 2, on CPU#1: [ 942.974026][ T33] #0: ffff8880367820a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 942.974097][ T33] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 942.974188][ T33] locks held by kworker/u8:41/7431: 4, on CPU#1: [ 942.974206][ T33] #0: ffff88801d2ce140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 942.974280][ T33] #1: ffffc90003887c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 942.974353][ T33] #2: ffffffff91247568 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 942.974417][ T33] #3: ffffffff91255dc0 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x18/0xc0 [ 942.974503][ T33] locks held by kworker/0:13/10676: 3, last CPU#0: [ 942.974522][ T33] #0: ffff88801c069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 942.974596][ T33] #1: ffffc90006defc40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 942.974672][ T33] #2: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x1890 [ 942.974748][ T33] locks held by syz.0.2683/14188: 3, on CPU#1: [ 942.974767][ T33] #0: ffff888037a995f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 942.974831][ T33] #1: ffff888076cd0460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 942.974904][ T33] #2: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 942.974968][ T33] locks held by syz.8.2688/14200: 3, on CPU#0: [ 942.974987][ T33] #0: ffff88805417e470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 942.975068][ T33] #1: ffff88805fb30460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 942.986436][ T33] #2: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 942.986507][ T33] locks held by syz.4.2700/14241: 3, on CPU#1: [ 942.986527][ T33] #0: ffff88807a858b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 942.986592][ T33] #1: ffff8880333be460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 942.986664][ T33] #2: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 942.986728][ T33] locks held by syz.2.2708/14260: 3, on CPU#1: [ 942.986747][ T33] #0: ffff88807a908b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 942.986809][ T33] #1: ffff8880776e2460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 942.986880][ T33] #2: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 942.986944][ T33] locks held by syz.3.2722/14294: 3, on CPU#0: [ 942.986963][ T33] #0: ffff8880554b1970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 942.987026][ T33] #1: ffff88807e53e460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 942.987096][ T33] #2: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 942.987160][ T33] locks held by syz.9.2734/14326: 3, on CPU#1: [ 942.987196][ T33] #0: ffff88807aa0cd30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 942.987260][ T33] #1: ffff88802ad12460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 942.987331][ T33] #2: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 942.987412][ T33] locks held by syz.5.2772/14862: 3, on CPU#1: [ 942.987434][ T33] #0: ffff88803629d430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 942.987497][ T33] #1: ffff88807ac22460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 942.987588][ T33] #2: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 942.987653][ T33] locks held by syz.0.2796/15013: 3, on CPU#1: [ 942.987672][ T33] #0: ffff88809bf6f970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 942.987736][ T33] #1: ffff88805568c460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 942.987807][ T33] #2: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 942.987871][ T33] locks held by syz.1.2815/15102: 3, on CPU#0: [ 942.987890][ T33] #0: ffff8880345c2d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 943.000221][ T33] #1: ffff88807f94e460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 943.000310][ T33] #2: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 943.000382][ T33] locks held by syz-executor/15422: 2, last CPU#0: [ 943.000402][ T33] #0: ffff88802be02460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 943.000485][ T33] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 943.004125][ T33] locks held by syz.4.2874/15441: 3, on CPU#1: [ 943.004145][ T33] #0: ffff88802f6aa7f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 943.004211][ T33] #1: ffff888027130460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 943.004284][ T33] #2: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 943.004360][ T33] locks held by kworker/0:1/15842: 1, last CPU#0: [ 943.004380][ T33] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: process_scheduled_works+0x97a/0x1630 [ 943.004463][ T33] locks held by syz-executor/16249: 9, on CPU#1: [ 943.004482][ T33] #0: ffff888035ad8460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 943.004552][ T33] #1: ffff8880b0f36880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 943.004628][ T33] #2: ffff88802a098878 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 943.009325][ T33] #3: ffffffff90acd160 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 943.009415][ T33] #4: ffff88804aee4128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 943.009504][ T33] #5: ffff88804aee6258 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 943.009576][ T33] #6: ffffffff91255dc0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 943.025028][ T33] #7: ffff88804869ce70 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x11d4/0x2140 [ 943.025131][ T33] #8: ffffffff8fd62ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 943.025214][ T33] locks held by syz.9.3178/16474: 2, last CPU#1: [ 943.025233][ T33] #0: ffff88802fad2800 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 943.025298][ T33] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 943.025370][ T33] locks held by syz.7.3190/16526: 2, last CPU#0: [ 943.025390][ T33] #0: ffff888045b44080 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 943.025459][ T33] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 943.025540][ T33] locks held by syz.2.3191/16528: 2, last CPU#1: [ 943.025559][ T33] #0: ffff888037f14cc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 943.025621][ T33] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 943.025698][ T33] locks held by syz.6.3192/16530: 2, last CPU#1: [ 943.025718][ T33] #0: ffff88802a8a7180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 943.025781][ T33] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 943.025860][ T33] [ 943.025868][ T33] ============================================= [ 943.025868][ T33] [ 943.025880][ T33] NMI backtrace for cpu 1 [ 943.025900][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 943.025933][ T33] Tainted: [L]=SOFTLOCKUP [ 943.025943][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 943.025960][ T33] Call Trace: [ 943.025971][ T33] [ 943.025982][ T33] dump_stack_lvl+0xe8/0x150 [ 943.026025][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 943.026072][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 943.026121][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 943.026165][ T33] sys_info+0x135/0x170 [ 943.026201][ T33] watchdog+0xfd7/0x1030 [ 943.026240][ T33] ? watchdog+0x1c7/0x1030 [ 943.026278][ T33] kthread+0x38b/0x480 [ 943.026306][ T33] ? __pfx_watchdog+0x10/0x10 [ 943.026333][ T33] ? __pfx_kthread+0x10/0x10 [ 943.026362][ T33] ret_from_fork+0x514/0xb70 [ 943.026393][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 943.026425][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 943.026456][ T33] ? __switch_to+0xc89/0x1420 [ 943.026497][ T33] ? __pfx_kthread+0x10/0x10 [ 943.026525][ T33] ret_from_fork_asm+0x1a/0x30 [ 943.026571][ T33] [ 943.026613][ T33] Sending NMI from CPU 1 to CPUs 0: [ 943.026640][ C0] NMI backtrace for cpu 0 [ 943.026657][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 943.026687][ C0] Tainted: [L]=SOFTLOCKUP [ 943.026697][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 943.026711][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 943.026751][ C0] Code: e8 5e 65 53 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff 44 c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 15 95 9b fb cc 44 89 f9 80 e1 07 [ 943.026771][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 943.026792][ C0] RAX: 1ffffffff37a9700 RBX: 00000000000003fd RCX: 0000000000000000 [ 943.026808][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 943.026824][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 943.026839][ C0] R10: dffffc0000000000 R11: ffffffff8574ab70 R12: dffffc0000000000 [ 943.026858][ C0] R13: 0000000000000000 R14: ffffffff9bd4be60 R15: 0000000000000000 [ 943.026877][ C0] FS: 0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 [ 943.026897][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 943.026915][ C0] CR2: 00007fb5e3827dac CR3: 00000000a3d2b000 CR4: 0000000000350ef0 [ 943.026940][ C0] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 943.026956][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 943.026972][ C0] Call Trace: [ 943.026981][ C0] [ 943.026993][ C0] wait_for_lsr+0x184/0x2f0 [ 943.027032][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 943.027065][ C0] serial8250_console_write+0xa7e/0x1200 [ 943.027109][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 943.027143][ C0] ? __schedule+0x17f1/0x58f0 [ 943.027187][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 943.027221][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 943.027254][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 943.027298][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 943.027332][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 943.027360][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 943.027400][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 943.027429][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 943.027457][ C0] nbcon_kthread_func+0x679/0x880 [ 943.027490][ C0] ? nbcon_kthread_func+0x163/0x880 [ 943.027518][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 943.027546][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 943.027578][ C0] ? __kthread_parkme+0x71/0x1f0 [ 943.027617][ C0] ? __kthread_parkme+0x199/0x1f0 [ 943.027658][ C0] kthread+0x38b/0x480 [ 943.027682][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 943.027708][ C0] ? __pfx_kthread+0x10/0x10 [ 943.027733][ C0] ret_from_fork+0x514/0xb70 [ 943.027759][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 943.027783][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 943.027810][ C0] ? __switch_to+0xc89/0x1420 [ 943.027848][ C0] ? __pfx_kthread+0x10/0x10 [ 943.027873][ C0] ret_from_fork_asm+0x1a/0x30 [ 943.027908][ C0] [ 943.039456][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 945.291604][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 945.302279][ T33] Tainted: [L]=SOFTLOCKUP [ 945.306591][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 945.316639][ T33] Call Trace: [ 945.319921][ T33] [ 945.322858][ T33] vpanic+0x56d/0xa60 [ 945.326860][ T33] ? __pfx___schedule+0x10/0x10 [ 945.331709][ T33] ? __pfx_vpanic+0x10/0x10 [ 945.336221][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 945.341865][ T33] panic+0xc5/0xd0 [ 945.345599][ T33] ? __pfx_panic+0x10/0x10 [ 945.350017][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 945.355480][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 945.360855][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 945.367028][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 945.373270][ T33] watchdog+0x1030/0x1030 [ 945.377623][ T33] ? watchdog+0x1c7/0x1030 [ 945.382051][ T33] kthread+0x38b/0x480 [ 945.386125][ T33] ? __pfx_watchdog+0x10/0x10 [ 945.390807][ T33] ? __pfx_kthread+0x10/0x10 [ 945.395412][ T33] ret_from_fork+0x514/0xb70 [ 945.400005][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 945.405111][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 945.410746][ T33] ? __switch_to+0xc89/0x1420 [ 945.415441][ T33] ? __pfx_kthread+0x10/0x10 [ 945.420031][ T33] ret_from_fork_asm+0x1a/0x30 [ 945.424805][ T33] [ 945.428084][ T33] Kernel Offset: disabled [ 945.432404][ T33] Rebooting in 86400 seconds..